last executing test programs: 12.217135571s ago: executing program 3 (id=1794): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) syz_usb_connect(0x1, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000003c0)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000780)='task\x00') lseek(r3, 0xffffffffffffffff, 0x0) 10.879119284s ago: executing program 2 (id=1800): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) mmap(&(0x7f000048a000/0x1000)=nil, 0x1000, 0x2, 0x12, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f000088a000/0x4000)=nil, 0x4000, 0x1000008, 0x5d031, r0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ftruncate(r0, 0xc17a) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6003000000142f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa000022eb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="92"], 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x7c2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r6, 0x4018f514, &(0x7f00000001c0)={0x8, 0x8, 0x3}) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000bc0)={0x1, &(0x7f0000000c00)=[{0x6}]}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000000c0)={'dvmrp0\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'veth1_macvtap\x00', 0x200}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000900)={0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000240)={0x3, 0x0, {0x0}, {0xffffffffffffffff}, 0x5, 0x3}) fstat(r4, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$unix(r4, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="2e1ac0", 0x3}, {&(0x7f0000000200)="2614b0", 0x3}], 0x2, 0x0, 0x0, 0x40008c0}}, {{&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000880)=[{&(0x7f00000011c0)="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", 0x1000}, {&(0x7f0000000440)="5c35c01e69638a3267e37c83bc7bc9886c0bf617338294aeffad4326945bd2d62da009ef0df3cbeb46a034742164b3b410e6311cca9eed69564328d982d7dd134293e1281760d873421598f1039fca01b30ef28f3bb9299218e0144aa6dd74aae8c1dba32f43ce3912f376ae1ec559b58787f9c3654b19fb3dd4cd4d9c0bda8ee27363d73b3499906532125bc6dd3e7a23dfcda40a8ec8ecb0c677be5e", 0x9d}, {&(0x7f0000000500)="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", 0xfa}, {&(0x7f0000000600)="297abc59ce434793917dee63e0bcaccaae56a4de2d2417d625e439ee0012f79c186f08836f375ea60d540c50a1702ffc25ada94d5c33929c449c7aa0fbec1841974ecd0fb606f374cbb3bef4e8d70d0cd2ef1b45a21621c0f8d7f5264f9aa6255434da912b9cf478fa8352b803cec52026b9153d94fad5102ac06e4fa1a7185a5d0dff067525ffd878787dcf9e683bf8de4f2cbce95c9232a17c0da3e7d0dddb5cb5444bfd2f693010b6a2549051ac8c9e9709d0e8e9f02d", 0xb8}, {&(0x7f00000006c0)="291f31e9e7d8136b077865f61b664b0d60a3728290efcd19091326bebd2e4030f2b4e2ca100d9157bf1849dd6352129e34dce8d8dd33d2d6b9e4602847ca4052cbeca91688a21a684e058ab0889869828690b2dd4e822b2ecb4b5d7f00bc2396ce782b62893e593f66b9d0535ba45ef62d64ae30bcf5cef68f7c339da9bf0991e01def0c3bd6b4901db1346fc736d402acb356b2f6801172acdd5a11813db763856ba7360053cd48ce9e4d362c871002bcd5c3d4745224909a1a0e3a89ae2d2bfb276ec38d79600a3653dc6ff827cf2625675228051959b30354bd6265784236fec759d914ba92a0d8a244ceb0a1a92fef0092ce", 0xf4}, {&(0x7f00000007c0)="87bfe22375d1232e0ded63f6b85fad98cc16e4c9a0608aef2a489bc4954b4af68a5e58ca20a0b2a3efea558a6f6ff29dfbdaa6c9f9cc31388f84a89c196f6b2fbc5818b3dc18e02ae9f93338d9478925b05f5673704d2c64c7c17127e08b9674d2afdbbd66c82e158f714da6d923fb80483d5686f81031019451052d661eb35d68993629577ab338066ae4dd2e4e82c8813aed251074a548cd6174ceb3136091d8f2b5d9f46507a7cdc387620fdc703c6a40f024eea2fe2c1b444118", 0xbc}], 0x6, &(0x7f00000021c0)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r7, r9, r11}}}, @rights={{0x30, 0x1, 0x1, [r12, r6, r4, r3, 0xffffffffffffffff, r3, 0xffffffffffffffff, r2]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @rights={{0x20, 0x1, 0x1, [r5, 0xffffffffffffffff, r5, r1]}}, @rights={{0x28, 0x1, 0x1, [r3, r5, r2, r3, r5, r0]}}], 0xe0, 0x20040000}}, {{&(0x7f0000000b40)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000002840)=[{&(0x7f00000022c0)="8145261e00d193e5681f647ea20b83930e2f7b0e802bc4187faa0e8c1c66834bbfd6953db217b1acd321a982fc6c78e7b9f3ba3f149ab7cc9110ebfa0af17acba514e9c4f76471c8634f22d0d9b85e9ecc622b37fec9d07288487d39e3541746cb6fe9c40f122a0d87638d7ff72b6a30", 0x70}, {&(0x7f0000002340)="c80df8aa8cf218ad96d3d7fa2d347cf273110f36cdfe08073bcadc1e3135770bfec7acde1f8cfd3a15b7e44f1500871c51e617069afbd5300ed3689ca3669c70207da80d0f9b80988afa78d312710dba2e4ce13f4817cddf252e765efe62e523aa7ea5ec404da76df0a6377f1344501b111c317bc464820697bd5354f3aa64fb7bcc8a486d9004feb85aa6e9759d014707a27701ff03c9507bca6d36cc839cda28236a9c780056a7e6e07389179619951cb2fbcabc1f62d0ee4c7e1f41", 0xbd}, {&(0x7f0000002400)="3920747c045128e96fd44054efc2b2eb863fab120033b2f9d453bdf5739a008ef4607682d1340f9b97b4172040cc061c1460da77cdc08c3c90020e1701cdb212413c7d6d39e782", 0x47}, {&(0x7f0000002480)="dd2d00688e324d7d2e8a50ee0fee8fac9863cbafb507f42a3f59c4482f9014d92878b43f8faf34c792d26bead0858bb166b4747a471862c940562c2fa964bc37584a1caef9140759030e184a512c2c29b16a8d70b8801506d5dae1c5badb77ef042b6dfd1ecbfa59b05af5649c0000c7e2e1df5db600aa59f8a580acd67f004a3314136e179e292c6efee6184a37f17cd51d72b645bbc7ef364d0b01f7c780d86c3af9b7435c6a46b91b936363fa9e2d1511e7d7d7dd09e30baf673a83f3ff827ebea976f2317717d8d99cec218145f0ecfa049ec5f957f09ace2cafd1c634c439", 0xe1}, {&(0x7f0000002580)="c11e8ec6f35ceaf0988d3da238ab2f6f48149c4025f3f777cf1859f6865ad7d862f0c458ed2a405a910475e85ac5e7f422ce46e835fa1b60d90af980266309e0997aff599b07bd136aff6acd38c744166ac6aefd98045bb4670a68e0c8ac80e3630c2775f44dde90bc285ce7a1886dfd6cc12200048f0031f7e8ff0423de9f0a622b92243da2d9e9cdf6a6530d3561e4091d92a737cfe7f29eb2b8e416f7e2667908e6c26092a056dce55269e7d67aafdf371bd23a7d9967", 0xb8}, {&(0x7f0000000c40)="6a4fe78e80717408a82f7f65d9e11cf6f6366a9cdfdaeeda0f33fa693ad154a0d5ac285537f3e8fa3b5ecf13ea411ab152", 0x31}, {&(0x7f0000002640)="0e726efe0260466aa0ead9dbecda619706e6cd9bcff29ad1f5004d91a2fb05b11392e942f9626c5c41987e6eb02c4f42480564c6980ae1125a48be64d715c892861f9c1038d5f17c694400d9b63c498899dfa90df2fa352ece5aae5eb67699fe096e8eda76dc6d3bcc", 0x69}, {&(0x7f00000026c0)="82ed78944a327f27887565c5e7f1f70d77f8ca7933f5a548a5e22d356008390a3a15a2f1fc30ba3f508a547e0f2086949768ef8e54125756d27e01ea087ae2d0cfccc274f0943de42479a3bab8772a631e988b72297fdbd226198cc24aba981cabb3048573c3e6911ee053c7ea93ddfee3d4dd574601867bdd8311451fb4580cfa22a368bbaad5478a6a285e063bd11b83b78c850c389d41f2e0de7bea694265e467ebe080ac9b9a6c00475eb4d7db55b1094d18", 0xb4}, {&(0x7f0000002780)="bdd21cfe9bc9bd8025fddcf4bcf46ffc30fc14f5d0c03b36ab83c114271a260f48d247721c964e4740e396bf3e84b797b3e91271de9dea89f0c5b041e84d923799a8c026e5ff948e7397e4ed51bf28fd54cdd2c75ed459eca4ec2d1ce8dc5fcfbf4c7c6ddd94ff4aee94d2cfa3dc23bafd36d02288c7657d216400fc9714ca77a2754ba6b5571a1907bafa71d027cf11b0f2d93b155408e4b0089610d9dfb7423b7c29d45721c2e00a2ccb196e", 0xad}], 0x9, 0x0, 0x0, 0x10}}], 0x3, 0x20000005) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x3f, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x565) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500219c01a5235a1c7c8ca2b01020301090212000101ff10020904418b00ffffff04"], &(0x7f00000003c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x310, 0xa, 0x1, 0x8, 0x40, 0x18}, 0x0, 0x0}) ftruncate(r0, 0x84) 8.100356161s ago: executing program 1 (id=1806): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x2, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x81, 0x402) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000280)) r2 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x47d3cfea637418b1) read(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x34, r3, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x19, 0x4, @udp='udp:syz0\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20004905}, 0x10) 8.029661047s ago: executing program 3 (id=1807): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x80, &(0x7f0000000600)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xee01}}, 0x1, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@getchain={0x3c, 0x66, 0x100, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x2, 0xffff}, {0xfff3, 0x8}, {0xe, 0xe}}, [{0x8, 0xb, 0xe0000000}, {0x8, 0xb, 0x7}, {0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x3, 0xd}, {0xfff2, 0xfff1}, {0xf, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) mknodat$null(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x4a0, 0x103) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r8 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) fstat(r8, 0x0) read$FUSE(r7, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f00000001c0)={0x50, 0x0, r9}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="260000000000000093"], 0x20) syz_fuse_handle_req(r7, &(0x7f0000004340)="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", 0x2000, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x9, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100010e, 0x0, 0x6000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) 7.708669081s ago: executing program 0 (id=1809): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x58, &(0x7f0000000300)) io_setup(0xffff, &(0x7f0000000100)) 7.525155136s ago: executing program 3 (id=1810): syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x0, 0x10100}, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x9a, &(0x7f0000000440)={0x0, 0xa053, 0x0, 0x0, 0x40000330}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) (fail_nth: 1) 7.182403901s ago: executing program 2 (id=1811): unshare(0x400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r1, &(0x7f0000001100)={0xa, 0x4e21, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, 0x1c) r2 = eventfd(0x4) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="582e825a987d28d5297982f01700000010000104", @ANYRES32=0x0, @ANYRES8=0x0], 0x58}}, 0x4035) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200), 0x101300, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8440, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f0000000000)={0xf, 0x5, 0x8}) ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, 0x0) fdatasync(r4) writev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="50c7433b33e84dc3000000000000000000000000c2ba3ae2e8c55fc4f91ae7e1b71096f2dcd661e6b9a42eab20a73fcd1105d8d277cbdbaf76bc29840596ea86d1f391c78103ce623b69550974249c7f176712913f4555aed569831fce761a989e07a24bf14e02a651c681acc93db8", @ANYRES32=0x0, @ANYBLOB="000000000cc0000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="008000000802040008001f0001000000"], 0x50}, 0x1, 0x0, 0x0, 0xc00c010}, 0x2400c000) 6.75031996s ago: executing program 2 (id=1814): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201010200000010f3044d0740fa0102030109022400010103300509040008010301010122b00b09058103120002bac2b207000000000000"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00010d000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="01a044daf0e128f9f682a7c30400"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x0, 0x2000000}, 0x20) r3 = syz_io_uring_setup(0x466c, &(0x7f0000000380)={0x0, 0x0, 0x10100}, &(0x7f0000001340), &(0x7f0000000140)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000002c5cde5b6d391dc27630a41d78664bcb8cb12e251254015ce1efec2090932e9ce992a06376ead0fa6f8b8ef1ea293c3f5a64b8be5d1d25d0e2769eb6", @ANYRES16=r6, @ANYBLOB="910e2dbd7000fbdbdf250f000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000001) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="c8010000100033060000000000000000ffffffff000000000000000000000000ac141400"/64, @ANYRES32=0x0, @ANYBLOB="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"], 0x1c8}}, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000005580)='/sys/kernel/vmcoreinfo', 0x0, 0x0) sendfile(r4, r8, 0x0, 0x1335f0a6) socket$inet_udplite(0x2, 0x2, 0x88) write$binfmt_script(r8, &(0x7f0000000300)={'#! ', './file0', [{0x20, '\xe2.{'}], 0xa, "3390a7cc65a4ea59673aed88b64a927f421cd365b10f3f48c143c5ac6726691f4c6bd2809bcb5cd326bfc32085ffd01372a77744b674ba71a2d9d3b6b1bd84fdfaeeb2280ffb23e482fcec463b5f"}, 0x5d) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, 0xffffffffffffffff, 0x3ea0b000) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0xfffffffffffffd74) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = syz_open_dev$video4linux(&(0x7f0000000400), 0x6, 0x111000) ioctl$VIDIOC_SUBDEV_S_FMT(r9, 0xc0585605, &(0x7f0000002700)={0x1, 0x0, {0x0, 0x0, 0x3010, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'lo\x00'}) 6.49664638s ago: executing program 1 (id=1815): syz_io_uring_setup(0x4733, &(0x7f0000000340)={0x0, 0xf8b5, 0x20, 0x4}, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000100)={0x0, 0x5, 0x577, {0x763039aa, 0x114}, 0x10, 0x5}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x9a, &(0x7f0000000440)={0x0, 0xa053, 0x0, 0x0, 0x40000330}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) r6 = memfd_create(&(0x7f00000005c0)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\xae\x00\x00\x00\x00\x00\xff\xff\x10\x04\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5U\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262-\x00\x00\x00\x00\xc8X\xdaNz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x00\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[R\xc36b\xa2]\xed\xe8\xb0\xfa\"\xa2\xd27)\xd5yQ\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x00P\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8fC\x91W\xadi\x00\xf2k\xd5v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x1a\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\xf0V\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\xf6]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1n 1\x8d \xc1\xaf\x19\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v-\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xf2\xb5K\x03\x85\x92k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00KT2\x1b\x16=\x10\xd3\x9a\xf0\xbf\x00\x00\x00\x00\x00\x00\x00', 0x2) fcntl$addseals(r6, 0x409, 0x12) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r6, 0xd21d000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 6.181942812s ago: executing program 3 (id=1816): socket(0x10, 0x80003, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2000000, 0xe2001) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x40042, 0x101) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x2000, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0xfffffffffffffff8]}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r6, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') pread64(r7, &(0x7f0000000280)=""/70, 0x46, 0xbbf9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="010f060000000000000010"], 0x14}, 0x1, 0x0, 0x0, 0x1021}, 0x4000000) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="08010000", @ANYRES16=r9, @ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0x10}, 0x40040) openat(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/pids.max\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r10 = gettid() setpgid(0x0, r10) 4.690493693s ago: executing program 1 (id=1818): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000003440)=[{&(0x7f00000023c0)="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", 0xc57}], 0x1}}], 0x1, 0x40040d0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x80000) dup2(r1, r0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x5c, r5, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.646532953s ago: executing program 3 (id=1819): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = syz_usb_connect(0x5, 0x4a, &(0x7f0000000600)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000400)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x58, &(0x7f0000000200)=ANY=[@ANYBLOB="5200004eb54738640675088678a61608b51dce9b39860157e81d50ade97e00bb777c15e1435f53c72ccb16563baf03608cc8c505e0150f095ee2722341ec994767cce0db81df55e14bffc96eff1119"]) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff9, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = eventfd2(0xfffffffc, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) ppoll(&(0x7f0000000100)=[{r5, 0x1500}], 0x1, 0x0, 0x0, 0x0) io_submit(r6, 0x1, &(0x7f0000000880)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x9, r5, 0x0, 0x0, 0x9, 0x0, 0x1, r5}]) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xffff0000, 0x80000001, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x4, 0x8, 0x80000001, 0x14, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) r11 = dup2(r10, r10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f0000000300)={0xfffffffb, 0x2, 0x1, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r11, 0xc02c5341, &(0x7f00000004c0)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0xd2f, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r12, {0xf000, 0xffff}, {}, {0xfff2}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x20000800) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r13 = socket$packet(0x11, 0x3, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 4.359292017s ago: executing program 1 (id=1820): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) readv(r4, &(0x7f0000000600)=[{&(0x7f0000000500)=""/174, 0xae}], 0x1) r6 = dup3(r4, r5, 0x0) preadv(r6, &(0x7f0000000280)=[{&(0x7f0000000100)=""/24, 0x30}, {0x0, 0x2}], 0x2, 0x0, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="80000000100003040000", @ANYRES32=0x0, @ANYBLOB="0000000000000000500012800b0001006d61637365630000400002803a0002404e200000080005000300000005000c002400000005000b000c000000060002404e2000000c000100f30000000000000008000500090000", @ANYRES32=r8, @ANYBLOB="08000500", @ANYRES32=r8], 0x80}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000020000100000000000000000002000000000000020000000008000400fbffffff08000d"], 0x2c}}, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRESHEX, @ANYBLOB="00000000000000f5270112800b0019006d616373656300001800e3cf45f6610a3313000400040000b6e8ea4e3c911fe7146f1e652ad67b6f49f080d6d0287d5629303d0ef281ed539f6fb76352e5d0aa8c344b52d7554b3d80f70a37dada0371d8d5c3af03000000000000000000005e4a6c4121a641e3d005e545ac162bab2064b435421038dc69ca3e68d2af14a395dcf4fc30a96d1b376dddc4d958783e957f454aaf6c"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4001) sendmsg$NFT_BATCH(r9, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000400)=ANY=[@ANYRES64=r0, @ANYBLOB="31cce3166faf5801e1353dde958a99191a23dd10dd75f5486d82555811c02c236de1307d7ee8e24608b1cf9dd0a6ad1209dbe24e93ba259f1239e42d2c5003d3209789546bdb1eee744607e13d55175464232ee3ed349c37cfeee7a311770e9f35e17a0280dbbca961575fce33fbcb8038d2bd26c29769201e153f00e2c34d78e1622aaa92119076d658fcd8a68152e1f580338b8ce9f3e7b10e612dee9207f9ebafd6c92cbab65a43fd170d6a357c083e5d3923e6758c56e57699be6735466c41f97af7f87ad7ce17f70a1114181086034ad7d6c3189219ff971d11eea2c63eb92a363fbc777ee1", @ANYRESOCT=r9, @ANYRESDEC=r0], 0x68}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$rxrpc(0x21, 0x2, 0xa) r11 = socket(0x2b, 0x80801, 0x1) connect$inet6(r11, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000ec0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x398, 0x0, 0xc0, 0x330, 0x1a8, 0xc0, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x6, 0x0, {[{{@ip={@loopback, @loopback, 0xffffffff, 0xff, 'netdevsim0\x00', '\x00', {0xff}, {0xff}, 0x2e, 0x0, 0x40}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0xa}}}, {{@ip={@local, @local, 0xff, 0xffffff00, 'netpci0\x00', 'wg1\x00', {}, {}, 0xc, 0x1, 0xa}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x8, 0x5}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2b}, @loopback, 0xff000000, 0xff000000, 'wg1\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x0, 0x6, 0x4b}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x9, 0xfffffffe, @multicast2, 0x4e23}}}, {{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x10}, 0xff000000, 0xffffffff, 'ipvlan1\x00', 'veth0_macvtap\x00', {0xff}, {}, 0x6c, 0x0, 0x41}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x3, 0xc, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x9b, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) semget$private(0x0, 0x4000000009, 0x208) 3.184514542s ago: executing program 0 (id=1822): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6(0x10, 0x80000, 0x3) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r4, &(0x7f00000001c0)='T', 0x1, 0x20008945, &(0x7f0000000280)={0xa, 0x4e22, 0xc8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000300)={0xfffffffffffffec3, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000340)={0x28, 0x2, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f0000000200)={0x28, 0x1, r7, r6, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4000}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x9, 0x0, &(0x7f0000000500)=[{0x4, 0x3, 0x7, 0xc}, {0x1, 0x5, 0x5, 0xc}, {0x5, 0x1, 0x8, 0xa}, {0x2, 0x1, 0xe, 0xa}, {0x4, 0x2, 0x1, 0x9}, {0x3, 0x1, 0x11, 0x3}, {0x5, 0x4, 0x3, 0xa}, {0x5, 0x2, 0x3, 0x8}, {0x3, 0x2, 0x3, 0xc}], 0x10, 0x746, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x3, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000380)) socket(0x2, 0x6, 0x0) socket$unix(0x1, 0x2, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) 2.717752595s ago: executing program 0 (id=1823): syz_usb_connect(0x3, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000095e7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d240601010302000100060006092403050503060581092403060103"], 0x0) syz_usb_connect(0x3, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000095e7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d240601010302000100060006092403050503060581092403060103"], 0x0) (async) 2.571888297s ago: executing program 4 (id=1824): request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10s\x00'/18, 0x0) 2.341133803s ago: executing program 2 (id=1825): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x188, 0x10, 0x801, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, 0xb}, [@IFLA_AF_SPEC={0x168, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8, 0xa00}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8}]}}, @AF_INET6={0x40, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x94, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @empty}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x20}]}, @AF_MPLS={0x4}]}]}, 0x188}}, 0x0) 2.340400605s ago: executing program 4 (id=1826): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2.223486669s ago: executing program 4 (id=1827): socket$kcm(0x21, 0x2, 0x2) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000480)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r4, 0xfff) accept4(r4, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x18, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000001400010000000000000000000a38a100", @ANYRES32=0x0, @ANYBLOB="14000100ff0500000000000000000000000000010800080002040000c1e723ade800c99e9aebd68aa4b9df933cfe6e93b6cf8888bd08c756918ece079b4e054870b61861d14d9d48b8a08cfd5f8bfeb88fe3d1886538649acaea76e4ee53a811fcc6f5a0b32141ce70c28ad50b79ed858483221811a7ca895a5af22294965ab1e94a10c291322ae5dc44f854b9057e477f9eef7714ce024430"], 0x34}}, 0x4000010) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@bridge_delvlan={0x28, 0x71, 0x100, 0x70bd25, 0x25dfdbfb, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x13}}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1b488b507362ba8b}, 0x40040) 2.186786582s ago: executing program 2 (id=1828): r0 = syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x0, 0x10100}, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x8, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xc, 0x4, 0x4, 0xfffffc01, 0x0, r3, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x13}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xb0}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_io_uring_setup(0x1de9, &(0x7f0000000440)={0x0, 0xa053, 0x0, 0x0, 0x40000330}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x4e23, 0x4000}, {@in=@remote, 0x4d3, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @empty}, {0x0, 0x4, 0x400000000000}, {0x100000000000000}, {}, 0xfffffffc, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x4128d39cb527b83c}}]}, 0x144}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r10, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x104, 0x0, 0x1, [], [], [0x0, 0x0, 0x0, 0xfffffffc]}) r11 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r11, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r11, 0xd000943e, &(0x7f0000000700)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000001900)={{r12, 0x0, 0xe41, 0x4, 0x8001, 0x785b6bf3, 0xffffffffffffffff, 0x3, 0x1ff, 0xc, 0xfffffff8, 0x9a8e, 0x0, 0x1, 0xffffffffffffcdda}}) sendto$inet6(r11, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r11, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x4}, 0x8) io_uring_enter(r6, 0x3def, 0xa4ba, 0x36, &(0x7f0000000540)={[0x401]}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x3}, 0x8) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.422516072s ago: executing program 3 (id=1829): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) syz_usb_connect(0x3, 0x71, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) syz_usb_connect(0x3, 0x71, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) (async) 1.135989512s ago: executing program 0 (id=1830): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7050000000000006110440000000000dc0500001000000095000000000000009abb1723bf24203831c9545b21c751ee4024f479cbe4b89f9808837203000000000000c2d182c7a3221481f5009edaf5f5ac058299e10e790a198f42a715b99fb3d2a73dd025848710155ad1efd7d991408000000000000085a0db0401fa29e075b7ab0408a0d8cfceeb23465bb027ee1151c02af21d8f9aa57e673a6724441d08087aff070eda8abef22b3a806c8226f5a2886c93bd29b37252ba4a6e9cc5f69e75680c431aa855e487ae513abd6c4ee973fce29a26018ed5e0780f8778a602a3533a3dac7da4fe491edf3abfa7bf871c58848ac46ada6776bd9b85df01e626026a59ddfa7a9c879acbfb0bf426785dec7d8611dc850df49ed8633bdb83dd505fb20649f53841a0e200c91f5bf1bb186ed87efc7b6f8859d029c8376ca19265e281fea0a6fd2222f8850c8445758503ede0ce1b3f73ecd8989e8c53c5e679b13802bddf80f3b1d07d6d68bfa12ab34697d40ac1150a842f8bb381344b994c19642a10eb30845a993daaa8bd4aebc595475feb3475d8e802498382e73edb98fcf2df96ab3c870490c4"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x2401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000000c0)={0x5}, 0x4) (async) sendto$inet6(r0, &(0x7f0000000080)="b927db", 0x3, 0x40, &(0x7f0000000140)={0xa, 0x4e23, 0x800, @loopback}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x144, 0x144, 0x7, [@decl_tag={0x9, 0x0, 0x0, 0x11, 0x3, 0x8}, @union={0x9, 0x1, 0x0, 0x5, 0x1, 0x5, [{0xf, 0x23, 0x9}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xa, 0x3}]}, @var={0xb, 0x0, 0x0, 0xe, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4, 0x101}}, @struct={0x2, 0x9, 0x0, 0x4, 0x1, 0x963, [{0xb, 0x3, 0xfff}, {0x7, 0x4, 0x1}, {0xf, 0x4}, {0xe, 0x0, 0x19}, {0x8, 0x3, 0x2}, {0xb, 0x1, 0x23d71a54}, {0x8, 0x3, 0x4}, {0xa, 0x2, 0xb6}, {0xa, 0x3, 0x9}]}, @enum64={0x3, 0x4, 0x0, 0x13, 0x0, 0x2, [{0x10, 0x3, 0x9}, {0x5, 0x85a6, 0xc85}, {0xa, 0x2, 0x1}, {0x1, 0x1, 0x5}]}, @var={0x4, 0x0, 0x0, 0xe, 0x2}, @const={0xa, 0x0, 0x0, 0xa, 0x2}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x5, 0x4}]}, {0x0, [0x0, 0x30, 0x51, 0x30, 0x61]}}, &(0x7f0000000300)=""/105, 0x163, 0x69, 0x0, 0x7, 0x0, @void, @value}, 0x28) 1.134544165s ago: executing program 4 (id=1831): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000140), 0xa, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x17, 0x3, 0x1, 0x8000, 0xee73, 0xb, 0x8000, 0xa, 0x40}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r3, 0x401, 0x709d23, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x8000008}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040090}, 0x4140) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010300000000000000002d"], 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x0) 962.320777ms ago: executing program 2 (id=1832): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000a80)=ANY=[@ANYBLOB="cc010000a6dc34401d0620c0de2febc6021b000100000000090400000193b281000905051300000000"], 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x3b677000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000a80)=ANY=[@ANYBLOB="cc010000a6dc34401d0620c0de2febc6021b000100000000090400000193b281000905051300000000"], 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x3b677000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) 899.466492ms ago: executing program 0 (id=1833): syz_emit_ethernet(0x86, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x50, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa198", 0x0, 0x3c, 0x0, @ipv4, @ipv4={'\x00', '\xff\xff', @loopback}, [@srh={0x2f, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @empty}]}, @fragment]}}}}}}}, 0x0) listen(0xffffffffffffffff, 0x5) 850.064538ms ago: executing program 1 (id=1834): syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r1, 0x9, 0x0) (async) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000040)=0x8001, 0x4) (async) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r0, &(0x7f00000014c0), 0x0}, 0x20) 562.379311ms ago: executing program 0 (id=1835): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040ef1762600000b1dbadcf8200000001090224000100008007090400000103000000092100000001220300090581030000060500"], 0x0) syz_open_dev$video(&(0x7f00000004c0), 0x81, 0xa082) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) ioctl$SG_SCSI_RESET(r1, 0x227b, 0x1000000000000) io_setup(0x6, &(0x7f0000001380)) (async) io_setup(0x6, &(0x7f0000001380)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') r4 = openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r4, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7fffffff, 0x3a, '/_', 0x3a, '\\xAK-^{', 0x3a, './file0'}, 0x30) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) (async) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x3, {[@global=@item_012={0x2, 0x1, 0x1, "d442"}]}}, 0x0}, 0x0) 556.643124ms ago: executing program 4 (id=1836): ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x109142, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x8000) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000100)) (async) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2000c080) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) sendmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000240)="62a1b1f64d9edb1e537e07a5f32034dd5b7ae40278b3c13cdfb5cd398c2450745b", 0x21}], 0x1, 0x0, 0x0, 0x20004001}, 0x850) (async, rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000017c0)=@newsa={0x184, 0x10, 0x633, 0x0, 0x10, {{@in6=@private2, @in6=@dev={0xfe, 0x80, '\x00', 0x1c}, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {@in6=@loopback, 0xfffffffd, 0x32}, @in=@private=0xa010101, {0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x5}, {}, 0x2, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_aead={0x4c, 0x12, {{'morus1280\x00'}, 0x0, 0x80}}]}, 0x184}}, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="b800"], 0xb8}}, 0x0) (async, rerun: 64) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x48, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000640)=0x4) (async) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x41, 0x3, 0x3, '\x00', 0x8}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14.388985ms ago: executing program 1 (id=1837): syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x0, 0x10100}, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x9a, &(0x7f0000000440)={0x0, 0xa053, 0x0, 0x0, 0x40000330}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x20, 0xe, 0x0, 0x0) 0s ago: executing program 4 (id=1838): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)='\x00\x00\x00\x00', 0x4, 0x0, &(0x7f0000000480)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @local}, 0x14) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00229402118fe754cb49f5c5ef4ceb9ff10f00000026419d0b45501821b3b775e7cd7584850f88c808f83e8ce89e3b35ed9edb9fd066b402e379890427814009943b0619eaf1021ac051c13ef39bc6c1cda6b290c8c5dbbef6cf02a86e24a4ffd87588acfcb35ff0d98b95d8fcbbf97b1e02e5b27db851d5fb7b20b34119a87270cd1a3c4f986c156bab39c8137795d9de5d052b565620d9197ef127fbe3818467c6f2556197cf442e540f959f8fb20322a61c1d9c656ed32b76cddeb472042f5c14dbd7ef047009ec0e91315e449b92fc2df3984d032707e7f2b1e87578d33005cf7fa70234b88fe00000000000000000"], 0x0}, 0x0) kernel console output (not intermixed with test programs): [ T5172] usb 1-1: USB disconnect, device number 107 [ 482.109015][T11046] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 482.613455][ T5172] usb 1-1: new full-speed USB device number 108 using dummy_hcd [ 482.774945][ T5172] usb 1-1: device descriptor read/64, error -71 [ 482.844921][T11064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1460'. [ 483.035029][ T5172] usb 1-1: new full-speed USB device number 109 using dummy_hcd [ 483.184526][ T5172] usb 1-1: device descriptor read/64, error -71 [ 483.334994][ T5172] usb usb1-port1: attempt power cycle [ 483.604115][T11071] FAULT_INJECTION: forcing a failure. [ 483.604115][T11071] name failslab, interval 1, probability 0, space 0, times 0 [ 483.704540][T11071] CPU: 1 UID: 0 PID: 11071 Comm: syz.3.1471 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 483.704564][T11071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 483.704574][T11071] Call Trace: [ 483.704580][T11071] [ 483.704588][T11071] dump_stack_lvl+0x189/0x250 [ 483.704621][T11071] ? __pfx_dump_stack_lvl+0x10/0x10 [ 483.704651][T11071] ? __pfx__printk+0x10/0x10 [ 483.704672][T11071] ? __pfx___might_resched+0x10/0x10 [ 483.704687][T11071] ? fs_reclaim_acquire+0x7d/0x100 [ 483.704713][T11071] should_fail_ex+0x414/0x560 [ 483.704738][T11071] should_failslab+0xa8/0x100 [ 483.704761][T11071] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 483.704782][T11071] ? __pfx_nf_tables_abort+0x10/0x10 [ 483.704801][T11071] ? __alloc_skb+0x112/0x2d0 [ 483.704823][T11071] __alloc_skb+0x112/0x2d0 [ 483.704846][T11071] netlink_ack+0x146/0xa50 [ 483.704869][T11071] ? __kasan_kmalloc+0x93/0xb0 [ 483.704896][T11071] nfnetlink_rcv+0x22a0/0x2530 [ 483.704942][T11071] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 483.704965][T11071] ? stack_depot_save_flags+0x40/0x910 [ 483.705033][T11071] ? netlink_deliver_tap+0x2e/0x1b0 [ 483.705052][T11071] ? netlink_deliver_tap+0x2e/0x1b0 [ 483.705074][T11071] netlink_unicast+0x758/0x8d0 [ 483.705099][T11071] netlink_sendmsg+0x805/0xb30 [ 483.705125][T11071] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.705147][T11071] ? aa_sock_msg_perm+0x94/0x160 [ 483.705165][T11071] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 483.705183][T11071] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.705203][T11071] __sock_sendmsg+0x219/0x270 [ 483.705222][T11071] ____sys_sendmsg+0x505/0x830 [ 483.705248][T11071] ? __pfx_____sys_sendmsg+0x10/0x10 [ 483.705277][T11071] ? import_iovec+0x74/0xa0 [ 483.705296][T11071] ___sys_sendmsg+0x21f/0x2a0 [ 483.705320][T11071] ? __pfx____sys_sendmsg+0x10/0x10 [ 483.705367][T11071] ? __fget_files+0x2a/0x420 [ 483.705386][T11071] ? __fget_files+0x3a0/0x420 [ 483.705413][T11071] __x64_sys_sendmsg+0x19b/0x260 [ 483.705453][T11071] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 483.705487][T11071] ? do_syscall_64+0xba/0x210 [ 483.705510][T11071] do_syscall_64+0xf6/0x210 [ 483.705530][T11071] ? clear_bhb_loop+0x45/0xa0 [ 483.705548][T11071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.705563][T11071] RIP: 0033:0x7f21a998e969 [ 483.705577][T11071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.705590][T11071] RSP: 002b:00007f21aa86d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 483.705606][T11071] RAX: ffffffffffffffda RBX: 00007f21a9bb5fa0 RCX: 00007f21a998e969 [ 483.705617][T11071] RDX: 0000000000004040 RSI: 0000200000000180 RDI: 0000000000000003 [ 483.705627][T11071] RBP: 00007f21aa86d090 R08: 0000000000000000 R09: 0000000000000000 [ 483.705641][T11071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.705650][T11071] R13: 0000000000000000 R14: 00007f21a9bb5fa0 R15: 00007f21a9cdfa28 [ 483.705672][T11071] [ 484.007678][ T5172] usb 1-1: new full-speed USB device number 110 using dummy_hcd [ 484.035349][ T5172] usb 1-1: device descriptor read/8, error -71 [ 484.267460][ T5897] usb 2-1: USB disconnect, device number 113 [ 484.274682][ T5172] usb 1-1: new full-speed USB device number 111 using dummy_hcd [ 484.347660][ T5172] usb 1-1: device descriptor read/8, error -71 [ 484.516431][ T5172] usb usb1-port1: unable to enumerate USB device [ 484.733246][T11081] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 484.743333][ T5896] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 484.773242][T11083] loop2: detected capacity change from 0 to 7 [ 484.800181][ T5851] loop2: p1 [ 484.812373][ T5851] loop2: partition table partially beyond EOD, truncated [ 484.860604][ T5851] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 484.885760][ T5896] usb 3-1: device descriptor read/64, error -71 [ 485.145740][ T5896] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 485.316527][ T5896] usb 3-1: device descriptor read/64, error -71 [ 485.329808][T11083] loop2: p1 [ 485.358323][T11083] loop2: partition table partially beyond EOD, truncated [ 485.393429][T11083] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 485.469775][ T5896] usb usb3-port1: attempt power cycle [ 485.924958][ T5896] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 486.006199][ T5896] usb 3-1: device descriptor read/8, error -71 [ 486.023693][ T5851] udevd[5851]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 486.107483][ T5851] udevd[5851]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 486.256862][ T5896] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 486.315145][ T5896] usb 3-1: device descriptor read/8, error -71 [ 486.426108][ T5896] usb usb3-port1: unable to enumerate USB device [ 486.876289][T11113] FAULT_INJECTION: forcing a failure. [ 486.876289][T11113] name failslab, interval 1, probability 0, space 0, times 0 [ 486.916092][T11113] CPU: 0 UID: 0 PID: 11113 Comm: syz.4.1482 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 486.916125][T11113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 486.916139][T11113] Call Trace: [ 486.916148][T11113] [ 486.916157][T11113] dump_stack_lvl+0x189/0x250 [ 486.916197][T11113] ? __pfx_dump_stack_lvl+0x10/0x10 [ 486.916229][T11113] ? __pfx__printk+0x10/0x10 [ 486.916257][T11113] ? __pfx___might_resched+0x10/0x10 [ 486.916278][T11113] ? fs_reclaim_acquire+0x7d/0x100 [ 486.916315][T11113] should_fail_ex+0x414/0x560 [ 486.916349][T11113] should_failslab+0xa8/0x100 [ 486.916386][T11113] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 486.916414][T11113] ? __pfx_nf_tables_abort+0x10/0x10 [ 486.916440][T11113] ? __alloc_skb+0x112/0x2d0 [ 486.916471][T11113] __alloc_skb+0x112/0x2d0 [ 486.916503][T11113] netlink_ack+0x146/0xa50 [ 486.916533][T11113] ? __kasan_kmalloc+0x93/0xb0 [ 486.916569][T11113] nfnetlink_rcv+0x22a0/0x2530 [ 486.916633][T11113] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 486.916713][T11113] ? skb_clone+0x246/0x3a0 [ 486.916748][T11113] ? netlink_deliver_tap+0x2e/0x1b0 [ 486.916773][T11113] ? netlink_deliver_tap+0x2e/0x1b0 [ 486.916805][T11113] netlink_unicast+0x758/0x8d0 [ 486.916840][T11113] netlink_sendmsg+0x805/0xb30 [ 486.916876][T11113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 486.916907][T11113] ? aa_sock_msg_perm+0x94/0x160 [ 486.916931][T11113] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 486.916956][T11113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 486.916985][T11113] __sock_sendmsg+0x219/0x270 [ 486.917012][T11113] ____sys_sendmsg+0x505/0x830 [ 486.917048][T11113] ? __pfx_____sys_sendmsg+0x10/0x10 [ 486.917088][T11113] ? import_iovec+0x74/0xa0 [ 486.917114][T11113] ___sys_sendmsg+0x21f/0x2a0 [ 486.917147][T11113] ? __pfx____sys_sendmsg+0x10/0x10 [ 486.917215][T11113] ? __fget_files+0x2a/0x420 [ 486.917242][T11113] ? __fget_files+0x3a0/0x420 [ 486.917280][T11113] __x64_sys_sendmsg+0x19b/0x260 [ 486.917314][T11113] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 486.917361][T11113] ? do_syscall_64+0xba/0x210 [ 486.917398][T11113] do_syscall_64+0xf6/0x210 [ 486.917426][T11113] ? clear_bhb_loop+0x45/0xa0 [ 486.917452][T11113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.917472][T11113] RIP: 0033:0x7fa65838e969 [ 486.917491][T11113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.917508][T11113] RSP: 002b:00007fa65927b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 486.917530][T11113] RAX: ffffffffffffffda RBX: 00007fa6585b5fa0 RCX: 00007fa65838e969 [ 486.917546][T11113] RDX: 0000000000004040 RSI: 0000200000000180 RDI: 0000000000000003 [ 486.917560][T11113] RBP: 00007fa65927b090 R08: 0000000000000000 R09: 0000000000000000 [ 486.917573][T11113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.917586][T11113] R13: 0000000000000000 R14: 00007fa6585b5fa0 R15: 00007fa6586dfa28 [ 486.917617][T11113] [ 487.697998][T11129] loop2: detected capacity change from 0 to 7 [ 487.714594][ T5896] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 487.749765][T11129] loop2: p1 [ 487.757346][T11129] loop2: partition table partially beyond EOD, truncated [ 487.767393][T11129] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 487.806536][ T5897] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 487.878447][ T5896] usb 2-1: Using ep0 maxpacket: 16 [ 487.895394][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.948228][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.974431][ T5896] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 488.003951][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.049001][ T5897] usb 1-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=43.6f [ 488.070506][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.088661][ T5896] usb 2-1: config 0 descriptor?? [ 488.121487][ T5897] usb 1-1: Product: syz [ 488.132198][ T5897] usb 1-1: Manufacturer: syz [ 488.175518][ T5897] usb 1-1: SerialNumber: syz [ 488.197454][ T5897] usb 1-1: config 0 descriptor?? [ 488.222833][ T5851] udevd[5851]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 488.247367][ T5897] gspca_main: touptek-2.14.0 probing 0547:6801 [ 488.342072][T11117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.410962][T11117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.487299][T11120] vlan3: entered promiscuous mode [ 488.524263][T11120] bridge0: entered promiscuous mode [ 488.544565][ T5896] usbhid 2-1:0.0: can't add hid device: -71 [ 488.550707][ T5896] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 488.565195][T11120] vlan3: entered allmulticast mode [ 488.600019][T11120] bridge0: entered allmulticast mode [ 488.642218][ T5896] usb 2-1: USB disconnect, device number 114 [ 488.760904][ T7358] usb 1-1: USB disconnect, device number 112 [ 488.845900][ T5897] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 489.014874][ T5897] usb 5-1: Using ep0 maxpacket: 16 [ 489.032500][ T5897] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 489.068063][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 489.108403][ T5897] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 489.121444][ T5172] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 489.129268][ T5896] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 489.147723][ T5897] usb 5-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 489.162234][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.171014][ T5897] usb 5-1: Product: syz [ 489.180277][ T5897] usb 5-1: Manufacturer: syz [ 489.186115][ T5897] usb 5-1: SerialNumber: syz [ 489.211132][ T5897] usb 5-1: config 0 descriptor?? [ 489.252878][ T5897] peak_usb 5-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -8 [ 489.263486][ T5897] peak_usb 5-1:0.0: unable to read PCAN-USB serial number (err -8) [ 489.296282][ T5896] usb 2-1: config 0 has an invalid interface number: 244 but max is 0 [ 489.310620][ T5896] usb 2-1: config 0 has no interface number 0 [ 489.322303][ T5172] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 489.338972][ T5896] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 489.355560][ T5897] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -8 [ 489.366603][ T5172] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.387852][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.407325][ T5172] usb 3-1: Product: syz [ 489.435121][ T5172] usb 3-1: Manufacturer: syz [ 489.441995][ T5896] usb 2-1: Product: syz [ 489.462291][ T5172] usb 3-1: SerialNumber: syz [ 489.467810][ T5896] usb 2-1: Manufacturer: syz [ 489.497466][ T5896] usb 2-1: SerialNumber: syz [ 489.518508][ T5172] usb 3-1: config 0 descriptor?? [ 489.550805][ T5896] usb 2-1: config 0 descriptor?? [ 489.551061][T11163] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 489.569532][ T5896] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 489.583080][ T5896] dvb-usb: bulk message failed: -22 (2/0) [ 489.606460][ T5896] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 489.655783][ T5896] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 489.663950][ T5896] usb 2-1: media controller created [ 489.730685][ T5896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 489.868935][T11170] FAULT_INJECTION: forcing a failure. [ 489.868935][T11170] name failslab, interval 1, probability 0, space 0, times 0 [ 489.882788][ T5896] cxusb: set interface failed [ 489.898469][ T5896] dvb-usb: bulk message failed: -22 (1/0) [ 489.931750][T11170] CPU: 1 UID: 0 PID: 11170 Comm: syz.0.1501 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 489.931782][T11170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 489.931796][T11170] Call Trace: [ 489.931804][T11170] [ 489.931815][T11170] dump_stack_lvl+0x189/0x250 [ 489.931854][T11170] ? __pfx_dump_stack_lvl+0x10/0x10 [ 489.931886][T11170] ? __pfx__printk+0x10/0x10 [ 489.931916][T11170] ? __pfx___might_resched+0x10/0x10 [ 489.931936][T11170] ? fs_reclaim_acquire+0x7d/0x100 [ 489.931977][T11170] should_fail_ex+0x414/0x560 [ 489.932012][T11170] should_failslab+0xa8/0x100 [ 489.932043][T11170] __kmalloc_noprof+0xcb/0x4f0 [ 489.932069][T11170] ? kfree+0x4d/0x440 [ 489.932090][T11170] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 489.932122][T11170] tomoyo_realpath_from_path+0xe3/0x5d0 [ 489.932149][T11170] ? tomoyo_domain+0xda/0x130 [ 489.932182][T11170] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 489.932203][T11170] tomoyo_path_number_perm+0x1e8/0x5a0 [ 489.932227][T11170] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 489.932277][T11170] ? __lock_acquire+0xaac/0xd20 [ 489.932327][T11170] ? __fget_files+0x2a/0x420 [ 489.932360][T11170] ? __fget_files+0x3a0/0x420 [ 489.932394][T11170] ? __fget_files+0x2a/0x420 [ 489.932425][T11170] security_file_ioctl+0xcb/0x2d0 [ 489.932460][T11170] __se_sys_ioctl+0x47/0x170 [ 489.932486][T11170] do_syscall_64+0xf6/0x210 [ 489.932515][T11170] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 489.932535][T11170] ? clear_bhb_loop+0x45/0xa0 [ 489.932555][T11170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.932575][T11170] RIP: 0033:0x7f5ef4f8e969 [ 489.932595][T11170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.932613][T11170] RSP: 002b:00007f5ef2df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 489.932634][T11170] RAX: ffffffffffffffda RBX: 00007f5ef51b5fa0 RCX: 00007f5ef4f8e969 [ 489.932649][T11170] RDX: 0000200000000040 RSI: 000000004008ae89 RDI: 0000000000000005 [ 489.932663][T11170] RBP: 00007f5ef2df6090 R08: 0000000000000000 R09: 0000000000000000 [ 489.932676][T11170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.932687][T11170] R13: 0000000000000000 R14: 00007f5ef51b5fa0 R15: 00007f5ef52dfa28 [ 489.932720][T11170] [ 490.163539][ C1] vkms_vblank_simulate: vblank timer overrun [ 490.193798][T11170] ERROR: Out of memory at tomoyo_realpath_from_path. [ 490.203192][T11176] batman_adv: batadv0: Adding interface: dummy0 [ 490.209749][T11176] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.280978][ T5893] usb 5-1: USB disconnect, device number 6 [ 490.321896][ T5896] DVB: Unable to find symbol mt352_attach() [ 490.365823][ T5896] dvb-usb: bulk message failed: -22 (5/0) [ 490.403109][T11176] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 490.420547][ T5896] zl10353_read_register: readreg error (reg=127, ret==-121) [ 490.493909][ T5896] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 490.554475][ T5172] usb 3-1: Firmware version (0.0) predates our first public release. [ 490.610940][ T5172] usb 3-1: Please update to version 0.2 or newer [ 490.880820][ T5172] usb 3-1: USB disconnect, device number 104 [ 490.966454][ T5896] rc_core: IR keymap rc-dvico-mce not found [ 491.016815][ T5896] Registered IR keymap rc-empty [ 491.076813][ T5896] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 491.148899][ T5896] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input51 [ 491.261205][ T5896] dvb-usb: schedule remote query interval to 100 msecs. [ 491.289924][ T5896] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 491.394254][ T5896] dvb-usb: bulk message failed: -22 (1/0) [ 491.524992][ T5172] dvb-usb: bulk message failed: -22 (1/0) [ 491.562073][T11197] FAULT_INJECTION: forcing a failure. [ 491.562073][T11197] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 491.588859][T11197] CPU: 1 UID: 0 PID: 11197 Comm: syz.0.1508 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 491.588892][T11197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 491.588905][T11197] Call Trace: [ 491.588914][T11197] [ 491.588923][T11197] dump_stack_lvl+0x189/0x250 [ 491.588962][T11197] ? __lock_acquire+0xaac/0xd20 [ 491.588996][T11197] ? __pfx_dump_stack_lvl+0x10/0x10 [ 491.589027][T11197] ? __pfx__printk+0x10/0x10 [ 491.589050][T11197] ? __might_fault+0xb0/0x130 [ 491.589090][T11197] should_fail_ex+0x414/0x560 [ 491.589125][T11197] _copy_from_user+0x2d/0xb0 [ 491.589159][T11197] kstrtouint_from_user+0xc4/0x170 [ 491.589195][T11197] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 491.589245][T11197] proc_fail_nth_write+0x88/0x240 [ 491.589275][T11197] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 491.589309][T11197] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 491.589341][T11197] vfs_write+0x27b/0xa90 [ 491.589376][T11197] ? __pfx_vfs_write+0x10/0x10 [ 491.589401][T11197] ? __fget_files+0x2a/0x420 [ 491.589432][T11197] ? __fget_files+0x3a0/0x420 [ 491.589457][T11197] ? __fget_files+0x2a/0x420 [ 491.589492][T11197] ksys_write+0x145/0x250 [ 491.589515][T11197] ? rcu_is_watching+0x15/0xb0 [ 491.589537][T11197] ? __pfx_ksys_write+0x10/0x10 [ 491.589566][T11197] ? do_syscall_64+0xba/0x210 [ 491.589598][T11197] do_syscall_64+0xf6/0x210 [ 491.589626][T11197] ? clear_bhb_loop+0x45/0xa0 [ 491.589653][T11197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.589673][T11197] RIP: 0033:0x7f5ef4f8d41f [ 491.589692][T11197] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 491.589711][T11197] RSP: 002b:00007f5ef2df6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 491.589731][T11197] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5ef4f8d41f [ 491.589745][T11197] RDX: 0000000000000001 RSI: 00007f5ef2df60a0 RDI: 0000000000000004 [ 491.589758][T11197] RBP: 00007f5ef2df6090 R08: 0000000000000000 R09: 0000000000000000 [ 491.589770][T11197] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 491.589781][T11197] R13: 0000000000000000 R14: 00007f5ef51b5fa0 R15: 00007f5ef52dfa28 [ 491.589812][T11197] [ 491.814784][ C1] vkms_vblank_simulate: vblank timer overrun [ 491.826232][ T5172] dvb-usb: bulk message failed: -22 (1/0) [ 491.925927][ T5896] usb 2-1: USB disconnect, device number 115 [ 492.766452][ T5896] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 492.775959][ T5893] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 492.865020][T11211] netlink: 'syz.0.1514': attribute type 10 has an invalid length. [ 492.990410][T11211] batman_adv: batadv0: Adding interface: macvtap0 [ 493.087502][ T5893] usb 3-1: config 0 has no interfaces? [ 493.135832][T11211] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.176704][ T5893] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 493.200984][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.226225][ T5893] usb 3-1: Product: syz [ 493.230481][ T5893] usb 3-1: Manufacturer: syz [ 493.251078][ T5893] usb 3-1: SerialNumber: syz [ 493.264035][T11224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1515'. [ 493.279652][ T5893] usb 3-1: config 0 descriptor?? [ 493.353179][T11211] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 493.364387][ T5896] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 493.631836][ T5896] usb 2-1: Using ep0 maxpacket: 32 [ 493.684447][ T5896] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 493.706242][T11202] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1510'. [ 493.751334][ T5896] usb 2-1: config 0 has no interface number 0 [ 493.774868][ T5896] usb 2-1: config 0 interface 184 has no altsetting 0 [ 494.035541][T11227] program syz.4.1516 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 494.107007][ T5896] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 494.200672][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.294304][ T7358] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 494.404798][ T5896] usb 2-1: Product: syz [ 494.409049][ T5896] usb 2-1: Manufacturer: syz [ 494.444387][ T7358] usb 5-1: Using ep0 maxpacket: 32 [ 494.452360][ T7358] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.464016][ T7358] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.496210][ T7358] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 494.550944][ T7358] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.646074][ T7358] usb 5-1: config 0 descriptor?? [ 494.655217][ T7358] hub 5-1:0.0: USB hub found [ 494.764563][ T976] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 494.890669][ T5896] usb 2-1: SerialNumber: syz [ 494.924936][ T5896] usb 2-1: config 0 descriptor?? [ 494.934379][ T976] usb 1-1: Using ep0 maxpacket: 32 [ 494.943664][ T976] usb 1-1: unable to get BOS descriptor or descriptor too short [ 494.954638][ T976] usb 1-1: config 244 has an invalid interface number: 68 but max is 0 [ 494.977474][ T5896] smsc75xx v1.0.0 [ 494.978255][ T976] usb 1-1: config 244 has an invalid descriptor of length 24, skipping remainder of the config [ 495.080687][ T976] usb 1-1: config 244 has no interface number 0 [ 495.116684][ T976] usb 1-1: config 244 interface 68 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 8 [ 495.165305][ T976] usb 1-1: config 244 interface 68 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 495.204739][ T976] usb 1-1: config 244 interface 68 altsetting 3 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 495.254855][ T976] usb 1-1: config 244 interface 68 has no altsetting 0 [ 495.296638][ T976] usb 1-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=24.0f [ 495.306197][ T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.315701][ T976] usb 1-1: Product: syz [ 495.330376][ T976] usb 1-1: Manufacturer: syz [ 495.355075][ T976] usb 1-1: SerialNumber: syz [ 495.414415][T11231] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 495.605639][ T7358] hub 5-1:0.0: 1 port detected [ 495.896682][T11233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.946306][ T976] comedi comedi0: Wrong number of endpoints [ 495.983269][ T976] dt9812 1-1:244.68: driver 'dt9812' failed to auto-configure device. [ 496.041899][T11233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.156755][ T976] usb 1-1: USB disconnect, device number 113 [ 496.199193][T11226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.319887][T11226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.589510][ T7358] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 496.649523][ T7358] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 496.799276][ T7358] usbhid 5-1:0.0: can't add hid device: -71 [ 496.823679][ T7358] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 496.899128][ T7358] usb 5-1: USB disconnect, device number 7 [ 497.193485][ T7358] usb 3-1: USB disconnect, device number 105 [ 498.004346][ T7358] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 498.168125][ T7358] usb 5-1: config 0 has an invalid interface number: 244 but max is 0 [ 498.214318][ T7358] usb 5-1: config 0 has no interface number 0 [ 498.247112][ T7358] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 498.284718][ T7358] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.313482][ T7358] usb 5-1: Product: syz [ 498.341645][ T7358] usb 5-1: Manufacturer: syz [ 498.369408][ T7358] usb 5-1: SerialNumber: syz [ 498.395687][ T7358] usb 5-1: config 0 descriptor?? [ 498.438123][ T5896] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 498.438658][ T7358] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 498.484638][ T5896] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 498.649729][ T5896] usb 2-1: USB disconnect, device number 116 [ 498.659088][ T7358] dvb-usb: bulk message failed: -22 (2/0) [ 498.733010][ T7358] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 498.793000][ T7358] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 498.843602][ T7358] usb 5-1: media controller created [ 498.902211][T11252] FAULT_INJECTION: forcing a failure. [ 498.902211][T11252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 498.970050][ T7358] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 498.986512][T11252] CPU: 1 UID: 0 PID: 11252 Comm: syz.1.1525 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 498.986545][T11252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 498.986558][T11252] Call Trace: [ 498.986567][T11252] [ 498.986576][T11252] dump_stack_lvl+0x189/0x250 [ 498.986613][T11252] ? __lock_acquire+0xaac/0xd20 [ 498.986653][T11252] ? __pfx_dump_stack_lvl+0x10/0x10 [ 498.986685][T11252] ? __pfx__printk+0x10/0x10 [ 498.986708][T11252] ? __might_fault+0xb0/0x130 [ 498.986748][T11252] should_fail_ex+0x414/0x560 [ 498.986783][T11252] _copy_from_user+0x2d/0xb0 [ 498.986808][T11252] kvm_arch_vcpu_ioctl+0x4ae/0x2a10 [ 498.986836][T11252] ? kvm_arch_vcpu_ioctl+0x46e/0x2a10 [ 498.986857][T11252] ? __lock_acquire+0xaac/0xd20 [ 498.986887][T11252] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 498.986919][T11252] ? __lock_acquire+0xaac/0xd20 [ 498.986972][T11252] ? is_bpf_text_address+0x26/0x2b0 [ 498.987008][T11252] ? is_bpf_text_address+0x292/0x2b0 [ 498.987037][T11252] ? is_bpf_text_address+0x26/0x2b0 [ 498.987070][T11252] ? kernel_text_address+0xa5/0xe0 [ 498.987100][T11252] ? __kernel_text_address+0xd/0x40 [ 498.987128][T11252] ? unwind_get_return_address+0x4d/0x90 [ 498.987155][T11252] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 498.987179][T11252] ? arch_stack_walk+0xfc/0x150 [ 498.987221][T11252] ? stack_trace_save+0x9c/0xe0 [ 498.987248][T11252] ? stack_depot_save_flags+0x40/0x910 [ 498.987299][T11252] ? __lock_acquire+0xaac/0xd20 [ 498.987336][T11252] ? __mutex_trylock_common+0x153/0x260 [ 498.987362][T11252] ? __pfx___mutex_trylock_common+0x10/0x10 [ 498.987391][T11252] ? rcu_is_watching+0x15/0xb0 [ 498.987412][T11252] ? trace_contention_end+0x39/0x120 [ 498.987435][T11252] ? __mutex_lock+0x330/0xe80 [ 498.987469][T11252] ? kasan_quarantine_put+0xdd/0x220 [ 498.987495][T11252] ? kvm_vcpu_ioctl+0x22c/0xe90 [ 498.987528][T11252] ? __pfx___mutex_lock+0x10/0x10 [ 498.987555][T11252] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 498.987581][T11252] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 498.987600][T11252] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 498.987621][T11252] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 498.987665][T11252] kvm_vcpu_ioctl+0x74b/0xe90 [ 498.987702][T11252] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 498.987734][T11252] ? __lock_acquire+0xaac/0xd20 [ 498.987783][T11252] ? __fget_files+0x2a/0x420 [ 498.987817][T11252] ? __fget_files+0x3a0/0x420 [ 498.987843][T11252] ? __fget_files+0x2a/0x420 [ 498.987874][T11252] ? bpf_lsm_file_ioctl+0x9/0x20 [ 498.987902][T11252] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 498.987933][T11252] __se_sys_ioctl+0xf9/0x170 [ 498.987958][T11252] do_syscall_64+0xf6/0x210 [ 498.987988][T11252] ? clear_bhb_loop+0x45/0xa0 [ 498.988013][T11252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.988033][T11252] RIP: 0033:0x7f93a618e969 [ 498.988051][T11252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 498.988071][T11252] RSP: 002b:00007f93a6f62038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 498.988093][T11252] RAX: ffffffffffffffda RBX: 00007f93a63b5fa0 RCX: 00007f93a618e969 [ 498.988109][T11252] RDX: 0000200000000040 RSI: 000000004008ae89 RDI: 0000000000000005 [ 498.988122][T11252] RBP: 00007f93a6f62090 R08: 0000000000000000 R09: 0000000000000000 [ 498.988135][T11252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.988148][T11252] R13: 0000000000000000 R14: 00007f93a63b5fa0 R15: 00007f93a64dfa28 [ 498.988180][T11252] [ 500.186284][ T7358] cxusb: set interface failed [ 500.210754][ T7358] dvb-usb: bulk message failed: -22 (1/0) [ 500.360664][ T7358] DVB: Unable to find symbol mt352_attach() [ 500.376363][ T7358] dvb-usb: bulk message failed: -22 (5/0) [ 500.396931][ T7358] zl10353_read_register: readreg error (reg=127, ret==-121) [ 500.438492][ T7358] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 500.454614][ T5896] usb 3-1: new full-speed USB device number 106 using dummy_hcd [ 500.545415][T11266] netlink: 'syz.3.1530': attribute type 1 has an invalid length. [ 500.585297][T11266] netlink: 'syz.3.1530': attribute type 2 has an invalid length. [ 500.663882][ T5896] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 500.687567][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.729068][ T5896] usb 3-1: config 0 descriptor?? [ 500.894958][ T5893] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 501.064576][ T7358] rc_core: IR keymap rc-dvico-mce not found [ 501.070624][ T7358] Registered IR keymap rc-empty [ 501.085597][ T7358] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 501.128181][ T5893] usb 1-1: config 0 has no interfaces? [ 501.146213][ T7358] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input52 [ 501.183316][ T5896] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 501.214722][ T7358] dvb-usb: schedule remote query interval to 100 msecs. [ 501.222009][ T7358] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 501.253150][ T5893] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 501.270685][ T5896] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 501.301305][ T7358] usb 5-1: USB disconnect, device number 8 [ 501.588727][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.595461][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.604865][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.643115][ T5896] [drm:udl_init] *ERROR* Selecting channel failed [ 501.649996][ T5893] usb 1-1: Product: syz [ 501.660675][ T5893] usb 1-1: Manufacturer: syz [ 501.675666][ T5893] usb 1-1: SerialNumber: syz [ 501.699566][ T5896] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 501.747937][ T5893] usb 1-1: config 0 descriptor?? [ 501.796592][ T5896] [drm] Initialized udl on minor 2 [ 501.820866][ T5896] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 501.986083][ T5896] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 501.996657][ T5893] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 502.046569][ T7358] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 502.065158][ T5896] usb 3-1: USB disconnect, device number 106 [ 502.088463][ T5893] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 502.151999][ T5893] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 503.125124][ T5893] usb 3-1: new full-speed USB device number 107 using dummy_hcd [ 503.274927][ T5893] usb 3-1: device descriptor read/64, error -71 [ 503.540189][ T5893] usb 3-1: new full-speed USB device number 108 using dummy_hcd [ 503.688536][T11316] netlink: 'syz.4.1542': attribute type 1 has an invalid length. [ 503.704532][ T5893] usb 3-1: device descriptor read/64, error -71 [ 503.730704][T11316] netlink: 'syz.4.1542': attribute type 2 has an invalid length. [ 503.851788][ T5893] usb usb3-port1: attempt power cycle [ 504.017899][ T7358] usb 1-1: USB disconnect, device number 114 [ 504.214473][ T5893] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 504.258655][ T5896] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 504.275596][ T5893] usb 3-1: device descriptor read/8, error -71 [ 504.461147][ T5896] usb 5-1: config 0 has an invalid interface number: 244 but max is 0 [ 504.482185][ T5896] usb 5-1: config 0 has no interface number 0 [ 504.535016][ T5893] usb 3-1: new full-speed USB device number 110 using dummy_hcd [ 504.678194][ T5896] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 504.687462][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.696996][ T5893] usb 3-1: device descriptor read/8, error -71 [ 504.778099][ T5896] usb 5-1: Product: syz [ 504.828754][ T5893] usb usb3-port1: unable to enumerate USB device [ 504.841342][ T5896] usb 5-1: Manufacturer: syz [ 504.861475][ T5896] usb 5-1: SerialNumber: syz [ 504.892426][ T5896] usb 5-1: config 0 descriptor?? [ 504.925384][ T5896] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 504.965285][ T5896] dvb-usb: bulk message failed: -22 (2/0) [ 504.996148][T11331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1546'. [ 505.054909][ T5896] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 505.244889][ T5896] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 505.257548][ T5896] usb 5-1: media controller created [ 505.320223][ T5896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 505.346991][T11331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 505.381205][ T5896] cxusb: set interface failed [ 505.392362][ T5896] dvb-usb: bulk message failed: -22 (1/0) [ 505.565161][ T5896] DVB: Unable to find symbol mt352_attach() [ 505.572605][ T5896] dvb-usb: bulk message failed: -22 (5/0) [ 505.608511][ T5896] zl10353_read_register: readreg error (reg=127, ret==-121) [ 505.624380][ T5896] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 506.046596][ T5896] rc_core: IR keymap rc-dvico-mce not found [ 506.091628][ T5896] Registered IR keymap rc-empty [ 506.129771][ T5896] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 506.240655][ T5896] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input53 [ 506.375898][ T5896] dvb-usb: schedule remote query interval to 100 msecs. [ 506.423925][ T5896] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 506.536911][ T5896] dvb-usb: bulk message failed: -22 (1/0) [ 506.684688][ T7358] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 506.698588][ T5896] dvb-usb: bulk message failed: -22 (1/0) [ 506.834297][ T5893] dvb-usb: bulk message failed: -22 (1/0) [ 506.888059][ T7358] usb 2-1: Using ep0 maxpacket: 32 [ 506.946035][ T5893] dvb-usb: bulk message failed: -22 (1/0) [ 507.001798][ T7358] usb 2-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 507.056492][ T5893] usb 5-1: USB disconnect, device number 9 [ 507.068098][ T7358] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.298001][ T7358] usb 2-1: config 0 descriptor?? [ 507.333672][ T7358] usb 2-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 507.516012][ T7358] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 507.565199][ T7358] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 507.582102][ T5893] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 507.734861][ T5896] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 508.370013][ T7358] usb 2-1: media controller created [ 508.477200][ T5896] usb 3-1: Using ep0 maxpacket: 16 [ 508.485252][ T5896] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 508.509763][ T5896] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 508.563658][ T5896] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 508.610346][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.672489][ T5896] usb 3-1: config 0 descriptor?? [ 508.680361][ T7358] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 508.729443][ T5896] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 508.794469][ T5893] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 508.951189][ T7358] usb 2-1: selecting invalid altsetting 1 [ 509.017243][ T7358] set interface failed [ 509.018793][ T7358] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 509.040165][ T5893] usb 5-1: config 0 has no interfaces? [ 509.068904][ T5893] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 509.088764][ T7358] error writing reg: 0xff, val: 0x00 [ 509.092152][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.149491][ T5893] usb 5-1: Product: syz [ 509.173158][ T5893] usb 5-1: Manufacturer: syz [ 509.193540][ T5893] usb 5-1: SerialNumber: syz [ 509.269127][ T7358] dvb_usb_mxl111sf 2-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 509.305141][ T5893] usb 5-1: config 0 descriptor?? [ 509.391624][T11362] netlink: 'syz.3.1553': attribute type 1 has an invalid length. [ 509.400333][T11362] netlink: 'syz.3.1553': attribute type 2 has an invalid length. [ 509.794015][ T7358] usb 2-1: USB disconnect, device number 117 [ 509.892820][T11368] syzkaller1: entered promiscuous mode [ 509.929578][T11368] syzkaller1: entered allmulticast mode [ 509.947977][ T976] usb 3-1: USB disconnect, device number 111 [ 511.144358][ T976] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 511.298301][ T976] usb 1-1: config 0 has an invalid interface number: 244 but max is 0 [ 511.324303][ T976] usb 1-1: config 0 has no interface number 0 [ 511.373683][ T976] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 511.414128][ T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.422924][ T976] usb 1-1: Product: syz [ 511.481721][ T976] usb 1-1: Manufacturer: syz [ 511.530255][ T976] usb 1-1: SerialNumber: syz [ 511.565462][ T976] usb 1-1: config 0 descriptor?? [ 511.596388][ T976] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 511.614762][ T976] dvb-usb: bulk message failed: -22 (2/0) [ 511.645884][ T976] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 511.704023][ T976] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 511.724577][ T5896] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 511.735006][ T976] usb 1-1: media controller created [ 511.855440][ T976] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 511.915079][ T5896] usb 3-1: device descriptor read/64, error -71 [ 511.927478][ T5893] usb 5-1: USB disconnect, device number 10 [ 511.966567][ T976] cxusb: set interface failed [ 511.973055][ T976] dvb-usb: bulk message failed: -22 (1/0) [ 511.988097][T11395] netlink: 'syz.1.1566': attribute type 1 has an invalid length. [ 512.006406][T11395] netlink: 'syz.1.1566': attribute type 2 has an invalid length. [ 512.114053][ T976] DVB: Unable to find symbol mt352_attach() [ 512.125034][ T976] dvb-usb: bulk message failed: -22 (5/0) [ 512.156511][ T976] zl10353_read_register: readreg error (reg=127, ret==-121) [ 512.164435][ T5896] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 512.184730][ T976] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 512.335459][ T5896] usb 3-1: device descriptor read/64, error -71 [ 512.344569][ T976] rc_core: IR keymap rc-dvico-mce not found [ 512.350967][ T976] Registered IR keymap rc-empty [ 512.375916][ T976] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 512.424503][ T976] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input54 [ 512.465936][ T976] dvb-usb: schedule remote query interval to 100 msecs. [ 512.468696][ T5896] usb usb3-port1: attempt power cycle [ 512.473024][ T976] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 512.564413][ T5893] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 512.574257][ T7358] dvb-usb: bulk message failed: -22 (1/0) [ 512.715864][ T7358] dvb-usb: bulk message failed: -22 (1/0) [ 512.761099][ T5893] usb 2-1: config 0 has no interfaces? [ 512.814898][ T5896] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 512.834695][ T7358] dvb-usb: bulk message failed: -22 (1/0) [ 512.865195][ T5893] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 512.926639][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.937376][ T5896] usb 3-1: device descriptor read/8, error -71 [ 512.958681][ T5893] usb 2-1: Product: syz [ 512.961148][ T7358] dvb-usb: bulk message failed: -22 (1/0) [ 512.983222][ T5893] usb 2-1: Manufacturer: syz [ 513.010968][ T5893] usb 2-1: SerialNumber: syz [ 513.047770][ T5893] usb 2-1: config 0 descriptor?? [ 513.114330][ T7358] dvb-usb: bulk message failed: -22 (1/0) [ 513.195008][ T5896] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 513.224666][ T7358] dvb-usb: bulk message failed: -22 (1/0) [ 513.277222][ T5896] usb 3-1: device descriptor read/8, error -71 [ 513.334668][ T7358] dvb-usb: bulk message failed: -22 (1/0) [ 513.415137][ T5896] usb usb3-port1: unable to enumerate USB device [ 513.464289][ T7358] dvb-usb: bulk message failed: -22 (1/0) [ 513.584338][ T7358] dvb-usb: bulk message failed: -22 (1/0) [ 513.700505][ T7358] dvb-usb: bulk message failed: -22 (1/0) [ 513.748199][ T7358] usb 1-1: USB disconnect, device number 115 [ 513.967658][ T7358] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 514.134109][T11419] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1572'. [ 514.692073][T11436] fuse: Bad value for 'user_id' [ 514.712288][T11436] fuse: Bad value for 'user_id' [ 514.739576][T11438] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1577'. [ 514.792189][T11439] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1577'. [ 514.831991][T11442] netlink: 'syz.2.1578': attribute type 1 has an invalid length. [ 514.880831][T11443] input: syz1 as /devices/virtual/input/input55 [ 514.907215][T11442] netlink: 'syz.2.1578': attribute type 2 has an invalid length. [ 515.255803][ T5896] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 515.268719][ T5893] usb 2-1: USB disconnect, device number 118 [ 515.354621][T11452] loop4: detected capacity change from 0 to 7 [ 515.382324][T11451] netlink: 'syz.2.1580': attribute type 1 has an invalid length. [ 515.429034][T11452] Dev loop4: unable to read RDB block 7 [ 515.434918][ T5896] usb 5-1: Using ep0 maxpacket: 16 [ 515.472273][ T5896] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 515.491297][ T5896] usb 5-1: config 0 has no interface number 0 [ 515.529659][T11452] loop4: unable to read partition table [ 515.536183][ T5896] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 515.551589][T11452] loop4: partition table beyond EOD, truncated [ 515.552688][ T5896] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 515.573239][ T5896] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 515.589129][T11452] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 515.637748][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 515.656960][ T5896] usb 5-1: Manufacturer: syz [ 515.670667][ T5896] usb 5-1: SerialNumber: syz [ 515.719754][ T5896] usb 5-1: config 0 descriptor?? [ 515.734967][ T5897] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 515.744945][ T5893] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 515.768688][T11447] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 515.915377][ T5897] usb 1-1: Using ep0 maxpacket: 16 [ 515.946050][ T5893] usb 2-1: config 0 has an invalid interface number: 244 but max is 0 [ 515.956079][ T5893] usb 2-1: config 0 has no interface number 0 [ 515.979656][ T5897] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 515.998801][ T5893] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 516.014260][ T5897] usb 1-1: config 0 has no interface number 0 [ 516.030683][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.039947][ T5897] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 516.061281][ T5893] usb 2-1: Product: syz [ 516.069795][ T5897] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 49152, setting to 1024 [ 516.082490][ T5893] usb 2-1: Manufacturer: syz [ 516.095104][T11465] loop2: detected capacity change from 0 to 7 [ 516.103258][ T5893] usb 2-1: SerialNumber: syz [ 516.120794][ T5851] loop2: p1 [ 516.124131][ T5851] loop2: partition table partially beyond EOD, truncated [ 516.138039][ T5897] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 516.158722][ T5851] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 516.167406][ T5893] usb 2-1: config 0 descriptor?? [ 516.175512][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 516.195307][ T5893] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 516.206586][ T5897] usb 1-1: Product: syz [ 516.211741][ T5896] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 516.237164][ T5893] dvb-usb: bulk message failed: -22 (2/0) [ 516.245275][ T5897] usb 1-1: SerialNumber: syz [ 516.270356][ T5896] usb 5-1: USB disconnect, device number 11 [ 516.504415][T11465] loop2: p1 [ 516.510063][ T5897] usb 1-1: config 0 descriptor?? [ 516.517384][ T5893] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 516.531335][T11465] loop2: partition table partially beyond EOD, truncated [ 516.551602][ T5897] cm109 1-1:0.8: invalid payload size 1024, expected 4 [ 516.571926][ T5893] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 516.584013][T11465] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 516.592090][ T5897] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input57 [ 516.606356][ T5893] usb 2-1: media controller created [ 516.714425][ T5840] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 516.772190][ T5893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 516.812071][ C0] cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71 [ 516.894723][ T5840] usb 3-1: device descriptor read/64, error -71 [ 517.134448][ T5840] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 517.215325][ T5893] cxusb: set interface failed [ 517.257022][ T5893] dvb-usb: bulk message failed: -22 (1/0) [ 517.304929][ T5840] usb 3-1: device descriptor read/64, error -71 [ 517.335145][ T5851] udevd[5851]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 517.560163][ T5851] udevd[5851]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 517.576539][ T5840] usb usb3-port1: attempt power cycle [ 517.695180][ T5893] DVB: Unable to find symbol mt352_attach() [ 517.695274][ T5893] dvb-usb: bulk message failed: -22 (5/0) [ 517.695312][ T5893] zl10353_read_register: readreg error (reg=127, ret==-121) [ 517.695384][ T5893] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 518.134998][ T5840] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 518.171275][ T5840] usb 3-1: device descriptor read/8, error -71 [ 518.206955][ T5893] rc_core: IR keymap rc-dvico-mce not found [ 518.206979][ T5893] Registered IR keymap rc-empty [ 518.265977][ T5893] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 518.303576][ T5893] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input58 [ 518.313573][ T5893] dvb-usb: schedule remote query interval to 100 msecs. [ 518.313603][ T5893] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 518.426481][ T5840] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 518.426626][ T5893] dvb-usb: bulk message failed: -22 (1/0) [ 518.446133][ T5840] usb 3-1: device descriptor read/8, error -71 [ 518.534802][ T5897] dvb-usb: bulk message failed: -22 (1/0) [ 518.569188][ T5840] usb usb3-port1: unable to enumerate USB device [ 518.623037][ T24] usb 2-1: USB disconnect, device number 119 [ 519.122986][ T24] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 519.124311][ T7358] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 519.580021][ T7358] usb 5-1: config 0 has no interfaces? [ 519.585671][ T7358] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 519.585705][ T7358] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.585727][ T7358] usb 5-1: Product: syz [ 519.585745][ T7358] usb 5-1: Manufacturer: syz [ 519.585761][ T7358] usb 5-1: SerialNumber: syz [ 519.588991][ T7358] usb 5-1: config 0 descriptor?? [ 521.532417][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 521.532812][ T24] usb 1-1: USB disconnect, device number 116 [ 521.539407][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 521.786813][ T24] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 521.998145][T11514] vivid-000: disconnect [ 522.094547][T11512] loop2: detected capacity change from 0 to 7 [ 522.124489][T11512] loop2: p1 [ 522.155460][T11512] loop2: partition table partially beyond EOD, truncated [ 522.214580][T11512] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 522.264925][ T5937] usb 2-1: new full-speed USB device number 120 using dummy_hcd [ 522.336123][T11516] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1598'. [ 522.414666][ T5937] usb 2-1: device descriptor read/64, error -71 [ 522.586526][T11518] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64 [ 522.714664][ T5937] usb 2-1: new full-speed USB device number 121 using dummy_hcd [ 522.750532][ T5840] usb 5-1: USB disconnect, device number 12 [ 522.894735][ T5937] usb 2-1: device descriptor read/64, error -71 [ 522.899084][ T5851] udevd[5851]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 523.084467][T11524] fuse: Bad value for 'rootmode' [ 523.225379][ T5937] usb usb2-port1: attempt power cycle [ 523.387097][ T5840] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 523.654907][ T5840] usb 5-1: not running at top speed; connect to a high speed hub [ 523.667786][ T5840] usb 5-1: config 4 has an invalid interface number: 7 but max is 1 [ 523.674624][ T5937] usb 2-1: new full-speed USB device number 122 using dummy_hcd [ 523.679142][ T5840] usb 5-1: config 4 has an invalid interface number: 47 but max is 1 [ 523.715914][ T5840] usb 5-1: config 4 has no interface number 0 [ 523.738820][ T5840] usb 5-1: config 4 has no interface number 1 [ 523.755103][ T5937] usb 2-1: device descriptor read/8, error -71 [ 523.984459][ T5893] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 523.994457][ T5937] usb 2-1: new full-speed USB device number 123 using dummy_hcd [ 524.044299][ T5840] usb 5-1: config 4 interface 7 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 524.055042][ T5937] usb 2-1: device descriptor read/8, error -71 [ 524.073391][ T5840] usb 5-1: config 4 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 524.098300][ T5840] usb 5-1: config 4 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 524.170725][T11531] netlink: 'syz.0.1602': attribute type 1 has an invalid length. [ 524.184672][ T5937] usb usb2-port1: unable to enumerate USB device [ 524.241908][ T5840] usb 5-1: config 4 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 524.252289][T11531] netlink: 'syz.0.1602': attribute type 2 has an invalid length. [ 524.280077][ T5840] usb 5-1: config 4 interface 7 altsetting 0 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 524.296787][ T5893] usb 3-1: config 0 has an invalid interface number: 244 but max is 0 [ 524.304924][T11532] netlink: 'syz.0.1602': attribute type 1 has an invalid length. [ 524.337445][ T5893] usb 3-1: config 0 has no interface number 0 [ 524.343676][ T5840] usb 5-1: config 4 interface 7 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 524.369769][ T5893] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 524.385575][T11532] netlink: 'syz.0.1602': attribute type 2 has an invalid length. [ 524.393512][ T5840] usb 5-1: config 4 interface 7 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 524.408557][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.424243][ T5893] usb 3-1: Product: syz [ 524.430092][ T5840] usb 5-1: config 4 interface 7 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 524.446366][ T5893] usb 3-1: Manufacturer: syz [ 524.451025][ T5893] usb 3-1: SerialNumber: syz [ 524.484427][ T5840] usb 5-1: config 4 interface 7 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 524.508101][ T5893] usb 3-1: config 0 descriptor?? [ 524.527690][ T5893] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 524.536097][ T5840] usb 5-1: config 4 interface 47 altsetting 250 has an invalid descriptor for endpoint zero, skipping [ 524.573909][ T5893] dvb-usb: bulk message failed: -22 (2/0) [ 524.582047][ T5840] usb 5-1: config 4 interface 47 altsetting 250 has a duplicate endpoint with address 0x1, skipping [ 524.613669][ T5893] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 524.640533][ T5840] usb 5-1: config 4 interface 47 altsetting 250 has an invalid descriptor for endpoint zero, skipping [ 524.661355][ T5893] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 524.677905][ T5840] usb 5-1: config 4 interface 47 altsetting 250 has a duplicate endpoint with address 0x6, skipping [ 524.694850][ T5893] usb 3-1: media controller created [ 524.729947][ T5840] usb 5-1: config 4 interface 47 altsetting 250 has a duplicate endpoint with address 0x6, skipping [ 524.768357][ T5840] usb 5-1: config 4 interface 47 altsetting 250 has a duplicate endpoint with address 0xA, skipping [ 524.802283][ T5893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 524.847712][ T5840] usb 5-1: config 4 interface 47 altsetting 250 has an invalid descriptor for endpoint zero, skipping [ 524.945357][T11514] vivid-000: reconnect [ 524.976074][ T5840] usb 5-1: config 4 interface 47 altsetting 250 has a duplicate endpoint with address 0xC, skipping [ 525.020352][ T5893] cxusb: set interface failed [ 525.025406][ T5840] usb 5-1: config 4 interface 47 altsetting 250 endpoint 0x7 has invalid wMaxPacketSize 0 [ 525.047429][ T5893] dvb-usb: bulk message failed: -22 (1/0) [ 525.071779][ T5840] usb 5-1: config 4 interface 47 has no altsetting 0 [ 525.087514][ T5840] usb 5-1: New USB device found, idVendor=055f, idProduct=c530, bcdDevice=81.36 [ 525.106392][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.125578][ T5840] usb 5-1: Product: syz [ 525.129807][ T5840] usb 5-1: Manufacturer: syz [ 525.152713][ T5840] usb 5-1: SerialNumber: syz [ 525.162687][ T5893] DVB: Unable to find symbol mt352_attach() [ 525.180286][ T5893] dvb-usb: bulk message failed: -22 (5/0) [ 525.196504][T11526] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 525.216595][ T5893] zl10353_read_register: readreg error (reg=127, ret==-121) [ 525.224015][ T5893] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 525.375637][T11546] netlink: 'syz.3.1606': attribute type 1 has an invalid length. [ 525.390183][T11546] netlink: 'syz.3.1606': attribute type 2 has an invalid length. [ 525.422278][ T5893] rc_core: IR keymap rc-dvico-mce not found [ 525.429700][T11549] FAULT_INJECTION: forcing a failure. [ 525.429700][T11549] name failslab, interval 1, probability 0, space 0, times 0 [ 525.440408][T11547] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1604'. [ 525.451853][ T5893] Registered IR keymap rc-empty [ 525.475410][T11547] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1604'. [ 525.488564][ T5893] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 525.519510][ T5893] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input59 [ 525.521525][T11549] CPU: 1 UID: 0 PID: 11549 Comm: syz.3.1606 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 525.521562][T11549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 525.521576][T11549] Call Trace: [ 525.521587][T11549] [ 525.521597][T11549] dump_stack_lvl+0x189/0x250 [ 525.521641][T11549] ? __pfx_dump_stack_lvl+0x10/0x10 [ 525.521674][T11549] ? __pfx__printk+0x10/0x10 [ 525.521704][T11549] ? __pfx___might_resched+0x10/0x10 [ 525.521732][T11549] should_fail_ex+0x414/0x560 [ 525.521768][T11549] should_failslab+0xa8/0x100 [ 525.521801][T11549] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 525.521832][T11549] ? __alloc_skb+0x112/0x2d0 [ 525.521867][T11549] __alloc_skb+0x112/0x2d0 [ 525.521900][T11549] netlink_sendmsg+0x5c6/0xb30 [ 525.521957][T11549] ? __pfx_netlink_sendmsg+0x10/0x10 [ 525.521989][T11549] ? aa_sock_msg_perm+0x94/0x160 [ 525.522017][T11549] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 525.522043][T11549] ? __pfx_netlink_sendmsg+0x10/0x10 [ 525.522073][T11549] __sock_sendmsg+0x219/0x270 [ 525.522102][T11549] ____sys_sendmsg+0x505/0x830 [ 525.522150][T11549] ? __pfx_____sys_sendmsg+0x10/0x10 [ 525.522191][T11549] ? import_iovec+0x74/0xa0 [ 525.522220][T11549] ___sys_sendmsg+0x21f/0x2a0 [ 525.522254][T11549] ? __pfx____sys_sendmsg+0x10/0x10 [ 525.522325][T11549] ? __fget_files+0x2a/0x420 [ 525.522353][T11549] ? __fget_files+0x3a0/0x420 [ 525.522394][T11549] __x64_sys_sendmsg+0x19b/0x260 [ 525.522430][T11549] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 525.522483][T11549] ? do_syscall_64+0xba/0x210 [ 525.522518][T11549] do_syscall_64+0xf6/0x210 [ 525.522548][T11549] ? clear_bhb_loop+0x45/0xa0 [ 525.522574][T11549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.522596][T11549] RIP: 0033:0x7f21a998e969 [ 525.522617][T11549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.522636][T11549] RSP: 002b:00007f21aa84c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 525.522660][T11549] RAX: ffffffffffffffda RBX: 00007f21a9bb6080 RCX: 00007f21a998e969 [ 525.522676][T11549] RDX: 0000000000004800 RSI: 0000200000000040 RDI: 0000000000000003 [ 525.522691][T11549] RBP: 00007f21aa84c090 R08: 0000000000000000 R09: 0000000000000000 [ 525.522705][T11549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.522717][T11549] R13: 0000000000000001 R14: 00007f21a9bb6080 R15: 00007f21a9cdfa28 [ 525.522750][T11549] [ 525.800381][ T5893] dvb-usb: schedule remote query interval to 100 msecs. [ 525.809767][ T5893] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 525.914683][ T5893] dvb-usb: bulk message failed: -22 (1/0) [ 526.026944][ T5897] dvb-usb: bulk message failed: -22 (1/0) [ 526.059405][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 526.059423][ T30] audit: type=1326 audit(1745586791.776:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11560 comm="syz.1.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a618e969 code=0x7ff00000 [ 526.129301][ T30] audit: type=1326 audit(1745586791.776:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11560 comm="syz.1.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a618e969 code=0x7ff00000 [ 526.153191][ T5893] dvb-usb: bulk message failed: -22 (1/0) [ 526.182915][ T30] audit: type=1326 audit(1745586791.776:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11560 comm="syz.1.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a618e969 code=0x7ff00000 [ 526.235484][ T30] audit: type=1326 audit(1745586791.776:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11560 comm="syz.1.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a618e969 code=0x7ff00000 [ 526.266312][ T30] audit: type=1326 audit(1745586791.776:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11560 comm="syz.1.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a618e969 code=0x7ff00000 [ 526.289320][ T5893] dvb-usb: bulk message failed: -22 (1/0) [ 526.324884][ T30] audit: type=1326 audit(1745586791.776:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11560 comm="syz.1.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a618e969 code=0x7ff00000 [ 526.379318][ T30] audit: type=1326 audit(1745586791.776:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11560 comm="syz.1.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a618e969 code=0x7ff00000 [ 526.407541][ T5893] dvb-usb: bulk message failed: -22 (1/0) [ 526.458536][ T30] audit: type=1326 audit(1745586791.776:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11560 comm="syz.1.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a618e969 code=0x7ff00000 [ 526.515338][ T5893] dvb-usb: bulk message failed: -22 (1/0) [ 526.548078][ T30] audit: type=1326 audit(1745586791.776:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11560 comm="syz.1.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a618e969 code=0x7ff00000 [ 526.551519][ T976] usb 3-1: USB disconnect, device number 120 [ 526.619866][ T5840] usb 5-1: USB disconnect, device number 13 [ 526.644923][ T5897] dvb-usb: bulk message failed: -22 (1/0) [ 526.661934][ T30] audit: type=1326 audit(1745586791.776:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11560 comm="syz.1.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a618e969 code=0x7ff00000 [ 527.004272][ T5893] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 527.027607][ T976] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 527.076940][T11579] tipc: Can't bind to reserved service type 1 [ 527.216320][ T5893] usb 1-1: config 0 has no interfaces? [ 527.272071][ T5893] usb 1-1: New USB device found, idVendor=ac09, idProduct=0a0f, bcdDevice= c.3e [ 527.300980][ T5893] usb 1-1: New USB device strings: Mfr=199, Product=92, SerialNumber=3 [ 527.335277][ T5893] usb 1-1: Product: syz [ 527.355515][ T5893] usb 1-1: Manufacturer: syz [ 527.360209][ T5893] usb 1-1: SerialNumber: syz [ 527.398525][ T5893] usb 1-1: config 0 descriptor?? [ 527.515436][ T976] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 527.636976][T11573] random: crng reseeded on system resumption [ 527.754338][ T976] usb 3-1: Using ep0 maxpacket: 16 [ 527.780237][ T976] usb 3-1: config 255 has an invalid interface number: 47 but max is 0 [ 527.815586][ T976] usb 3-1: config 255 has no interface number 0 [ 527.858522][ T976] usb 3-1: config 255 interface 47 has no altsetting 0 [ 528.175436][T11584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.184759][T11584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.247576][ T976] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=b1.fc [ 528.285167][ T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.321830][ T976] usb 3-1: Product: syz [ 528.394056][ T976] usb 3-1: Manufacturer: syz [ 528.408924][ T976] usb 3-1: SerialNumber: syz [ 528.645905][ T976] legousbtower 3-1:255.47: interrupt endpoints not found [ 528.707410][ T976] usb 3-1: USB disconnect, device number 121 [ 528.724392][ T5893] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 528.886572][ T5893] usb 5-1: Using ep0 maxpacket: 16 [ 528.893834][ T5893] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 528.907530][ T5893] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 528.923534][ T5893] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 528.936623][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.946280][ T5893] usb 5-1: Product: syz [ 528.950631][ T5893] usb 5-1: Manufacturer: syz [ 528.963845][ T5893] usb 5-1: SerialNumber: syz [ 529.123531][T11589] netlink: 'syz.3.1618': attribute type 1 has an invalid length. [ 529.195161][T11589] netlink: 'syz.3.1618': attribute type 2 has an invalid length. [ 529.269586][ T5893] usb 5-1: 0:2 : does not exist [ 529.346483][ T5893] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 529.392191][T11594] unknown channel width for channel at 909000KHz? [ 529.481831][T11594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1620'. [ 529.502207][T11598] netlink: 'syz.4.1621': attribute type 1 has an invalid length. [ 529.511728][ T5893] usb 5-1: USB disconnect, device number 14 [ 529.559889][T11598] netlink: 'syz.4.1621': attribute type 2 has an invalid length. [ 529.577746][T11594] hsr_slave_0: left promiscuous mode [ 529.656741][T11594] hsr_slave_1: left promiscuous mode [ 529.825238][ T5851] udevd[5851]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 529.958928][ T5893] usb 1-1: USB disconnect, device number 117 [ 530.029120][ T5840] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 530.093873][T11611] loop2: detected capacity change from 0 to 7 [ 530.111181][T11611] loop2: p1 [ 530.117268][T11611] loop2: partition table partially beyond EOD, truncated [ 530.129474][T11611] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 530.209953][ T5840] usb 2-1: Using ep0 maxpacket: 8 [ 530.233877][ T5840] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 530.260807][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.277572][ T5840] usb 2-1: Product: syz [ 530.282021][ T5840] usb 2-1: Manufacturer: syz [ 530.291385][ T5840] usb 2-1: SerialNumber: syz [ 530.314366][ T5897] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 530.350132][ T5840] usb 2-1: config 0 descriptor?? [ 530.390122][ T5840] gspca_main: sq930x-2.14.0 probing 2770:930c [ 530.425606][ T5851] udevd[5851]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 530.482386][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.505480][ T5897] usb 5-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 530.521950][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.560035][ T5897] usb 5-1: config 0 descriptor?? [ 530.744344][ T976] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 530.793115][T11604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.842102][T11604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.873279][ T5840] gspca_sq930x: ucbus_write failed -71 [ 530.934273][ T976] usb 3-1: Using ep0 maxpacket: 32 [ 530.983218][T11607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.000060][ T976] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 531.009990][ T976] usb 3-1: config 0 has no interface number 0 [ 531.030680][T11607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.049637][ T976] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 531.105211][ T5840] gspca_sq930x: Sensor ov9630 not yet treated [ 531.114443][ T5840] sq930x 2-1:0.0: probe with driver sq930x failed with error -22 [ 531.125249][ T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.153946][ T5840] usb 2-1: USB disconnect, device number 124 [ 531.163041][ T976] usb 3-1: Product: syz [ 531.180763][ T976] usb 3-1: Manufacturer: syz [ 531.190419][ T976] usb 3-1: SerialNumber: syz [ 531.262691][ T976] usb 3-1: config 0 descriptor?? [ 531.282623][ T5897] usbhid 5-1:0.0: can't add hid device: -71 [ 531.298536][ T976] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 531.334947][ T5897] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 531.459107][ T5897] usb 5-1: USB disconnect, device number 15 [ 531.512194][ T976] usb 3-1: qt2_setup_urbs - submit read urb failed -8 [ 531.547570][ T976] quatech2 3-1:0.51: probe with driver quatech2 failed with error -8 [ 531.833046][T11616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.871820][T11616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.024842][ T976] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 532.204741][ T976] usb 2-1: Using ep0 maxpacket: 16 [ 532.240326][ T976] usb 2-1: config 0 has an invalid interface number: 199 but max is 0 [ 532.294013][ T976] usb 2-1: config 0 has no interface number 0 [ 532.301199][ T5937] usb 3-1: USB disconnect, device number 122 [ 532.369885][ T976] usb 2-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=49.f8 [ 532.376462][T11630] loop2: detected capacity change from 0 to 7 [ 532.393739][ T5860] loop2: p1 [ 532.401732][ T5860] loop2: partition table partially beyond EOD, truncated [ 532.404527][ T976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.417324][ T5860] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 532.464244][ T976] usb 2-1: Product: syz [ 532.468655][ T976] usb 2-1: Manufacturer: syz [ 532.473352][ T976] usb 2-1: SerialNumber: syz [ 532.557306][T11630] loop2: p1 [ 532.562377][T11630] loop2: partition table partially beyond EOD, truncated [ 532.563611][ T976] usb 2-1: config 0 descriptor?? [ 532.576221][T11630] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 532.845027][ T976] usb 2-1: USB disconnect, device number 125 [ 532.890124][T11639] futex_wake_op: syz.3.1634 tries to shift op by 36; fix this program [ 533.014302][ T5937] usb 3-1: new low-speed USB device number 123 using dummy_hcd [ 533.205989][ T5937] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 533.359118][ T5851] udevd[5851]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 533.486402][ T5851] udevd[5851]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 533.496050][ T5937] usb 3-1: config 0 has no interface number 0 [ 533.507483][ T5937] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 533.546269][ T5937] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 533.615544][ T5851] udevd[5851]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 533.681899][ T5937] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 533.724352][ T5937] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 533.754238][ T5937] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 533.794603][ T5937] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 533.834561][ T5937] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 533.864530][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.905755][ T5937] usb 3-1: config 0 descriptor?? [ 533.911754][T11635] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 533.924472][T11635] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 534.029415][T11660] sctp: [Deprecated]: syz.4.1638 (pid 11660) Use of int in maxseg socket option. [ 534.029415][T11660] Use struct sctp_assoc_value instead [ 534.078748][T11656] pim6reg9: entered allmulticast mode [ 534.089296][ T5937] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 534.154716][ T5840] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 534.294354][ T5840] usb 2-1: device descriptor read/64, error -71 [ 534.577478][ T5840] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 534.854348][ T5840] usb 2-1: device descriptor read/64, error -71 [ 534.989292][ T5840] usb usb2-port1: attempt power cycle [ 535.022131][T11674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1643'. [ 535.394303][ T5840] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 535.469871][ T5840] usb 2-1: device descriptor read/8, error -71 [ 535.715886][ T5840] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 535.766633][ T5840] usb 2-1: device descriptor read/8, error -71 [ 535.890877][ T5840] usb usb2-port1: unable to enumerate USB device [ 535.904268][ T5937] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 536.027618][ T5840] usb 3-1: USB disconnect, device number 123 [ 536.059040][ T5840] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 536.076772][ T5937] usb 1-1: config 0 has an invalid interface number: 244 but max is 0 [ 536.085492][ T5937] usb 1-1: config 0 has no interface number 0 [ 536.099336][ T5937] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 536.124243][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.162589][ T5937] usb 1-1: Product: syz [ 536.177779][ T5937] usb 1-1: Manufacturer: syz [ 536.188078][ T5937] usb 1-1: SerialNumber: syz [ 536.220450][ T5937] usb 1-1: config 0 descriptor?? [ 536.260966][ T5937] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 536.284727][ T5937] dvb-usb: bulk message failed: -22 (2/0) [ 536.305179][ T5937] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 536.345692][ T5937] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 536.385597][ T5937] usb 1-1: media controller created [ 536.470342][ T5937] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 536.480385][T11694] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1650'. [ 536.492772][T11694] netlink: 'syz.4.1650': attribute type 1 has an invalid length. [ 536.569774][T11694] wireguard0: entered promiscuous mode [ 536.592235][T11694] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 536.598585][ T5937] cxusb: set interface failed [ 536.622283][T11694] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 536.630117][ T5937] dvb-usb: bulk message failed: -22 (1/0) [ 536.710244][T11694] bond2: (slave wireguard0): making interface the new active one [ 536.745846][T11694] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 536.803514][ T5937] DVB: Unable to find symbol mt352_attach() [ 536.826985][ T5937] dvb-usb: bulk message failed: -22 (5/0) [ 536.832977][ T5937] zl10353_read_register: readreg error (reg=127, ret==-121) [ 536.874245][ T5937] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 537.036659][ T5937] rc_core: IR keymap rc-dvico-mce not found [ 537.042729][ T5937] Registered IR keymap rc-empty [ 537.090506][ T5937] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 537.133087][T11707] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 537.157776][ T5937] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input60 [ 537.158099][T11707] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 537.204791][ T5937] dvb-usb: schedule remote query interval to 100 msecs. [ 537.211881][ T5937] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 537.269420][T11704] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1652'. [ 537.314554][ T5937] dvb-usb: bulk message failed: -22 (1/0) [ 537.319450][ T5840] hid-generic 0009:0004:0001.0019: hidraw0: HID v0.08 Device [syz0] on syz1 [ 537.341707][T11709] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1652'. [ 537.424652][ T5937] dvb-usb: bulk message failed: -22 (1/0) [ 537.534259][ T5937] dvb-usb: bulk message failed: -22 (1/0) [ 537.654511][ T5937] dvb-usb: bulk message failed: -22 (1/0) [ 537.764340][ T5937] dvb-usb: bulk message failed: -22 (1/0) [ 537.882586][ T5937] dvb-usb: bulk message failed: -22 (1/0) [ 538.014354][ T5937] dvb-usb: bulk message failed: -22 (1/0) [ 538.134637][ T5937] dvb-usb: bulk message failed: -22 (1/0) [ 538.254767][ T5937] dvb-usb: bulk message failed: -22 (1/0) [ 538.394422][ T5937] dvb-usb: bulk message failed: -22 (1/0) [ 538.410827][T11732] input: syz1 as /devices/virtual/input/input61 [ 538.524571][ T5937] dvb-usb: bulk message failed: -22 (1/0) [ 538.581956][ T5937] usb 1-1: USB disconnect, device number 118 [ 538.782326][ T5937] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 538.904621][ T5893] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 539.152799][ T5893] usb 3-1: config index 0 descriptor too short (expected 25710, got 77) [ 539.219816][T11739] program syz.1.1662 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 539.274923][ T5937] usb 1-1: new full-speed USB device number 119 using dummy_hcd [ 539.282997][ T5893] usb 3-1: config 114 has too many interfaces: 101, using maximum allowed: 32 [ 539.303496][ T5893] usb 3-1: config 114 has an invalid descriptor of length 97, skipping remainder of the config [ 539.356000][ T5893] usb 3-1: config 114 has 0 interfaces, different from the descriptor's value: 101 [ 539.423226][ T5893] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 539.726327][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.734987][ T5937] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1040, setting to 64 [ 539.752667][ T5893] usb 3-1: Product: syz [ 539.758990][ T5893] usb 3-1: Manufacturer: syz [ 539.763662][ T5893] usb 3-1: SerialNumber: syz [ 539.826881][ T5937] usb 1-1: config 0 interface 0 has no altsetting 0 [ 539.905603][T11742] netlink: 'syz.1.1662': attribute type 10 has an invalid length. [ 539.945057][T11742] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 539.970024][T11742] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 540.041661][T11742] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 540.104496][ T5937] usb 1-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 540.139627][ T5937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.203107][ T5937] usb 1-1: config 0 descriptor?? [ 540.435471][T11735] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 540.787858][T11747] fuse: Bad value for 'fd' [ 540.867130][ T5937] kye 0003:0458:5014.001A: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 540.997422][ T24] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 541.035131][T11739] syz.1.1662 (11739): drop_caches: 2 [ 541.076882][ T5937] kye 0003:0458:5014.001A: hidraw0: USB HID v0.01 Device [HID 0458:5014] on usb-dummy_hcd.0-1/input0 [ 541.171998][ T5937] kye 0003:0458:5014.001A: tablet-enabling feature report not found [ 541.209437][T11754] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1666'. [ 541.243704][ T5937] kye 0003:0458:5014.001A: tablet enabling failed [ 541.407281][ T5937] usb 1-1: USB disconnect, device number 119 [ 541.901700][T11763] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1667'. [ 542.439681][ T5893] usb 3-1: USB disconnect, device number 124 [ 542.832452][T11778] loop2: detected capacity change from 0 to 7 [ 542.899816][T11778] loop2: p1 [ 542.954899][ T5840] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 542.964283][T11778] loop2: partition table partially beyond EOD, truncated [ 543.039785][T11778] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 543.171905][ T5840] usb 1-1: config 0 has an invalid interface number: 244 but max is 0 [ 543.213491][ T5840] usb 1-1: config 0 has no interface number 0 [ 543.247920][ T5840] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 543.284815][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.363212][ T5840] usb 1-1: Product: syz [ 543.403520][ T5840] usb 1-1: Manufacturer: syz [ 543.424285][ T5840] usb 1-1: SerialNumber: syz [ 543.624251][ T5893] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 543.655839][ T5840] usb 1-1: config 0 descriptor?? [ 543.694349][ T5840] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 543.712270][ T5840] dvb-usb: bulk message failed: -22 (2/0) [ 543.745558][ T5851] udevd[5851]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 543.756736][ T5840] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 543.807575][ T5893] usb 5-1: Using ep0 maxpacket: 32 [ 543.816127][ T5840] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 543.839661][ T5893] usb 5-1: config 0 interface 0 has no altsetting 0 [ 543.848621][ T5840] usb 1-1: media controller created [ 543.860305][ T5893] usb 5-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 543.909908][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.942250][ T5893] usb 5-1: config 0 descriptor?? [ 543.982888][ T5840] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 544.091574][ T5840] cxusb: set interface failed [ 544.132079][ T5840] dvb-usb: bulk message failed: -22 (1/0) [ 544.289907][ T5840] DVB: Unable to find symbol mt352_attach() [ 544.545055][ T5840] dvb-usb: bulk message failed: -22 (5/0) [ 544.559419][ T5893] cypress 0003:04B4:BCA1.001B: unknown main item tag 0x0 [ 544.568125][ T5840] zl10353_read_register: readreg error (reg=127, ret==-121) [ 544.577558][ T5840] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 544.591318][ T5893] cypress 0003:04B4:BCA1.001B: unknown main item tag 0x0 [ 544.621552][ T5893] cypress 0003:04B4:BCA1.001B: hidraw0: USB HID v0.01 Device [HID 04b4:bca1] on usb-dummy_hcd.4-1/input0 [ 544.775011][ T5897] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 544.794636][ T5840] rc_core: IR keymap rc-dvico-mce not found [ 544.800701][ T5840] Registered IR keymap rc-empty [ 544.822545][ T5840] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 544.850053][ T5840] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input62 [ 544.869279][ T5840] dvb-usb: schedule remote query interval to 100 msecs. [ 544.879043][ T5840] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 544.952685][ T5897] usb 3-1: config 0 has no interfaces? [ 544.974089][ T5897] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 544.987639][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.995906][ T5840] dvb-usb: bulk message failed: -22 (1/0) [ 545.012702][ T5897] usb 3-1: Product: syz [ 545.023571][ T5897] usb 3-1: Manufacturer: syz [ 545.034044][T11782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1674'. [ 545.050904][ T5897] usb 3-1: SerialNumber: syz [ 545.083829][ T5897] usb 3-1: config 0 descriptor?? [ 545.104802][ T5840] dvb-usb: bulk message failed: -22 (1/0) [ 545.136077][T11782] bridge_slave_1: left allmulticast mode [ 545.144735][T11782] bridge_slave_1: left promiscuous mode [ 545.161198][T11782] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.209366][T11782] bridge_slave_0: left allmulticast mode [ 545.225158][ T5840] dvb-usb: bulk message failed: -22 (1/0) [ 545.253608][T11782] bridge_slave_0: left promiscuous mode [ 545.285307][T11782] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.397486][ T5840] dvb-usb: bulk message failed: -22 (1/0) [ 545.554326][ T5840] dvb-usb: bulk message failed: -22 (1/0) [ 545.607237][ T5840] usb 1-1: USB disconnect, device number 120 [ 545.648271][T11804] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1679'. [ 545.782485][T11820] input: syz1 as /devices/virtual/input/input63 [ 546.001371][ T5840] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 546.975861][ T5840] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 547.303345][ T5840] usb 1-1: config index 0 descriptor too short (expected 25710, got 77) [ 547.416622][ T5840] usb 1-1: config 114 has too many interfaces: 101, using maximum allowed: 32 [ 547.531644][ T5840] usb 1-1: config 114 has an invalid descriptor of length 97, skipping remainder of the config [ 547.603506][ T5840] usb 1-1: config 114 has 0 interfaces, different from the descriptor's value: 101 [ 547.649506][ T5840] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 547.670653][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.683283][ T5840] usb 1-1: Product: syz [ 547.690402][ T5840] usb 1-1: Manufacturer: syz [ 547.763731][ T5840] usb 1-1: SerialNumber: syz [ 548.123256][ T5897] usb 5-1: USB disconnect, device number 17 [ 548.315714][T11839] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1687'. [ 548.827178][ T976] usb 3-1: USB disconnect, device number 125 [ 549.165533][T11841] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 549.364299][ T976] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 549.566801][ T976] usb 3-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 549.625016][ T976] usb 3-1: config 48 interface 0 altsetting 98 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 549.714518][ T976] usb 3-1: config 48 interface 0 altsetting 98 endpoint 0x4 has invalid wMaxPacketSize 0 [ 549.783387][ T976] usb 3-1: config 48 interface 0 altsetting 98 endpoint 0x8 has invalid wMaxPacketSize 0 [ 549.864333][ T976] usb 3-1: config 48 interface 0 altsetting 98 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 549.944209][ T976] usb 3-1: config 48 interface 0 has no altsetting 0 [ 550.047401][ T976] usb 3-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 550.104255][ T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.112421][ T976] usb 3-1: Product: syz [ 550.118403][ T5840] usb 1-1: USB disconnect, device number 121 [ 550.190593][ T976] usb 3-1: Manufacturer: syz [ 550.213381][ T976] usb 3-1: SerialNumber: syz [ 550.410740][T11862] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1696'. [ 550.525431][T11862] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1696'. [ 550.529282][ T976] usb 3-1: USB disconnect, device number 126 [ 550.584841][T11862] 8021q: VLANs not supported on ip_vti0 [ 551.225265][ T5840] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 551.334542][ T5897] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 551.394618][ T5840] usb 5-1: Using ep0 maxpacket: 16 [ 551.419722][ T5840] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.436651][ T5840] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.449625][ T5840] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 551.470084][ T5840] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 551.480601][ T5840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.515530][ T5897] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 551.541793][ T5840] usb 5-1: config 0 descriptor?? [ 551.552751][ T5897] usb 2-1: config 0 has no interface number 0 [ 551.569662][ T5897] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 551.594428][ T5897] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 551.618661][ T5897] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 551.633724][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 551.642969][ T5897] usb 2-1: Product: syz [ 551.653881][ T5897] usb 2-1: SerialNumber: syz [ 551.673605][ T5897] usb 2-1: config 0 descriptor?? [ 551.691808][ T5897] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 551.713218][ T5897] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input64 [ 551.888978][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 551.897661][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 551.904889][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 551.912088][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 551.920879][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 551.934636][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 551.942897][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 551.951122][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 551.958652][ T5897] usb 2-1: USB disconnect, device number 4 [ 551.964617][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 551.964644][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 552.019829][ T5840] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.001C/input/input65 [ 552.043831][ T5897] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 552.141375][T11896] input: syz1 as /devices/virtual/input/input66 [ 552.189255][ T30] kauditd_printk_skb: 1533 callbacks suppressed [ 552.189273][ T30] audit: type=1326 audit(1745586817.906:3166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11873 comm="syz.4.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65838e969 code=0x7ffc0000 [ 552.331388][ T30] audit: type=1326 audit(1745586817.906:3167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11873 comm="syz.4.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fa65838e969 code=0x7ffc0000 [ 552.347500][ T5840] microsoft 0003:045E:07DA.001C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 552.408425][ T30] audit: type=1326 audit(1745586817.906:3168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11873 comm="syz.4.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65838e969 code=0x7ffc0000 [ 552.483477][ T5840] usb 5-1: USB disconnect, device number 18 [ 552.512775][ T30] audit: type=1326 audit(1745586817.906:3169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11873 comm="syz.4.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa65838e969 code=0x7ffc0000 [ 552.568014][ T5897] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 552.604625][ T30] audit: type=1326 audit(1745586817.906:3170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11873 comm="syz.4.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65838e969 code=0x7ffc0000 [ 552.671706][ T30] audit: type=1326 audit(1745586817.906:3171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11873 comm="syz.4.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa65838e969 code=0x7ffc0000 [ 552.717892][ T30] audit: type=1326 audit(1745586817.906:3172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11873 comm="syz.4.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65838e969 code=0x7ffc0000 [ 552.740344][ C0] vkms_vblank_simulate: vblank timer overrun [ 552.749826][ T30] audit: type=1326 audit(1745586817.906:3173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11873 comm="syz.4.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa65838e969 code=0x7ffc0000 [ 552.772355][ C0] vkms_vblank_simulate: vblank timer overrun [ 552.782084][ T30] audit: type=1326 audit(1745586817.906:3174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11873 comm="syz.4.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65838e969 code=0x7ffc0000 [ 552.804566][ C0] vkms_vblank_simulate: vblank timer overrun [ 552.943117][ T5897] usb 3-1: config index 0 descriptor too short (expected 25710, got 77) [ 552.958404][ T5897] usb 3-1: config 114 has too many interfaces: 101, using maximum allowed: 32 [ 552.980967][ T30] audit: type=1326 audit(1745586817.916:3175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11873 comm="syz.4.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa65838e969 code=0x7ffc0000 [ 553.003401][ C0] vkms_vblank_simulate: vblank timer overrun [ 553.015999][ T5897] usb 3-1: config 114 has an invalid descriptor of length 97, skipping remainder of the config [ 553.076403][ T5897] usb 3-1: config 114 has 0 interfaces, different from the descriptor's value: 101 [ 553.141899][ T5937] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 553.146393][ T5897] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 553.167236][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.180149][ T5897] usb 3-1: Product: syz [ 553.187173][ T5897] usb 3-1: Manufacturer: syz [ 553.199137][ T5897] usb 3-1: SerialNumber: syz [ 553.360857][ T5937] usb 2-1: config 0 has no interfaces? [ 553.401831][ T5937] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 553.470826][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.520335][ T5937] usb 2-1: Product: syz [ 553.548255][ T5840] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 553.554440][ T5937] usb 2-1: Manufacturer: syz [ 553.585106][ T5937] usb 2-1: SerialNumber: syz [ 553.624707][ T5937] usb 2-1: config 0 descriptor?? [ 553.801633][ T5840] usb 5-1: config 0 has no interfaces? [ 553.827054][ T5840] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 553.854823][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.900214][ T5840] usb 5-1: Product: syz [ 553.909652][ T5840] usb 5-1: Manufacturer: syz [ 553.947294][ T5840] usb 5-1: SerialNumber: syz [ 554.052467][ T5840] usb 5-1: config 0 descriptor?? [ 554.643524][T11910] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1710'. [ 555.841575][ T5897] usb 3-1: USB disconnect, device number 127 [ 555.870216][T11917] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1712'. [ 556.723700][T11931] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1714'. [ 557.369241][ T5897] usb 2-1: USB disconnect, device number 5 [ 557.734826][ T5897] usb 5-1: USB disconnect, device number 19 [ 558.175240][T11942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.275091][T11942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.344901][ T5840] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 558.676243][ T5840] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 558.717778][ T5840] usb 5-1: config 0 has no interface number 0 [ 558.733531][ T5840] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 558.743747][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.757695][ T5840] usb 5-1: Product: syz [ 558.766138][ T5840] usb 5-1: Manufacturer: syz [ 558.791278][ T5840] usb 5-1: SerialNumber: syz [ 558.835332][ T5840] usb 5-1: config 0 descriptor?? [ 559.071154][ T5840] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 559.126883][ T5840] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 559.148895][T11956] loop2: detected capacity change from 0 to 7 [ 559.164763][ T5840] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 559.179285][T11355] loop2: p1 [ 559.182711][ T5840] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 559.193877][T11355] loop2: partition table partially beyond EOD, truncated [ 559.229482][T11355] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 559.238350][ T5840] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 559.333875][ T5840] usb 5-1: USB disconnect, device number 20 [ 559.689265][T11956] loop2: p1 [ 559.692617][T11956] loop2: partition table partially beyond EOD, truncated [ 559.716359][ T5840] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 559.746075][T11956] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 559.806512][ T5840] keyspan 5-1:0.133: device disconnected [ 560.221799][ T5851] udevd[5851]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 560.304250][ T5840] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 560.346655][ T5851] udevd[5851]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 560.388669][T11979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1723'. [ 560.397724][T11979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1723'. [ 560.459970][T11979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1723'. [ 560.487743][ T5840] usb 2-1: Using ep0 maxpacket: 32 [ 560.541017][ T5840] usb 2-1: config 1 interface 0 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 1024 [ 560.580974][ T5840] usb 2-1: config 1 interface 0 altsetting 16 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 560.644353][ T5840] usb 2-1: config 1 interface 0 has no altsetting 0 [ 561.885073][ T5897] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 562.084980][ T5897] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 562.096131][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.124890][ T5897] usb 3-1: Product: syz [ 562.129138][ T5897] usb 3-1: Manufacturer: syz [ 562.151875][ T5897] usb 3-1: SerialNumber: syz [ 562.169458][ T5897] usb 3-1: config 0 descriptor?? [ 562.614778][ T976] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 562.817001][ T976] usb 5-1: config 0 has no interfaces? [ 562.827054][ T976] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 562.836652][ T976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.852690][ T976] usb 5-1: Product: syz [ 562.878044][ T976] usb 5-1: Manufacturer: syz [ 562.888458][ T976] usb 5-1: SerialNumber: syz [ 562.951581][ T976] usb 5-1: config 0 descriptor?? [ 562.975471][ T5897] usb 3-1: Firmware version (0.0) predates our first public release. [ 562.995342][ T5897] usb 3-1: Please update to version 0.2 or newer [ 563.028066][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.034884][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.083370][ T5840] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 563.143641][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.199715][ T5897] usb 3-1: USB disconnect, device number 2 [ 563.236570][T12001] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1730'. [ 563.287154][ T5840] usb 2-1: can't set config #1, error -71 [ 563.316737][ T5840] usb 2-1: USB disconnect, device number 6 [ 563.964907][T12024] netlink: 'syz.3.1736': attribute type 1 has an invalid length. [ 563.977979][T12024] netlink: 'syz.3.1736': attribute type 2 has an invalid length. [ 564.067590][T12025] netlink: 'syz.3.1736': attribute type 1 has an invalid length. [ 564.105776][T12025] netlink: 'syz.3.1736': attribute type 2 has an invalid length. [ 565.846618][T12038] syz.2.1737 (12038): drop_caches: 2 [ 566.588779][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 566.588800][ T30] audit: type=1326 audit(1745586832.306:3188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12051 comm="syz.0.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ef4f8e969 code=0x7ffc0000 [ 566.669902][ T976] usb 5-1: USB disconnect, device number 21 [ 566.794925][ T30] audit: type=1326 audit(1745586832.306:3189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12051 comm="syz.0.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f5ef4f8e969 code=0x7ffc0000 [ 566.891539][ T30] audit: type=1326 audit(1745586832.316:3190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12051 comm="syz.0.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ef4f8e969 code=0x7ffc0000 [ 566.914053][ C0] vkms_vblank_simulate: vblank timer overrun [ 566.984586][T12060] kernel read not supported for file /eth0 (pid: 12060 comm: syz.0.1745) [ 567.050467][ T30] audit: type=1326 audit(1745586832.346:3191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12051 comm="syz.0.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ef4f8e969 code=0x7ffc0000 [ 567.179218][ T30] audit: type=1800 audit(1745586832.766:3192): pid=12060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1745" name="eth0" dev="mqueue" ino=40261 res=0 errno=0 [ 567.414527][ T976] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 567.485637][T12069] netlink: 'syz.1.1748': attribute type 1 has an invalid length. [ 567.493696][T12069] netlink: 'syz.1.1748': attribute type 2 has an invalid length. [ 567.608546][ T976] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 567.650095][ T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.694265][ T976] usb 3-1: Product: syz [ 567.704353][ T976] usb 3-1: Manufacturer: syz [ 567.709089][ T976] usb 3-1: SerialNumber: syz [ 567.805192][ T976] usb 3-1: config 0 descriptor?? [ 568.136697][T12080] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 568.319273][ T976] usb 3-1: Firmware version (0.0) predates our first public release. [ 568.335438][ T976] usb 3-1: Please update to version 0.2 or newer [ 568.424025][ T976] usb 3-1: USB disconnect, device number 3 [ 568.424358][ T5897] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 568.536956][T12085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1753'. [ 568.622757][T12088] tipc: Enabling of bearer rejected, failed to enable media [ 568.657185][ T5897] usb 2-1: Using ep0 maxpacket: 8 [ 568.671524][ T5897] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 568.707238][ T5897] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 568.748386][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 568.814269][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 568.860822][ T5897] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 568.932031][ T5897] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 568.984253][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.002548][ T5897] usb 2-1: Product: syz [ 569.025913][ T5897] usb 2-1: Manufacturer: syz [ 569.061117][ T5897] usb 2-1: SerialNumber: syz [ 569.082372][ T5897] usb 2-1: config 0 descriptor?? [ 569.254553][ T976] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 569.414977][ T5897] rc_core: IR keymap rc-imon-rsc not found [ 569.488161][ T5897] Registered IR keymap rc-empty [ 569.575409][ T976] usb 1-1: Using ep0 maxpacket: 16 [ 569.580735][ T5897] rc rc0: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 569.612008][ T5897] input: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input67 [ 569.661413][ T976] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 569.755239][ T976] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 569.830996][ T976] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 569.893602][ T976] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 569.924022][ T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.943234][ T5897] usb 2-1: USB disconnect, device number 7 [ 569.954855][ T976] usb 1-1: Product: syz [ 569.976867][ T976] usb 1-1: Manufacturer: syz [ 570.224778][ T976] usb 1-1: SerialNumber: syz [ 570.794577][ T5937] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 570.896848][ T976] usb 1-1: 0:2 : does not exist [ 570.907389][ T976] usb 1-1: 1:0: cannot get min/max values for control 4 (id 1) [ 570.947104][ T5937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.959315][ T5937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 571.038386][ T5937] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 571.089961][ T976] usb 1-1: USB disconnect, device number 122 [ 571.108378][ T5937] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 571.144444][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.296901][ T5937] usb 2-1: config 0 descriptor?? [ 571.489248][T11355] udevd[11355]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 571.888966][T12115] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1761'. [ 571.940703][ T5937] usbhid 2-1:0.0: can't add hid device: -71 [ 571.948819][ T5937] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 572.011241][ T5937] usb 2-1: USB disconnect, device number 8 [ 572.098606][T12115] netlink: 'syz.0.1761': attribute type 6 has an invalid length. [ 572.898886][T12124] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1764'. [ 573.135629][ T5897] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 573.247420][T12129] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1766'. [ 573.316251][ T5897] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 573.335739][ T5897] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 573.338121][T12133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1767'. [ 573.350433][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.384800][ T5897] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 573.569743][ T5840] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 573.780151][ T5840] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 573.803928][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.836340][ T5840] usb 2-1: Product: syz [ 573.842454][ T5840] usb 2-1: Manufacturer: syz [ 573.851719][ T5840] usb 2-1: SerialNumber: syz [ 573.861537][ T5840] usb 2-1: config 0 descriptor?? [ 574.280455][ T5840] airspy 2-1:0.0: Board ID: 00 [ 574.293461][ T5840] airspy 2-1:0.0: Firmware version: [ 574.334413][ T5937] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 574.475212][ T5897] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 574.524519][ T5937] usb 1-1: Using ep0 maxpacket: 32 [ 574.537403][ T5937] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 574.546856][ T5937] usb 1-1: config 0 has no interface number 0 [ 574.553118][ T5937] usb 1-1: config 0 interface 184 has no altsetting 0 [ 574.594787][ T5937] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 574.606196][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.616188][ T5937] usb 1-1: Product: syz [ 574.634365][ T5937] usb 1-1: Manufacturer: syz [ 574.664335][ T5937] usb 1-1: SerialNumber: syz [ 574.682270][ T5897] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 574.693288][ T5840] airspy 2-1:0.0: usb_control_msg() failed -71 request 0e [ 574.695568][ T5937] usb 1-1: config 0 descriptor?? [ 574.741832][ T5840] airspy 2-1:0.0: Registered as swradio24 [ 574.748799][ T5897] stv0680 3-1:4.0: last error: 0, command = 0x0 [ 574.750045][ T5937] smsc75xx v1.0.0 [ 574.836654][ T5840] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 574.961999][ T5897] usb 3-1: USB disconnect, device number 4 [ 574.971421][T12147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1770'. [ 574.983955][ T5840] usb 2-1: USB disconnect, device number 9 [ 575.021785][T12147] (unnamed net_device) (uninitialized): option mode: invalid value (47) [ 575.182480][ T5937] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 575.202527][ T5937] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 575.232449][ T5937] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 575.300750][ T5937] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 575.445182][ T5897] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 575.696393][ T5897] usb 5-1: config 0 has no interfaces? [ 575.714805][ T5897] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 575.869391][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.884554][ T5937] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 575.907501][ T5897] usb 5-1: config 0 descriptor?? [ 576.119634][T12146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.159719][T12147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.198083][ T5937] usb 3-1: Using ep0 maxpacket: 32 [ 576.309929][T12146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.402610][T12147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.561667][ T5897] usb 5-1: USB disconnect, device number 22 [ 576.690106][ T5937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.747571][ T5937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.011228][ T5937] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 577.071350][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.134377][ T5937] usb 3-1: config 0 descriptor?? [ 577.693073][ T5897] usb 1-1: USB disconnect, device number 123 [ 577.984639][ T5840] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 578.225699][ T5840] usb 5-1: device descriptor read/64, error -71 [ 578.534919][ T5840] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 578.674822][ T5840] usb 5-1: device descriptor read/64, error -71 [ 578.735460][T12155] input: syz1 as /devices/virtual/input/input71 [ 578.784830][ T5840] usb usb5-port1: attempt power cycle [ 579.167302][ T5840] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 579.195874][ T5840] usb 5-1: device descriptor read/8, error -71 [ 579.289775][T12188] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 579.454433][ T5840] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 579.495826][ T5840] usb 5-1: device descriptor read/8, error -71 [ 579.616332][ T5840] usb usb5-port1: unable to enumerate USB device [ 581.205097][ T5937] usbhid 3-1:0.0: can't add hid device: -71 [ 581.211318][ T5937] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 581.227055][ T5937] usb 3-1: USB disconnect, device number 5 [ 581.295775][ T5172] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 581.496671][ T5172] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 581.514091][ T5172] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 581.529317][ T5172] usb 5-1: config 0 interface 0 has no altsetting 0 [ 581.536870][ T5172] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 581.549506][ T5172] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.585610][ T5172] usb 5-1: config 0 descriptor?? [ 581.964367][ T5937] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 582.084009][ T5172] ryos 0003:1E7D:3138.001D: hidraw0: USB HID v0.00 Device [HID 1e7d:3138] on usb-dummy_hcd.4-1/input0 [ 582.144735][ T5937] usb 1-1: Using ep0 maxpacket: 8 [ 582.164620][ T5937] usb 1-1: config 162 has an invalid interface number: 166 but max is 0 [ 582.204482][ T5937] usb 1-1: config 162 has no interface number 0 [ 582.210891][ T5937] usb 1-1: config 162 interface 166 has no altsetting 0 [ 582.281280][ T5897] usb 5-1: USB disconnect, device number 27 [ 582.285045][ T5937] usb 1-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=d3.ea [ 582.330785][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.374862][ T5937] usb 1-1: Product: syz [ 582.379183][ T5937] usb 1-1: Manufacturer: syz [ 582.429641][ T5937] usb 1-1: SerialNumber: syz [ 582.432098][T12219] fuse: Bad value for 'group_id' [ 582.450520][T12219] fuse: Bad value for 'group_id' [ 584.903573][T12250] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 585.009877][T12250] syzkaller0: linktype set to 825 [ 585.052565][ T5937] appledisplay 1-1:162.166: Error while getting initial brightness: -71 [ 585.102279][ T5937] appledisplay 1-1:162.166: probe with driver appledisplay failed with error -71 [ 585.179348][ T5937] usb 1-1: USB disconnect, device number 124 [ 585.425189][ T7358] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 585.614510][ T7358] usb 2-1: Using ep0 maxpacket: 32 [ 585.655172][ T7358] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.695417][ T7358] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.737096][ T7358] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 585.746821][ T7358] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 585.783102][ T7358] usb 2-1: Product: syz [ 585.799738][ T7358] usb 2-1: Manufacturer: syz [ 585.839329][ T7358] hub 2-1:4.0: USB hub found [ 586.042456][ T7358] hub 2-1:4.0: 2 ports detected [ 586.382232][T12262] netlink: 788 bytes leftover after parsing attributes in process `syz.0.1801'. [ 586.657505][ T7358] usb 2-1: USB disconnect, device number 10 [ 586.798423][ T5897] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 586.944268][ T5897] usb 3-1: device descriptor read/64, error -71 [ 586.974372][ T5172] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 587.270665][ T5172] usb 1-1: config 4 has an invalid interface number: 196 but max is 0 [ 587.297860][ T5172] usb 1-1: config 4 has no interface number 0 [ 587.304957][ T5897] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 587.327824][ T5172] usb 1-1: config 4 interface 196 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 587.393596][ T5172] usb 1-1: config 4 interface 196 has no altsetting 0 [ 587.440681][ T5172] usb 1-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice=f3.03 [ 587.464797][ T5897] usb 3-1: device descriptor read/64, error -71 [ 587.504077][ T5172] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.554025][ T5172] usb 1-1: Product: syz [ 587.570289][ T5172] usb 1-1: Manufacturer: syz [ 587.584258][ T5172] usb 1-1: SerialNumber: syz [ 587.602116][T12263] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 587.621858][ T5172] keyspan 1-1:4.196: Keyspan 1 port adapter converter detected [ 587.669074][ T5897] usb usb3-port1: attempt power cycle [ 587.682192][ T5172] keyspan 1-1:4.196: found no endpoint descriptor for endpoint 84 [ 587.698617][ T5172] keyspan 1-1:4.196: found no endpoint descriptor for endpoint 81 [ 587.709859][ T5172] keyspan 1-1:4.196: found no endpoint descriptor for endpoint 1 [ 587.738176][ T5172] keyspan 1-1:4.196: found no endpoint descriptor for endpoint 2 [ 587.788423][ T5172] keyspan 1-1:4.196: found no endpoint descriptor for endpoint 83 [ 587.841632][ T5172] keyspan 1-1:4.196: found no endpoint descriptor for endpoint 3 [ 587.876813][ T5172] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 587.932034][ T5172] usb 1-1: USB disconnect, device number 125 [ 587.962900][ T5172] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 587.998713][ T5172] keyspan 1-1:4.196: device disconnected [ 588.060029][ T5897] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 588.109969][ T5897] usb 3-1: device descriptor read/8, error -71 [ 588.365490][ T5897] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 588.395816][T12283] fuse: Bad value for 'fd' [ 588.409416][ T5897] usb 3-1: device descriptor read/8, error -71 [ 588.525509][ T5897] usb usb3-port1: unable to enumerate USB device [ 588.597033][ T5172] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 588.776801][ T5172] usb 2-1: Using ep0 maxpacket: 8 [ 588.802771][ T5172] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 588.820809][ T5172] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.831801][ T5172] usb 2-1: Product: syz [ 588.843372][ T5172] usb 2-1: Manufacturer: syz [ 588.851621][ T5172] usb 2-1: SerialNumber: syz [ 588.882069][ T5172] usb 2-1: config 0 descriptor?? [ 588.887263][ T5897] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 588.920059][ T5172] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 588.955425][ T5172] usb 2-1: setting power ON [ 588.965293][ T5172] dvb-usb: bulk message failed: -22 (2/0) [ 588.992702][ T5172] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 589.023646][ T5172] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 589.075355][ T5172] usb 2-1: media controller created [ 589.106860][ T5897] usb 1-1: config 0 has no interfaces? [ 589.124578][ T5897] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 589.133735][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.192413][ T5172] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 589.216071][ T5897] usb 1-1: Product: syz [ 589.220309][ T5897] usb 1-1: Manufacturer: syz [ 589.236199][ T5897] usb 1-1: SerialNumber: syz [ 589.287357][ T5897] usb 1-1: config 0 descriptor?? [ 589.321877][ T5172] usb 2-1: selecting invalid altsetting 6 [ 589.336776][ T5172] usb 2-1: digital interface selection failed (-22) [ 589.343609][ T5172] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 589.355558][ T5172] usb 2-1: setting power OFF [ 589.360708][ T5172] dvb-usb: bulk message failed: -22 (2/0) [ 589.367141][ T5172] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 589.386542][ T5172] (NULL device *): no alternate interface [ 589.546301][ T5172] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 589.603323][ T5172] usb 2-1: USB disconnect, device number 11 [ 589.731241][T12303] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 590.338181][ T5172] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 590.514681][ T5172] usb 3-1: Using ep0 maxpacket: 16 [ 590.649057][T12305] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1814'. [ 592.025744][ T5893] usb 1-1: USB disconnect, device number 126 [ 592.635012][ T5893] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 592.823805][ T5893] usb 2-1: config 0 has no interfaces? [ 592.924890][ T5893] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 592.977544][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.994198][ T5893] usb 2-1: Product: syz [ 593.008920][ T5893] usb 2-1: Manufacturer: syz [ 593.013632][ T5893] usb 2-1: SerialNumber: syz [ 593.050154][T12337] netlink: 'syz.4.1821': attribute type 21 has an invalid length. [ 593.091313][ T5893] usb 2-1: config 0 descriptor?? [ 593.094399][T12337] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1821'. [ 593.162857][T12337] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1821'. [ 593.369793][T12335] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1820'. [ 593.434302][T12340] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 593.844069][ T5172] usb 3-1: unable to get BOS descriptor or descriptor too short [ 593.876392][ T5172] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 593.909141][ T5172] usb 3-1: can't read configurations, error -71 [ 593.920269][ T5893] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 594.124443][ T5893] usb 1-1: Using ep0 maxpacket: 8 [ 594.138533][ T5893] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 594.162484][ T5893] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 594.175471][ T5893] usb 1-1: config 0 has no interface number 0 [ 594.189326][ T5893] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 594.203800][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.217443][ T5893] usb 1-1: Product: syz [ 594.228459][ T5893] usb 1-1: Manufacturer: syz [ 594.233396][ T5893] usb 1-1: SerialNumber: syz [ 594.249302][ T5893] usb 1-1: config 0 descriptor?? [ 594.262164][ T5893] hub 1-1:0.31: bad descriptor, ignoring hub [ 594.272967][ T5893] hub 1-1:0.31: probe with driver hub failed with error -5 [ 594.342693][ T5893] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 594.465971][T12347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.480434][ T5893] uvcvideo 1-1:0.31: Entity type for entity Output 6 was not initialized! [ 594.490536][ T5893] usb 1-1: Failed to create links for entity 6 [ 594.491486][T12347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.501324][ T5893] usb 1-1: Failed to register entities (-22). [ 594.668832][ T5937] usb 1-1: USB disconnect, device number 127 [ 595.347627][T12364] tipc: Started in network mode [ 595.352561][T12364] tipc: Node identity 8000008, cluster identity 4711 [ 595.408819][ T5172] usb 2-1: USB disconnect, device number 12 [ 595.464293][T12364] tipc: Node number set to 134217736 [ 596.024326][ T5172] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 596.199985][ T5172] usb 1-1: too many configurations: 207, using maximum allowed: 8 [ 596.261316][ T5172] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 596.274710][ T5172] usb 1-1: can't read configurations, error -61 [ 596.304923][ T31] INFO: task udevd:5961 blocked for more than 143 seconds. [ 596.326025][ T31] Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 [ 596.340468][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 596.373438][ T31] task:udevd state:D stack:23000 pid:5961 tgid:5961 ppid:5211 task_flags:0x400140 flags:0x00000002 [ 596.410630][ T31] Call Trace: [ 596.416617][ T31] [ 596.423124][ T31] __schedule+0x16e2/0x4cd0 [ 596.428116][ T5172] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 596.462855][ T31] ? schedule+0x165/0x360 [ 596.471927][ T31] ? __pfx___schedule+0x10/0x10 [ 596.491312][ T31] ? schedule+0x91/0x360 [ 596.535231][ T31] schedule+0x165/0x360 [ 596.552914][ T31] schedule_preempt_disabled+0x13/0x30 [ 596.582660][ T31] __mutex_lock+0x724/0xe80 [ 596.594937][ T31] ? __mutex_lock+0x51b/0xe80 [ 596.605952][ T5172] usb 1-1: too many configurations: 207, using maximum allowed: 8 [ 596.616018][ T31] ? uevent_show+0x174/0x330 [ 596.620989][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 596.625834][ T5172] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 596.648779][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 596.653928][ T31] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 596.661630][ T5172] usb 1-1: can't read configurations, error -61 [ 596.669639][ T31] ? uevent_show+0x15a/0x330 [ 596.678648][ T31] uevent_show+0x174/0x330 [ 596.683519][ T5172] usb usb1-port1: attempt power cycle [ 596.690384][ T31] dev_attr_show+0x55/0xc0 [ 596.695186][ T5893] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 596.709634][ T31] ? __pfx_dev_attr_show+0x10/0x10 [ 596.715972][ T31] sysfs_kf_seq_show+0x30d/0x490 [ 596.721223][ T31] seq_read_iter+0x4e7/0xe10 [ 596.727290][ T31] vfs_read+0x4cd/0x980 [ 596.731736][ T31] ? __pfx_vfs_read+0x10/0x10 [ 596.738932][ T31] ksys_read+0x145/0x250 [ 596.743454][ T31] ? __pfx_ksys_read+0x10/0x10 [ 596.751591][ T31] ? do_syscall_64+0xba/0x210 [ 596.757928][ T31] do_syscall_64+0xf6/0x210 [ 596.762673][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 596.776760][ T31] ? clear_bhb_loop+0x45/0xa0 [ 596.782752][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.801934][ T31] RIP: 0033:0x7ff2ee116b6a [ 596.814616][ T31] RSP: 002b:00007ffc3e0e9e78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 596.841636][ T31] RAX: ffffffffffffffda RBX: 0000560ad6166600 RCX: 00007ff2ee116b6a [ 596.883820][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 596.905722][ T31] RDX: 0000000000001000 RSI: 0000560ad615f980 RDI: 0000000000000008 [ 596.944330][ T31] RBP: 0000560ad6166600 R08: 0000000000000008 R09: 0000000000000200 [ 596.956735][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 596.993489][ T31] R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000 [ 597.004972][ T5893] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 597.040472][ T31] R13: 0000000000003fff R14: 00007ffc3e0ea358 R15: 000000000000000a [ 597.054275][ T5172] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 597.082641][ T5893] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 597.093200][ T31] [ 597.107747][ T31] [ 597.107747][ T31] Showing all locks held in the system: [ 597.129227][ T5172] usb 1-1: too many configurations: 207, using maximum allowed: 8 [ 597.149819][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.174629][ T31] 1 lock held by khungtaskd/31: [ 597.180236][ T31] #0: ffffffff8e13b860 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 597.224568][ T5172] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 597.269315][ T31] 2 locks held by kworker/u8:4/63: [ 597.274628][ T5893] usb 5-1: config 0 descriptor?? [ 597.274878][ T5172] usb 1-1: can't read configurations, error -61 [ 597.301835][ T31] 4 locks held by kworker/u8:6/1145: [ 597.314003][ T31] #0: ffff88801b2f6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 597.382245][ T31] #1: ffffc90003dbfc60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 597.434333][ T5172] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 597.456693][ T31] #2: ffffffff8f4eacd0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x145/0xbd0 [ 597.510066][ T5172] usb 1-1: too many configurations: 207, using maximum allowed: 8 [ 597.551538][ T31] #3: ffffffff8e141338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b7/0x730 [ 597.582399][ T5172] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 597.602258][ T5172] usb 1-1: can't read configurations, error -61 [ 597.610115][ T31] 3 locks held by kworker/0:2/5172: [ 597.617619][ T5172] usb usb1-port1: unable to enumerate USB device [ 597.626318][ T31] 2 locks held by getty/5598: [ 597.632904][ T31] #0: ffff88803008b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 597.649762][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 597.661928][ T31] 4 locks held by udevd/5851: [ 597.667200][ T31] #0: ffff8880331d5790 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 597.678051][ T31] #1: ffff888030ff3488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x55/0x3c0 [ 597.688907][ T31] #2: ffff8880243f9b48 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x75/0x3c0 [ 597.700111][ T31] #3: ffff88805b202198 (&dev->mutex){....}-{4:4}, at: uevent_show+0x174/0x330 [ 597.710576][ T31] 5 locks held by kworker/1:3/5892: [ 597.718075][ T31] 5 locks held by kworker/0:4/5893: [ 597.723450][ T31] #0: ffff888020ad9548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 597.742593][ T31] #1: ffffc9000443fc60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 597.760694][ T31] #2: ffff8881457fb198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 597.773096][ T31] #3: ffff88805b202198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 597.788778][ T31] #4: ffff88805af82160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 597.800825][ T31] 4 locks held by udevd/5961: [ 597.811185][ T31] #0: ffff8880599a6b08 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 597.823253][ T31] #1: ffff888031990888 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x55/0x3c0 [ 597.838379][ T31] #2: ffff88802914dc38 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x75/0x3c0 [ 597.869822][ T31] #3: ffff88801dac2160 (&dev->mutex){....}-{4:4}, at: uevent_show+0x174/0x330 [ 597.900666][ T31] 2 locks held by kworker/u8:8/6018: [ 597.919234][ T31] #0: ffff888140521148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 597.938699][ T31] #1: ffffc90004987c60 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 597.953580][ T31] 1 lock held by syz.2.1832/12373: [ 597.963438][ T31] #0: ffffffff8e141200 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 597.976822][ T31] 1 lock held by syz.4.1838/12389: [ 597.982101][ T31] #0: ffff88807bd1ee08 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 598.014358][ T31] [ 598.019903][ T5893] usbhid 5-1:0.0: can't add hid device: -71 [ 598.046941][ T5893] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 598.056138][ T31] ============================================= [ 598.056138][ T31] [ 598.085498][ T31] NMI backtrace for cpu 0 [ 598.085521][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 598.085545][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 598.085558][ T31] Call Trace: [ 598.085566][ T31] [ 598.085575][ T31] dump_stack_lvl+0x189/0x250 [ 598.085610][ T31] ? __wake_up_klogd+0xd9/0x110 [ 598.085637][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 598.085668][ T31] ? __pfx__printk+0x10/0x10 [ 598.085702][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 598.085728][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 598.085747][ T31] ? _printk+0xcf/0x120 [ 598.085773][ T31] ? __pfx__printk+0x10/0x10 [ 598.085797][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 598.085823][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 598.085848][ T31] watchdog+0xfee/0x1030 [ 598.085878][ T31] ? watchdog+0x1de/0x1030 [ 598.085913][ T31] kthread+0x70e/0x8a0 [ 598.085943][ T31] ? __pfx_watchdog+0x10/0x10 [ 598.085977][ T31] ? __pfx_kthread+0x10/0x10 [ 598.086004][ T31] ? __pfx_kthread+0x10/0x10 [ 598.086029][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 598.086052][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 598.086078][ T31] ? __pfx_kthread+0x10/0x10 [ 598.086102][ T31] ret_from_fork+0x4b/0x80 [ 598.086124][ T31] ? __pfx_kthread+0x10/0x10 [ 598.086148][ T31] ret_from_fork_asm+0x1a/0x30 [ 598.086185][ T31] [ 598.086193][ T31] Sending NMI from CPU 0 to CPUs 1: [ 598.239103][ C1] NMI backtrace for cpu 1 [ 598.239122][ C1] CPU: 1 UID: 0 PID: 5892 Comm: kworker/1:3 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 598.239144][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 598.239156][ C1] Workqueue: usb_hub_wq hub_event [ 598.239182][ C1] RIP: 0010:__lock_acquire+0x4ec/0xd20 [ 598.239211][ C1] Code: c6 28 41 89 c4 48 39 cb 0f 8d db 00 00 00 48 83 fb 31 0f 83 92 00 00 00 41 8b 06 25 ff 1f 00 00 48 0f a3 05 f6 42 01 12 73 10 <48> 69 c0 c8 00 00 00 48 8d 88 e0 66 40 93 eb 40 83 3d 0d d2 04 18 [ 598.239227][ C1] RSP: 0018:ffffc9000442e5f8 EFLAGS: 00000007 [ 598.239241][ C1] RAX: 00000000000003ff RBX: 0000000000000000 RCX: 00000000ffffffff [ 598.239253][ C1] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ffff88805c599e00 [ 598.239265][ C1] RBP: ffff88805c59a8f0 R08: 0000000000000000 R09: 0000000000000000 [ 598.239277][ C1] R10: 0000000000000000 R11: ffffffff8171a9f5 R12: ffffffffffffff05 [ 598.239289][ C1] R13: 0000000000000000 R14: ffff88805c59a910 R15: ffff88805c59a9b8 [ 598.239302][ C1] FS: 0000000000000000(0000) GS:ffff888125da3000(0000) knlGS:0000000000000000 [ 598.239316][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 598.239328][ C1] CR2: 00007f45d6b7ed38 CR3: 000000007c302000 CR4: 00000000003526f0 [ 598.239356][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 598.239366][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 598.239376][ C1] Call Trace: [ 598.239383][ C1] [ 598.239393][ C1] ? unwind_next_frame+0xa5/0x2390 [ 598.239415][ C1] lock_acquire+0x120/0x360 [ 598.239437][ C1] ? unwind_next_frame+0xa5/0x2390 [ 598.239461][ C1] ? unwind_next_frame+0xa5/0x2390 [ 598.239481][ C1] ? bus_probe_device+0x185/0x260 [ 598.239503][ C1] ? unwind_next_frame+0xa5/0x2390 [ 598.239523][ C1] unwind_next_frame+0xc2/0x2390 [ 598.239543][ C1] ? unwind_next_frame+0xa5/0x2390 [ 598.239566][ C1] ? unwind_next_frame+0xa5/0x2390 [ 598.239586][ C1] ? __device_attach+0x2b8/0x400 [ 598.239603][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 598.239623][ C1] arch_stack_walk+0x11c/0x150 [ 598.239647][ C1] ? bus_probe_device+0x185/0x260 [ 598.239669][ C1] stack_trace_save+0x9c/0xe0 [ 598.239688][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 598.239705][ C1] ? __device_attach_driver+0x2ce/0x530 [ 598.239723][ C1] ? usb_set_configuration+0x1a87/0x20e0 [ 598.239742][ C1] ? usb_generic_driver_probe+0x8d/0x150 [ 598.239760][ C1] ? usb_probe_device+0x1c1/0x390 [ 598.239778][ C1] ? really_probe+0x26a/0x9a0 [ 598.239797][ C1] kasan_save_track+0x3e/0x80 [ 598.239816][ C1] ? kasan_save_track+0x3e/0x80 [ 598.239833][ C1] ? kasan_save_free_info+0x46/0x50 [ 598.239848][ C1] ? __kasan_slab_free+0x62/0x70 [ 598.239867][ C1] ? kfree+0x193/0x440 [ 598.239885][ C1] ? ath6kl_usb_post_recv_transfers+0x3ea/0x6f0 [ 598.239912][ C1] ? ath6kl_usb_power_on+0x6a/0x280 [ 598.239931][ C1] ? ath6kl_core_init+0x1d6/0x10f0 [ 598.239949][ C1] ? ath6kl_usb_probe+0x14df/0x15d0 [ 598.239973][ C1] ? usb_probe_interface+0x641/0xbc0 [ 598.239993][ C1] ? really_probe+0x26a/0x9a0 [ 598.240008][ C1] ? __driver_probe_device+0x18c/0x2f0 [ 598.240024][ C1] ? driver_probe_device+0x4f/0x430 [ 598.240057][ C1] ? __device_attach_driver+0x2ce/0x530 [ 598.240074][ C1] ? bus_for_each_drv+0x24e/0x2e0 [ 598.240094][ C1] ? __device_attach+0x2b8/0x400 [ 598.240109][ C1] ? bus_probe_device+0x185/0x260 [ 598.240130][ C1] ? device_add+0x7b6/0xb50 [ 598.240153][ C1] ? usb_set_configuration+0x1a87/0x20e0 [ 598.240172][ C1] ? usb_generic_driver_probe+0x8d/0x150 [ 598.240190][ C1] ? usb_probe_device+0x1c1/0x390 [ 598.240209][ C1] ? really_probe+0x26a/0x9a0 [ 598.240226][ C1] ? __driver_probe_device+0x18c/0x2f0 [ 598.240242][ C1] ? driver_probe_device+0x4f/0x430 [ 598.240258][ C1] ? __device_attach_driver+0x2ce/0x530 [ 598.240275][ C1] ? bus_for_each_drv+0x24e/0x2e0 [ 598.240295][ C1] ? __device_attach+0x2b8/0x400 [ 598.240310][ C1] ? bus_probe_device+0x185/0x260 [ 598.240345][ C1] kasan_save_free_info+0x46/0x50 [ 598.240361][ C1] __kasan_slab_free+0x62/0x70 [ 598.240382][ C1] ? ath6kl_usb_post_recv_transfers+0x3ea/0x6f0 [ 598.240404][ C1] kfree+0x193/0x440 [ 598.240426][ C1] ath6kl_usb_post_recv_transfers+0x3ea/0x6f0 [ 598.240456][ C1] ath6kl_usb_power_on+0x6a/0x280 [ 598.240478][ C1] ath6kl_core_init+0x1d6/0x10f0 [ 598.240500][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 598.240521][ C1] ? __pfx_ath6kl_core_init+0x10/0x10 [ 598.240540][ C1] ? __asan_memcpy+0x40/0x70 [ 598.240558][ C1] ? ath6kl_core_create+0x7fb/0x9a0 [ 598.240579][ C1] ath6kl_usb_probe+0x14df/0x15d0 [ 598.240606][ C1] usb_probe_interface+0x641/0xbc0 [ 598.240632][ C1] ? __pfx_usb_probe_interface+0x10/0x10 [ 598.240654][ C1] really_probe+0x26a/0x9a0 [ 598.240674][ C1] __driver_probe_device+0x18c/0x2f0 [ 598.240692][ C1] driver_probe_device+0x4f/0x430 [ 598.240711][ C1] __device_attach_driver+0x2ce/0x530 [ 598.240730][ C1] bus_for_each_drv+0x24e/0x2e0 [ 598.240752][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 598.240770][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 598.240796][ C1] __device_attach+0x2b8/0x400 [ 598.240813][ C1] ? __pfx___device_attach+0x10/0x10 [ 598.240830][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 598.240853][ C1] bus_probe_device+0x185/0x260 [ 598.240876][ C1] device_add+0x7b6/0xb50 [ 598.240902][ C1] usb_set_configuration+0x1a87/0x20e0 [ 598.240933][ C1] usb_generic_driver_probe+0x8d/0x150 [ 598.240954][ C1] usb_probe_device+0x1c1/0x390 [ 598.240981][ C1] ? __pfx_usb_probe_device+0x10/0x10 [ 598.241001][ C1] really_probe+0x26a/0x9a0 [ 598.241021][ C1] __driver_probe_device+0x18c/0x2f0 [ 598.241039][ C1] driver_probe_device+0x4f/0x430 [ 598.241058][ C1] __device_attach_driver+0x2ce/0x530 [ 598.241077][ C1] bus_for_each_drv+0x24e/0x2e0 [ 598.241099][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 598.241117][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 598.241143][ C1] __device_attach+0x2b8/0x400 [ 598.241160][ C1] ? __pfx___device_attach+0x10/0x10 [ 598.241177][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 598.241200][ C1] bus_probe_device+0x185/0x260 [ 598.241223][ C1] device_add+0x7b6/0xb50 [ 598.241250][ C1] usb_new_device+0xa39/0x16c0 [ 598.241271][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 598.241288][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 598.241308][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 598.241330][ C1] hub_event+0x2941/0x4a00 [ 598.241369][ C1] ? __pfx_hub_event+0x10/0x10 [ 598.241388][ C1] ? process_scheduled_works+0x9ec/0x17a0 [ 598.241408][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 598.241426][ C1] ? process_scheduled_works+0x9ec/0x17a0 [ 598.241442][ C1] ? process_scheduled_works+0x9ec/0x17a0 [ 598.241460][ C1] process_scheduled_works+0xadb/0x17a0 [ 598.241488][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 598.241512][ C1] worker_thread+0x8a0/0xda0 [ 598.241531][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 598.241554][ C1] ? __kthread_parkme+0x7b/0x200 [ 598.241577][ C1] kthread+0x70e/0x8a0 [ 598.241598][ C1] ? __pfx_worker_thread+0x10/0x10 [ 598.241616][ C1] ? __pfx_kthread+0x10/0x10 [ 598.241636][ C1] ? __pfx_kthread+0x10/0x10 [ 598.241656][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 598.241674][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 598.241695][ C1] ? __pfx_kthread+0x10/0x10 [ 598.241714][ C1] ret_from_fork+0x4b/0x80 [ 598.241733][ C1] ? __pfx_kthread+0x10/0x10 [ 598.241752][ C1] ret_from_fork_asm+0x1a/0x30 [ 598.241777][ C1] [ 598.983531][ C0] vkms_vblank_simulate: vblank timer overrun [ 598.992463][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 598.999360][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 599.011195][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 599.021286][ T31] Call Trace: [ 599.024595][ T31] [ 599.027548][ T31] dump_stack_lvl+0x99/0x250 [ 599.032188][ T31] ? __asan_memcpy+0x40/0x70 [ 599.036851][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 599.042102][ T31] ? __pfx__printk+0x10/0x10 [ 599.046744][ T31] panic+0x2db/0x790 [ 599.050679][ T31] ? __pfx_panic+0x10/0x10 [ 599.055144][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 599.060990][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 599.066429][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 599.072625][ T31] watchdog+0x102d/0x1030 [ 599.076998][ T31] ? watchdog+0x1de/0x1030 [ 599.081460][ T31] kthread+0x70e/0x8a0 [ 599.085564][ T31] ? __pfx_watchdog+0x10/0x10 [ 599.090305][ T31] ? __pfx_kthread+0x10/0x10 [ 599.094930][ T31] ? __pfx_kthread+0x10/0x10 [ 599.099556][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 599.104793][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 599.110031][ T31] ? __pfx_kthread+0x10/0x10 [ 599.114659][ T31] ret_from_fork+0x4b/0x80 [ 599.119110][ T31] ? __pfx_kthread+0x10/0x10 [ 599.123749][ T31] ret_from_fork_asm+0x1a/0x30 [ 599.128571][ T31] [ 599.131922][ T31] Kernel Offset: disabled [ 599.136278][ T31] Rebooting in 86400 seconds..