last executing test programs: 10.784133165s ago: executing program 0 (id=1793): r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000000200)=""/10, 0xa) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpriority(0x1, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) socket$packet(0x11, 0x3, 0x300) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7b1250b"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0xfffffffffffffff9, 0x0, 0xb59}) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setgroups(0x0, 0x0) 9.33207924s ago: executing program 4 (id=1799): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x22, &(0x7f0000000280)={@local, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x4, 0x14, 0x62, 0x0, 0x1, 0x33, 0x0, @remote, @loopback}}}}}, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000002040), 0x0, 0x40010020, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100003002abd70000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012800900010069706970000000001800028004001900080014000900000006000f"], 0x48}, 0x1, 0x2}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r7, 0x29, 0x36, &(0x7f0000000000)=@hopopts={0x2f}, 0x8) ioctl$UI_DEV_SETUP(r6, 0x405c5503, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "3d8b00", "d4cc4a4423daabeb8e7ba12fe6e1c742a683fa6e58757db76aae864d57fbaf37", "c3650f3f", "5e963dfa951f9b3d"}, 0x38) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r8 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r8) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4) sendto$inet6(r5, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 8.303706413s ago: executing program 4 (id=1805): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000b4321f00000000000a00631818000000", @ANYRES32, @ANYBLOB="0000000000001100b706000014020100b7030000000600188500000008000000bf0900000000000055090100000000007b00000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x1000, &(0x7f0000001e40)=""/4096, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 8.137770199s ago: executing program 4 (id=1806): socket(0x9, 0x3, 0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee6, 0x0, 0x1, 0xbfdffff9}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000200)={&(0x7f0000000040)=[{0x4, 0x5201, 0x2, &(0x7f0000000300)='/G'}], 0x1}) socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) unshare(0x40000000) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r0, 0x47f6, 0x0, 0x40, 0x0, 0x0) socket$kcm(0xf, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x28801, 0x0) 7.647988393s ago: executing program 0 (id=1807): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x81048) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) r4 = syz_open_dev$usbmon(0x0, 0x0, 0x0) r5 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) r6 = dup3(r4, r5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYBLOB], 0x30}}, 0x0) write$binfmt_script(r7, &(0x7f0000000080), 0xfecc) symlinkat(&(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x4010, 0xffffffffffffffff, 0x26c66000) ioctl$MON_IOCG_STATS(r6, 0xc0109207, &(0x7f00000001c0)) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100fefffffffedbdf25fffffffe000000000100000000000000fe8800000000000000000000000000010001071c4e23000500000000ff000040", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="64010102000000000000000000000000000004d66c0000000801010100000000000000000000000000000000000000009201000000000000a39b00000000000002000000000000001c250000000000000300000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff0000000080000000023500000a0001002000000000000000480003006465666c61746500"], 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_GET_HW_INFO(r8, 0x3b8a, &(0x7f00000000c0)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}) 6.78399853s ago: executing program 3 (id=1810): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, 0x0, 0x0) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) (async) close(r0) 6.684802268s ago: executing program 2 (id=1811): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) (async) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[@ANYBLOB="1500000000000040dde9c6aed6a7ad587d69e21b060baea4676c8c635058ae6bd93526d8716a4217da36f8a181ac93ac03257926b701e0b63611e513824e2f7a3b03686dc842dda3ea1480a2ee3570936ca579ccbb7d008aa6d499c2dfb7c814778bd7d5cdf383329aea9a87fc2d93bce2d926baee2a08e35eadebeca010aaa1395c9047e5f21c21481ab810f3426c03e57e98d6ebe685b290afdccbd2f85a5aa0172a90437993f26d6971b7fb"], 0x8) (async) sendto$inet6(r2, 0x0, 0x0, 0x40800, 0x0, 0x0) (async, rerun: 64) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r3, 0x29, 0x1c, &(0x7f0000000540)="f9cf58c989e5c38f410e742e175d9a96cf48e08aeef82a3f32b6b29ff373901d23afe7d337068f4ccb3f03ae5e939f0703f2018e4cd703d6a4abb23f0cb8381a7abd4c58e5f847fa8530e73cfd4748582e1d5fac86578d600631c0d88e6b6adebc2464d6cf076f64727af6f159d326de80e913db3a38a6833e143e806ace8cf9b3b0c4446b5207b65a9002a791eccf8b6f0807178b2d94463f36ddf7407d90a0da852952f9762fa698e384000000000000000020f2038edf06880798ac0e21d737181cbd801a89f2db7d9200"/214, 0xd6) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0xfffffffffffffffe, 0x0, 0x2, 0x0) (async, rerun: 32) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) (async, rerun: 32) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (async, rerun: 32) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) (async) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000280)={0x7, 0x100, "77c638b05041a0115f44304807e55536b7fc5ae52727d800", 0x1ff, 0x5, 0x79, 0xdf4}) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) (async) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000340)={0x0, 0xe000}, 0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x7}, 0x8) (async) madvise(&(0x7f000081b000/0x4000)=nil, 0x4000, 0xd) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 6.580920699s ago: executing program 3 (id=1812): r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x80) r5 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r5}) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x1, r1}) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000000)={0x2c, 0x4, 0x1, 0x7, 0x0, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, 0x28) r6 = socket$igmp6(0xa, 0x3, 0x2) r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='c::=/\x10\xcd\xb7@\x88\xedP9\xf5,\xef\x87\xc9G\xeb\xd9\xf9\xcd\xb1\xac!\xa7\x9c\x8f\xc98\xcb-\t\xcf-\xdd\xc4\xafK\x8d\xb1R8m\xc1[A\x99g\x9d\x8a\"\x98:\xc1I<\xdf;\x11t\xd3\xd2\x19\x964\xff\x03\xbc\x7fo\xe8\x89\x01:\x8b-\xab[X\x10\x18\x8d\xbf\xe1\x88\x16', 0x0) getsockopt$inet6_int(r6, 0x29, 0x2, 0x0, &(0x7f00000002c0)) 6.52006502s ago: executing program 2 (id=1813): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c02000019000100000000000008000000000000000000000000ffff00000000be14144416000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}}, 0x4000) 6.515657949s ago: executing program 0 (id=1814): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = semget$private(0x0, 0x207, 0x480) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000000)=""/49) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) semctl$GETZCNT(r2, 0x1, 0xf, &(0x7f0000000180)=""/164) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000080)=@ethtool_cmd={0xa, 0x0, 0x3, 0xfffe, 0xff, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x20000000, 0x7883, 0x0, 0x1, 0x1, 0x6162b9dd, [0x0, 0x3]}}) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) unshare(0x4020400) r5 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}], 0x38) r6 = socket$kcm(0x10, 0x7, 0x0) r7 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r6}, 0x8) recvmsg(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000000600)=""/235, 0xeb}, {&(0x7f0000000540)=""/167, 0xa7}], 0x3}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYRES32=r7, @ANYRES16=r6, @ANYRES64=r6], 0xfe33) 6.456380235s ago: executing program 3 (id=1815): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x52, &(0x7f00000002c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x1c, 0x2c, 0x1, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, {"4b669a411cd5617d"}}}}}}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "3d8b00", "d4cc4a4423daabeb8e7ba12fe6e1c742a683fa6e58757db76aae864d57fbaf37", "c3650f3f", "5e963dfa951f9b3d"}, 0x38) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x9, &(0x7f0000000200)=[{0xfff7, 0x7, 0x7, 0x1000}, {0x3, 0x8, 0x8, 0x6}, {0x0, 0x5, 0x3}, {0x8b, 0xf0, 0x2}, {0x800, 0xff, 0x3, 0x40}, {0x2, 0xf9, 0x2, 0x5}, {0x5a, 0x7, 0xa4, 0x6}, {0x5, 0x6, 0xb9, 0xfff}, {0x7f, 0xc, 0x2, 0x6}]}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000100)=0x2, 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4) set_mempolicy(0x2, &(0x7f0000000040)=0x100, 0x9c1f) sendto$inet6(r2, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 6.391659473s ago: executing program 0 (id=1816): bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00'}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902120001000010000904b8070096d1ca00cdecfa6e022d790bd508d9679c8d09cbb4e69aab4372e7d545c683bee92d442e8954669c38c4bae8b3e3aed90c99af80d35a1f889c4871d9dbabaf54052fd2b1986543e8775c5205a5a7c9bbc114022efcf14f8861bea0688a51927a6e18af9ddcf841800ffcac62cee5cf7df0b3dcc4324ebc3e775ebb384064ae34891d150f165762a6de46f2a1b8b9b3"], 0x0) ioctl$BTRFS_IOC_ADD_DEV(r3, 0xff08, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) prctl$PR_GET_NAME(0x10, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r6, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 6.391470618s ago: executing program 2 (id=1817): syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x4000, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x4000) 6.345857526s ago: executing program 2 (id=1818): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x400) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r4, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001000)=[@text16={0x10, &(0x7f0000001040)="660ffd84870060f4f3360f0121baa000ec0f2206260fc75dc526f30fc7769ebaf80c66b888883c8066efbafc0c66b8f9e51a4266efb839008ec0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000000)={0x8000000, 0x104000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f00000002c0)={0xdddd0000, 0x101000, 0x1}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r6, 0x4010ae68, &(0x7f0000000100)={0x80a0000}) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.63935034s ago: executing program 1 (id=1819): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x3ffffffffffff82, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f00000001c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x3) creat(0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x5) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f00000000c0)=0x20) r6 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r6, 0xc1105511, &(0x7f00000003c0)={{0x7, 0x0, 0x3, 0x1, 'syz0\x00', 0x9}, 0x3, 0x30, 0x1, 0x0, 0x0, 0x7fff, 'syz0\x00', 0x0}) capset(&(0x7f0000000080)={0x20071026}, 0x0) write$binfmt_elf32(r5, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000100)=0x1) write$dsp(r5, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d5", 0x1c) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000040)={{@host, 0x8}, @local, 0x2, 0x0, 0x80000000, 0xe, 0x9e6, 0x6, 0x9}) r7 = openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r7, &(0x7f0000000280)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x9, 0x3a, '\x00', 0x3a, '/dev/vid@\x8c#\x00', 0x3a, './file0', 0x3a, [0x4f, 0x46, 0x50, 0x46, 0x50, 0x50, 0x4f, 0x50, 0x46]}, 0x3d) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x8002}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x4c}}, 0x0) 5.487911589s ago: executing program 3 (id=1820): socketpair(0x18, 0x5, 0x6, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0xfc, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1000000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x92}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xbc1a}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8b7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x10001}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24004804}, 0x24040010) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f00000000c0)=0x1) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) syz_fuse_handle_req(r3, &(0x7f0000000840)="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", 0x2000, &(0x7f0000003880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000140)={0x20, 0x0, 0x1, '['}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) 4.805559215s ago: executing program 4 (id=1821): socket$nl_generic(0x10, 0x3, 0x10) r0 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x200100, 0x0) syz_io_uring_setup(0x193b, &(0x7f0000000140)={0x0, 0xec07, 0x400, 0x1, 0x2d2, 0x0, r1}, &(0x7f00000001c0), &(0x7f00000003c0)) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000001580)={0x6ac7, {{0x2, 0x4e22, @broadcast}}}, 0x88) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_clone(0x8000000, &(0x7f0000000400)="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", 0xfe, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="5bf88ff426b2d5b8289904ebac26eca0cd9f4598182a53526ad3677f98a3b57f3b58b4aee07eb70e050d8fc1244e2ecfdda11eca8a4786af09a01162be485ac291bd246325ff0d40f5310b1c275f04aff2c661708c3cc2855baf40e9d15c4ff64aa4b79e417ae7ceeab72f9b33526b9c555f2ab9b1d6b66d091d738921961e1df9bfff0b8426b23c7e4eca6341519987adc8f0a89c9335d379480c741a9bdd63b1fd138db9f5852fb8723a29e01c6c22ca1b7a22f4cc47c333eb2ef50b35a4e18dcb55d1b00cc5179eeb145bcfed43f83447cebe677eb0a11ecbf9bc44c87706bb036f1da206e70d59a7be2c09243b94a785688b0ef16c83f622926368fd5bdc70ce310437a00b6f303583b78eed2129025ffbd1768230906c60dd48af2353c8d08306368350e6446d36c860b7f0ad0184c5f8d69f377726d76511dca190b12126c0b2105f3191a31b693288d6b58357fecb35609796a8f52c1e3c50bab85deb806c814efa4cc51c07502efa87d9f39d9283745393de57c95a48b363fdd3c882471e67e75f96666469667e6ae4f877da0f22cf40fb79ca6dae18172845bb659f130d5d7ad2a49af4e14e9252595d4d7b6c81e74da3a997ed20b1fcf98a2392042c09106c1d68540743ba06a65a220f54525ef1de75ef63c2ca4865ad35c86e0736b7654947710d16f878596cdee6a7b89de9df93e18831422e5fbaf6bb3b031a4d9028d7ff89d9c7a15b0aed9f50fc01ca659e79415074835a9a5e6827df8a4b594e0293a3b110a825a2ac36733c41e141a013a0b7a966f1fa5ca291b54106405306a1cbde159c669e63008b1182fa8a013fa61a58a50e3ea941a6b20843f8de508dbf5b136d4ed08e3109e976a7582b8bc50499794e9f2fef6ecfc79e3c582ff5473155d14aed5cd6ea09d7b12ca2a52466e8f12ee64670057bc93cb33fbb09983485f43f09babf9eb9343e88496a5866747ee9b69529f5a4223764afa9539820232028c88a7882a44f4c304cf6bfe76356c3c243d3d55d25b644273c793f081451697605272be21094aba6fece4f1cd0266002dd7d45875f04ec7407bb4a58b5b176988866b8e9b469899b12275ece35c7b21ca4474c0cb2d051152343318acc1f374f860768136e6ff52e566ad8be93270c691153522e741f5ef1feeb43fce5b0beb5a69fb7bf99b988acb5f1d6aec5bc92b0bc4b99938931c669896d5e6a593343debb64153e732cf8349f296dfb3e4b5e36de44febb316c79b90cc97028af91fb87ea5f930c66b7ce86b84c3ddcf4ee1dd18c4971c5c2e8c7ab68634ec965d6764723c08961d937049ff23697b9d5cd941d8be7fee6dedb09eff6e635ebc4e7c378367cb13045d21dbe3da246e61b9576b3071f53d3ca57b24a0414780606cb3e2258a9383ec4a3202820b4544f2be39265f0cf94d9fa27bdf062646e62292da133a6777126d5f25746d15536b6d99dff19412053d89ab16313bea42b8ad74633cf84f84e8fc7b876ab38329784e9befeac3ee9c9325cd31c2af6c4720e76f97153db1f6a4ba7ce8c3cd7a5a3e0e6c4449f3ed8e1e61f54af43e8b90b233eed93913995123bef931e65b9866e29d0f7ac842f30e86fd8d2941f132a75c64a40de01e7eeed245ddda2edf64dabb2c9c232b23051518d68084884c8bf8c91e395b9fce629b01028c274d92d62ed4f090cf1cfed31fe33a27fea0ce3ea15e7479529a88bdab88d18e8c57f974f11c0b0c8803dc7d6aca19f159abbfb96d13c2d4dea48fef47c2abdd42f6476a7b99c6deebc6c089e1a3db98de0d468dbbeec83b0d8d26eaa8f33922f66453acdbdd4d7a71757c8cf6c16490d5606ef25ee57daf9c6c7a4b9a2f827e7e1af097e8c8fe19b0876a35a5674450be0b325783aabd5523403d469cbd9c7077a1bf945e04235d6fb4ed020a6ca50934293f821fe59915d5ccd05f6c1954fa8f0c26b468741eaf10a37d885a2c50b40a941a9eb103b490846328b974356dfcd00ea8aece809ee57a9f0553a1d6143bbcfa1d9394a90628778d952e811eb47f1b4fe769f6d524d754575477fbc3941ef2bfe468ccd46824cebac33036f715f9bb3893550e65333a6cb07ec8995e9f991a1d1490777c052ab506b9d5ae212596e9c52073973c52a4b1e76926fb93e13847f98c7c4701f73e336df2d9200f375be2dd20aff9593b918ce63b96c906d0f9b1f5d2b6fb881bb9b204dd47900b2e966cc94a8350c0aec50adcde6f88d6c50da31e6c38184925a1fbd6120dc981b176634006779c8668f68b724d26943c60184f8dd7f67a80a70d60aa1c542477cbda7d914e92fd8d7f690779eed59ce5c47b2bcae6697d15f871ec18f302715697d82ece173406ff9f947b5851c55ca9f2afbf8f6affcfa5f025faa850fc085c530cff8a7467c193054a726b6b134ce3040f6359cb881c2ac40e1077e0b59bbaccc5f55e584b4b59e3e2fd11adc1b734843f4bac7b4ab17309311a8b2f6d9adf3c79b7f981ff4b94183845e81bcefe84b1aa2f3651194ca565be44705a04280e201885dacfab514792c65b323112bc6a3725fca11bc1fe7dd28e3c0593e72faa956d41bb6ac3d2f684a3cd8e823801b9fc78321c72a7a723957d699abc262224a417f3ea88d7d1ef181178cc6ff3a1a52a9f73a9cdc25664b16673a26ce629cd5f668ca33aa3c3c7fb2872ed2713258908913adc939d886b2d1bc571b588f51f5432861c52cf326b2fa909565ea879b5b755e35125aaeec454c2e4b89eee82e91a7a516f13b8f3f3036fdad7ba5b68bd5597263f1c945d6ab8db0742cad73ca1dd930b9a0e23fc3ad9e4b19e004ad1fc6ec76a1fed195f0ffa784625cb22072521543df44b49cb505873d02feec143bf1af963c58d169841cc8fb5eb169cdda2f3ccfa069047ee718cca0598f855c7cc1d12c86a338c8fb97c61711e726809d253e26e90061a2721a83f3ebace2d45cf33bf7a564bd24fe82149aa875420693740d63d529019e409d85764d2b1b7ca136cfc018066dfd9c92d5b7f7b959002e8f10d6c9459c72b92064e5cbf4935fcfab7115c5f6a262bef81ad2d4024c71e441f655a856ff45e272037f8a3e13e5fca1d0750e2547b18580d2b8f1b64183a3b3c1a95f9c8b22147bae04521ef232ae3016a0829659e399af06409e73beed32497c32864d20a11dcc3c044e61857bcf11cf95de2037b49e4bcc5fdb49071a179d48d957153f418fea465c0a7eb17cc09d4d0e3a8e41aefcb76532c211be72d96bc0a83d83d5eb99d8c3efb20fe537fe1a26726c58eac62b27f9d31f65e94009482027120a58ee6739c69732ee0399c8e119f9ee9dab79d3052c2ba6e18690c7238fba90c45877658106721c65642a52ad1601c8e7becbf59b81cc7bed6d9b5ea2be2d6c12bb8177c9f788db08e51fa3a0efdbe78664844fe103243e09668d0825808dcb7233d2cb0835f3bbf8836711abc5181dd3d0717f3a499c2b4ca1362f3d210e1d9ca366a307985f7ff1f15bd64caafc463cc2f16d2be2e82a21808f07a499e0d32cd296634b3635120fa5177ebc5d29fcc025a753ef899320a7f1d771123a315a0b135e6699db61c5c5d1a3758dfb7eebb2c32b86db1891e5f866e00d684264ff761d81df32b513ae68c84a4732dd249906c8ab962789371b5f83af54d74adf124f98ae73c97212b323120807f6bec225e39f48ed0ebe29f4e40f75ecde25f83ea23a607f5a432e2993f6c18176bacc12612edd932e7d652385333f5a8e7db66acc66a5e4c13bdb5b014aea5d30cf44d0a5dbb6183de0096f02898245e1c6d9db4929d69ed3d5eed121ddc280441d25f189963254dfa3dd69fdfe16db1e0e9a421e71100f04b096c847c8426cfffe39158a9a3ff879be8f19d8f11febe6227441e3ae7b11d210aedcbd80503b79ba5fd7768f918e7e1e0b385e8189597412057ffb050819566e13d2348cee7841884857a2bd99df3951cc180648745636365a1b77d4d8a634e06ab0d72a15112409c5fa595ab731e57354866c56fa93c3656471b9a7e577d22cd899a1db52c0246c29ff4a0337f93f294e5cbb3e2aa54fcf16d764252f32346ac8a7a661d01339ed5f8780513618e58d0640e805d02c421ef750e84cc8b6571d307509bc315a8000e90f559291ccdd955b40444153337e57e24f299342f0dfd513f8729c51635fdab57786c3fcdccaff7bd057b2a5e610feadea4a00fcb45b52c043ce2850c4f11fd68100ea66ac90d12c8436e327e52b2c6b4cd00c1109ef029a97fef894c0dbc20afba567fe5d15f64fb8434a8976bb0685d10a485b9ac371d903bcc692341e8d2fd8506c854262f39a60736abc2c9a50a5e5fa0860a07799d0be0a621ec001337d96dd684203891d0a8c306732baab04dcf1ccefbd03671b85632b83d4b6f0ed61249760fbd501664d7f8a784d64fa56c73513a86ad0d5a1ee132d5eb3b7a0cebbc89b8fab0a4ac64fc10e876f38569dedd5a5013069cdf83b6e08334c020a67b8fe1993e3f03f8e3990f8b81109a5601338a703065a3ff0487f534c4849f2407cc6ef728151af08c9f807e8883088581957b1e742571ff9290fc619331ca0dc110f1928942a31c07645760d83df42a88aa3e7a5ce28e86c2c2dce204057b470fd102887254feaf9719c20803d7687b49d54247c06d23203c8719606cbcd93e1f80f683c9d3b3da1dbd701d3a1b142b8cf4e49607c89f3f9bbe129b5d7bb2ad465307f3a00d95f06b2a9af294e05e376756045597a141437fac80c80a2ac740adb53815d7e3c217253e4e5b4dc49c9f66d5c299f7a51431539810b79f18fec43ae6af2ac87a322a2baf55ca2b5eaeefbe9329d7436e0eab57627ec239993411b98462f5c3215dc217ea8c402c710686ed971a5ff0bb61c1727db6b4a783676cf605d3bdffd46838d4c04bd7df298190818e1eb1ea5b5bb78b07059d7fcc21de7df99a8e80027e5253911149746763a982cf95be1deeb4862357f01a86703e02bb8df367972acbd43ac716f2153beae96bf26a46b780425fdf1e43972e49c503c2b24172159d1d1aed41f233beddbcc41cb421064f0f88dfde5a900529793d1193acf38b00d0d5a1f7df1c4509a03e79520363c9143f0dbf99db0a243e929c7ed711bc744b68f0b64f03d1396f65db2f9dce69bdcf741aefb760faa77e9fbd6f8cebdc9afe2dd45dd75acecc8a58bdf9228a972534cfe3df360c4587a63b71d6b92c79bdf77bffdf541a68e1fde44971e0d6435ed5f9a306285aa2b98b9b7fec99370d2a1d40c1d6997b253b8af738c3e047306a5afd2e872a17a6370359367d4d1b3719728f07b0b39bef7c81052600abd849ad852ce1f20944145619951ddf296458c3fd11d7982f22d3813b20d64f46460e23cd3b19d06c2ffbeb86b45ff2b5cae9925bc270deff6f8cdc2a36cf46a93dd0c5a7978cafabd9b3957578db8dd51e46aa48f22b804435cb78331da3c5bbc227507d9f579874d4c1105a84f73e5a649bd61e02de94d96be31dfb970de64419697cd16e993d3d58644de638a3eaa094523381835e389d278e24c282cb4a646181e4538d5d700bf9e62c383d05f45c2a7e3732dac04ef9c0feea680462d92cbd82016f38cf7f8bd4e2631cb524f73718fc2b329810d84476a5e08e182ae6b26bc104df2172156eba22b44489cb63aa8f71f8d49d274a367fd1d185a248e50076e27a77713a5f13226e2915c516ef851ece1cdee2ff09ec859430c7201bfb7643c4498f5ee35a15d5d78b04928dcc4519f3fdf83573f") prctl$PR_SCHED_CORE(0x3e, 0x100014, r5, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000020000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000021000440000000000900010073797a30feca732af100000000080003000000000a148000001100010000000000000000"], 0x64}}, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000001640)=0x80a0000) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) mq_notify(r0, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) 4.596904156s ago: executing program 2 (id=1822): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, 0x0, 0xb, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x81) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000}) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000300)=0x2000004) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) bind$rds(r1, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) 4.408313557s ago: executing program 1 (id=1823): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @private=0xa010102}, 0x10) (async) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="9c", 0x1}], 0x1, 0xffffffff, 0x0) (async) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r3, r4], 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000440)={&(0x7f0000000240)=[r3, r4], 0x2}) (async) syz_usb_disconnect(r0) (async) write$char_usb(r1, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={0x0, 0x90}}, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x200, 0x2}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) migrate_pages(0x0, 0x226c, &(0x7f0000000640)=0x101, &(0x7f0000000680)=0x2) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000000)) socket$inet6(0xa, 0x2, 0xfffffffc) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x8, 0x7, 0x0, 0x3, 0xa5, 0xbd, 0xf9, 0xa8, 0x5, 0x0, 0x0, 0x40000000}, {0x8, 0x5, 0xfc, 0x3, 0x41, 0x6, 0x0, 0x2, 0x6, 0xf3, 0x0, 0x2, 0x6}, {0x100400, 0x9, 0x0, 0x7f, 0x20, 0x5, 0xb3, 0x0, 0x3, 0xfe, 0x52, 0xf6, 0xb82e}], 0x6}) (async) r8 = dup3(r6, r1, 0x80000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000240)={&(0x7f0000000b40)="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", 0x1000, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r8, 0xc01064ac, &(0x7f0000000280)={r9, 0x1000, &(0x7f0000001b40)=""/4096}) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) getdents64(r10, &(0x7f0000001f80)=""/4108, 0x100c) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) 3.76429241s ago: executing program 4 (id=1824): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000400000000000e1ff95000000000000002ba76bb3019c1341056bd8174b79603123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee00aa19ce670d25010000020000040000009fc404000000c788b277beee1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac05c04683712a0b09ec39e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e468eea3fcfcf498278a315f5b87e1c26433a8acd715f5888b2007f00000000000000000100000000000000010015d60605000053350000000034a70c2ab40c7cf5691db43a5c00000000000000f030007ce2c6f800000000000000e75a89faff01218087560cce39bf405f1e846c1242000000000040cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bef5d7d617da7a6520655a805608df4d431623c850af895abba14f6fbd7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf050000008600a62e96b7cb8e52cbdc2ba9d580609e31c30879d6fce424c2208af6c3784a1975fa657de38a3a32e4fd67ce446adb431d07db79241aca1dd9ba02453bbb5ee8babe1745e645f091231b986e952afdac972f342c6f184777d05d988d6edc71df0100000013a38300cabf2b554380ad215c789bef4cc574109b8df8d9a9db669557b3809d8c396d2c0361629d1822f722ec23812770d72cd00100000078a75dea785be550dbb420287e0789b8c7044f563a1f68d4efe895fdbc463f747c08f4010586903500000000000000e800000000000000000000000000000000000000003ddf4aa4b1c8b8a0ae6fb5425f1d581961471cdb51f8940290e99ccff4123f955267fe4a75c11448741f064fc7ce7e62ee4df874e086287547d4099aeec9f1538ee25a2a5ccf4a9b604e88e12ff25184d4e3c6f7f623559435b2c505fb711300000000040000000000000000000000000000e67ccc02148a4fc43021cce9f24f4b2f9492c32e7a92a557ac2b44b84e88bbf7a49789906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd029406000000433f5c899119ec0c0acef5385c5a2720caeb68f1e9c05b0591d89467ded84da092dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696ad3a042a7097ddefe0671a5767014b09ddbf69b78f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32879d326497e21e041254f06bd7f3a067e147e82e841dba3867da8bfbc101d3960e07d282f483e7b49991be06b950ccd48f4e49833f3c4a02bbd06c84680549f9eb16682ecb722e8ffaca907a3eaaebfc8e0a47c0076d7cc9d32b3cc96aa751d890881c3c33bd91f6ecf45ab3f12f816318346f9b883427b9190024edc1eddd68f34ce3bfedb5fe5d7beae4d3ca561e37570587783f9673e7ab17f5a09efc1114777d2707d2996961203aedff1c52108d9c0d51dc30209872ec602af42eb29d54a37be0fdfdcd74c2d859a566ee5c30677173a2592a4617ae08bec07422d52d2ba7271550a5c20e3a8d1c8c8fd3025ff00607b2249ae9a18391e01b21b36169790b8e96f7955754b6b01a75165d3573d1dec5cf1b08b6115b43203a5654cce2277eb4c02ef4817b4cb989ac178895810eff7b697f2dc9b308aa2460e3cb85cdc4833571a62bf310700000000000000cc7f923284230ada8c756096a66119d4b6b2f159585c3cf8e7bfdd619e294b1d21cd491b8cfd4a253856e485fe29c6ad177a9fb078ca905782b9ed3c30675b89a784bb8031cac0de95178a5acff029a0f0fe972df22b20afe95fba722056f94ab15f1cf605c33df627311f1b614684d77549"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001f80)=r0, 0x4) socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8b}, 0x94) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200408c0, 0x0, 0x0) syz_usb_connect(0x3, 0x146, &(0x7f0000000200)=ANY=[@ANYBLOB="12010002a4b4b708b40402005ce2010203010902340102050930020904340a0395f125000a2401060052020102052404040907240501c3451d072408039c0d0109050a0808000008f809050e01ff03030208090505"], 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) socket$qrtr(0x2a, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r7, &(0x7f0000000500)={0xa, 0xffff, 0x0, @mcast1, 0x9}, 0x1c) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4609035208070000000000000003003e00810000002701000038000000b00100c69280f2ea967f060007000000468320000100000400017f000000000000000070070000000000000058970000070000000b00000000040000000000805d5d93bd9aed8150be245eb57c20275df23dd4c0a790d184cb0fd06fc61360db201ff5e3b747d53373a968d5dff14ccac501f02fe320a27d63cbc8abbc8bee8130a4849dd5bf877e733c6917ea5757bda54eba462981a44f0e8100"/380], 0x1b2) 3.682406833s ago: executing program 0 (id=1825): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x44810, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004ea208105d0502905e230120319e92021200010000100009040000002484b400"], 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ea0000/0x2000)=nil, 0x2000, 0x1a, 0x10, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x10000, 0x3, &(0x7f00006c5000/0x10000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xfffffffffffffffe, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) listen(0xffffffffffffffff, 0x0) 3.252759284s ago: executing program 1 (id=1826): r0 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x7}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0xcf, 0x0, &(0x7f0000000000)) 3.064060525s ago: executing program 1 (id=1827): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000040)=ANY=[@ANYBLOB='\b\x00\x00\x00^']) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) readv(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = timerfd_create(0x1, 0x800) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timerfd_settime(r3, 0x2, &(0x7f0000000180)={{}, {r4, r5+10000000}}, &(0x7f00000001c0)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), r6) sendmsg$FOU_CMD_GET(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000f9dbdf2503000000040005000500040000000000"], 0x20}, 0x1, 0x0, 0x0, 0x200400c5}, 0x80) 2.780285872s ago: executing program 1 (id=1828): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x84, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_EXPR={0x38, 0x11, 0x0, 0x1, @objref={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_NAME={0x0, 0x4, 'syz1\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x12}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DESC={0x4}]}, @NFT_MSG_NEWSETELEM={0x8bc, 0xc, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x878, 0x3, 0x0, 0x1, [{0x864, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1c0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb9, 0x1, "eff930ba30243780f944726b56698ca9f6dfbcca0094af4c22eac3aab42c9b05402b6b812f2dcb616c1fe69aa25957800806dd765e17929bd0bd3865f5c15e2f96a9ada50dda52703ed866b48ce697c322ecf084afa9b3963ee3ff86d4d5c2d9d94b260ff68bb529e0038ce0b8e961079493bf293b73b780e0db42c18f351ad1ce78e1185de88fd2696acc2ba71e899ba759ad53cc74f21fcec185ab895a3ed2d0497682eca1c39afe077367a814365dd4eac391b1"}, @NFTA_DATA_VALUE={0xfe, 0x1, "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"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPR={0x48, 0x7, 0x0, 0x1, @rt={{0x7}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_RT_KEY={0x8}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x141fd3909cecddc5}]}}}, @NFTA_SET_ELEM_DATA={0x358, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x78, 0x1, "88bb019128a8ad34da231128a7668f1b4cd68003077fd08e1bd8f1ad893d09920a5b6d55212e9e6df9e768f6aad909eb8a1110e8b79fbb460683cb18c62449b2c8f00f665954d85e310ca299a76da9d5a85797436c7fea25982d0ff42cfb8ea1721e7ba41a79757255258c21580292fbb529eec9"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xc2, 0x1, "09220288777a41ad21170b03bd89e0b3903d090967e7365bc0a69783b3136e13533e7c5d1b5000876812820cfa6507c6ed13ff63c99241b4b23dc4850afce9e69111d04c8e4b9f54e78e1682fb5e8ee83e44a0d109b88dd74eaa372316e691fc146af33162eaabc79758b4a25db722654f24cbe657628f4bf4f9c97d2cdece7a24b133c2f879c5ca5340f711a1bffa0eb6c9d0b96d0d63a29b22f0f96f1b3f89e80d320cde62c36e40db1d0e231f3690992cd51feeabb4ff5fe02465c92f"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xe7, 0x1, "59268b868397397f8d1877a42aeac347cb923902e64eb84d9d057163fe7f1632a2270aaa5b7845cf764317a5e950e39719012f796183c089f5bba5c6e071d1daf3d42f1727bea52c0ee06cec50976f7f5f08942065f1ee5e47498a33df923828d94556b42d4a1e1b8dc862b97c770b28f423f30e7a2807617249c63af678f1e0cdec98f2ac80c85df2997f3745003f5a0deaafac8875f9697c89e5f7c37dbf4608e250a40f61265b04f97aa1df8061d10e14a851a285d7b14bd0d823b3a360bbabd733f25cb0e86092e8664abf46816c507218ebce3e250fa393361fbf260c1506ed26"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x1e, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x46, 0x1, "80204bd7b154bddf181905ead7aaf77f4585d508dd3f949b7fc27318ebdf6ece3537daba2aea871d4f79da918ec8a42e40da170654832501d24d1149abf671933c5a"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}]}, @NFTA_SET_ELEM_DATA={0x290, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xae, 0x1, "21ccb6ee8de6eca37474d63efcc38efc3adcb66aba7af5c63662145ee7fdaa46e4920c0f0662bfb48c477b6530be6ec9ba750f576a27ce71a7935eed75122db77ea5a4721e14d041e461e3d4d35cb5c58c1869f85ca7e905d0fd05b8b4a48684d478649afbfde5361747131e0bc0c1494fd2e839dbcb9795f6c3371aba296e0b854612a289ffe7ca4fddaf6906b55d549400e6fe2240a0ca21d370b1107696e410c1e48cc5ed2ee55aa6"}, @NFTA_DATA_VALUE={0x82, 0x1, "f2ea4bf85d160173d32d2ed94c2b0cc2b2210f21061532a9d6e451e55e46064bd6d5b9d39e47b58830ffef13b192c469795e036edb72a6c53b1579e359c9339c53080638a09ee4eb139104f7a609bf36e862e351aabe6d72f294bf9afc5a5e9e3356f4a2d41d05c777540d87f668c2191ee72b2709692fb97f386abe3f9c"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xfd, 0x1, "552487c68e59244a09245f92f75c8b466b07cf2165a0dd1c6084efb0f7bb7e668d01c1f8cef73fe1b143d1e56ca7df03de6e91789ebdc590b10d42a6f308e22e1ad9b7875c8d8d3e82747280a7790fd003a184a434f41a90c82eb283282a23f161e82feb606693b369e3e598a16b4c378c61a3d228cbcb26c1fb12321050d60d85f928811fe79acf8b31476a861617aba72dc5f5890915239a4a86ed13d40d60f8c1b4ad1bf520f4f3806e0b8bda664618c5e19b95287a11d97c067e026105cecf0318cfb6f2a9e6dd3055a0c42403fac89642f8f9eac2cc1b064a1a91d71f0f53b794c09f9079fea5625a6efa59abb5e16b3932942701a518"}, @NFTA_DATA_VALUE={0x0, 0x1, "dee20984af11da96c9783007c5eb3f9691b133bd6fc8b4ac84184ea174c2d022d3161c1498cd054013a18ac45cbcef74bc0a646d64bc5193048218c77331e9fe7659a6b6d67cf7ca4325469a0429dfecc347f322896bbaae8092ac233765733a9630046e05997b457c85"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @redir={{0xa}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x70000}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x968}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r3, &(0x7f0000000840)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00022bbd7000fedbdf254300000008000300", @ANYRES32=r7, @ANYBLOB="0c009900010000002f00000000000c00580016000000000000000c00580037000000000000000c005800571c5cc48192be809a000000000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000003}, 0xd1) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) chroot(&(0x7f0000000300)='.\x00') r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.614352504s ago: executing program 2 (id=1829): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newlink={0x38, 0x10, 0x437, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x40c89}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}]}}}]}, 0x38}}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880) syz_usb_connect(0x1, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @dev}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}]}]}, 0x7c}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000000)="dc", 0x1}, {&(0x7f00000002c0)='L', 0x1}], 0x2) 2.223984458s ago: executing program 3 (id=1830): r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) mount$fuse(0x0, 0x0, 0x0, 0xa02002, &(0x7f00000004c0)=ANY=[@ANYBLOB="66643dc6953bd340e3272b71d8f75d2e259bf1b1641dbb07e599bb12e499abcbe83cb20c3beb0dfa38c10e940b6828039ec26a486cc445322e0a22037201a9aafdefaad479199cd361137641824dfeb422ab103c6a236f4c9ae516aaf718425b7cbf0a21a98a672989ebb66211460e26e8d8f0a8338d62ea54b8dbc1492deefab8989d8802bb1b8c5d61349a79922cad342e87ed63595e043a81fa36feb0f49bca508854", @ANYRESDEC, @ANYBLOB="40ef35a971d35097635122028eb919802534a9e95b3ca94bf84415370e72798ba993e10be6a82eee4caa011b2c213a3a032f32435692c0ba1dc1f06b1de6bc83e6d684a1f35cf6", @ANYRESOCT]) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) landlock_create_ruleset(&(0x7f0000000040)={0x4300, 0x2}, 0x18, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 2.196524508s ago: executing program 1 (id=1831): socket(0x9, 0x3, 0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee6, 0x0, 0x1, 0xbfdffff9}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000200)={&(0x7f0000000040)=[{0x4, 0x5201, 0x2, &(0x7f0000000300)='/G'}], 0x1}) socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) unshare(0x40000000) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r0, 0x47f6, 0x0, 0x40, 0x0, 0x0) socket$kcm(0xf, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x28801, 0x0) 1.85938273s ago: executing program 0 (id=1832): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)=@known='security.apparmor\x00', 0x0, 0x0, 0x1) lsetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='user.incfs.id\x00', 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r3, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r2, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x10000000000}]) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc2604110, &(0x7f0000000040)={0x0, [[0x1, 0x0, 0x3, 0x0, 0x0, 0xffffffff], [0x0, 0x3, 0x0, 0x4, 0x3, 0x0, 0x0, 0x1000], [0xfa, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x800000]], '\x00', [{0x3}, {0x0, 0x2}, {}, {}, {0x0, 0xfffffffc}, {}, {0x0, 0x8001}, {0xfffffffc}], '\x00', 0x6, 0x0, 0x0, 0x0, 0x0, 0x2}) openat$uinput(0xffffffffffffff9c, 0xfffffffffffffffc, 0x2, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x20000000, 0x801e, 0x0, 0x1, {0x1}}) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, &(0x7f0000000000)) ioctl$SCSI_IOCTL_START_UNIT(r6, 0x5) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x40000000000, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xb, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0xf023, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x81, 0x2, 0x0, 0x0, 0x0, 0x2, 0x100000000000, 0x0, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xe, &(0x7f0000000080)=0x800002, 0x4) socket$netlink(0x10, 0x3, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 224.655909ms ago: executing program 3 (id=1833): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x3ffffffffffff82, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f00000001c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x3) creat(0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x5) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f00000000c0)=0x20) r6 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r6, 0xc1105511, &(0x7f00000003c0)={{0x7, 0x0, 0x3, 0x1, 'syz0\x00', 0x9}, 0x3, 0x30, 0x1, 0x0, 0x0, 0x7fff, 'syz0\x00', 0x0}) capset(&(0x7f0000000080)={0x20071026}, 0x0) write$binfmt_elf32(r5, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000100)=0x1) write$dsp(r5, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d5", 0x1c) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000040)={{@host, 0x8}, @local, 0x2, 0x0, 0x80000000, 0xe, 0x9e6, 0x6, 0x9}) r7 = openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r7, &(0x7f0000000280)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x9, 0x3a, '\x00', 0x3a, '/dev/vid@\x8c#\x00', 0x3a, './file0', 0x3a, [0x4f, 0x46, 0x50, 0x46, 0x50, 0x50, 0x4f, 0x50, 0x46]}, 0x3d) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x8002}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x4c}}, 0x0) 0s ago: executing program 4 (id=1834): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) (async) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) (async) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000000000800040001200000", 0x24) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$kcm(0x29, 0x0, 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) r2 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x245b, 0x400, 0x1, 0x9c}, &(0x7f0000000240), &(0x7f0000000280)) r3 = syz_io_uring_setup(0x239, &(0x7f0000001080)={0x0, 0x0, 0x10100, 0x0, 0x240, 0x0, r2}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) (async) fgetxattr(r1, &(0x7f0000000080)=@random={'security.', '\x00'}, &(0x7f00000000c0)=""/29, 0x1d) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6000002, 0x20010, r3, 0x6a923000) (async) umount2(&(0x7f0000000000)='./file0\x00', 0x1) kernel console output (not intermixed with test programs): ][T11206] CPU: 0 UID: 0 PID: 11206 Comm: syz.3.1379 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 420.397698][T11206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 420.397709][T11206] Call Trace: [ 420.397716][T11206] [ 420.397724][T11206] dump_stack_lvl+0x189/0x250 [ 420.397756][T11206] ? __pfx____ratelimit+0x10/0x10 [ 420.397781][T11206] ? __pfx_dump_stack_lvl+0x10/0x10 [ 420.397805][T11206] ? __pfx__printk+0x10/0x10 [ 420.397826][T11206] ? get_sigframe+0x596/0x7d0 [ 420.397854][T11206] should_fail_ex+0x414/0x560 [ 420.397887][T11206] _copy_to_user+0x31/0xb0 [ 420.397906][T11206] copy_siginfo_to_user+0x22/0xc0 [ 420.397923][T11206] x64_setup_rt_frame+0x776/0xd40 [ 420.397966][T11206] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 420.397996][T11206] arch_do_signal_or_restart+0x3d7/0x750 [ 420.398019][T11206] ? __fget_files+0x3a0/0x420 [ 420.398041][T11206] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 420.398077][T11206] ? exit_to_user_mode_loop+0x40/0x110 [ 420.398104][T11206] exit_to_user_mode_loop+0x75/0x110 [ 420.398127][T11206] do_syscall_64+0x2bd/0x3b0 [ 420.398149][T11206] ? lockdep_hardirqs_on+0x9c/0x150 [ 420.398171][T11206] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.398188][T11206] ? clear_bhb_loop+0x60/0xb0 [ 420.398206][T11206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.398221][T11206] RIP: 0033:0x7fbd7278d3df [ 420.398235][T11206] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 420.398249][T11206] RSP: 002b:00007fbd73602030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 420.398269][T11206] RAX: 0000000000000001 RBX: 0000000000000005 RCX: 00007fbd7278d3df [ 420.398280][T11206] RDX: 0000000000000001 RSI: 00007fbd73602090 RDI: 0000000000000005 [ 420.398290][T11206] RBP: 00007fbd73602090 R08: 0000000000000000 R09: 00007fbd73601df7 [ 420.398300][T11206] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 420.398309][T11206] R13: 0000000000000000 R14: 00007fbd729b5fa0 R15: 00007fbd72adfa28 [ 420.398334][T11206] [ 420.937328][T11221] loop2: detected capacity change from 0 to 7 [ 420.989216][T11221] loop2: [ 420.992329][T11221] loop2: partition table partially beyond EOD, truncated [ 421.431755][T11226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1384'. [ 421.441113][T11226] vlan2: left allmulticast mode [ 421.448374][T11233] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1385'. [ 421.492504][T11226] bond0: left allmulticast mode [ 421.508211][T11226] bond_slave_0: left allmulticast mode [ 421.518720][T11226] bond_slave_1: left allmulticast mode [ 421.527430][T11226] vlan2: left promiscuous mode [ 421.534976][T11226] bond0: left promiscuous mode [ 421.541653][T11226] bond_slave_0: left promiscuous mode [ 421.559845][T11226] bond_slave_1: left promiscuous mode [ 421.579108][T11226] bridge0: port 3(vlan2) entered disabled state [ 421.600196][T11226] bridge_slave_1: left allmulticast mode [ 421.606024][T11226] bridge_slave_1: left promiscuous mode [ 421.612749][T11226] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.629174][T11226] bridge_slave_0: left allmulticast mode [ 421.635098][T11226] bridge_slave_0: left promiscuous mode [ 421.641419][T11226] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.749862][ T7745] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 421.758225][ T7745] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 421.783522][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 421.813862][ T120] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 421.993313][ T120] usb 1-1: Using ep0 maxpacket: 32 [ 422.001560][ T120] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 422.015739][ T120] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 422.042499][ T120] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 422.075580][ T120] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 422.085721][ T120] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 422.098408][ T120] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 422.155777][ T120] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 422.187292][ T120] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.256554][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 422.282635][ T120] usb 1-1: config 0 descriptor?? [ 422.337251][T11244] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1387'. [ 422.383565][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 422.510332][T11231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.569560][T11231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.674110][T11250] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1389'. [ 422.694294][ T120] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 80 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 424.030364][T11261] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 424.036956][T11261] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 424.102820][T11261] vhci_hcd vhci_hcd.0: Device attached [ 424.144352][T11262] vhci_hcd: connection closed [ 424.144605][ T1165] vhci_hcd: stop threads [ 424.155917][ T1165] vhci_hcd: release socket [ 424.160375][ T1165] vhci_hcd: disconnect device [ 424.558842][ T10] usb 1-1: USB disconnect, device number 80 [ 424.572307][ T10] usblp0: removed [ 424.609432][T11271] netlink: 'syz.0.1393': attribute type 75 has an invalid length. [ 425.449302][ T43] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 425.635457][ T43] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 425.645778][ T43] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 425.665193][ T43] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 425.680066][ T43] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 425.704916][ T43] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 425.730550][ T43] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 425.741335][ T43] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 425.786418][ T43] usb 2-1: Product: syz [ 425.790795][ T43] usb 2-1: Manufacturer: syz [ 425.825782][ T43] cdc_wdm 2-1:1.0: skipping garbage [ 425.831415][ T43] cdc_wdm 2-1:1.0: skipping garbage [ 425.838140][ T43] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 425.844985][ T43] cdc_wdm 2-1:1.0: Unknown control protocol [ 425.933474][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 427.383520][ T120] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 428.161182][T11333] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 428.229244][ T43] usb 2-1: USB disconnect, device number 63 [ 428.385766][T11337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.415133][T11337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.645402][ T5917] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 428.827627][ T5917] usb 3-1: Using ep0 maxpacket: 32 [ 428.834929][ T5917] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 428.843889][ T5917] usb 3-1: config 0 has no interface number 0 [ 428.867232][ T5917] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 428.897409][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.014284][ T9] usb 2-1: new low-speed USB device number 64 using dummy_hcd [ 429.015543][ T5917] usb 3-1: Product: syz [ 429.026550][ T5917] usb 3-1: Manufacturer: syz [ 429.031169][ T5917] usb 3-1: SerialNumber: syz [ 429.053440][ T43] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 429.091637][ T5917] usb 3-1: config 0 descriptor?? [ 429.104591][ T5917] smsc95xx v2.0.0 [ 429.143341][ T5949] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 429.200509][ T9] usb 2-1: string descriptor 0 read error: -22 [ 429.206944][ T9] usb 2-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 429.219751][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 429.225928][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.227663][ T43] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 429.251541][ T43] usb 1-1: can't read configurations, error -61 [ 429.262095][ T9] usb 2-1: config 0 descriptor?? [ 429.280007][ T9] usbtest 2-1:0.0: FX2 device [ 429.285341][ T9] usbtest 2-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 429.297950][ T5949] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 429.318235][ T5949] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 429.336554][ T5949] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 429.351212][ T5949] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 429.360596][ T5949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.412019][ T5949] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 429.420901][ T5949] usb 4-1: invalid MIDI out EP 0 [ 429.434115][ T43] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 429.522067][ T5917] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 429.534374][ T9] usb 2-1: USB disconnect, device number 64 [ 429.544299][ T5917] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 429.589377][T11328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.722018][T11328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.733334][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 429.766192][ T5949] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 429.778189][T11328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.789294][ T43] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 429.805860][ T43] usb 1-1: can't read configurations, error -61 [ 429.813688][T11328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.822053][ T43] usb usb1-port1: attempt power cycle [ 429.936958][ T5949] usb 4-1: USB disconnect, device number 75 [ 430.173750][ T43] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 430.207929][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 430.215354][ T43] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 430.222958][ T43] usb 1-1: can't read configurations, error -61 [ 430.376674][ T43] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 430.415629][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 430.430209][ T43] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 430.441301][ T43] usb 1-1: can't read configurations, error -61 [ 430.452345][ T43] usb usb1-port1: unable to enumerate USB device [ 430.695328][ T120] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 430.853249][ T120] usb 2-1: Using ep0 maxpacket: 32 [ 430.865954][ T120] usb 2-1: config 0 has an invalid interface number: 151 but max is 0 [ 430.874661][ T120] usb 2-1: config 0 has no interface number 0 [ 430.880784][ T120] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 430.913027][ T120] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 430.939823][ T120] usb 2-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 430.949681][ T120] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.029625][ T120] usb 2-1: Product: syz [ 431.069472][ T120] usb 2-1: Manufacturer: syz [ 431.110471][ T120] usb 2-1: SerialNumber: syz [ 431.233390][ T43] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 431.245354][ T120] usb 2-1: config 0 descriptor?? [ 431.382158][ T5917] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 431.434138][ T43] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 431.462509][ T5917] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 431.490713][T11362] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 431.501826][T11362] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 431.719960][ T43] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 431.768124][T11371] usb usb8: usbfs: process 11371 (syz.2.1418) did not claim interface 0 before use [ 431.841946][ T5917] usb 3-1: USB disconnect, device number 89 [ 431.848006][ T43] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 431.972260][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.091076][T11369] raw-gadget.5 gadget.3: fail, usb_ep_enable returned -22 [ 432.233833][T11377] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1419'. [ 432.420997][T11389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.437111][T11389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.593706][ T10] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 432.756487][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 432.767995][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 432.780747][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 432.792662][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 432.804160][ T10] usb 3-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 432.812523][ T10] usb 3-1: Manufacturer: syz [ 432.821651][ T10] usb 3-1: config 0 descriptor?? [ 432.857363][ T10] smsusb:smsusb_probe: board id=9, interface number 0 [ 432.870142][ T10] smsusb:smsusb_probe: Device initialized with return code -19 [ 433.059689][ T5917] usb 3-1: USB disconnect, device number 90 [ 433.579571][ T43] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 433.600558][ T120] usb 2-1: USB disconnect, device number 65 [ 433.685439][ T5969] udevd[5969]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 433.815373][T11405] netlink: 'syz.2.1426': attribute type 6 has an invalid length. [ 433.823547][T11405] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1426'. [ 434.006286][ T43] usb 4-1: USB disconnect, device number 76 [ 434.026547][T11410] loop2: detected capacity change from 0 to 7 [ 434.040561][T11410] Dev loop2: unable to read RDB block 7 [ 434.066792][T11410] loop2: unable to read partition table [ 434.072670][T11410] loop2: partition table beyond EOD, truncated [ 434.128677][T11410] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 434.152493][T11414] netlink: 'syz.0.1429': attribute type 1 has an invalid length. [ 434.273611][ T120] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 434.447517][ T120] usb 2-1: Using ep0 maxpacket: 8 [ 434.456850][ T120] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 434.466901][ T120] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.476054][ T120] usb 2-1: Product: syz [ 434.480237][ T120] usb 2-1: Manufacturer: syz [ 434.485249][ T120] usb 2-1: SerialNumber: syz [ 434.492641][ T120] usb 2-1: config 0 descriptor?? [ 434.513263][ T43] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 434.524964][ T120] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 434.583613][ T10] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 434.673563][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 434.689927][ T43] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 434.705007][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.716907][ T43] usb 4-1: Product: syz [ 434.721544][ T43] usb 4-1: Manufacturer: syz [ 434.751567][ T43] usb 4-1: SerialNumber: syz [ 434.826728][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 434.878329][ T10] usb 1-1: config 0 has an invalid interface number: 46 but max is 0 [ 434.878380][ T43] usb 4-1: config 0 descriptor?? [ 434.886822][ T10] usb 1-1: config 0 has no interface number 0 [ 434.897748][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 435.067373][ T120] gspca_sonixj: reg_w1 err -110 [ 435.157768][ T120] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 435.531468][ T10] usb 1-1: config 0 interface 46 has no altsetting 0 [ 435.574441][ T43] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 435.586772][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 435.595736][ T10] usb 1-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=f3.33 [ 435.608209][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.616269][ T43] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 435.616325][ T43] usb 4-1: media controller created [ 435.676879][T11433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.689435][T11433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.694104][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 435.872399][ T10] usb 1-1: Product: syz [ 435.878547][ T10] usb 1-1: Manufacturer: syz [ 436.009995][ T10] usb 1-1: SerialNumber: syz [ 436.034309][ T10] usb 1-1: config 0 descriptor?? [ 436.075298][ T43] zl10353_read_register: readreg error (reg=127, ret==0) [ 436.082534][ T43] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 436.092654][ T43] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 436.278497][ T10] f81534a_ctrl 1-1:0.46: failed to set register 0x116: -5 [ 436.285794][ T10] f81534a_ctrl 1-1:0.46: failed to enable ports: -5 [ 436.292497][ T10] f81534a_ctrl 1-1:0.46: probe with driver f81534a_ctrl failed with error -5 [ 436.348437][ T10] usb 1-1: USB disconnect, device number 85 [ 436.875763][T11448] loop2: detected capacity change from 0 to 7 [ 436.883910][T11448] loop2: [ 436.886987][T11448] loop2: partition table partially beyond EOD, truncated [ 437.086989][ T43] usb 2-1: USB disconnect, device number 66 [ 437.203487][ T10] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 437.362463][ T43] usb 4-1: USB disconnect, device number 77 [ 437.375216][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 437.387589][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.410890][ T10] usb 1-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 437.426387][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.452941][ T43] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 437.454263][ T10] usb 1-1: Product: syz [ 437.472034][ T10] usb 1-1: Manufacturer: syz [ 437.478080][ T10] usb 1-1: SerialNumber: syz [ 437.502369][ T10] usb 1-1: config 0 descriptor?? [ 437.517287][ T10] cdc_phonet 1-1:0.0: skipping garbage [ 437.528038][ T10] cdc_phonet 1-1:0.0: invalid descriptor buffer length [ 437.561658][ T10] cdc_phonet 1-1:0.0: probe with driver cdc_phonet failed with error -22 [ 437.759164][ T9] usb 1-1: USB disconnect, device number 86 [ 437.976117][T11465] loop2: detected capacity change from 0 to 7 [ 438.022518][T11465] Dev loop2: unable to read RDB block 7 [ 438.042928][T11465] loop2: unable to read partition table [ 438.078742][T11465] loop2: partition table beyond EOD, truncated [ 438.089617][T11465] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 438.133758][ T10] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 438.391266][ T10] usb 4-1: config 0 has no interfaces? [ 438.402353][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 438.420091][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.464124][ T10] usb 4-1: config 0 descriptor?? [ 438.623767][ T120] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 438.695540][ T10] usb 4-1: USB disconnect, device number 78 [ 438.787889][T11461] delete_channel: no stack [ 438.805074][ T120] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 438.805092][ T120] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 438.806028][ T120] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 438.806045][ T120] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 438.806056][ T120] usb 3-1: SerialNumber: syz [ 439.015910][ T120] usb 3-1: 0:2 : does not exist [ 439.048272][ T120] usb 3-1: USB disconnect, device number 91 [ 439.111090][ T5969] udevd[5969]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 439.192126][T11486] loop2: detected capacity change from 0 to 7 [ 439.195054][ T5969] loop2: [ 439.195076][ T5969] loop2: partition table partially beyond EOD, truncated [ 439.204810][T11486] loop2: [ 439.204840][T11486] loop2: partition table partially beyond EOD, truncated [ 439.276343][T11487] ptrace attach of "./syz-executor exec"[5846] was attempted by "./syz-executor exec"[11487] [ 439.278478][T11487] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1444'. [ 439.361927][T11490] Cannot find del_set index 4 as target [ 440.046696][ T10] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 440.049104][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.049156][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.195686][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.206392][ T10] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 440.282058][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.366266][ T10] usb 4-1: config 0 descriptor?? [ 440.416351][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 440.543431][ T43] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 440.779256][ T43] usb 3-1: config 0 has no interfaces? [ 440.815959][ T43] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 440.826839][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 440.836291][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 440.868298][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 440.881067][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.892371][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 440.902575][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 440.914741][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 440.962527][ T43] usb 3-1: Product: syz [ 440.984901][ T43] usb 3-1: Manufacturer: syz [ 440.989540][ T43] usb 3-1: SerialNumber: syz [ 441.026600][ T43] usb 3-1: config 0 descriptor?? [ 441.123755][ T10] pwc: recv_control_msg error -71 req 02 val 2100 [ 441.150906][ T10] pwc: recv_control_msg error -71 req 04 val 1500 [ 441.170272][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 441.184090][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 441.195431][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 441.212678][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 441.220733][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 441.230470][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 441.269443][T11505] PKCS8: Unsupported PKCS#8 version [ 441.293994][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 441.323663][ T10] pwc: Registered as video103. [ 441.354287][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input25 [ 441.393459][ T10] usb 4-1: USB disconnect, device number 79 [ 441.538677][T11505] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 441.992077][ T10] IPVS: starting estimator thread 0... [ 441.998016][ T9] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 442.204511][T11529] IPVS: using max 51 ests per chain, 122400 per kthread [ 442.215878][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 442.227596][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 442.241356][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 442.259327][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 442.286994][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 442.317540][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 442.330784][ T9] usb 2-1: Manufacturer: syz [ 442.370047][ T9] usb 2-1: config 0 descriptor?? [ 442.397564][ T43] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 442.688844][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 442.712456][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.727005][ T43] usb 4-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 442.763443][ T9] rc_core: IR keymap rc-hauppauge not found [ 442.770644][ T9] Registered IR keymap rc-empty [ 442.786279][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.810345][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 442.844714][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 442.862322][ T43] usb 4-1: config 0 descriptor?? [ 442.898486][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 443.123868][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input26 [ 443.178139][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 443.412233][ T10] usb 3-1: USB disconnect, device number 92 [ 443.418310][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 443.483365][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 443.523478][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 443.564113][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 443.592059][ T64] IPVS: stop unused estimator thread 0... [ 443.601715][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 443.643481][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 443.843293][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 443.873746][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 443.907534][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 443.946146][ T9] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 443.961615][ T9] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 443.985051][ T9] usb 2-1: USB disconnect, device number 67 [ 444.286991][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 444.287007][ T30] audit: type=1326 audit(1751056849.867:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11555 comm="syz.1.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6078e929 code=0x7ffc0000 [ 444.315621][ C1] vkms_vblank_simulate: vblank timer overrun [ 444.350335][ T5917] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 444.440740][T11561] tipc: Cannot configure node identity twice [ 444.648078][ T30] audit: type=1326 audit(1751056849.867:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11555 comm="syz.1.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fee6078e929 code=0x7ffc0000 [ 444.727766][ T30] audit: type=1326 audit(1751056849.867:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11555 comm="syz.1.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6078e929 code=0x7ffc0000 [ 444.764991][ T5917] usb 3-1: Using ep0 maxpacket: 32 [ 444.779997][ T5917] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.918237][ T5917] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 445.063593][ T5917] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 445.098865][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.112060][ T30] audit: type=1326 audit(1751056849.867:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11555 comm="syz.1.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fee6078e929 code=0x7ffc0000 [ 445.142879][ T43] usbhid 4-1:0.0: can't add hid device: -71 [ 445.149196][ T5917] usb 3-1: Product: syz [ 445.157052][ T43] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 445.167652][ T5917] usb 3-1: Manufacturer: syz [ 445.182647][ T5917] usb 3-1: SerialNumber: syz [ 445.194339][ T43] usb 4-1: USB disconnect, device number 80 [ 445.206523][ T30] audit: type=1326 audit(1751056849.867:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11555 comm="syz.1.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6078e929 code=0x7ffc0000 [ 445.228865][ C1] vkms_vblank_simulate: vblank timer overrun [ 445.261728][ T30] audit: type=1326 audit(1751056849.867:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11555 comm="syz.1.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7fee6078e929 code=0x7ffc0000 [ 445.605440][ T30] audit: type=1326 audit(1751056849.867:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11555 comm="syz.1.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6078e929 code=0x7ffc0000 [ 445.627795][ C1] vkms_vblank_simulate: vblank timer overrun [ 445.652756][T11554] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 445.671788][ T30] audit: type=1326 audit(1751056849.867:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11555 comm="syz.1.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fee6078e929 code=0x7ffc0000 [ 445.695096][ C1] vkms_vblank_simulate: vblank timer overrun [ 445.717523][ T30] audit: type=1326 audit(1751056849.867:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11555 comm="syz.1.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6078e929 code=0x7ffc0000 [ 445.772927][ T30] audit: type=1326 audit(1751056849.867:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11555 comm="syz.1.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fee6078e929 code=0x7ffc0000 [ 445.795287][ C1] vkms_vblank_simulate: vblank timer overrun [ 446.274890][T11554] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 446.486107][T11554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.497369][T11554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.578700][ T5917] cdc_ncm 3-1:1.0: failed to get mac address [ 446.776486][ T5917] cdc_ncm 3-1:1.0: bind() failure [ 446.786188][ T5917] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 446.794940][ T5917] cdc_ncm 3-1:1.1: bind() failure [ 446.986173][ T120] usb 3-1: USB disconnect, device number 93 [ 447.139691][T11591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.155375][T11592] input: syz1 as /devices/virtual/input/input27 [ 447.183828][T11591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.307407][ T43] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 447.483191][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 447.515093][ T43] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 447.526999][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 447.555954][ T43] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 447.573455][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.581560][ T43] usb 1-1: Product: syz [ 447.586418][ T43] usb 1-1: Manufacturer: syz [ 447.591110][ T43] usb 1-1: SerialNumber: syz [ 447.644332][ T43] usb 1-1: config 0 descriptor?? [ 447.677410][ T43] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 447.686786][ T43] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 447.892018][T11602] IPv6: Can't replace route, no match found [ 448.360451][ T43] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 448.367580][ T43] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 449.153457][ T43] em28xx 1-1:0.0: AC97 command still being executed: not handled properly! [ 449.162148][ T43] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 449.199903][T11620] tipc: Cannot configure node identity twice [ 449.398888][ T43] em28xx 1-1:0.0: AC97 command still being executed: not handled properly! [ 449.442136][ T43] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 449.674216][T11587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.690290][T11587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.740772][T11587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.783805][T11587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.821261][T11587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.877130][T11587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.916429][T11587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.936372][T11587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.949552][ T43] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 449.956440][ T43] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 449.976847][ T43] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 449.984018][ T43] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 450.042257][ T43] usb 1-1: USB disconnect, device number 87 [ 450.829815][T11626] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 450.893355][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 451.003637][ T120] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 451.033038][ T43] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 451.223524][ T120] usb 2-1: device descriptor read/64, error -71 [ 451.249157][ T43] usb 3-1: config 0 has no interfaces? [ 451.261614][ T43] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 451.271784][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.332301][ T43] usb 3-1: Product: syz [ 451.343419][ T43] usb 3-1: Manufacturer: syz [ 451.352611][ T43] usb 3-1: SerialNumber: syz [ 451.373410][ T43] usb 3-1: config 0 descriptor?? [ 451.373673][T11647] IPv6: Can't replace route, no match found [ 451.473261][ T120] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 451.606708][T11652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1488'. [ 451.691733][ T120] usb 2-1: device descriptor read/64, error -71 [ 451.788124][T11662] netlink: 'syz.0.1488': attribute type 10 has an invalid length. [ 451.815344][ T120] usb usb2-port1: attempt power cycle [ 451.837762][T11664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.850137][T11664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.163201][ T120] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 452.190753][T11652] team0 (unregistering): Port device team_slave_0 removed [ 452.198750][ T120] usb 2-1: device descriptor read/8, error -71 [ 452.220009][T11652] team0 (unregistering): Port device team_slave_1 removed [ 452.287578][T11662] bond0: (slave wlan1): Opening slave failed [ 452.443219][ T120] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 452.476094][ T120] usb 2-1: device descriptor read/8, error -71 [ 452.586397][T11670] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1491'. [ 452.593561][ T120] usb usb2-port1: unable to enumerate USB device [ 453.885905][ T120] usb 3-1: USB disconnect, device number 94 [ 453.986848][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888057b62000: rx timeout, send abort [ 453.997849][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888057b62000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 454.075053][T11687] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 454.256335][T11689] loop4: detected capacity change from 0 to 524255232 [ 454.343206][ T120] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 454.517222][ T120] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 454.525789][ T120] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 454.571103][ T120] usb 3-1: config 220 has no interface number 2 [ 454.579766][ T120] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 454.726100][ T120] usb 3-1: config 220 interface 0 has no altsetting 0 [ 454.742050][T11701] binder: 11700:11701 ioctl c00c6211 ffffffffffffffff returned -14 [ 454.752807][ T120] usb 3-1: config 220 interface 76 has no altsetting 0 [ 454.772106][ T120] usb 3-1: config 220 interface 1 has no altsetting 0 [ 454.784753][ T120] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 454.794119][ T120] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.845923][ T120] usb 3-1: Product: syz [ 454.862585][ T120] usb 3-1: Manufacturer: syz [ 454.877268][ T120] usb 3-1: SerialNumber: syz [ 454.913248][ T5948] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 455.099941][T11687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.113356][ T5948] usb 1-1: Using ep0 maxpacket: 8 [ 455.118567][T11687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.131451][ T5948] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 455.143446][ T5948] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.151596][ T5948] usb 1-1: Product: syz [ 455.214346][ T5948] usb 1-1: Manufacturer: syz [ 455.222356][ T5948] usb 1-1: SerialNumber: syz [ 455.467852][ T120] usb 3-1: selecting invalid altsetting 0 [ 455.491498][ T120] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 455.513243][ T120] usb 3-1: No valid video chain found. [ 455.532329][ T120] usb 3-1: selecting invalid altsetting 0 [ 455.543089][ T120] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 455.565222][ T5948] usb 1-1: config 0 descriptor?? [ 455.566840][ T120] usb 3-1: USB disconnect, device number 95 [ 455.604243][ T5948] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 456.266641][T11724] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1504'. [ 456.294427][T11724] gretap0: entered promiscuous mode [ 456.549177][T11728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1505'. [ 457.622204][ T24] usb 1-1: USB disconnect, device number 88 [ 458.384901][T11778] loop6: detected capacity change from 0 to 7 [ 458.407374][T11778] Dev loop6: unable to read RDB block 7 [ 458.419925][T11778] loop6: unable to read partition table [ 458.427650][T11778] loop6: partition table beyond EOD, truncated [ 458.434511][T11778] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 458.653226][ T24] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 458.836272][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 458.847703][ T24] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 458.865918][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.960241][ T24] usb 4-1: config 0 descriptor?? [ 458.987396][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 459.120059][T11790] loop6: detected capacity change from 0 to 7 [ 459.127450][T11790] Dev loop6: unable to read RDB block 7 [ 459.133218][T11790] loop6: unable to read partition table [ 459.139839][T11790] loop6: partition table beyond EOD, truncated [ 459.146600][T11790] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 459.326853][T11796] tipc: Cannot configure node identity twice [ 459.403345][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 459.463276][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 459.483993][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 459.570256][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 459.641483][T11801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1524'. [ 459.654422][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 459.664223][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 459.674128][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 459.681650][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 459.690653][ T24] pwc: recv_control_msg error -32 req 04 val 1500 [ 459.697595][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 459.705585][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 459.713322][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 459.722356][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 459.733398][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 459.741865][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 459.768250][T11805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1524'. [ 459.783398][T11805] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1524'. [ 460.152136][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 460.164154][ T24] pwc: Registered as video103. [ 460.249283][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input28 [ 460.323630][ T24] usb 4-1: USB disconnect, device number 81 [ 460.828546][T11815] xt_TCPMSS: Only works on TCP SYN packets [ 460.833280][T11813] tipc: Enabling of bearer rejected, failed to enable media [ 460.953877][ T9] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 461.116895][ T9] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 461.149059][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.197467][ T9] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 461.220098][ T9] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 461.230418][ T9] usb 2-1: Manufacturer: syz [ 461.241937][ T9] usb 2-1: config 0 descriptor?? [ 461.344113][ T9] rc_core: IR keymap rc-hauppauge not found [ 461.350044][ T9] Registered IR keymap rc-empty [ 461.359359][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 461.403230][ T120] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 461.703699][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input29 [ 461.767861][ T9] usb 2-1: USB disconnect, device number 72 [ 461.774070][ T120] usb 1-1: Using ep0 maxpacket: 8 [ 461.785410][ T120] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 461.794649][ T120] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.802705][ T120] usb 1-1: Product: syz [ 461.839477][ T120] usb 1-1: Manufacturer: syz [ 461.870700][ T120] usb 1-1: SerialNumber: syz [ 461.911036][ T120] usb 1-1: config 0 descriptor?? [ 461.962175][T11836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.983231][T11836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.004759][T11836] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1532'. [ 462.018200][T11836] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1532'. [ 462.029777][T11836] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1532'. [ 462.044626][T11836] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1532'. [ 462.132263][T11838] loop6: detected capacity change from 0 to 7 [ 462.159887][ T120] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 462.170705][T11838] Dev loop6: unable to read RDB block 7 [ 462.177320][T11838] loop6: unable to read partition table [ 462.185515][T11838] loop6: partition table beyond EOD, truncated [ 462.192308][T11838] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 462.365903][T11840] tipc: Cannot configure node identity twice [ 462.582106][T11845] netlink: 'syz.1.1535': attribute type 2 has an invalid length. [ 462.766326][ T9] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 462.903394][ T9] usb 3-1: device descriptor read/64, error -71 [ 463.164099][ T9] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 463.313285][ T9] usb 3-1: device descriptor read/64, error -71 [ 463.428237][ T9] usb usb3-port1: attempt power cycle [ 463.793533][ T9] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 463.808316][ T120] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 463.829478][ T120] usb 1-1: USB disconnect, device number 89 [ 463.842008][ T9] usb 3-1: device descriptor read/8, error -71 [ 464.093244][ T9] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 464.135969][ T9] usb 3-1: device descriptor read/8, error -71 [ 464.253886][ T9] usb usb3-port1: unable to enumerate USB device [ 465.178862][T11872] netlink: 'syz.3.1543': attribute type 3 has an invalid length. [ 465.521739][T11878] CUSE: DEVNAME unspecified [ 465.722933][T11884] tipc: Cannot configure node identity twice [ 465.873235][ T9] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 466.123416][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 466.132624][ T9] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 466.141922][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 466.153503][ T9] usb 2-1: config 0 has no interface number 0 [ 466.159871][ T9] usb 2-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 466.180733][ T9] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 466.193239][ T9] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 466.207617][ T9] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 466.221313][ T9] usb 2-1: config 0 interface 52 has no altsetting 0 [ 466.228496][ T9] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 466.238156][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.265033][ T9] usb 2-1: config 0 descriptor?? [ 466.333957][ T120] usb 3-1: new full-speed USB device number 100 using dummy_hcd [ 466.486212][ T9] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input30 [ 466.514375][ T120] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 466.522665][ T120] usb 3-1: config 0 has no interface number 0 [ 466.529460][ T120] usb 3-1: config 0 interface 29 has no altsetting 0 [ 466.640430][ T120] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 466.651587][ T120] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.669399][ T120] usb 3-1: Product: syz [ 466.681683][ T120] usb 3-1: Manufacturer: syz [ 466.689147][ T9] usb 2-1: USB disconnect, device number 73 [ 466.689236][ C1] synaptics_usb 2-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 466.713021][ T120] usb 3-1: SerialNumber: syz [ 466.736009][ T120] usb 3-1: config 0 descriptor?? [ 467.073223][ T120] peak_usb 3-1:0.29: PEAK-System PCAN-USB X6 v213 fw v0.0.0 (2 channels) [ 467.365320][T11902] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 3, id = 0 [ 467.816479][T11910] bond0: entered promiscuous mode [ 467.853685][T11910] bond_slave_0: entered promiscuous mode [ 467.859686][T11910] bond_slave_1: entered promiscuous mode [ 467.869770][T11910] bond0: left promiscuous mode [ 467.874916][T11910] bond_slave_0: left promiscuous mode [ 467.880675][T11910] bond_slave_1: left promiscuous mode [ 469.392510][T11944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.404426][ T120] peak_usb 3-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 469.450884][ T120] peak_usb 3-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 469.522646][T11944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.850355][T11954] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1563'. [ 469.862956][ T120] peak_usb 3-1:0.29: probe with driver peak_usb failed with error -71 [ 469.881971][T11954] unsupported nlmsg_type 40 [ 469.895832][ T120] usb 3-1: USB disconnect, device number 100 [ 470.003292][ T24] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 470.173402][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 470.185315][ T24] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 470.204407][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.218141][ T24] usb 4-1: Product: syz [ 470.224607][ T24] usb 4-1: Manufacturer: syz [ 470.237459][ T24] usb 4-1: SerialNumber: syz [ 470.246479][T11938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1560'. [ 470.296405][ T24] usb 4-1: config 0 descriptor?? [ 471.526428][T11989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.536075][T11989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.100098][T11993] loop2: detected capacity change from 0 to 7 [ 472.109663][T11993] loop2: [ 472.113039][T11993] loop2: partition table partially beyond EOD, truncated [ 472.183527][ T43] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 472.353265][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 472.360941][ T43] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 472.373298][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.381692][T11996] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1575'. [ 472.399115][ T43] usb 3-1: config 0 descriptor?? [ 472.419816][ T5917] af_packet: tpacket_rcv: packet too big, clamped from 94 to 4294967286. macoff=82 [ 472.466159][ T43] gspca_main: sunplus-2.14.0 probing 041e:400b [ 472.521743][T11998] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 472.572501][T11998] bond3: (slave vti0): Error -95 calling set_mac_address [ 472.845178][ T24] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 472.853370][ T24] gspca_sunplus: reg_w_riv err -71 [ 472.853439][ T24] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 472.857721][ T24] usb 4-1: USB disconnect, device number 82 [ 473.480398][T11991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.495794][T11991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.503671][ T24] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 473.543369][T11991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.579859][T11991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.663291][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 473.672777][T12022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.694662][T12022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.702515][T12015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.715295][T12015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.783489][ T43] gspca_sunplus: reg_w_riv err -110 [ 473.788976][ T43] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 474.244209][ T120] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 474.300054][T12032] loop2: detected capacity change from 0 to 7 [ 474.321024][ T5969] loop2: [ 474.324217][ T5969] loop2: partition table partially beyond EOD, truncated [ 474.342127][T12032] loop2: [ 474.345258][T12032] loop2: partition table partially beyond EOD, truncated [ 474.553272][ T120] usb 1-1: Using ep0 maxpacket: 16 [ 474.569791][ T120] usb 1-1: config 0 has no interfaces? [ 474.591513][ T120] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 474.650421][ T120] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 474.677212][ T120] usb 1-1: Manufacturer: syz [ 474.745752][T12037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.768058][T12037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.778532][ T120] usb 1-1: config 0 descriptor?? [ 474.888205][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 474.888225][ T30] audit: type=1326 audit(1751056880.487:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12035 comm="syz.4.1586" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9529d8e929 code=0x0 [ 474.940540][T12038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.949395][T12038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.010125][T12027] fuse: Bad value for 'user_id' [ 475.026159][T12027] fuse: Bad value for 'user_id' [ 475.039214][ T43] usb 3-1: USB disconnect, device number 101 [ 475.172484][T12044] Cannot find add_set index 1 as target [ 475.250752][ T120] usb 1-1: USB disconnect, device number 90 [ 475.834554][T12048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1588'. [ 475.843611][T12048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1588'. [ 475.852586][T12048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1588'. [ 475.861925][T12048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1588'. [ 475.871087][T12048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1588'. [ 475.880241][T12048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1588'. [ 475.898082][T12048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1588'. [ 475.907155][T12048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1588'. [ 475.915402][T12049] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1588'. [ 475.916764][T12048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1588'. [ 477.472197][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 477.480877][ T24] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 477.539760][ T24] usb 4-1: can't read configurations, error -71 [ 478.072148][T12065] vxcan3: entered promiscuous mode [ 478.101518][T12065] vxcan3: entered allmulticast mode [ 478.388224][T12048] syz.2.1588 (12048): drop_caches: 2 [ 478.535398][T12076] loop2: detected capacity change from 0 to 7 [ 478.554864][ T6009] Dev loop2: unable to read RDB block 7 [ 478.560486][ T6009] loop2: unable to read partition table [ 478.587845][ T6009] loop2: partition table beyond EOD, truncated [ 478.642221][T12076] Dev loop2: unable to read RDB block 7 [ 478.648846][T12076] loop2: unable to read partition table [ 478.657184][T12076] loop2: partition table beyond EOD, truncated [ 478.664865][T12076] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 478.735616][T12081] loop6: detected capacity change from 0 to 7 [ 478.801479][T12081] Dev loop6: unable to read RDB block 7 [ 478.817822][T12081] loop6: unable to read partition table [ 478.828091][T12081] loop6: partition table beyond EOD, truncated [ 478.864269][T12081] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 478.923818][T12084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.932602][T12084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.004218][T12084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.012985][T12084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.124576][ T10] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 479.292539][T12099] ======================================================= [ 479.292539][T12099] WARNING: The mand mount option has been deprecated and [ 479.292539][T12099] and is ignored by this kernel. Remove the mand [ 479.292539][T12099] option from the mount to silence this warning. [ 479.292539][T12099] ======================================================= [ 479.292539][T12098] ======================================================= [ 479.292539][T12098] WARNING: The mand mount option has been deprecated and [ 479.292539][T12098] and is ignored by this kernel. Remove the mand [ 479.292539][T12098] option from the mount to silence this warning. [ 479.292539][T12098] ======================================================= [ 479.292715][T12099] fuse: Unknown parameter 'smackfsroo' [ 479.395317][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 479.411379][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 479.425267][ T10] usb 1-1: New USB device found, idVendor=0c70, idProduct=f012, bcdDevice= 0.00 [ 479.434627][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.445162][T12098] fuse: Unknown parameter 'smackfsroo' [ 479.634252][ T10] usb 1-1: config 0 descriptor?? [ 479.681882][T12087] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 479.900397][T12110] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 479.998940][T12110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.030773][T12110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.180149][ T10] aquacomputer_d5next 0003:0C70:F012.0015: hidraw0: USB HID v1.05 Device [HID 0c70:f012] on usb-dummy_hcd.0-1/input0 [ 480.229104][ T120] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 480.336532][T12087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.354269][T12087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.428985][ T120] usb 3-1: config 0 interface 0 altsetting 10 endpoint 0x6 has invalid wMaxPacketSize 0 [ 480.455492][ T120] usb 3-1: config 0 interface 0 altsetting 10 endpoint 0xB has invalid wMaxPacketSize 0 [ 480.481732][ T120] usb 3-1: config 0 interface 0 altsetting 10 bulk endpoint 0xB has invalid maxpacket 0 [ 480.503558][ T120] usb 3-1: config 0 interface 0 has no altsetting 0 [ 480.515008][ T120] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=4c.b3 [ 480.535842][ T120] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.544326][ T120] usb 3-1: Product: syz [ 480.548598][ T120] usb 3-1: Manufacturer: syz [ 480.553634][ T120] usb 3-1: SerialNumber: syz [ 480.560214][ T120] usb 3-1: config 0 descriptor?? [ 480.570043][ T120] ir_toy 3-1:0.0: required endpoints not found [ 480.659241][T12121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.705990][T12121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.748156][T12120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.768152][T12120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.029727][T12128] loop2: detected capacity change from 0 to 7 [ 481.041095][T12128] Dev loop2: unable to read RDB block 7 [ 481.048052][T12128] loop2: unable to read partition table [ 481.054703][T12128] loop2: partition table beyond EOD, truncated [ 481.061700][T12128] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 481.350443][T12133] tipc: Cannot configure node identity twice [ 481.424215][T12135] loop6: detected capacity change from 0 to 7 [ 481.438969][ T5969] Dev loop6: unable to read RDB block 7 [ 481.445838][ T5969] loop6: unable to read partition table [ 481.451890][ T5969] loop6: partition table beyond EOD, truncated [ 481.460929][T12135] Dev loop6: unable to read RDB block 7 [ 481.469786][T12135] loop6: unable to read partition table [ 481.477341][T12135] loop6: partition table beyond EOD, truncated [ 481.483836][ T5901] usb 1-1: reset full-speed USB device number 91 using dummy_hcd [ 481.499388][T12135] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 481.968202][T12142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.081335][T12142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.097166][T12142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.108169][T12142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.543434][ T5901] usb 1-1: device descriptor read/64, error -71 [ 482.611164][ T9] usb 3-1: USB disconnect, device number 102 [ 482.793724][ T5901] usb 1-1: reset full-speed USB device number 91 using dummy_hcd [ 482.840485][T12157] loop2: detected capacity change from 0 to 7 [ 482.850935][T12157] loop2: [ 482.856594][T12157] loop2: partition table partially beyond EOD, truncated [ 482.914225][T12159] netlink: 'syz.4.1623': attribute type 11 has an invalid length. [ 482.933246][ T5901] usb 1-1: device descriptor read/64, error -71 [ 482.974405][T12161] loop6: detected capacity change from 0 to 7 [ 482.983007][ T5969] Dev loop6: unable to read RDB block 7 [ 482.988891][ T5969] loop6: unable to read partition table [ 482.999046][ T5969] loop6: partition table beyond EOD, truncated [ 483.027749][T12161] Dev loop6: unable to read RDB block 7 [ 483.050246][T12161] loop6: unable to read partition table [ 483.067371][T12161] loop6: partition table beyond EOD, truncated [ 483.116932][T12161] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 483.280642][ T5901] usb 1-1: reset full-speed USB device number 91 using dummy_hcd [ 483.335222][ T5901] usb 1-1: device descriptor read/8, error -71 [ 483.793633][ T5901] usb 1-1: reset full-speed USB device number 91 using dummy_hcd [ 483.844851][ T5901] usb 1-1: device descriptor read/8, error -71 [ 484.039446][ T10] usb 1-1: USB disconnect, device number 91 [ 484.173311][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 484.301714][ T10] usb 1-1: new full-speed USB device number 92 using dummy_hcd [ 484.403355][ T5901] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 484.453240][ T10] usb 1-1: device descriptor read/64, error -71 [ 484.563652][ T24] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 484.565788][ T5901] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 484.592892][ T5901] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.609638][ T5901] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 484.623684][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.641503][ T5901] hub 3-1:4.0: USB hub found [ 484.713752][ T10] usb 1-1: new full-speed USB device number 93 using dummy_hcd [ 484.733424][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 484.746580][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 484.764559][ T24] usb 4-1: can't read configurations, error -61 [ 484.833243][ T5917] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 484.843983][ T10] usb 1-1: device descriptor read/64, error -71 [ 484.858076][T12178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.876984][T12178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.887473][ T5901] hub 3-1:4.0: 13 ports detected [ 484.892488][ T5901] usb 3-1: selecting invalid altsetting 1 [ 484.898726][ T5901] hub 3-1:4.0: Using single TT (err -22) [ 484.905520][ T5901] hub 3-1:4.0: insufficient power available to use all downstream ports [ 484.923550][ T24] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 484.954175][ T10] usb usb1-port1: attempt power cycle [ 484.960587][T12203] loop6: detected capacity change from 0 to 7 [ 484.969413][T12203] Dev loop6: unable to read RDB block 7 [ 484.975762][T12203] loop6: unable to read partition table [ 484.981559][T12203] loop6: partition table beyond EOD, truncated [ 484.983246][ T5917] usb 2-1: Using ep0 maxpacket: 16 [ 484.988851][T12203] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 485.010081][ T5917] usb 2-1: config 0 has no interfaces? [ 485.017504][ T5917] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 485.033480][ T5917] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 485.041718][ T5917] usb 2-1: Manufacturer: syz [ 485.056392][ T5917] usb 2-1: config 0 descriptor?? [ 485.089130][ T5901] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 485.093461][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 485.110893][ T5901] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 485.125004][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 485.146740][ T24] usb 4-1: can't read configurations, error -61 [ 485.160384][ T24] usb usb4-port1: attempt power cycle [ 485.174749][ T5901] usb 3-1: USB disconnect, device number 103 [ 485.217028][T12206] __nla_validate_parse: 39 callbacks suppressed [ 485.218713][T12206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1637'. [ 485.245832][T12206] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.255060][T12206] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.263860][T12206] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.272560][T12206] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.283700][T12206] vxlan0: entered promiscuous mode [ 485.287923][T12192] fuse: Bad value for 'user_id' [ 485.299642][T12192] fuse: Bad value for 'user_id' [ 485.503296][ T24] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 485.523761][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 485.618604][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 485.627733][ T24] usb 4-1: can't read configurations, error -61 [ 486.033297][ T24] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 486.064288][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 486.117090][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 486.125125][ T24] usb 4-1: can't read configurations, error -61 [ 486.136513][ T24] usb usb4-port1: unable to enumerate USB device [ 487.699275][ T9] usb 2-1: USB disconnect, device number 74 [ 487.885319][T12248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1648'. [ 488.488006][T12255] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1648'. [ 488.906660][T12262] netlink: 'syz.2.1649': attribute type 9 has an invalid length. [ 488.914799][T12262] netlink: 212160 bytes leftover after parsing attributes in process `syz.2.1649'. [ 489.121045][T12266] IPv6: Can't replace route, no match found [ 489.203208][ T9] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 489.380156][ T9] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 489.410590][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 489.423374][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.487139][ T9] usb 1-1: Found UVC 0.00 device (046d:08c1) [ 489.503579][ T9] usb 1-1: No valid video chain found. [ 489.504756][T12268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.595450][T12268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.677697][ T10] usb 1-1: USB disconnect, device number 95 [ 490.333219][ T5917] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 490.373480][ T10] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 490.453339][ T24] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 490.483277][ T5917] usb 2-1: Using ep0 maxpacket: 8 [ 490.492657][ T5917] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 490.503573][ T5917] usb 2-1: can't read configurations, error -61 [ 490.533209][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 490.550132][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 490.575072][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 490.596998][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 490.607456][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.613287][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 490.617029][ T10] usb 3-1: Product: syz [ 490.623046][ T24] usb 1-1: config 0 has no interfaces? [ 490.626156][ T10] usb 3-1: Manufacturer: syz [ 490.635688][ T10] usb 3-1: SerialNumber: syz [ 490.635819][ T5917] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 490.643049][ T10] usb 3-1: config 0 descriptor?? [ 490.649902][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 490.664256][ T24] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 490.672375][ T24] usb 1-1: Manufacturer: syz [ 490.721521][ T10] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 490.737242][ T24] usb 1-1: config 0 descriptor?? [ 490.752751][ T10] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 490.813502][ T5917] usb 2-1: Using ep0 maxpacket: 8 [ 490.827118][ T5917] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 490.837433][ T5917] usb 2-1: can't read configurations, error -61 [ 490.847674][ T5917] usb usb2-port1: attempt power cycle [ 490.953024][T12287] fuse: Bad value for 'fd' [ 491.029871][ T5949] usb 1-1: USB disconnect, device number 96 [ 491.213359][ T5917] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 491.234040][ T5917] usb 2-1: Using ep0 maxpacket: 8 [ 491.241058][ T5917] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 491.250528][ T5917] usb 2-1: can't read configurations, error -61 [ 491.331807][ T10] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 491.345560][ T10] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 491.353433][ T10] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 491.360543][ T10] em28xx 3-1:0.0: No AC97 audio processor [ 491.380783][ T10] usb 3-1: USB disconnect, device number 104 [ 491.396390][ T10] em28xx 3-1:0.0: Disconnecting em28xx [ 491.409661][ T5917] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 491.419319][ T10] em28xx 3-1:0.0: Freeing device [ 491.444460][ T5917] usb 2-1: Using ep0 maxpacket: 8 [ 491.463673][ T5917] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 491.471482][ T5917] usb 2-1: can't read configurations, error -61 [ 491.478670][ T5917] usb usb2-port1: unable to enumerate USB device [ 491.632939][T12300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.664630][T12300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.682073][T12300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.693023][T12300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.748321][T12298] bridge_slave_0: left promiscuous mode [ 491.838691][T12298] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.847872][T12298] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.859307][T12298] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.868843][T12298] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.973657][T12322] loop6: detected capacity change from 0 to 524287999 [ 493.577627][ T5969] Buffer I/O error on dev loop6, logical block 65535999, async page read [ 494.673281][ T24] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 494.953241][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 494.959349][ T24] usb 3-1: too many configurations: 61, using maximum allowed: 8 [ 494.972853][ T24] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 494.982150][ T24] usb 3-1: can't read configurations, error -61 [ 494.993513][ T5915] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 495.059584][T12351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.071930][T12351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.146157][ T24] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 495.181623][ T5915] usb 2-1: config index 0 descriptor too short (expected 2320, got 77) [ 495.191190][ T5915] usb 2-1: config 163 has too many interfaces: 133, using maximum allowed: 32 [ 495.209206][ T5915] usb 2-1: config 163 has an invalid descriptor of length 0, skipping remainder of the config [ 495.230773][ T5915] usb 2-1: config 163 has 0 interfaces, different from the descriptor's value: 133 [ 495.248592][ T5915] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 495.258267][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.267204][ T5915] usb 2-1: Product: syz [ 495.271443][ T5915] usb 2-1: Manufacturer: syz [ 495.278005][ T5915] usb 2-1: SerialNumber: syz [ 495.473589][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 495.570656][ T24] usb 3-1: too many configurations: 61, using maximum allowed: 8 [ 495.592968][ T24] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 495.617084][ T24] usb 3-1: can't read configurations, error -61 [ 495.637956][ T24] usb usb3-port1: attempt power cycle [ 495.650712][T12355] loop2: detected capacity change from 0 to 7 [ 495.666353][T12355] Dev loop2: unable to read RDB block 7 [ 495.680324][T12355] loop2: unable to read partition table [ 495.706849][T12355] loop2: partition table beyond EOD, truncated [ 495.735262][T12355] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 495.906575][ T5915] usb 2-1: USB disconnect, device number 79 [ 496.003459][ T24] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 496.043981][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 496.049940][ T24] usb 3-1: too many configurations: 61, using maximum allowed: 8 [ 496.059849][ T24] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 496.068647][ T24] usb 3-1: can't read configurations, error -61 [ 496.234635][ T5917] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 496.243448][ T24] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 496.273954][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 496.279762][ T24] usb 3-1: too many configurations: 61, using maximum allowed: 8 [ 496.290227][ T24] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 496.298176][ T24] usb 3-1: can't read configurations, error -61 [ 496.305400][ T24] usb usb3-port1: unable to enumerate USB device [ 496.405225][ T5917] usb 4-1: config 0 has an invalid interface number: 163 but max is 0 [ 496.413640][ T5917] usb 4-1: config 0 has an invalid descriptor of length 249, skipping remainder of the config [ 496.434037][ T5917] usb 4-1: config 0 has no interface number 0 [ 496.440348][ T5917] usb 4-1: config 0 interface 163 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 496.498013][ T5917] usb 4-1: New USB device found, idVendor=0af0, idProduct=7011, bcdDevice= 0.4f [ 496.586633][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.665496][ T5917] usb 4-1: config 0 descriptor?? [ 496.879117][ T5917] usb 4-1: string descriptor 0 read error: -71 [ 496.886059][ T5917] hso 4-1:0.163: Not our interface [ 496.892718][ T5917] usbhid 4-1:0.163: couldn't find an input interrupt endpoint [ 496.965301][ T5917] usb 4-1: USB disconnect, device number 90 [ 497.516766][T12373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1678'. [ 497.873277][ T5917] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 498.157801][ T5917] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 498.170318][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.190936][ T5917] usb 3-1: Product: syz [ 498.199103][ T5917] usb 3-1: Manufacturer: syz [ 498.205763][ T5917] usb 3-1: SerialNumber: syz [ 498.224090][ T5917] usb 3-1: config 0 descriptor?? [ 498.443263][ T5917] airspy 3-1:0.0: Board ID: 00 [ 498.469914][ T5917] airspy 3-1:0.0: Firmware version: [ 498.927735][ T5917] airspy 3-1:0.0: usb_control_msg() failed -71 request 10 [ 498.937599][ T5917] airspy 3-1:0.0: Registered as swradio24 [ 498.951992][ T5917] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 498.999979][ T5917] usb 3-1: USB disconnect, device number 109 [ 499.046448][T12395] loop2: detected capacity change from 0 to 7 [ 499.065590][T12395] Dev loop2: unable to read RDB block 7 [ 499.071269][T12395] loop2: unable to read partition table [ 499.085830][T12395] loop2: partition table beyond EOD, truncated [ 499.109257][T12395] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 499.493768][T12413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.502728][T12413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.538874][T12415] FAULT_INJECTION: forcing a failure. [ 499.538874][T12415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 499.576204][T12415] CPU: 1 UID: 0 PID: 12415 Comm: syz.0.1688 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 499.576231][T12415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 499.576247][T12415] Call Trace: [ 499.576255][T12415] [ 499.576263][T12415] dump_stack_lvl+0x189/0x250 [ 499.576294][T12415] ? __pfx____ratelimit+0x10/0x10 [ 499.576319][T12415] ? __pfx_dump_stack_lvl+0x10/0x10 [ 499.576344][T12415] ? __pfx__printk+0x10/0x10 [ 499.576376][T12415] should_fail_ex+0x414/0x560 [ 499.576391][T12415] _copy_to_user+0x31/0xb0 [ 499.576402][T12415] simple_read_from_buffer+0xe1/0x170 [ 499.576416][T12415] proc_fail_nth_read+0x1df/0x250 [ 499.576429][T12415] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 499.576442][T12415] ? rw_verify_area+0x258/0x650 [ 499.576456][T12415] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 499.576468][T12415] vfs_read+0x200/0x980 [ 499.576486][T12415] ? __pfx___mutex_lock+0x10/0x10 [ 499.576501][T12415] ? __pfx_vfs_read+0x10/0x10 [ 499.576516][T12415] ? __fget_files+0x2a/0x420 [ 499.576529][T12415] ? __fget_files+0x3a0/0x420 [ 499.576539][T12415] ? __fget_files+0x2a/0x420 [ 499.576554][T12415] ksys_read+0x145/0x250 [ 499.576569][T12415] ? __pfx_ksys_read+0x10/0x10 [ 499.576582][T12415] ? rcu_is_watching+0x15/0xb0 [ 499.576601][T12415] ? do_syscall_64+0xbe/0x3b0 [ 499.576618][T12415] do_syscall_64+0xfa/0x3b0 [ 499.576631][T12415] ? lockdep_hardirqs_on+0x9c/0x150 [ 499.576644][T12415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.576654][T12415] ? clear_bhb_loop+0x60/0xb0 [ 499.576665][T12415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.576678][T12415] RIP: 0033:0x7fde0c78d33c [ 499.576689][T12415] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 499.576698][T12415] RSP: 002b:00007fde0d574030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 499.576710][T12415] RAX: ffffffffffffffda RBX: 00007fde0c9b6160 RCX: 00007fde0c78d33c [ 499.576718][T12415] RDX: 000000000000000f RSI: 00007fde0d5740a0 RDI: 0000000000000006 [ 499.576724][T12415] RBP: 00007fde0d574090 R08: 0000000000000000 R09: 0000000003000137 [ 499.576731][T12415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.576737][T12415] R13: 0000000000000000 R14: 00007fde0c9b6160 R15: 00007fde0cadfa28 [ 499.576752][T12415] [ 500.679521][T12435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.688894][T12435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.705617][T12435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.714966][T12435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.726705][T12435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.735959][T12435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.423193][ T5917] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 501.446254][T12444] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 501.457692][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.464828][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.510471][T12446] loop6: detected capacity change from 0 to 7 [ 501.552357][ T5969] Dev loop6: unable to read RDB block 7 [ 501.565580][ T5969] loop6: unable to read partition table [ 501.584335][ T5917] usb 3-1: Using ep0 maxpacket: 16 [ 501.596632][ T5917] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 501.607713][ T5917] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 501.649630][ T5917] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 501.659820][ T5969] loop6: partition table beyond EOD, truncated [ 501.660115][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.683992][T12446] Dev loop6: unable to read RDB block 7 [ 501.689717][T12446] loop6: unable to read partition table [ 501.724011][T12446] loop6: partition table beyond EOD, truncated [ 501.733471][ T5917] usb 3-1: Product: syz [ 501.744498][T12446] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 501.753739][ T5917] usb 3-1: Manufacturer: syz [ 501.753784][ T5917] usb 3-1: SerialNumber: syz [ 502.163407][ T9] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 502.415945][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 502.424569][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 502.432934][ T9] usb 4-1: config 0 has no interface number 0 [ 502.447427][ T9] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 502.457982][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.474146][ T9] usb 4-1: Product: syz [ 502.486417][ T9] usb 4-1: Manufacturer: syz [ 502.498993][ T9] usb 4-1: SerialNumber: syz [ 502.520601][ T9] usb 4-1: config 0 descriptor?? [ 502.744239][ T9] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 502.753673][ T9] usb 4-1: selecting invalid altsetting 1 [ 502.760683][ T9] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 502.776327][ T9] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 502.787749][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 502.796464][ T9] usb 4-1: media controller created [ 502.836330][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 503.073546][ T9] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 503.105134][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 503.117161][ T9] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 503.344433][ T9] usb 4-1: USB disconnect, device number 91 [ 503.809576][T12472] usb usb8: usbfs: process 12472 (syz.3.1705) did not claim interface 1 before use [ 504.019620][T12476] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1705'. [ 504.740440][ T5917] usb 3-1: 0:2 : does not exist [ 505.029722][ T5917] usb 3-1: USB disconnect, device number 110 [ 505.174789][T12501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1711'. [ 505.329391][T12503] netlink: 'syz.0.1710': attribute type 21 has an invalid length. [ 505.613427][ T5949] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 505.793250][ T5949] usb 4-1: Using ep0 maxpacket: 8 [ 505.806046][ T5949] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 505.823541][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.864239][ T5949] usb 4-1: Product: syz [ 505.868411][ T5949] usb 4-1: Manufacturer: syz [ 505.895868][ T5949] usb 4-1: SerialNumber: syz [ 505.936946][ T5949] usb 4-1: config 0 descriptor?? [ 506.157292][ T5949] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 506.650236][T12522] FAULT_INJECTION: forcing a failure. [ 506.650236][T12522] name failslab, interval 1, probability 0, space 0, times 0 [ 506.663321][T12522] CPU: 0 UID: 0 PID: 12522 Comm: syz.1.1717 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 506.663345][T12522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 506.663356][T12522] Call Trace: [ 506.663364][T12522] [ 506.663371][T12522] dump_stack_lvl+0x189/0x250 [ 506.663401][T12522] ? __pfx____ratelimit+0x10/0x10 [ 506.663427][T12522] ? __pfx_dump_stack_lvl+0x10/0x10 [ 506.663453][T12522] ? __pfx__printk+0x10/0x10 [ 506.663475][T12522] ? ref_tracker_alloc+0x318/0x460 [ 506.663500][T12522] should_fail_ex+0x414/0x560 [ 506.663526][T12522] should_failslab+0xa8/0x100 [ 506.663547][T12522] kmem_cache_alloc_noprof+0x73/0x3c0 [ 506.663571][T12522] ? skb_clone+0x212/0x3a0 [ 506.663596][T12522] skb_clone+0x212/0x3a0 [ 506.663619][T12522] __netlink_deliver_tap+0x404/0x850 [ 506.663650][T12522] ? netlink_deliver_tap+0x2e/0x1b0 [ 506.663671][T12522] netlink_deliver_tap+0x19c/0x1b0 [ 506.663692][T12522] netlink_unicast+0x72f/0x8d0 [ 506.663720][T12522] netlink_sendmsg+0x805/0xb30 [ 506.663749][T12522] ? __pfx_netlink_sendmsg+0x10/0x10 [ 506.663771][T12522] ? aa_sock_msg_perm+0x94/0x160 [ 506.663794][T12522] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 506.663816][T12522] ? __pfx_netlink_sendmsg+0x10/0x10 [ 506.663836][T12522] __sock_sendmsg+0x21c/0x270 [ 506.663862][T12522] ____sys_sendmsg+0x505/0x830 [ 506.663896][T12522] ? __pfx_____sys_sendmsg+0x10/0x10 [ 506.663926][T12522] ? import_iovec+0x74/0xa0 [ 506.663947][T12522] ___sys_sendmsg+0x21f/0x2a0 [ 506.663970][T12522] ? __pfx____sys_sendmsg+0x10/0x10 [ 506.664028][T12522] ? __fget_files+0x2a/0x420 [ 506.664046][T12522] ? __fget_files+0x3a0/0x420 [ 506.664076][T12522] __x64_sys_sendmsg+0x19b/0x260 [ 506.664100][T12522] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 506.664130][T12522] ? __pfx_ksys_write+0x10/0x10 [ 506.664144][T12522] ? rcu_is_watching+0x15/0xb0 [ 506.664174][T12522] ? do_syscall_64+0xbe/0x3b0 [ 506.664202][T12522] do_syscall_64+0xfa/0x3b0 [ 506.664225][T12522] ? lockdep_hardirqs_on+0x9c/0x150 [ 506.664246][T12522] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.664263][T12522] ? clear_bhb_loop+0x60/0xb0 [ 506.664283][T12522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.664299][T12522] RIP: 0033:0x7fee6078e929 [ 506.664317][T12522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 506.664331][T12522] RSP: 002b:00007fee5e5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 506.664350][T12522] RAX: ffffffffffffffda RBX: 00007fee609b5fa0 RCX: 00007fee6078e929 [ 506.664364][T12522] RDX: 0000000000048002 RSI: 0000200000000080 RDI: 0000000000000003 [ 506.664375][T12522] RBP: 00007fee5e5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 506.664386][T12522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.664397][T12522] R13: 0000000000000000 R14: 00007fee609b5fa0 R15: 00007fee60adfa28 [ 506.664426][T12522] [ 506.665032][T12522] IPv6: Can't replace route, no match found [ 507.003819][T12524] loop2: detected capacity change from 0 to 7 [ 507.036823][T12524] Dev loop2: unable to read RDB block 7 [ 507.083525][T12524] loop2: unable to read partition table [ 507.100341][T12524] loop2: partition table beyond EOD, truncated [ 507.108823][T12524] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 507.633462][ T10] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 508.093286][ T10] usb 1-1: device descriptor read/64, error -71 [ 508.328460][T12553] fuse: Unknown parameter '0x00000000000000040x0000000000000004' [ 508.333365][ T10] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 508.415868][T12555] input: syz1 as /devices/virtual/input/input31 [ 508.493767][ T10] usb 1-1: device descriptor read/64, error -71 [ 508.614025][ T10] usb usb1-port1: attempt power cycle [ 508.753198][ T5917] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 508.817294][ T24] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 508.903319][ T5917] usb 3-1: Using ep0 maxpacket: 16 [ 508.922319][ T5917] usb 3-1: config 1 interface 0 has no altsetting 0 [ 508.933237][ T5949] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 508.949489][ T5949] usb 4-1: USB disconnect, device number 92 [ 508.956368][ T10] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 508.972842][ T5917] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.40 [ 508.982131][ T24] usb 2-1: device descriptor read/64, error -71 [ 508.997904][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.000413][ T10] usb 1-1: device descriptor read/8, error -71 [ 509.007777][ T5917] usb 3-1: Product: Ђ [ 509.017378][ T5917] usb 3-1: Manufacturer: 慣쓨퇬⯣杏邺૙᭖ᨅ湍⵪썧韪⩾藍ꚞ馌参c縹ẖ籟෠䪅ﬧ振衝稆뾔뉺X瀺䤦얬ꜞ꒝䣳廲킊棣獅ꆋ룖￡玧蠠䚚⧸⠝≵㿾ꮆꖴꆵ﮶ژ醝ᦕ貝ꉢ鐲䱃⫏⸚⹢蹟 [ 509.040258][ T5917] usb 3-1: SerialNumber:   [ 509.243178][ T24] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 509.304834][ T10] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 509.325455][ T10] usb 1-1: device descriptor read/8, error -71 [ 509.373419][ T24] usb 2-1: device descriptor read/64, error -71 [ 509.433934][ T10] usb usb1-port1: unable to enumerate USB device [ 509.465528][ T5917] usbhid 3-1:1.0: can't add hid device: -71 [ 509.479382][ T5917] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 509.487675][ T24] usb usb2-port1: attempt power cycle [ 509.508507][ T5917] usb 3-1: USB disconnect, device number 111 [ 509.833337][ T24] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 509.852677][T12569] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 509.864527][ T24] usb 2-1: device descriptor read/8, error -71 [ 510.113363][ T24] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 510.143903][ T24] usb 2-1: device descriptor read/8, error -71 [ 510.261234][T12572] tipc: Enabled bearer , priority 10 [ 510.268062][ T24] usb usb2-port1: unable to enumerate USB device [ 510.426385][T12575] loop2: detected capacity change from 0 to 7 [ 510.436053][T12575] Dev loop2: unable to read RDB block 7 [ 510.441673][T12575] loop2: unable to read partition table [ 510.451335][T12575] loop2: partition table beyond EOD, truncated [ 510.471358][T12575] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 510.523319][ T24] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 510.693800][T12581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.702984][ T10] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 510.721379][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 510.736775][T12581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.760642][ T24] usb 3-1: too many configurations: 251, using maximum allowed: 8 [ 510.890315][ T24] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 510.898405][ T24] usb 3-1: can't read configurations, error -61 [ 510.956548][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 510.967332][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 510.987637][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 511.000298][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 511.014084][ T10] usb 1-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 511.024361][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.032457][ T10] usb 1-1: Product: syz [ 511.037508][ T10] usb 1-1: Manufacturer: syz [ 511.042251][ T10] usb 1-1: SerialNumber: syz [ 511.047459][ T24] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 511.080778][ T10] usb 1-1: config 0 descriptor?? [ 511.094731][ T10] kvaser_usb 1-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 511.109000][ T10] kvaser_usb 1-1:0.0: error -EMSGSIZE: Failed to initialize card [ 511.119140][ T10] kvaser_usb 1-1:0.0: probe with driver kvaser_usb failed with error -90 [ 511.243234][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 511.249329][ T24] usb 3-1: too many configurations: 251, using maximum allowed: 8 [ 511.258828][ T24] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 511.266830][ T24] usb 3-1: can't read configurations, error -61 [ 511.280356][ T24] usb usb3-port1: attempt power cycle [ 511.325726][ T10] usb 1-1: USB disconnect, device number 101 [ 511.373450][ T5949] tipc: Node number set to 757989376 [ 511.676353][ T24] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 511.704555][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 511.710703][ T24] usb 3-1: too many configurations: 251, using maximum allowed: 8 [ 511.740023][ T24] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 511.965552][ T24] usb 3-1: can't read configurations, error -61 [ 512.103233][ T24] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 512.155336][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 512.171550][ T24] usb 3-1: too many configurations: 251, using maximum allowed: 8 [ 512.201927][ T24] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 512.219814][ T24] usb 3-1: can't read configurations, error -61 [ 512.249402][ T24] usb usb3-port1: unable to enumerate USB device [ 513.423364][ T24] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 513.902956][T12616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.964246][T12616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.573280][ T5915] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 514.704479][ T5915] usb 1-1: device descriptor read/64, error -71 [ 514.731876][T12640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.743978][ T24] usb 2-1: device descriptor read/64, error -71 [ 514.755282][T12640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.781759][T12640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.807845][T12640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.963235][ T5915] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 514.983316][ T24] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 515.003228][ T10] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 515.113398][ T5915] usb 1-1: device descriptor read/64, error -71 [ 515.131211][ T24] usb 2-1: device descriptor read/64, error -71 [ 515.168365][ T10] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 515.185017][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 515.206237][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 515.224897][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9649, setting to 1024 [ 515.240969][ T10] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 515.254076][ T24] usb usb2-port1: attempt power cycle [ 515.263672][ T5915] usb usb1-port1: attempt power cycle [ 515.270958][ T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 515.284082][ T10] usb 4-1: Product: syz [ 515.288581][ T10] usb 4-1: Manufacturer: syz [ 515.306824][T12641] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 515.320474][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 515.328751][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 515.371341][ T10] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 515.498277][ T10] cdc_wdm 4-1:1.0: Unknown control protocol [ 515.524901][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 515.531552][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 515.539074][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 515.545695][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 515.552019][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 515.558627][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 515.564947][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 515.571557][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 515.577820][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 515.584426][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 515.590773][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 515.597385][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 515.603741][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 515.610358][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 515.616663][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 515.623282][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 515.629685][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 515.636294][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 515.642562][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 515.649166][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 515.733457][ T24] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 515.743598][ T5915] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 515.752727][T12643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1751'. [ 515.774069][ T24] usb 2-1: device descriptor read/8, error -71 [ 515.781118][ T5915] usb 1-1: device descriptor read/8, error -71 [ 515.785627][T12643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1751'. [ 515.800475][T12643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1751'. [ 515.865847][T12643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1751'. [ 515.908612][T12643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1751'. [ 515.918446][T12643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1751'. [ 515.931763][T12643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1751'. [ 515.941812][T12643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1751'. [ 515.954442][T12643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1751'. [ 515.965593][T12643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1751'. [ 516.033743][ T5915] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 516.043308][ T24] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 516.064587][ T5915] usb 1-1: device descriptor read/8, error -71 [ 516.084730][ T24] usb 2-1: device descriptor read/8, error -71 [ 516.182972][ T5915] usb usb1-port1: unable to enumerate USB device [ 516.194573][ T24] usb usb2-port1: unable to enumerate USB device [ 517.187016][T12656] fuse: Bad value for 'fd' [ 518.105201][ T43] usb 4-1: USB disconnect, device number 93 [ 518.819848][T12680] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 518.854071][T12679] IPv6: Can't replace route, no match found [ 519.173261][ T43] usb 3-1: new full-speed USB device number 116 using dummy_hcd [ 519.374725][ T43] usb 3-1: config 0 has an invalid interface number: 81 but max is 0 [ 519.577173][ T43] usb 3-1: config 0 has no interface number 0 [ 519.585919][ T43] usb 3-1: config 0 interface 81 altsetting 6 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 519.612680][ T43] usb 3-1: config 0 interface 81 has no altsetting 0 [ 519.665521][ T43] usb 3-1: New USB device found, idVendor=09b0, idProduct=0006, bcdDevice=40.a8 [ 519.675883][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.693316][ T43] usb 3-1: Product: syz [ 519.711288][ T43] usb 3-1: Manufacturer: syz [ 519.731863][ T43] usb 3-1: SerialNumber: syz [ 519.766147][ T43] usb 3-1: config 0 descriptor?? [ 519.871024][T12682] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 519.958818][T12691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.970157][T12691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.089702][T12679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.098526][T12679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.200056][ T43] usb 3-1: USB disconnect, device number 116 [ 520.523469][ T5917] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 520.671158][T12708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.680354][T12708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.728344][ T5917] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 520.741306][ T5917] usb 2-1: config 0 has no interface number 0 [ 520.748171][ T5917] usb 2-1: config 0 interface 29 has no altsetting 0 [ 520.824743][ T5917] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 520.834011][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.842283][ T5917] usb 2-1: Product: syz [ 520.849272][ T5917] usb 2-1: Manufacturer: syz [ 520.879601][ T5917] usb 2-1: SerialNumber: syz [ 520.905549][ T5917] usb 2-1: config 0 descriptor?? [ 520.923197][T12712] ksmbd: Unknown IPC event: 3, ignore. [ 521.120512][ T5917] peak_usb 2-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 521.213392][ T5915] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 521.321229][ T5917] peak_usb 2-1:0.29 can0: sending command failure: -22 [ 521.328329][ T5917] peak_usb 2-1:0.29 can0: sending command failure: -22 [ 521.337015][ T5917] peak_usb 2-1:0.29 can0: sending command failure: -22 [ 521.353262][ T5915] usb 3-1: device descriptor read/64, error -71 [ 521.423805][ T5917] peak_usb 2-1:0.29: probe with driver peak_usb failed with error -22 [ 521.437733][T12721] __nla_validate_parse: 40 callbacks suppressed [ 521.437751][T12721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1773'. [ 521.527516][ T5917] usb 2-1: USB disconnect, device number 88 [ 521.603441][ T5915] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 521.712261][T12726] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073290121217) [ 521.753810][ T5915] usb 3-1: device descriptor read/64, error -71 [ 521.864347][ T5915] usb usb3-port1: attempt power cycle [ 522.241343][ T5915] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 522.296146][ T5915] usb 3-1: device descriptor read/8, error -71 [ 522.358107][ T5901] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 522.553647][ T5915] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 522.562659][ T5901] usb 1-1: config index 0 descriptor too short (expected 3133, got 61) [ 522.572292][ T5901] usb 1-1: config 0 has an invalid interface number: 156 but max is 1 [ 522.585140][ T5915] usb 3-1: device descriptor read/8, error -71 [ 522.596256][ T5901] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 522.621806][ T5901] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 522.655237][ T5901] usb 1-1: config 0 has no interface number 0 [ 522.662736][ T5901] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 522.683032][ T5901] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 522.684478][T12745] FAULT_INJECTION: forcing a failure. [ 522.684478][T12745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 522.727668][T12745] CPU: 1 UID: 0 PID: 12745 Comm: syz.1.1780 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 522.727686][T12745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 522.727700][T12745] Call Trace: [ 522.727705][T12745] [ 522.727711][T12745] dump_stack_lvl+0x189/0x250 [ 522.727730][T12745] ? __pfx____ratelimit+0x10/0x10 [ 522.727745][T12745] ? __pfx_dump_stack_lvl+0x10/0x10 [ 522.727759][T12745] ? __pfx__printk+0x10/0x10 [ 522.727770][T12745] ? __might_fault+0xb0/0x130 [ 522.727786][T12745] should_fail_ex+0x414/0x560 [ 522.727802][T12745] _copy_from_user+0x2d/0xb0 [ 522.727812][T12745] snd_pcm_oss_write+0x84f/0x11a0 [ 522.727841][T12745] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 522.727857][T12745] ? bpf_lsm_file_permission+0x9/0x20 [ 522.727871][T12745] ? security_file_permission+0x75/0x290 [ 522.727882][T12745] ? rw_verify_area+0x258/0x650 [ 522.727897][T12745] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 522.727910][T12745] vfs_write+0x27e/0xa90 [ 522.727929][T12745] ? __pfx_vfs_write+0x10/0x10 [ 522.727944][T12745] ? __fget_files+0x2a/0x420 [ 522.727957][T12745] ? __fget_files+0x2a/0x420 [ 522.727966][T12745] ? __fget_files+0x3a0/0x420 [ 522.727976][T12745] ? __fget_files+0x2a/0x420 [ 522.727991][T12745] ksys_write+0x145/0x250 [ 522.728001][T12745] ? __pfx_ksys_write+0x10/0x10 [ 522.728009][T12745] ? rcu_is_watching+0x15/0xb0 [ 522.728026][T12745] ? do_syscall_64+0xbe/0x3b0 [ 522.728042][T12745] do_syscall_64+0xfa/0x3b0 [ 522.728055][T12745] ? lockdep_hardirqs_on+0x9c/0x150 [ 522.728068][T12745] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.728078][T12745] ? clear_bhb_loop+0x60/0xb0 [ 522.728090][T12745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.728100][T12745] RIP: 0033:0x7fee6078e929 [ 522.728110][T12745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 522.728118][T12745] RSP: 002b:00007fee5e5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 522.728130][T12745] RAX: ffffffffffffffda RBX: 00007fee609b5fa0 RCX: 00007fee6078e929 [ 522.728137][T12745] RDX: 000000000000fc36 RSI: 0000200000000500 RDI: 0000000000000008 [ 522.728144][T12745] RBP: 00007fee5e5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 522.728149][T12745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 522.728155][T12745] R13: 0000000000000000 R14: 00007fee609b5fa0 R15: 00007fee60adfa28 [ 522.728170][T12745] [ 522.756884][ T5915] usb usb3-port1: unable to enumerate USB device [ 522.757745][ T5901] usb 1-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 522.757792][ T5901] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 522.757815][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.760411][ T5901] usb 1-1: config 0 descriptor?? [ 522.837351][ T5901] gspca_main: spca561-2.14.0 probing abcd:cdee [ 522.974072][ C0] vkms_vblank_simulate: vblank timer overrun [ 523.657666][T12753] Cannot find add_set index 1 as target [ 523.754360][ T5901] spca561 1-1:0.156: probe with driver spca561 failed with error -22 [ 523.794667][ T5901] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 523.810123][ T5901] usb 1-1: MIDIStreaming interface descriptor not found [ 523.931742][T12757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.972401][T12757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.130428][T12761] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1782'. [ 524.151003][T12761] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1782'. [ 524.353165][ T5949] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 524.503399][ T5949] usb 3-1: Using ep0 maxpacket: 32 [ 524.515856][ T5949] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 524.528813][ T5949] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 524.542721][ T5949] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 524.555216][ T5949] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 524.580577][ T5949] usb 3-1: config 0 interface 0 has no altsetting 0 [ 524.600211][ T5949] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 524.614161][ T5949] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 524.631958][ T5949] usb 3-1: Product: syz [ 524.641278][ T5949] usb 3-1: Manufacturer: syz [ 524.658582][ T5949] usb 3-1: SerialNumber: syz [ 524.679401][ T5949] usb 3-1: config 0 descriptor?? [ 524.696949][ T5949] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 524.725911][ T5949] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 525.097093][ T5949] usb 1-1: USB disconnect, device number 106 [ 525.536078][ T10] usb 3-1: USB disconnect, device number 121 [ 525.558109][ T10] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 525.694326][T12784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.709707][T12784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.734003][ T5901] usb 1-1: new low-speed USB device number 107 using dummy_hcd [ 525.978677][T12789] trusted_key: encrypted_key: insufficient parameters specified [ 526.006950][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 526.018420][ T5901] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 526.038562][ T5901] usb 1-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 526.074590][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.097157][ T5901] usb 1-1: config 0 descriptor?? [ 526.113401][T12778] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 526.556881][ T5901] logitech-djreceiver 0003:046D:C71B.0016: unbalanced delimiter at end of report description [ 526.575035][ T5901] logitech-djreceiver 0003:046D:C71B.0016: logi_dj_probe: parse failed [ 526.604491][ T5901] logitech-djreceiver 0003:046D:C71B.0016: probe with driver logitech-djreceiver failed with error -22 [ 526.760867][ T5917] usb 1-1: USB disconnect, device number 107 [ 527.663357][ T5901] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 527.830151][ T5901] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 527.845511][ T5901] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 527.857001][ T5901] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 527.868706][ T5901] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9649, setting to 1024 [ 527.882054][ T5901] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 527.901729][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 527.919644][ T5901] usb 1-1: Product: syz [ 527.934824][ T5901] usb 1-1: Manufacturer: syz [ 527.970757][T12798] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 527.981249][ T5901] cdc_wdm 1-1:1.0: skipping garbage [ 527.991067][ T5901] cdc_wdm 1-1:1.0: skipping garbage [ 528.003256][ T5901] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 528.014667][ T5901] cdc_wdm 1-1:1.0: Unknown control protocol [ 528.123236][ T5949] usb 3-1: new low-speed USB device number 122 using dummy_hcd [ 528.188870][ C1] wdm_int_callback: 12430 callbacks suppressed [ 528.188897][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 528.201650][ C1] wdm_int_callback: 12430 callbacks suppressed [ 528.201666][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 528.215040][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 528.221713][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 528.227980][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 528.234607][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 528.240939][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 528.247562][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 528.253945][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 528.260556][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 528.266879][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 528.273497][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 528.279815][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 528.286439][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 528.292794][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 528.299401][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 528.305737][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 528.312348][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 528.318660][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 528.325271][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 528.368684][T12804] xt_CT: No such helper "syz0" [ 528.398491][ T5949] usb 3-1: device descriptor read/64, error -71 [ 528.676367][ T5949] usb 3-1: new low-speed USB device number 123 using dummy_hcd [ 528.860832][T12819] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1798'. [ 528.934095][ T5949] usb 3-1: device descriptor read/64, error -71 [ 529.043863][ T5949] usb usb3-port1: attempt power cycle [ 529.093451][ T24] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 529.243250][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 529.250985][ T24] usb 2-1: config 0 has no interfaces? [ 529.258178][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 529.268078][ T24] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 529.276239][ T24] usb 2-1: Manufacturer: syz [ 529.288634][ T24] usb 2-1: config 0 descriptor?? [ 529.393420][ T5949] usb 3-1: new low-speed USB device number 124 using dummy_hcd [ 529.406718][T12829] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1803'. [ 529.425387][ T5949] usb 3-1: device descriptor read/8, error -71 [ 529.505360][T12818] fuse: Invalid rootmode [ 529.673764][ T5949] usb 3-1: new low-speed USB device number 125 using dummy_hcd [ 529.724234][ T5949] usb 3-1: device descriptor read/8, error -71 [ 529.833989][ T5949] usb usb3-port1: unable to enumerate USB device [ 530.367349][ T24] usb 1-1: USB disconnect, device number 108 [ 532.407582][ T5915] usb 2-1: USB disconnect, device number 89 [ 532.567713][ T24] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 532.743545][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 532.768494][ T24] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 532.777174][ T24] usb 1-1: config 0 has no interface number 0 [ 532.784105][ T24] usb 1-1: config 0 interface 184 has no altsetting 0 [ 532.797945][ T24] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 532.807481][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.815740][ T24] usb 1-1: Product: syz [ 532.820036][ T24] usb 1-1: Manufacturer: syz [ 532.828199][ T24] usb 1-1: SerialNumber: syz [ 532.846771][ T24] usb 1-1: config 0 descriptor?? [ 532.858127][ T24] smsc75xx v1.0.0 [ 532.861902][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 532.873551][ T24] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 532.913215][ T43] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 533.063411][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 533.072031][ T43] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 533.082121][ T43] usb 4-1: config 0 has no interface number 0 [ 533.165534][ T43] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 533.202595][ T43] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 533.213871][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.222104][ T43] usb 4-1: Product: syz [ 533.227330][ T43] usb 4-1: Manufacturer: syz [ 533.231990][ T43] usb 4-1: SerialNumber: syz [ 533.282933][ T43] usb 4-1: config 0 descriptor?? [ 533.314466][ T43] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 533.381082][ T43] em28xx 4-1:0.132: Video interface 132 found: [ 533.424406][T12900] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1821'. [ 533.772533][ T43] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 534.013522][ T5915] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 534.183365][ T5915] usb 3-1: Using ep0 maxpacket: 32 [ 534.195407][ T24] usb 1-1: USB disconnect, device number 109 [ 534.203465][ T5917] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 534.231397][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.274934][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 534.285684][ T5915] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 534.297539][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.320827][ T5915] usb 3-1: config 0 descriptor?? [ 534.350321][ T5915] hub 3-1:0.0: USB hub found [ 534.384166][ T5917] usb 2-1: Using ep0 maxpacket: 32 [ 534.392981][ T5917] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 534.402710][ T5917] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 534.422024][ T5917] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 534.439150][T12909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.448040][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 534.471922][T12909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.480389][ T5917] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 534.493757][ T5917] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 534.514229][T12909] tipc: Enabling of bearer rejected, failed to enable media [ 534.531216][ T5917] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 534.542126][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.555414][ T5915] hub 3-1:0.0: 1 port detected [ 534.561857][ T5917] usb 2-1: config 0 descriptor?? [ 534.703409][ T24] usb 1-1: new full-speed USB device number 110 using dummy_hcd [ 534.802620][ T5915] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 534.831238][ T5917] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 90 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 534.833129][ T5915] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 534.908588][ T5917] usb 2-1: USB disconnect, device number 90 [ 534.916376][ T5915] usbhid 3-1:0.0: can't add hid device: -71 [ 534.930823][ T5915] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 535.014606][ T5915] usb 3-1: USB disconnect, device number 126 [ 535.061448][ T5917] usblp0: removed [ 535.214131][ T43] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 535.300000][ T43] em28xx 4-1:0.132: board has no eeprom [ 535.389408][ T43] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 535.407580][ T43] em28xx 4-1:0.132: analog set to bulk mode. [ 535.443549][ T5917] em28xx 4-1:0.132: Registering V4L2 extension [ 535.522162][ T30] audit: type=1326 audit(1751056941.117:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12923 comm="syz.1.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6078e929 code=0x7ffc0000 [ 535.769158][ T30] audit: type=1326 audit(1751056941.147:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12923 comm="syz.1.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7fee6078e929 code=0x7ffc0000 [ 535.779145][ T5917] em28xx 4-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 535.791523][ C0] vkms_vblank_simulate: vblank timer overrun [ 535.809106][ T43] usb 4-1: USB disconnect, device number 94 [ 535.851314][ T43] em28xx 4-1:0.132: Disconnecting em28xx [ 535.920242][ T30] audit: type=1326 audit(1751056941.147:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12923 comm="syz.1.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6078e929 code=0x7ffc0000 [ 535.942587][ C0] vkms_vblank_simulate: vblank timer overrun [ 535.967645][T12932] loop6: detected capacity change from 0 to 7 [ 536.026198][ T30] audit: type=1326 audit(1751056941.157:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12923 comm="syz.1.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fee60790847 code=0x7ffc0000 [ 536.056011][ T5969] Dev loop6: unable to read RDB block 7 [ 536.083276][ T5949] usb 3-1: new low-speed USB device number 127 using dummy_hcd [ 536.106256][ T30] audit: type=1326 audit(1751056941.157:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12923 comm="syz.1.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fee607907bc code=0x7ffc0000 [ 536.167958][ T5969] loop6: unable to read partition table [ 536.216030][ T5917] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 536.238266][ T5969] loop6: partition table beyond EOD, truncated [ 536.247326][ T5917] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 536.261672][ T30] audit: type=1326 audit(1751056941.157:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12923 comm="syz.1.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fee607906f4 code=0x7ffc0000 [ 536.266206][ T5949] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 536.331810][ T5917] em28xx 4-1:0.132: No AC97 audio processor [ 536.353794][T12932] Dev loop6: unable to read RDB block 7 [ 536.423395][T12944] program syz.0.1832 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 536.433217][T12944] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 537.089218][T12932] loop6: unable to read partition table [ 537.662584][ T5949] usb 3-1: config 0 has no interface number 0 [ 537.662592][ T30] audit: type=1326 audit(1751056941.157:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12923 comm="syz.1.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fee607906f4 code=0x7ffc0000 [ 537.662639][ T30] audit: type=1326 audit(1751056941.157:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12923 comm="syz.1.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fee6078d58a code=0x7ffc0000 [ 537.668915][ T5917] usb 4-1: Decoder not found [ 537.691021][ C0] vkms_vblank_simulate: vblank timer overrun [ 537.692082][T12932] loop6: partition table beyond EOD, [ 537.733807][ T30] audit: type=1326 audit(1751056941.167:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12923 comm="syz.1.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6078e929 code=0x7ffc0000 [ 537.736158][ T5949] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 537.768904][ T30] audit: type=1326 audit(1751056941.167:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12923 comm="syz.1.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fee6078e929 code=0x7ffc0000 [ 537.799794][T12932] truncated [ 537.803439][T12932] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 537.996493][ T5949] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 538.012715][ T5917] em28xx 4-1:0.132: failed to create media graph [ 538.040847][ T5917] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 538.054071][ T5949] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 538.109115][T12945] ================================================================== [ 538.117203][T12945] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xc7/0x430 [ 538.124562][T12945] Read of size 8 at addr ffff888079110738 by task v4l_id/12945 [ 538.132080][T12945] [ 538.134391][T12945] CPU: 0 UID: 0 PID: 12945 Comm: v4l_id Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 538.134405][T12945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 538.134412][T12945] Call Trace: [ 538.134417][T12945] [ 538.134422][T12945] dump_stack_lvl+0x189/0x250 [ 538.134440][T12945] ? __virt_addr_valid+0x1c8/0x5c0 [ 538.134450][T12945] ? rcu_is_watching+0x15/0xb0 [ 538.134464][T12945] ? __pfx_dump_stack_lvl+0x10/0x10 [ 538.134478][T12945] ? rcu_is_watching+0x15/0xb0 [ 538.134491][T12945] ? lock_release+0x4b/0x3e0 [ 538.134505][T12945] ? __virt_addr_valid+0x1c8/0x5c0 [ 538.134514][T12945] ? __virt_addr_valid+0x4a5/0x5c0 [ 538.134523][T12945] print_report+0xd2/0x2b0 [ 538.134536][T12945] ? v4l2_fh_open+0xc7/0x430 [ 538.134549][T12945] kasan_report+0x118/0x150 [ 538.134560][T12945] ? v4l2_fh_open+0xc7/0x430 [ 538.134574][T12945] v4l2_fh_open+0xc7/0x430 [ 538.134587][T12945] ? __pfx___mutex_lock+0x10/0x10 [ 538.134602][T12945] em28xx_v4l2_open+0x157/0x9a0 [ 538.134619][T12945] v4l2_open+0x20f/0x360 [ 538.134628][T12945] chrdev_open+0x4c9/0x5e0 [ 538.134639][T12945] ? __pfx_chrdev_open+0x10/0x10 [ 538.134651][T12945] ? __pfx_chrdev_open+0x10/0x10 [ 538.134660][T12945] do_dentry_open+0xdf0/0x1970 [ 538.134674][T12945] vfs_open+0x3b/0x340 [ 538.134689][T12945] ? path_openat+0x2ecd/0x3830 [ 538.134703][T12945] path_openat+0x2ee5/0x3830 [ 538.134715][T12945] ? arch_stack_walk+0xfc/0x150 [ 538.134731][T12945] ? __pfx_path_openat+0x10/0x10 [ 538.134742][T12945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.134756][T12945] do_filp_open+0x1fa/0x410 [ 538.134768][T12945] ? __lock_acquire+0xab9/0xd20 [ 538.134780][T12945] ? __pfx_do_filp_open+0x10/0x10 [ 538.134797][T12945] ? _raw_spin_unlock+0x28/0x50 [ 538.134808][T12945] ? alloc_fd+0x64c/0x6c0 [ 538.134819][T12945] do_sys_openat2+0x121/0x1c0 [ 538.134832][T12945] ? __pfx_do_sys_openat2+0x10/0x10 [ 538.134843][T12945] ? exc_page_fault+0x76/0xf0 [ 538.134857][T12945] ? do_user_addr_fault+0xc8a/0x1390 [ 538.134870][T12945] __x64_sys_openat+0x138/0x170 [ 538.134883][T12945] do_syscall_64+0xfa/0x3b0 [ 538.134896][T12945] ? lockdep_hardirqs_on+0x9c/0x150 [ 538.134908][T12945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.134918][T12945] ? clear_bhb_loop+0x60/0xb0 [ 538.134928][T12945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.134938][T12945] RIP: 0033:0x7fd8d36a7407 [ 538.134948][T12945] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 538.134957][T12945] RSP: 002b:00007fff4ef843f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 538.134969][T12945] RAX: ffffffffffffffda RBX: 00007fd8d3de1880 RCX: 00007fd8d36a7407 [ 538.134976][T12945] RDX: 0000000000000000 RSI: 00007fff4ef84f1b RDI: ffffffffffffff9c [ 538.134983][T12945] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 538.134989][T12945] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 538.134995][T12945] R13: 00007fff4ef84640 R14: 00007fd8d3f48000 R15: 0000559ae8d654d8 [ 538.135005][T12945] [ 538.135009][T12945] [ 538.437661][T12945] Allocated by task 5917: [ 538.441972][T12945] kasan_save_track+0x3e/0x80 [ 538.446645][T12945] __kasan_kmalloc+0x93/0xb0 [ 538.451223][T12945] __kmalloc_cache_noprof+0x230/0x3d0 [ 538.456586][T12945] em28xx_v4l2_init+0x10b/0x2e70 [ 538.461520][T12945] em28xx_init_extension+0x11d/0x1c0 [ 538.466806][T12945] process_scheduled_works+0xae1/0x17b0 [ 538.472337][T12945] worker_thread+0x8a0/0xda0 [ 538.476915][T12945] kthread+0x70e/0x8a0 [ 538.480966][T12945] ret_from_fork+0x3fc/0x770 [ 538.485542][T12945] ret_from_fork_asm+0x1a/0x30 [ 538.490288][T12945] [ 538.492604][T12945] Freed by task 5917: [ 538.496583][T12945] kasan_save_track+0x3e/0x80 [ 538.501246][T12945] kasan_save_free_info+0x46/0x50 [ 538.506260][T12945] __kasan_slab_free+0x62/0x70 [ 538.511007][T12945] kfree+0x18e/0x440 [ 538.514890][T12945] em28xx_v4l2_init+0x1683/0x2e70 [ 538.519901][T12945] em28xx_init_extension+0x11d/0x1c0 [ 538.525166][T12945] process_scheduled_works+0xae1/0x17b0 [ 538.530697][T12945] worker_thread+0x8a0/0xda0 [ 538.535274][T12945] kthread+0x70e/0x8a0 [ 538.539324][T12945] ret_from_fork+0x3fc/0x770 [ 538.543896][T12945] ret_from_fork_asm+0x1a/0x30 [ 538.548642][T12945] [ 538.550945][T12945] The buggy address belongs to the object at ffff888079110000 [ 538.550945][T12945] which belongs to the cache kmalloc-8k of size 8192 [ 538.564979][T12945] The buggy address is located 1848 bytes inside of [ 538.564979][T12945] freed 8192-byte region [ffff888079110000, ffff888079112000) [ 538.578934][T12945] [ 538.581253][T12945] The buggy address belongs to the physical page: [ 538.587660][T12945] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79110 [ 538.596399][T12945] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 538.604877][T12945] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 538.612402][T12945] page_type: f5(slab) [ 538.616366][T12945] raw: 00fff00000000040 ffff88801a442280 dead000000000122 0000000000000000 [ 538.624926][T12945] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 538.633492][T12945] head: 00fff00000000040 ffff88801a442280 dead000000000122 0000000000000000 [ 538.642146][T12945] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 538.650812][T12945] head: 00fff00000000003 ffffea0001e44401 00000000ffffffff 00000000ffffffff [ 538.659471][T12945] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 538.668130][T12945] page dumped because: kasan: bad access detected [ 538.674530][T12945] page_owner tracks the page as allocated [ 538.680223][T12945] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5917, tgid 5917 (kworker/1:5), ts 535456256033, free_ts 535352627496 [ 538.701651][T12945] post_alloc_hook+0x240/0x2a0 [ 538.706413][T12945] get_page_from_freelist+0x21e4/0x22c0 [ 538.711944][T12945] __alloc_frozen_pages_noprof+0x181/0x370 [ 538.717737][T12945] alloc_pages_mpol+0x232/0x4a0 [ 538.722571][T12945] allocate_slab+0x8a/0x3b0 [ 538.727056][T12945] ___slab_alloc+0xbfc/0x1480 [ 538.731714][T12945] __kmalloc_cache_noprof+0x296/0x3d0 [ 538.737065][T12945] em28xx_v4l2_init+0x10b/0x2e70 [ 538.741990][T12945] em28xx_init_extension+0x11d/0x1c0 [ 538.747265][T12945] process_scheduled_works+0xae1/0x17b0 [ 538.752799][T12945] worker_thread+0x8a0/0xda0 [ 538.757377][T12945] kthread+0x70e/0x8a0 [ 538.761425][T12945] ret_from_fork+0x3fc/0x770 [ 538.766001][T12945] ret_from_fork_asm+0x1a/0x30 [ 538.770745][T12945] page last free pid 6009 tgid 6009 stack trace: [ 538.777050][T12945] __free_frozen_pages+0xc71/0xe70 [ 538.782143][T12945] __put_partials+0x161/0x1c0 [ 538.786820][T12945] put_cpu_partial+0x17c/0x250 [ 538.791576][T12945] __slab_free+0x2f7/0x400 [ 538.795976][T12945] qlist_free_all+0x97/0x140 [ 538.800550][T12945] kasan_quarantine_reduce+0x148/0x160 [ 538.805996][T12945] __kasan_slab_alloc+0x22/0x80 [ 538.810828][T12945] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 538.816274][T12945] getname_flags+0xb8/0x540 [ 538.820761][T12945] do_readlinkat+0xbc/0x500 [ 538.825246][T12945] __x64_sys_readlink+0x7f/0x90 [ 538.830083][T12945] do_syscall_64+0xfa/0x3b0 [ 538.834571][T12945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.840452][T12945] [ 538.842767][T12945] Memory state around the buggy address: [ 538.848373][T12945] ffff888079110600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 538.856414][T12945] ffff888079110680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 538.864458][T12945] >ffff888079110700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 538.872030][T12928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1829'. [ 538.872489][T12945] ^ [ 538.887194][T12945] ffff888079110780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 538.895238][T12945] ffff888079110800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 538.903277][T12945] ================================================================== [ 538.911439][ C0] vkms_vblank_simulate: vblank timer overrun [ 538.926146][ T5917] em28xx 4-1:0.132: Remote control support is not available for this card. [ 538.941441][ T5949] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 538.952981][T12928] openvswitch: netlink: nsh attribute has 5276 unknown bytes. [ 538.960663][ T43] em28xx 4-1:0.132: Closing input extension [ 538.966989][ T5949] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 538.979435][T12928] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 538.999636][ T5949] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 539.021193][ T5949] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 539.030664][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.049072][ T5949] usb 3-1: config 0 descriptor?? [ 539.056701][T12929] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 539.069364][T12929] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 539.199631][ T5949] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 539.235463][T12945] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 539.242697][T12945] CPU: 0 UID: 0 PID: 12945 Comm: v4l_id Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 539.254399][T12945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 539.264453][T12945] Call Trace: [ 539.267723][T12945] [ 539.270647][T12945] dump_stack_lvl+0x99/0x250 [ 539.275237][T12945] ? __asan_memcpy+0x40/0x70 [ 539.279822][T12945] ? __pfx_dump_stack_lvl+0x10/0x10 [ 539.285016][T12945] ? __pfx__printk+0x10/0x10 [ 539.289599][T12945] panic+0x2db/0x790 [ 539.293492][T12945] ? __pfx_panic+0x10/0x10 [ 539.297909][T12945] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 539.303794][T12945] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 539.310112][T12945] ? print_memory_metadata+0x314/0x400 [ 539.315574][T12945] ? v4l2_fh_open+0xc7/0x430 [ 539.320158][T12945] check_panic_on_warn+0x89/0xb0 [ 539.325089][T12945] ? v4l2_fh_open+0xc7/0x430 [ 539.329763][T12945] end_report+0x78/0x160 [ 539.333994][T12945] kasan_report+0x129/0x150 [ 539.338486][T12945] ? v4l2_fh_open+0xc7/0x430 [ 539.343079][T12945] v4l2_fh_open+0xc7/0x430 [ 539.347494][T12945] ? __pfx___mutex_lock+0x10/0x10 [ 539.352530][T12945] em28xx_v4l2_open+0x157/0x9a0 [ 539.357378][T12945] v4l2_open+0x20f/0x360 [ 539.361609][T12945] chrdev_open+0x4c9/0x5e0 [ 539.366015][T12945] ? __pfx_chrdev_open+0x10/0x10 [ 539.370944][T12945] ? __pfx_chrdev_open+0x10/0x10 [ 539.375872][T12945] do_dentry_open+0xdf0/0x1970 [ 539.380639][T12945] vfs_open+0x3b/0x340 [ 539.384701][T12945] ? path_openat+0x2ecd/0x3830 [ 539.389459][T12945] path_openat+0x2ee5/0x3830 [ 539.394045][T12945] ? arch_stack_walk+0xfc/0x150 [ 539.398892][T12945] ? __pfx_path_openat+0x10/0x10 [ 539.403821][T12945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.409885][T12945] do_filp_open+0x1fa/0x410 [ 539.414382][T12945] ? __lock_acquire+0xab9/0xd20 [ 539.419226][T12945] ? __pfx_do_filp_open+0x10/0x10 [ 539.424250][T12945] ? _raw_spin_unlock+0x28/0x50 [ 539.429089][T12945] ? alloc_fd+0x64c/0x6c0 [ 539.433412][T12945] do_sys_openat2+0x121/0x1c0 [ 539.438081][T12945] ? __pfx_do_sys_openat2+0x10/0x10 [ 539.443269][T12945] ? exc_page_fault+0x76/0xf0 [ 539.447939][T12945] ? do_user_addr_fault+0xc8a/0x1390 [ 539.453215][T12945] __x64_sys_openat+0x138/0x170 [ 539.458058][T12945] do_syscall_64+0xfa/0x3b0 [ 539.462567][T12945] ? lockdep_hardirqs_on+0x9c/0x150 [ 539.467848][T12945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.473915][T12945] ? clear_bhb_loop+0x60/0xb0 [ 539.478593][T12945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.484479][T12945] RIP: 0033:0x7fd8d36a7407 [ 539.488907][T12945] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 539.508511][T12945] RSP: 002b:00007fff4ef843f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 539.516921][T12945] RAX: ffffffffffffffda RBX: 00007fd8d3de1880 RCX: 00007fd8d36a7407 [ 539.524885][T12945] RDX: 0000000000000000 RSI: 00007fff4ef84f1b RDI: ffffffffffffff9c [ 539.532851][T12945] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 539.540826][T12945] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 539.548797][T12945] R13: 00007fff4ef84640 R14: 00007fd8d3f48000 R15: 0000559ae8d654d8 [ 539.556778][T12945] [ 539.560022][T12945] Kernel Offset: disabled [ 539.564336][T12945] Rebooting in 86400 seconds..