last executing test programs: 4m49.850513309s ago: executing program 0 (id=675): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffff2c, &(0x7f0000000580)={&(0x7f0000000880)=ANY=[@ANYBLOB="500000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="05a00200000000002800128009000100766c616e00000000180002800c000200540a000018000000060001000100000008000500", @ANYRES32=r2], 0x50}, 0x1, 0xba01}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}, 0x1, 0xba01}, 0x0) 4m49.674565692s ago: executing program 0 (id=678): add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000300)={0x1eff8a1cfddfdce2, 0x6}, 0x0, 0x0, 0x0, 0x0}) 4m46.266269485s ago: executing program 0 (id=704): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/fscaps', 0x42, 0x30) 4m46.058696796s ago: executing program 0 (id=706): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 4m46.013612841s ago: executing program 0 (id=708): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr']) 4m45.794657173s ago: executing program 0 (id=711): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) open(0x0, 0xc162, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) r4 = socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x4) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYRES64=r4, @ANYRES32, @ANYRESHEX=r0], 0x3c}}, 0x10) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) write$rfkill(r5, &(0x7f00000004c0)={0x3, 0x2, 0x3, 0x1, 0x1}, 0x8) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e751d"], 0x24) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0}) 4m29.270835601s ago: executing program 32 (id=711): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) open(0x0, 0xc162, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) r4 = socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x4) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYRES64=r4, @ANYRES32, @ANYRESHEX=r0], 0x3c}}, 0x10) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) write$rfkill(r5, &(0x7f00000004c0)={0x3, 0x2, 0x3, 0x1, 0x1}, 0x8) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e751d"], 0x24) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0}) 12.798145395s ago: executing program 2 (id=1613): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) socket$alg(0x26, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x410000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newtaction={0x48, 0x5a, 0x1, 0x0, 0x21000000, {0x2}, [{0x34, 0x1, [@m_skbmod={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r4, 0x1, 0x70bd2d, 0x0, {0x2}}, 0x14}}, 0xc8c0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r4, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_TYPE={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x1, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @private=0xa010102}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0}}]}, 0x50}}, 0x0) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x55f8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x894b, 0x0) 11.072886856s ago: executing program 5 (id=1619): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000640)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 11.033752915s ago: executing program 2 (id=1621): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) socket$inet(0x2, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 10.841653417s ago: executing program 5 (id=1623): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10410, 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r3, 0x2000009) sendfile(r2, r3, 0x0, 0x7) 10.588051371s ago: executing program 5 (id=1624): r0 = socket(0x10, 0x3, 0x0) r1 = eventfd2(0x1, 0x0) r2 = epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b8109008cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000086fb13b5be0263b7b63a532d6566cb4601000000008f2b9010f22425e4097ed62cbc89106101d79d2ff3592246e07cfa6f"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_io_uring_setup(0x45b4, &(0x7f00000035c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000300)=@sco}) io_uring_enter(r3, 0x291c, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000004080101000003003a2a00000000000000da520000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x4000001) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x420c0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) close(0x3) read$eventfd(r1, &(0x7f0000000340), 0xf) sendmsg$NFQNL_MSG_CONFIG(r8, 0xfffffffffffffffd, 0x20000014) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@getchain={0x34, 0x66, 0x800, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0xb, 0x6}, {0xffe0, 0x9}, {0x0, 0xc}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0xd}]}, 0x34}}, 0x0) 9.698919098s ago: executing program 5 (id=1626): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x44004) 9.358997377s ago: executing program 5 (id=1629): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x481, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000000)=ANY=[], 0x0) ioctl$KVM_CAP_ARM_INJECT_SERROR_ESR(r0, 0x8008330e, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x2) close(r4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'geneve1\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r3, &(0x7f0000000540)="0503092c8f0b480301020d0086ddf7c25975e014b02f0800eb2b2ff0dac8897c6b118777faff30236beae6efafbb1c65f7ffff306610", 0x36, 0x800, 0x0, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r6}, './file0\x00'}) 8.13229591s ago: executing program 3 (id=1633): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000027c0)=[{{&(0x7f0000000a00)={0xa, 0x4e24, 0xffffff81, @loopback}, 0x1c, &(0x7f0000000c80)=[{&(0x7f0000000a40)="6701", 0x2}], 0x1}}, {{&(0x7f0000000cc0)={0xa, 0x4e21, 0xec63, @local, 0x6}, 0x1c, &(0x7f00000020c0)=[{&(0x7f0000000d00)="8732d0", 0x3}], 0x1}}], 0x2, 0x41) (fail_nth: 2) 7.721765326s ago: executing program 3 (id=1635): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000080), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) write$binfmt_script(r8, 0x0, 0x0) sendmsg(r8, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 7.670563566s ago: executing program 2 (id=1637): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x41d4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') creat(&(0x7f0000000400)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000180), &(0x7f00000001c0)=@v2={0x3, 0x2, 0xc, 0x0, 0x5, "e7277b4eeb"}, 0xe, 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@bridge_setlink={0x48, 0x13, 0x13, 0x0, 0x0, {0x10, 0x0, 0x0, 0x0, 0x40450}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xfffffffd}}]}]}]}, 0x48}}, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x40, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'gre0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 5.955143383s ago: executing program 3 (id=1638): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close(0xffffffffffffffff) connect$bt_l2cap(r4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x541d, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a", @ANYBLOB="455c183640f0bea0f5ec7a3264398df1e73ecec5779874935ba4f8dafc4d1b07d151713ed6071125c7e23417084853eec82ad1d0386e58628ddfb0baf56a0c47e9ea926805797f39deb2c8ae1c49160495b42556de386ce5a86972aef131470e722b3192abaaa37bbca300fb8ee3ce9bc21b5f3324a84cb50ace46b0ba9731d976a82edf5db2724e2519c3429809e880507494d4ff17f23915a051b5f9773575dec92cf7c7fbf11b27369ee3e028652d9ab9b1b709cc45fab0be54e644af34b4276752072537c949111a452b8f3f400e2e37d96aac"], 0x80}}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x400008a, 0x0) getpid() r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r6, 0x406855c9, &(0x7f0000000380)={0x9, 0x4, {0x57, 0x2, 0x2, {0x800, 0x1}, {0x6, 0xde}, @cond=[{0x7, 0x800, 0xffb, 0x0, 0x1530, 0x1}, {0x0, 0x100, 0x5, 0x8000, 0x7, 0xffff}]}, {0x55, 0x1, 0x3, {0x9, 0x54}, {0xffff, 0xfffd}, @ramp={0x5, 0x8f8, {0x81, 0xa, 0x7, 0xc}}}}) 5.896690975s ago: executing program 2 (id=1639): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000d40)=""/212, 0xd4}, {&(0x7f0000000b00)=""/246, 0xf6}, {&(0x7f0000000240)=""/215, 0xd7}, {&(0x7f0000002380)=""/197, 0xc5}, {&(0x7f0000000500)=""/205, 0xcd}, {&(0x7f0000000040)=""/14, 0xe}, {&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000002180)=""/110, 0x6e}, {&(0x7f0000002140)=""/36, 0x24}, {&(0x7f0000002f40)=""/4100, 0x1004}, {&(0x7f0000004680)=""/4094, 0xffe}], 0xb}, 0x0) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 5.462514644s ago: executing program 5 (id=1641): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 5.002579148s ago: executing program 3 (id=1642): r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getpgid(r1) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) 4.346091303s ago: executing program 2 (id=1644): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007c153ee5dfe6e1c4fa67446ee8bc6373ee56367b13eafef8595d3d7fa958c398794470bf9e334f0ccdf78c55400c9f61611d55cc175ed896ba4911dcd53e2625d7528689a362b0c37d6087c6915107223aac12b2069c355a053d17de2e28e19c7a7ddf"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='rcu_utilization\x00', r3}, 0x18) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) 4.226278149s ago: executing program 2 (id=1646): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r1, @ANYBLOB="010000000000040000004400000008000300", @ANYRES32=r3, @ANYBLOB="0a0018000303030303030000080026006c09000005002400020000009c005a80"], 0xd4}}, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000480)="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", 0x1eb) (async) memfd_create(&(0x7f0000000040)='\'t\x92\x19\xaf\x7f\xe6\xacv\xb3\xa0\x8a?`@{\xf1\xa5T\xe5\xa2\x058Sv\x03\x906\x02\xf9\x03{\xe46\x1e+~\xdex\xa8\x87t<\"B\x8e\'\x05\xeb\xe6\aU\xd8\x1a$\xe2\':\x9f\x01\x85\xcfq\xe6\x04\x81\xa3N\x0f\xb4\x8fc\xbea\x19\x17\xd5\x04\x81\xd2\xde\x1c@\x88\xfd\xa5\xea6Ys\x80\x9a(U\xa2\x17;?7\x0e\x87&\xb0\x9b+\xa3nS\xba\xb3\xa7;\x1at\x9fSCC\x9f\x11[\xb9\xf9T\xb5\xe2\x11\xe9\xef\x10z\x1b,%\xcd\x87\x0f(j\xf8\x1fo\xda\xe6\xea\x04\x05\xc8P\xcd\xba\xb0\x93Sr\xaa\xf4\b%\xf3\xfd\xf5/6n\xa1&]\x88\xbb\x17\x82\xfd\x87\xc1\x14\xde\x83\x9dK\x80\xd3?-F[\xb8\x84\x9e]`\b\x90<\xfa\x13\x06\xc0\xe4\xc1\xcbQy\x95\x02q\xbf\xe3\x03\xe9\xd4\xfa\x85l\x80\xcbq\x9fc4\xeb\x06\x1f\x1b\xb1V]\xf9\xbc\x9b\xceQW#})p\x17/\x81\x96\xb4\xfa\xc4\xc2\xa2\xef\xca\xba\x98+\xd1g\xf5\xadX+\xe0+a\x9f}\x8f\xdc\x92j\x16\x11\xc7\x95$J\x00\x00\x00', 0x0) (async) r6 = getpid() (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) (async) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r8, 0x0, 0xa0028000}, 0x38) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@ipv6_deladdrlabel={0x1c, 0x49, 0x10, 0x70bd26, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x0, 0x80000001}}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c014}, 0x0) read(r9, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r9, &(0x7f00000000c0)=r6, 0x12) (async) close(r9) (async) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) openat(r11, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x20003, 0x11) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x10802, 0xe) (async) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/devices.allow\x00', 0x1, 0x0) (async) sendto$inet6(r4, &(0x7f0000000180)='=', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @private1}, 0x1c) (async) shutdown(r4, 0x1) (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0xffffef3c}) 3.923079198s ago: executing program 3 (id=1647): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) socket$inet(0x2, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2.450719659s ago: executing program 1 (id=1649): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/376]}, 0x1f0) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) 2.428861677s ago: executing program 4 (id=1650): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f00000000c0)={0x0, @empty, 0x0, 0x0, 'sed\x00'}, 0x2c) 2.316745201s ago: executing program 1 (id=1651): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x200640, 0x23) symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r0, &(0x7f0000000000)='./file0\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x800, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x8, &(0x7f0000000a00)=ANY=[], 0x0, 0x4, 0xf6, &(0x7f0000000180)=""/246, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fanotify_mark(0xffffffffffffffff, 0x1, 0x4800003e, r1, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./bus\x00') setxattr$trusted_overlay_nlink(&(0x7f0000000380)='./bus\x00', &(0x7f00000003c0), 0x0, 0x0, 0x0) 2.268059027s ago: executing program 4 (id=1652): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 2.102572159s ago: executing program 1 (id=1653): socketpair$unix(0x1, 0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = syz_io_uring_setup(0x110, 0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xffffffff, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x40, 0x4004, @fd_index=0x4, 0xed, 0x0, 0x0, 0xa}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2.102170291s ago: executing program 4 (id=1654): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x2f, 0xb, 0x3, 0x2, 0x46, @mcast2, @dev={0xfe, 0x80, '\x00', 0x38}, 0x80, 0x80, 0xb237, 0x3}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) readahead(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x12f) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x14, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r4}, &(0x7f00000001c0), &(0x7f00000006c0)}, 0x20) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r2) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r5, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x1c}}, 0x4000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r3, @ANYBLOB="14005e80080002000000000008000100ff7fffef"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b700000028000000bca30000000000002403000040feffff7b0af0ff0000000079a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000e61141800000000001d430000000000007a0a00fe0000001f61141c0000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f2440000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c9494963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fbf05b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b60f132a2bf8a858392f34072d99aee0ec70aa6d75096e608d97ac4b7bfa2e0ae3e59718e7a7691a98b1334e34553300"/4140], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000040)={0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10001, @void, @value}, 0x94) 1.440989644s ago: executing program 1 (id=1655): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00'], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) 1.385066385s ago: executing program 4 (id=1656): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000080), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) write$binfmt_script(r8, 0x0, 0x0) sendmsg(r8, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 1.275042361s ago: executing program 1 (id=1657): r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getpgid(r1) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) 171.088089ms ago: executing program 1 (id=1658): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x448, 0x0) 92.885783ms ago: executing program 4 (id=1659): socketpair$unix(0x1, 0x2, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_io_uring_setup(0x110, &(0x7f0000000300)={0x0, 0xa570, 0x400, 0x6, 0x399}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xffffffff, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x40, 0x4004, @fd_index=0x4, 0xed, 0x0, 0x0, 0xa}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 20.661695ms ago: executing program 3 (id=1660): r0 = timerfd_create(0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup(r4) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000080)=ANY=[]) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r5, 0x80045017, &(0x7f0000000080)) r8 = dup(r7) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)=ANY=[]) getpeername$l2tp(r8, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000040)=0x10) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000480)={0xd54, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x200}) 0s ago: executing program 4 (id=1661): socket$packet(0x11, 0x3, 0x300) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) modify_ldt$write(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$dri(0x0, 0x1f, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = memfd_create(&(0x7f0000001380)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x7) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x12f4}}, 0x240000c4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000080)={0x3ff, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0) recvmmsg(r4, &(0x7f0000007680)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x12120, 0x0) kernel console output (not intermixed with test programs): usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 332.145686][ T970] usb 3-1: config 0 interface 41 has no altsetting 0 [ 332.160316][ T970] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 332.170043][ T970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.178322][ T970] usb 3-1: Product: syz [ 332.185970][ T970] usb 3-1: Manufacturer: syz [ 332.200186][ T970] usb 3-1: SerialNumber: syz [ 332.229158][ T970] usb 3-1: config 0 descriptor?? [ 332.273817][ T9395] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 332.288629][ T9395] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 332.834368][ T9395] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 332.958383][ T9395] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 333.058816][ T9417] No control pipe specified [ 333.290869][ T9424] overlayfs: failed to resolve './file1': -2 [ 333.420727][ T9427] xt_TPROXY: Can be used only with -p tcp or -p udp [ 334.169936][ T970] Error reading MAC address [ 334.175472][ T970] sr9700 3-1:0.41: probe with driver sr9700 failed with error -71 [ 334.303007][ T970] usb 3-1: USB disconnect, device number 25 [ 338.061396][ T46] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 338.239971][ T46] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 338.249348][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.282700][ T46] usb 3-1: config 0 descriptor?? [ 338.745268][ T46] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 338.764748][ T46] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 338.774143][ T46] [drm:udl_init] *ERROR* Selecting channel failed [ 338.886723][ T9479] xt_TPROXY: Can be used only with -p tcp or -p udp [ 339.516125][ T46] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 339.523232][ T46] [drm] Initialized udl on minor 2 [ 339.604923][ T46] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 339.613424][ T46] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 339.624162][ T5892] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 339.639321][ T5892] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 339.647309][ T5892] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 339.802667][ T46] usb 3-1: USB disconnect, device number 26 [ 341.412046][ T46] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 341.704296][ T46] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 341.722181][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.748894][ T46] usb 2-1: Product: syz [ 341.753285][ T46] usb 2-1: Manufacturer: syz [ 341.758065][ T46] usb 2-1: SerialNumber: syz [ 341.782210][ T46] usb 2-1: config 0 descriptor?? [ 342.197951][ T46] usb-storage 2-1:0.0: USB Mass Storage device detected [ 343.388324][ T9517] xt_TPROXY: Can be used only with -p tcp or -p udp [ 343.732901][ T46] usb 2-1: USB disconnect, device number 25 [ 344.303045][ T9528] netlink: 'syz.1.1110': attribute type 1 has an invalid length. [ 346.759351][ T9544] syzkaller0: entered allmulticast mode [ 346.831586][ T970] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 347.040284][ T970] usb 2-1: Using ep0 maxpacket: 8 [ 347.069025][ T970] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 347.088225][ T970] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 347.103404][ T970] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 347.115402][ T970] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 347.126825][ T970] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 347.200374][ T9554] xt_TPROXY: Can be used only with -p tcp or -p udp [ 347.778942][ T970] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 347.786412][ T970] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 347.857660][ T970] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 347.869561][ T970] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 347.883366][ T970] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 347.908666][ T970] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 347.916095][ T970] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 347.957768][ T970] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 347.992443][ T970] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 348.052635][ T970] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 348.073261][ T970] usb 2-1: string descriptor 0 read error: -22 [ 348.080085][ T970] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 348.089281][ T970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.106309][ T970] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 348.121851][ T9542] syzkaller0: left allmulticast mode [ 348.308884][ T8] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 348.373042][ T970] usb 2-1: USB disconnect, device number 26 [ 348.485734][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.503807][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.515356][ T8] usb 4-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 348.525884][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.544918][ T8] usb 4-1: config 0 descriptor?? [ 348.629184][ T29] audit: type=1326 audit(1732620585.987:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9539 comm="syz.1.1114" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7dc177e819 code=0x0 [ 349.169520][ T8] usbhid 4-1:0.0: can't add hid device: -71 [ 349.193935][ T8] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 349.215370][ T8] usb 4-1: USB disconnect, device number 28 [ 349.778316][ T8] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 350.858213][ T8] usb 5-1: device descriptor read/64, error -71 [ 351.251318][ T8] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 352.402967][ T8] usb 5-1: device descriptor read/64, error -71 [ 352.409877][ T5896] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 352.462281][ T970] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 352.528701][ T8] usb usb5-port1: attempt power cycle [ 352.700072][ T5896] usb 4-1: Using ep0 maxpacket: 16 [ 352.775362][ T970] usb 2-1: Using ep0 maxpacket: 32 [ 352.817717][ T5896] usb 4-1: config 8 has an invalid interface number: 206 but max is 0 [ 352.829407][ T5896] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 352.847973][ T5896] usb 4-1: config 8 has no interface number 0 [ 352.862133][ T5896] usb 4-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 352.878887][ T5896] usb 4-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 352.904717][ T5896] usb 4-1: config 8 interface 206 has no altsetting 0 [ 352.926420][ T9602] syzkaller0: entered allmulticast mode [ 352.990001][ T5896] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 353.009517][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.090992][ T5896] usb 4-1: Product: syz [ 353.392715][ T5896] usb 4-1: Manufacturer: syz [ 353.418778][ T9597] syzkaller0: left allmulticast mode [ 353.424304][ T5896] usb 4-1: SerialNumber: syz [ 353.669875][ T970] usb 2-1: unable to read config index 0 descriptor/all [ 353.676957][ T970] usb 2-1: can't read configurations, error -71 [ 353.811002][ T9611] syzkaller0: entered allmulticast mode [ 353.860370][ T9606] syzkaller0: left allmulticast mode [ 353.875303][ T9605] netlink: 'syz.4.1136': attribute type 2 has an invalid length. [ 353.890304][ T5896] garmin_gps 4-1:8.206: Garmin GPS usb/tty converter detected [ 353.928649][ T5896] usb 4-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 354.018344][ T46] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 354.115854][ T5943] usb 4-1: USB disconnect, device number 29 [ 354.129024][ T5943] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 354.138994][ T5943] garmin_gps 4-1:8.206: device disconnected [ 354.212124][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.225001][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.235472][ T46] usb 6-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 354.250006][ T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.269333][ T46] usb 6-1: config 0 descriptor?? [ 354.899821][ T5943] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 354.965638][ T46] usbhid 6-1:0.0: can't add hid device: -71 [ 354.976605][ T46] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 355.000973][ T46] usb 6-1: USB disconnect, device number 7 [ 355.008386][ T970] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 355.085017][ T5943] usb 3-1: Using ep0 maxpacket: 8 [ 355.096281][ T5943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 355.133238][ T5943] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 355.156812][ T5943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.202831][ T5943] usb 3-1: config 0 descriptor?? [ 355.435297][ T5943] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 355.470514][ T970] usb 2-1: device descriptor read/64, error -71 [ 355.703323][ T970] usb usb2-port1: attempt power cycle [ 356.026565][ T5896] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 356.047165][ T5943] usb 3-1: USB disconnect, device number 27 [ 356.066723][ T5943] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected [ 356.188262][ T5896] usb 5-1: Using ep0 maxpacket: 32 [ 356.196233][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 356.211175][ T5896] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 356.221073][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.229583][ T5896] usb 5-1: Product: syz [ 356.234151][ T5896] usb 5-1: Manufacturer: syz [ 356.239499][ T5896] usb 5-1: SerialNumber: syz [ 356.247152][ T5896] usb 5-1: config 0 descriptor?? [ 356.308383][ T970] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 356.360927][ T5896] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 357.004852][ T970] usb 2-1: device descriptor read/8, error -71 [ 357.135561][ T5922] usb 5-1: USB disconnect, device number 29 [ 357.154505][ T12] usb 5-1: Failed to submit usb control message: -71 [ 357.204919][ T12] usb 5-1: unable to send the bmi data to the device: -71 [ 357.228390][ T12] usb 5-1: unable to get target info from device [ 357.235295][ T12] usb 5-1: could not get target info (-71) [ 357.252382][ T12] usb 5-1: could not probe fw (-71) [ 357.340410][ T970] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 357.393419][ T970] usb 2-1: device descriptor read/8, error -71 [ 357.510156][ T970] usb usb2-port1: unable to enumerate USB device [ 357.528754][ T8] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 357.564351][ T9663] netlink: 'syz.5.1153': attribute type 1 has an invalid length. [ 357.932929][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 358.072421][ T8] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 358.087488][ T8] usb 4-1: config 0 has no interface number 0 [ 358.134593][ T8] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 358.238912][ T8] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 358.489258][ T8] usb 4-1: config 0 interface 41 has no altsetting 0 [ 358.663901][ T9668] input: syz0 as /devices/virtual/input/input71 [ 358.743323][ T8] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 358.776251][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.809946][ T8] usb 4-1: Product: syz [ 358.823309][ T8] usb 4-1: Manufacturer: syz [ 358.880697][ T8] usb 4-1: SerialNumber: syz [ 359.108452][ T8] usb 4-1: config 0 descriptor?? [ 359.116809][ T9654] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 359.421233][ T9654] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 359.809674][ T9654] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 359.824845][ T9654] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 360.631834][ T8] Error reading MAC address [ 360.663133][ T9654] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 360.685091][ T9654] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 361.934479][ T8] sr9700 4-1:0.41 eth5: register 'sr9700' at usb-dummy_hcd.3-1, CoreChip SR9700 USB Ethernet, 0a:0a:a6:54:30:ae [ 361.985764][ T8] usb 4-1: USB disconnect, device number 30 [ 361.993791][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 362.011666][ T9703] netlink: 'syz.5.1163': attribute type 2 has an invalid length. [ 362.038524][ T8] sr9700 4-1:0.41 eth5: unregister 'sr9700' usb-dummy_hcd.3-1, CoreChip SR9700 USB Ethernet [ 362.167419][ T9698] syzkaller0: entered allmulticast mode [ 362.588524][ T8] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 362.641331][ T9693] syzkaller0: left allmulticast mode [ 362.749381][ T8] usb 3-1: device descriptor read/64, error -71 [ 363.018802][ T8] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 363.174375][ T8] usb 3-1: device descriptor read/64, error -71 [ 363.291479][ T8] usb usb3-port1: attempt power cycle [ 363.678940][ T8] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 363.698895][ T8] usb 3-1: device descriptor read/8, error -71 [ 363.988545][ T8] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 364.023107][ T8] usb 3-1: device descriptor read/8, error -71 [ 364.224257][ T8] usb usb3-port1: unable to enumerate USB device [ 365.822070][ T5891] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 366.028414][ T5891] usb 6-1: Using ep0 maxpacket: 32 [ 366.041231][ T5891] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 366.045357][ T9738] netlink: 'syz.1.1174': attribute type 2 has an invalid length. [ 366.052559][ T5891] usb 6-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice=b8.19 [ 366.067579][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.075929][ T5891] usb 6-1: Product: syz [ 366.080445][ T5891] usb 6-1: Manufacturer: syz [ 366.085289][ T5891] usb 6-1: SerialNumber: syz [ 366.125160][ T5891] usb 6-1: config 0 descriptor?? [ 366.729020][ T9735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.748715][ T9735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.890398][ T5891] usb 6-1: USB disconnect, device number 8 [ 368.278376][ T5922] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 368.468747][ T5922] usb 2-1: Using ep0 maxpacket: 16 [ 368.537990][ T5922] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 368.581686][ T5922] usb 2-1: config 0 has no interface number 0 [ 368.644519][ T5922] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 369.168710][ T5922] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 369.188043][ T5922] usb 2-1: config 0 interface 41 has no altsetting 0 [ 369.197011][ T5922] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 369.206460][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.215017][ T5922] usb 2-1: Product: syz [ 369.221688][ T5922] usb 2-1: Manufacturer: syz [ 369.236078][ T5922] usb 2-1: SerialNumber: syz [ 369.283425][ T5922] usb 2-1: config 0 descriptor?? [ 369.302873][ T9765] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 369.312326][ T9765] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 369.524051][ T9765] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 369.532484][ T9765] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 369.548263][ T9] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 369.548263][ T5943] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 369.567185][ T9784] netlink: 'syz.3.1188': attribute type 1 has an invalid length. [ 369.678401][ T5943] usb 6-1: device descriptor read/64, error -71 [ 369.710700][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 369.721020][ T9] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 369.731572][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 369.743674][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 369.754601][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 369.765620][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 369.779667][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 369.791063][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.918205][ T5943] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 369.946894][ T5922] Error reading MAC address [ 369.957323][ T9765] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 369.972767][ T9765] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 370.035522][ T9] usb 3-1: GET_CAPABILITIES returned 0 [ 370.046207][ T9] usbtmc 3-1:16.0: can't read capabilities [ 370.058297][ T5943] usb 6-1: device descriptor read/64, error -71 [ 370.206720][ T5943] usb usb6-port1: attempt power cycle [ 370.488750][ T5922] sr9700 2-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 370.568617][ T5943] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 370.672669][ T5943] usb 6-1: device descriptor read/8, error -71 [ 370.854214][ T5891] usb 3-1: USB disconnect, device number 32 [ 371.006862][ T9792] fuse: Unknown parameter 'group_i00000000000000000000' [ 371.159836][ T5943] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 371.199039][ T5943] usb 6-1: device descriptor read/8, error -71 [ 371.308831][ T5943] usb usb6-port1: unable to enumerate USB device [ 371.577971][ T5891] usb 2-1: USB disconnect, device number 31 [ 372.533192][ T970] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 373.228250][ T970] usb 5-1: device descriptor read/64, error -71 [ 373.470705][ T970] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 373.479063][ T9823] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1201'. [ 373.608395][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 373.616160][ T970] usb 5-1: device descriptor read/64, error -71 [ 373.728556][ T970] usb usb5-port1: attempt power cycle [ 373.769012][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 373.776469][ T9] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 373.785534][ T9] usb 2-1: config 0 has no interface number 0 [ 373.793640][ T9] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 373.805492][ T9] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 373.815966][ T9] usb 2-1: config 0 interface 41 has no altsetting 0 [ 373.824787][ T9] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 373.834126][ T5922] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 373.841942][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.851703][ T9] usb 2-1: Product: syz [ 373.855971][ T9] usb 2-1: Manufacturer: syz [ 373.860820][ T9] usb 2-1: SerialNumber: syz [ 373.866919][ T9] usb 2-1: config 0 descriptor?? [ 373.874081][ T9827] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 373.881595][ T9827] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 373.988268][ T5943] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 373.998332][ T5922] usb 6-1: Using ep0 maxpacket: 8 [ 374.007721][ T5922] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 374.021160][ T5922] usb 6-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 374.032903][ T5922] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 374.043932][ T5922] usb 6-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 374.054328][ T5922] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 374.064890][ T5922] usb 6-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 374.076838][ T5922] usb 6-1: string descriptor 0 read error: -22 [ 374.083139][ T970] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 374.095344][ T5922] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 374.098498][ T9827] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 374.104890][ T5922] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.118010][ T9827] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 374.121665][ T970] usb 5-1: device descriptor read/8, error -71 [ 374.127325][ T5943] usb 4-1: device descriptor read/64, error -71 [ 374.146850][ T5922] usb 6-1: rejected 3 configurations due to insufficient available bus power [ 374.159157][ T5922] usb 6-1: no configuration chosen from 3 choices [ 374.368268][ T970] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 374.378242][ T5943] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 374.388974][ T970] usb 5-1: device descriptor read/8, error -71 [ 374.500705][ T970] usb usb5-port1: unable to enumerate USB device [ 374.528855][ T5943] usb 4-1: device descriptor read/64, error -71 [ 374.548480][ T9] Error reading MAC address [ 374.554946][ T9827] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 374.562534][ T9827] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 374.638434][ T5943] usb usb4-port1: attempt power cycle [ 374.974790][ T9] sr9700 2-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 374.993158][ T5943] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 375.021352][ T5943] usb 4-1: device descriptor read/8, error -71 [ 375.101112][ T25] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 375.268229][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 375.273488][ T5943] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 375.282738][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 375.295609][ T25] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 375.304932][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.316466][ T5943] usb 4-1: device descriptor read/8, error -71 [ 375.322906][ T25] usb 3-1: Product: syz [ 375.328068][ T25] usb 3-1: Manufacturer: syz [ 375.332984][ T25] usb 3-1: SerialNumber: syz [ 375.339409][ T25] usb 3-1: config 0 descriptor?? [ 375.373494][ T25] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 375.428493][ T5943] usb usb4-port1: unable to enumerate USB device [ 375.565906][ T68] usb 3-1: Failed to submit usb control message: -71 [ 375.566112][ T5943] usb 3-1: USB disconnect, device number 33 [ 375.579305][ T68] usb 3-1: unable to send the bmi data to the device: -71 [ 375.597552][ T68] usb 3-1: unable to get target info from device [ 375.605379][ T68] usb 3-1: could not get target info (-71) [ 375.611658][ T68] usb 3-1: could not probe fw (-71) [ 375.879406][ T5846] Bluetooth: hci5: command 0x0405 tx timeout [ 376.860858][ T5943] usb 2-1: USB disconnect, device number 32 [ 377.015520][ T5891] usb 6-1: USB disconnect, device number 13 [ 377.528449][ T5896] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 377.678394][ T5896] usb 6-1: Using ep0 maxpacket: 8 [ 377.691384][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 377.709983][ T5896] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 377.745768][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.766513][ T5896] usb 6-1: config 0 descriptor?? [ 377.888259][ T9] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 378.031404][ T5896] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 378.085283][ T9] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 378.095085][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.116919][ T9] usb 3-1: Product: syz [ 378.124648][ T9] usb 3-1: Manufacturer: syz [ 378.129863][ T9] usb 3-1: SerialNumber: syz [ 378.157075][ T9] r8152-cfgselector 3-1: Unknown version 0x0000 [ 378.164184][ T9] r8152-cfgselector 3-1: config 0 descriptor?? [ 378.654792][ T9883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.688590][ T5943] usb 6-1: USB disconnect, device number 14 [ 378.761151][ T5943] iowarrior 6-1:0.0: I/O-Warror #0 now disconnected [ 379.078751][ T9883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.118733][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.125204][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.172236][ T9] r8152-cfgselector 3-1: USB disconnect, device number 34 [ 380.530500][ T970] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 380.548297][ T9] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 380.557005][ T5896] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 380.802846][ T9] usb 3-1: device descriptor read/64, error -71 [ 380.809699][ T970] usb 6-1: Using ep0 maxpacket: 8 [ 380.817021][ T970] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 380.828060][ T970] usb 6-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 380.829099][ T5896] usb 4-1: Using ep0 maxpacket: 16 [ 380.850119][ T970] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 380.862425][ T970] usb 6-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 380.879932][ T5896] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 380.888490][ T5896] usb 4-1: config 0 has no interface number 0 [ 380.894940][ T970] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 380.905825][ T5896] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 380.915902][ T970] usb 6-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 380.929255][ T5896] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 380.940720][ T5896] usb 4-1: config 0 interface 41 has no altsetting 0 [ 380.950694][ T970] usb 6-1: string descriptor 0 read error: -22 [ 380.957045][ T970] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 380.968353][ T970] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.977033][ T5896] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 380.986496][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.995591][ T5896] usb 4-1: Product: syz [ 381.000065][ T5896] usb 4-1: Manufacturer: syz [ 381.004683][ T5896] usb 4-1: SerialNumber: syz [ 381.037999][ T970] adutux 6-1:168.0: interrupt endpoints not found [ 381.051386][ T5896] usb 4-1: config 0 descriptor?? [ 381.074173][ T9905] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 381.085416][ T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 381.102017][ T9905] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 381.405278][ T5943] usb 6-1: USB disconnect, device number 15 [ 381.440452][ T9918] netlink: 'syz.1.1230': attribute type 1 has an invalid length. [ 381.441160][ T9905] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 381.448717][ T9] usb 3-1: device descriptor read/64, error -71 [ 381.739361][ T9905] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 381.752874][ T9918] input: syz0 as /devices/virtual/input/input78 [ 381.966683][ T9] usb usb3-port1: attempt power cycle [ 382.098267][ T29] audit: type=1326 audit(1732620619.397:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9900 comm="syz.5.1226" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2ad77e819 code=0x0 [ 382.262918][ T5896] Error reading MAC address [ 382.269058][ T9905] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 382.276635][ T9905] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 382.729022][ T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 382.762110][ T9] usb 3-1: device descriptor read/8, error -71 [ 384.903441][ T9] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 385.074980][ T5896] sr9700 4-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 385.099733][ T9] usb 3-1: device descriptor read/8, error -71 [ 385.120410][ T5896] usb 4-1: USB disconnect, device number 35 [ 385.246672][ T9942] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1235'. [ 385.325578][ T9] usb usb3-port1: unable to enumerate USB device [ 385.440542][ T46] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 386.490714][ T46] usb 6-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 386.520260][ T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.556878][ T46] usb 6-1: Product: syz [ 386.577292][ T46] usb 6-1: Manufacturer: syz [ 386.760372][ T46] usb 6-1: SerialNumber: syz [ 386.770784][ T46] r8152-cfgselector 6-1: Unknown version 0x0000 [ 386.777096][ T46] r8152-cfgselector 6-1: config 0 descriptor?? [ 386.867417][ T9963] netlink: 'syz.2.1243': attribute type 2 has an invalid length. [ 387.239096][ T5896] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 387.253044][ T9939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.262339][ T9939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.268249][ T5943] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 387.890510][ T5922] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 387.911686][ T9] r8152-cfgselector 6-1: USB disconnect, device number 16 [ 387.958304][ T5896] usb 5-1: device descriptor read/64, error -71 [ 388.028749][ T5943] usb 4-1: Using ep0 maxpacket: 8 [ 388.035443][ T5943] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 388.047025][ T5943] usb 4-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 388.048388][ T5922] usb 2-1: Using ep0 maxpacket: 16 [ 388.063765][ T5943] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 388.076339][ T5943] usb 4-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 388.082469][ T5922] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 388.090575][ T5943] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 388.104770][ T5922] usb 2-1: config 0 has no interface number 0 [ 388.114872][ T5922] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 388.128061][ T5943] usb 4-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 388.133538][ T5922] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 388.145144][ T5943] usb 4-1: string descriptor 0 read error: -22 [ 388.159131][ T5922] usb 2-1: config 0 interface 41 has no altsetting 0 [ 388.182925][ T5943] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 388.185191][ T5922] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 388.192944][ T5943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.208543][ T5896] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 388.222991][ T5943] adutux 4-1:168.0: interrupt endpoints not found [ 388.228366][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.251115][ T5922] usb 2-1: Product: syz [ 388.259903][ T5922] usb 2-1: Manufacturer: syz [ 388.264551][ T5922] usb 2-1: SerialNumber: syz [ 388.292220][ T5922] usb 2-1: config 0 descriptor?? [ 388.299308][ T9975] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 388.313560][ T9975] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 388.348389][ T5896] usb 5-1: device descriptor read/64, error -71 [ 388.454582][ T46] usb 4-1: USB disconnect, device number 36 [ 388.464768][ T5896] usb usb5-port1: attempt power cycle [ 388.537281][ T9975] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 388.546119][ T9975] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 388.768245][ T29] audit: type=1326 audit(1732620626.027:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9966 comm="syz.3.1246" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff41257e819 code=0x0 [ 389.141765][ T5922] Error reading MAC address [ 389.147273][ T9975] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 389.165872][ T9975] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 389.208466][ T5896] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 389.231326][ T5896] usb 5-1: device descriptor read/8, error -71 [ 389.468487][ T5896] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 389.490879][ T5896] usb 5-1: device descriptor read/8, error -71 [ 389.579497][ T5922] sr9700 2-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 389.755495][ T5896] usb usb5-port1: unable to enumerate USB device [ 391.078364][ T5943] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 391.298737][ T5943] usb 4-1: Using ep0 maxpacket: 8 [ 391.308726][ T5943] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.402336][ T5943] usb 4-1: config 0 has no interfaces? [ 391.407966][ T5943] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 391.417369][ T5943] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.474057][ T5943] usb 4-1: config 0 descriptor?? [ 391.496302][ T5943] usb 2-1: USB disconnect, device number 33 [ 391.597131][T10012] netlink: 'syz.2.1259': attribute type 2 has an invalid length. [ 392.051408][T10023] xt_TPROXY: Can be used only with -p tcp or -p udp [ 392.929438][ T5891] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 393.258209][ T5891] usb 6-1: Using ep0 maxpacket: 16 [ 393.266094][ T5891] usb 6-1: config 8 has an invalid interface number: 206 but max is 0 [ 393.274819][ T5891] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 393.285298][ T5891] usb 6-1: config 8 has no interface number 0 [ 393.291957][ T5891] usb 6-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 393.304825][ T5891] usb 6-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 393.317568][ T5891] usb 6-1: config 8 interface 206 has no altsetting 0 [ 393.859442][ T5891] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 393.909042][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.917311][ T5891] usb 6-1: Product: syz [ 393.984588][ T5943] usb 4-1: USB disconnect, device number 37 [ 394.003924][ T5891] usb 6-1: Manufacturer: syz [ 394.021708][ T5891] usb 6-1: SerialNumber: syz [ 394.448444][ T5943] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 394.467679][ T5891] garmin_gps 6-1:8.206: Garmin GPS usb/tty converter detected [ 394.492493][ T5891] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 394.524440][ T5891] usb 6-1: USB disconnect, device number 17 [ 394.544061][ T5891] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 394.560476][ T5891] garmin_gps 6-1:8.206: device disconnected [ 394.644501][ T5943] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.655981][ T5943] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.666013][ T5943] usb 4-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 394.675448][ T5943] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.686348][ T5943] usb 4-1: config 0 descriptor?? [ 394.698286][ T5896] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 394.764798][T10051] netlink: 'syz.4.1272': attribute type 2 has an invalid length. [ 394.849419][ T5896] usb 2-1: Using ep0 maxpacket: 16 [ 394.870883][ T5896] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 394.892514][ T5896] usb 2-1: config 0 has no interface number 0 [ 394.910507][ T5896] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 394.943046][ T5896] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 394.965490][ T5896] usb 2-1: config 0 interface 41 has no altsetting 0 [ 394.992645][ T5896] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 395.005542][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.026823][ T5896] usb 2-1: Product: syz [ 395.031752][ T5896] usb 2-1: Manufacturer: syz [ 395.036611][ T5896] usb 2-1: SerialNumber: syz [ 395.074604][ T5896] usb 2-1: config 0 descriptor?? [ 395.114387][T10043] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 395.122111][T10043] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 395.129396][ T5943] usbhid 4-1:0.0: can't add hid device: -71 [ 395.139420][ T5943] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 395.150104][ T5943] usb 4-1: USB disconnect, device number 38 [ 395.462989][T10043] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 395.497122][T10043] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 396.173861][ T5896] Error reading MAC address [ 396.179721][T10043] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 396.191925][T10043] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 397.383856][ T5896] sr9700 2-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 397.409097][ T5943] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 397.838829][T10083] xt_TPROXY: Can be used only with -p tcp or -p udp [ 398.487358][ T5943] usb 5-1: Using ep0 maxpacket: 16 [ 398.507834][ T5943] usb 5-1: config 8 has an invalid interface number: 206 but max is 0 [ 398.516420][ T5943] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 398.526748][ T5943] usb 5-1: config 8 has no interface number 0 [ 398.533025][ T5943] usb 5-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 398.544765][ T5943] usb 5-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 398.556197][ T5943] usb 5-1: config 8 interface 206 has no altsetting 0 [ 398.915081][ T5896] usb 2-1: USB disconnect, device number 34 [ 398.992419][ T5943] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 399.001949][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.016723][T10092] netlink: 'syz.5.1284': attribute type 2 has an invalid length. [ 399.018167][ T5943] usb 5-1: Product: syz [ 399.034334][ T5943] usb 5-1: Manufacturer: syz [ 399.105124][ T5943] usb 5-1: SerialNumber: syz [ 399.330629][T10099] netlink: 'syz.3.1287': attribute type 1 has an invalid length. [ 399.377270][T10099] input: syz0 as /devices/virtual/input/input80 [ 400.488489][ T5943] garmin_gps 5-1:8.206: Garmin GPS usb/tty converter detected [ 400.519370][ T5943] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 400.563900][ T5943] usb 5-1: USB disconnect, device number 38 [ 400.577278][ T5943] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 400.587129][ T5943] garmin_gps 5-1:8.206: device disconnected [ 403.456066][T10142] xt_TPROXY: Can be used only with -p tcp or -p udp [ 403.817510][ T5943] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 404.083089][ T5943] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 404.093955][ T5943] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.155918][ T5943] usb 6-1: Product: syz [ 404.177730][ T5943] usb 6-1: Manufacturer: syz [ 404.282891][ T5943] usb 6-1: SerialNumber: syz [ 404.400836][ T5943] usb 6-1: config 0 descriptor?? [ 404.718660][ T5943] usb-storage 6-1:0.0: USB Mass Storage device detected [ 405.923367][ T5943] usb 6-1: USB disconnect, device number 18 [ 407.183237][T10186] netlink: 'syz.1.1314': attribute type 2 has an invalid length. [ 407.988837][T10202] input: syz0 as /devices/virtual/input/input82 [ 415.188532][ T46] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 415.199334][T10275] input: syz0 as /devices/virtual/input/input83 [ 415.380261][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 415.434584][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 415.497831][ T46] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 415.509121][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.517302][ T46] usb 5-1: Product: syz [ 415.534749][ T46] usb 5-1: Manufacturer: syz [ 415.551620][ T46] usb 5-1: SerialNumber: syz [ 415.552277][T10277] dccp_close: ABORT with 24 bytes unread [ 415.633481][ T46] usb 5-1: config 0 descriptor?? [ 416.101166][ T46] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 416.207125][ T3461] usb 5-1: Failed to submit usb control message: -71 [ 416.214858][ T46] usb 5-1: USB disconnect, device number 39 [ 416.226414][ T3461] usb 5-1: unable to send the bmi data to the device: -71 [ 416.237021][ T3461] usb 5-1: unable to get target info from device [ 416.295779][ T3461] usb 5-1: could not get target info (-71) [ 416.327537][ T3461] usb 5-1: could not probe fw (-71) [ 417.178664][ T5896] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 417.758408][T10317] fuse: Bad value for 'group_id' [ 417.817479][T10317] fuse: Bad value for 'group_id' [ 417.889496][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.916614][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.930658][ T5896] usb 4-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 417.946013][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.962692][T10318] input: syz0 as /devices/virtual/input/input84 [ 418.082670][ T5896] usb 4-1: config 0 descriptor?? [ 419.917201][ T5896] usbhid 4-1:0.0: can't add hid device: -71 [ 419.923874][ T5896] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 419.952328][ T5896] usb 4-1: USB disconnect, device number 39 [ 420.546446][T10354] syzkaller0: entered allmulticast mode [ 421.029413][T10352] syzkaller0: left allmulticast mode [ 422.458733][T10376] input: syz0 as /devices/virtual/input/input85 [ 423.378801][ T46] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 423.595237][ T46] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.636375][ T46] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 423.698865][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 423.764928][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 423.955702][ T46] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 423.979355][ T46] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 423.989666][ T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.044321][ T46] usb 6-1: Product: syz [ 424.054776][T10404] netlink: 'syz.2.1371': attribute type 1 has an invalid length. [ 424.070785][ T46] usb 6-1: Manufacturer: syz [ 424.076530][ T46] usb 6-1: SerialNumber: syz [ 424.216671][T10404] input: syz0 as /devices/virtual/input/input86 [ 424.549106][ T46] usb 6-1: config 0 descriptor?? [ 424.611544][ T46] garmin_gps 6-1:0.0: Garmin GPS usb/tty converter detected [ 424.639903][ T46] garmin_gps ttyUSB0: failed to submit interrupt urb: -90 [ 424.648667][ T46] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -90 [ 424.772701][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 424.934743][ T25] usb 6-1: USB disconnect, device number 19 [ 424.954348][ T25] garmin_gps 6-1:0.0: device disconnected [ 425.247682][ T5896] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 425.618617][ T5896] usb 3-1: Using ep0 maxpacket: 32 [ 425.646470][ T5896] usb 3-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice=b8.19 [ 425.843341][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.851551][ T5896] usb 3-1: Product: syz [ 425.855742][ T5896] usb 3-1: Manufacturer: syz [ 425.863020][ T5896] usb 3-1: SerialNumber: syz [ 425.873416][ T5896] usb 3-1: config 0 descriptor?? [ 425.882794][ T5896] dvb-usb: found a 'WideView WT-220U PenType Receiver (Typhoon/Freecom)' in warm state. [ 425.893278][ T5896] dvb-usb: bulk message failed: -22 (2/0) [ 425.899652][ T5896] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 425.919010][ T5896] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (Typhoon/Freecom)) [ 425.929849][ T5896] usb 3-1: media controller created [ 425.937507][ T5896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 425.978912][ T5896] usb 3-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 425.989647][ T5896] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 426.145520][T10420] netlink: 'syz.4.1378': attribute type 1 has an invalid length. [ 426.175910][T10420] input: syz0 as /devices/virtual/input/input87 [ 426.317586][T10425] fuse: Bad value for 'group_id' [ 426.328617][T10425] fuse: Bad value for 'group_id' [ 426.503094][ T5896] rc_core: IR keymap rc-dtt200u not found [ 426.510372][ T5896] Registered IR keymap rc-empty [ 426.688690][T10429] input: syz0 as /devices/virtual/input/input89 [ 426.971836][ T5896] rc rc0: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 427.004636][ T5896] input: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input88 [ 427.136160][ T5896] dvb-usb: schedule remote query interval to 300 msecs. [ 427.194963][ T5896] dvb-usb: WideView WT-220U PenType Receiver (Typhoon/Freecom) successfully initialized and connected. [ 427.405645][T10443] syzkaller0: entered allmulticast mode [ 427.701209][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 427.707216][ T8] dvb-usb: error -22 while querying for an remote control event. [ 427.735325][T10441] syzkaller0: left allmulticast mode [ 427.757876][ T5896] usb 3-1: USB disconnect, device number 39 [ 427.853832][ T5896] dvb-usb: WideView WT-220U PenType Receiver (Typh successfully deinitialized and disconnected. [ 428.069430][T10451] syzkaller0: entered allmulticast mode [ 428.480591][T10448] syzkaller0: left allmulticast mode [ 428.558346][ T5922] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 428.713757][ T5922] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 428.723128][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.751038][ T5922] usb 4-1: config 0 descriptor?? [ 430.058276][ T5922] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 430.066835][ T5922] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 430.101583][ T5922] [drm:udl_init] *ERROR* Selecting channel failed [ 430.120861][ T5922] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 430.127693][ T5922] [drm] Initialized udl on minor 2 [ 430.135318][ T5922] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 430.144250][ T5922] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 430.152696][ T9] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 430.169718][ T5922] usb 4-1: USB disconnect, device number 40 [ 430.188360][ T9] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 430.246800][T10463] netlink: 'syz.1.1390': attribute type 2 has an invalid length. [ 430.348826][ T5896] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 430.498260][ T5896] usb 6-1: Using ep0 maxpacket: 32 [ 430.542025][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 430.562364][ T5896] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 430.572186][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.580752][ T5896] usb 6-1: Product: syz [ 430.585711][ T5896] usb 6-1: Manufacturer: syz [ 430.592720][ T5896] usb 6-1: SerialNumber: syz [ 430.601544][ T5896] usb 6-1: config 0 descriptor?? [ 430.658982][ T5896] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 431.469490][ T5922] usb 6-1: USB disconnect, device number 20 [ 431.475975][ T3461] usb 6-1: Failed to submit usb control message: -71 [ 431.486779][ T3461] usb 6-1: unable to send the bmi data to the device: -71 [ 431.494724][ T3461] usb 6-1: unable to get target info from device [ 431.520450][ T3461] usb 6-1: could not get target info (-71) [ 431.537283][ T3461] usb 6-1: could not probe fw (-71) [ 431.607767][T10485] netlink: 'syz.1.1397': attribute type 1 has an invalid length. [ 431.736647][T10485] input: syz0 as /devices/virtual/input/input90 [ 432.290645][T10491] netlink: 'syz.3.1399': attribute type 1 has an invalid length. [ 432.630254][T10497] netlink: 'syz.1.1402': attribute type 2 has an invalid length. [ 433.207953][T10508] input: syz0 as /devices/virtual/input/input91 [ 433.487541][ T5922] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 433.639693][ T5922] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 433.649483][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.668741][ T5922] usb 2-1: config 0 descriptor?? [ 433.713642][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 434.095770][ T5922] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 434.120729][ T5922] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 434.137599][ T5922] [drm:udl_init] *ERROR* Selecting channel failed [ 434.158544][ T5896] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 434.167160][ T5922] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 434.176098][ T5922] [drm] Initialized udl on minor 2 [ 434.188590][ T5922] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 434.201326][ T5922] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 434.211386][ T8] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 434.221445][ T8] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 434.246889][ T5922] usb 2-1: USB disconnect, device number 35 [ 434.318415][ T5896] usb 6-1: Using ep0 maxpacket: 32 [ 434.332560][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 434.350463][ T5896] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 434.360324][ T9] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 434.368609][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.377303][ T5896] usb 6-1: Product: syz [ 434.382596][ T5896] usb 6-1: Manufacturer: syz [ 434.387222][ T5896] usb 6-1: SerialNumber: syz [ 434.395530][ T5896] usb 6-1: config 0 descriptor?? [ 434.439780][ T5896] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 434.534255][ T9] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 434.547058][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.568310][ T9] usb 5-1: Product: syz [ 434.576131][ T9] usb 5-1: Manufacturer: syz [ 434.582159][ T9] usb 5-1: SerialNumber: syz [ 434.618566][ T9] r8152-cfgselector 5-1: Unknown version 0x0000 [ 434.624872][ T9] r8152-cfgselector 5-1: config 0 descriptor?? [ 434.645224][ T3461] usb 6-1: Failed to submit usb control message: -71 [ 434.645523][ T5896] usb 6-1: USB disconnect, device number 21 [ 434.654669][ T3461] usb 6-1: unable to send the bmi data to the device: -71 [ 434.666822][ T3461] usb 6-1: unable to get target info from device [ 434.709741][ T3461] usb 6-1: could not get target info (-71) [ 434.723489][ T3461] usb 6-1: could not probe fw (-71) [ 435.343667][T10528] dccp_close: ABORT with 24 bytes unread [ 435.695431][T10516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.708486][T10516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.883640][T10531] netlink: 'syz.2.1412': attribute type 1 has an invalid length. [ 435.953564][ T5896] r8152-cfgselector 5-1: USB disconnect, device number 40 [ 437.548241][ T5896] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 437.568262][ T25] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 437.699999][ T5896] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 437.712467][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.726790][ T5896] usb 6-1: config 0 descriptor?? [ 437.731668][ T25] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 437.741064][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.749686][ T25] usb 3-1: Product: syz [ 437.753968][ T25] usb 3-1: Manufacturer: syz [ 437.766212][ T25] usb 3-1: SerialNumber: syz [ 437.784473][ T25] r8152-cfgselector 3-1: Unknown version 0x0000 [ 437.790857][ T25] r8152-cfgselector 3-1: config 0 descriptor?? [ 437.848331][ T5922] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 438.018323][ T5922] usb 2-1: Using ep0 maxpacket: 8 [ 438.026199][ T5922] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 438.048385][ T5922] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 438.061595][ T5922] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 438.075310][ T5922] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 438.087385][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.106856][ T5922] usbtmc 2-1:16.0: bulk endpoints not found [ 438.151594][ T5896] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 438.167362][ T5896] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 438.182049][ T5896] [drm:udl_init] *ERROR* Selecting channel failed [ 438.201085][ T5896] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 438.207843][ T5896] [drm] Initialized udl on minor 2 [ 438.241601][T10537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.251900][ T5896] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 438.262145][ T5896] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 438.269074][T10537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.277953][ T5922] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 438.298634][ T5896] usb 6-1: USB disconnect, device number 22 [ 438.311681][ T5922] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 438.334653][ T5922] r8152-cfgselector 3-1: USB disconnect, device number 40 [ 438.968403][T10569] netlink: 'syz.2.1425': attribute type 1 has an invalid length. [ 440.389099][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.396442][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.608226][ T5922] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 440.741693][ T5891] usb 2-1: USB disconnect, device number 36 [ 442.005681][ T5922] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 442.029209][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.230982][ T5922] usb 3-1: config 0 descriptor?? [ 442.458298][ T5896] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 442.612634][ T5896] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 442.624814][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.639028][ T5896] usb 4-1: config 0 descriptor?? [ 442.867642][ T5922] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 442.973588][ T5922] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 443.109295][ T5922] [drm:udl_init] *ERROR* Selecting channel failed [ 443.120663][ T5896] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 443.156355][ T5896] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 443.169569][ T5922] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 443.180026][ T5922] [drm] Initialized udl on minor 2 [ 443.185686][ T5896] [drm:udl_init] *ERROR* Selecting channel failed [ 443.194619][ T5922] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 443.214400][ T5922] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 443.229176][ T5896] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 3 [ 443.240254][ T9] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 443.250618][ T5922] usb 3-1: USB disconnect, device number 41 [ 443.257291][ T5896] [drm] Initialized udl on minor 3 [ 443.263741][ T9] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 443.271462][ T5896] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 443.288459][ T5896] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 443.301178][ T9] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 443.315997][ T5896] usb 4-1: USB disconnect, device number 41 [ 443.324433][ T9] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 443.334879][ T9] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 443.599633][T10614] netlink: 'syz.1.1440': attribute type 1 has an invalid length. [ 444.349150][ T5891] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 444.427946][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 444.528257][ T5891] usb 6-1: Using ep0 maxpacket: 8 [ 444.556662][ T5891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 444.613609][ T5891] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 444.638484][ T46] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 444.701081][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.808293][ T5891] usb 6-1: config 0 descriptor?? [ 444.982411][ T46] usb 4-1: Using ep0 maxpacket: 8 [ 445.064572][ T46] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 445.072912][ T46] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 445.083473][ T46] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 445.096982][ T46] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 445.106186][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.248952][T10632] input: syz0 as /devices/virtual/input/input93 [ 445.316920][ T46] usbtmc 4-1:16.0: bulk endpoints not found [ 446.320658][T10639] fuse: Unknown parameter 'group_id00000000000000000000' [ 446.331158][T10639] Process accounting resumed [ 447.176826][ T5891] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 447.208486][ T5891] usb 6-1: USB disconnect, device number 23 [ 447.243554][ T5891] iowarrior 6-1:0.0: I/O-Warror #0 now disconnected [ 447.398276][T10654] netlink: 'syz.2.1453': attribute type 1 has an invalid length. [ 447.555132][T10654] input: syz0 as /devices/virtual/input/input94 [ 448.817018][ T5896] usb 4-1: USB disconnect, device number 42 [ 449.344559][T10667] netlink: 'syz.1.1456': attribute type 1 has an invalid length. [ 450.988564][ T5891] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 451.411072][ T5891] usb 3-1: Using ep0 maxpacket: 32 [ 451.440187][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 451.466738][ T5891] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 451.480405][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.490864][ T5891] usb 3-1: Product: syz [ 451.495062][ T5891] usb 3-1: Manufacturer: syz [ 451.502327][ T5891] usb 3-1: SerialNumber: syz [ 451.514118][ T5891] usb 3-1: config 0 descriptor?? [ 451.547836][ T5891] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 451.887124][ T5892] usb 3-1: USB disconnect, device number 42 [ 451.899714][ T1131] usb 3-1: Failed to submit usb control message: -71 [ 451.906905][ T1131] usb 3-1: unable to send the bmi data to the device: -71 [ 451.915310][ T1131] usb 3-1: unable to get target info from device [ 451.928453][ T5891] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 451.937031][ T1131] usb 3-1: could not get target info (-71) [ 451.945644][ T1131] usb 3-1: could not probe fw (-71) [ 452.059155][ T25] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 452.078295][ T5891] usb 6-1: Using ep0 maxpacket: 8 [ 452.084646][ T5891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 452.096328][ T5891] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 452.105533][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.115852][ T5891] usb 6-1: config 0 descriptor?? [ 452.148407][ T46] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 452.250085][ T25] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 452.259506][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.270509][ T25] usb 4-1: config 0 descriptor?? [ 452.277744][ T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 452.308389][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 452.314842][ T46] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 452.323581][ T46] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 452.333899][ T46] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 452.343742][ T46] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 452.353784][ T46] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 452.366838][ T46] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 452.376018][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.388625][ T46] usbtmc 5-1:16.0: bulk endpoints not found [ 452.441768][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 452.453764][ T9] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 452.470648][ T9] usb 2-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 452.494282][ T9] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 452.513862][ T9] usb 2-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 452.535822][ T9] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 452.558210][ T9] usb 2-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 452.580655][ T9] usb 2-1: string descriptor 0 read error: -22 [ 452.588491][ T9] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 452.597884][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.635632][ T9] adutux 2-1:168.0: interrupt endpoints not found [ 452.692731][ T25] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 452.696779][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 452.715035][ T25] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 452.727004][ T25] [drm:udl_init] *ERROR* Selecting channel failed [ 452.744248][ T25] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 452.758034][ T25] [drm] Initialized udl on minor 2 [ 452.765310][ T25] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 452.788477][ T25] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 452.795699][ T46] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 452.806521][ T25] usb 4-1: USB disconnect, device number 43 [ 452.815541][ T46] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 452.824453][ T46] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 452.874262][ T5892] usb 2-1: USB disconnect, device number 37 [ 453.095038][ T29] audit: type=1326 audit(1732620690.437:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10704 comm="syz.1.1468" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7dc177e819 code=0x0 [ 453.098264][ T46] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 453.308474][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 453.332948][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 454.113888][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 454.124046][ T46] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 454.133310][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.143909][ T46] usb 3-1: config 0 descriptor?? [ 454.380459][ T46] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 454.605071][T10711] iowarrior 3-1:0.0: Error -90 while submitting URB [ 454.615389][ T5922] usb 3-1: USB disconnect, device number 43 [ 454.625818][ T5922] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected [ 454.632684][ T5891] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 454.684087][ T5891] usb 6-1: USB disconnect, device number 24 [ 454.702000][ T5891] iowarrior 6-1:0.0: I/O-Warror #0 now disconnected [ 454.932898][ T5922] usb 5-1: USB disconnect, device number 41 [ 455.001713][T10726] fuse: Unknown parameter 'grou00000000000000000000' [ 455.132578][T10730] 9pnet_fd: Insufficient options for proto=fd [ 457.968179][ T46] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 457.977972][T10758] fuse: Unknown parameter 'grou00000000000000000000' [ 458.327614][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 458.334907][ T46] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 458.343234][ T46] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 458.353540][ T46] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 458.379024][ T46] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 458.388872][ T46] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 458.403147][ T46] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 458.415968][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.539683][T10766] 9pnet_fd: Insufficient options for proto=fd [ 458.989269][ T46] usbtmc 2-1:16.0: bulk endpoints not found [ 459.327445][T10770] dccp_close: ABORT with 24 bytes unread [ 460.319989][T10786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1491'. [ 460.811829][T10784] netlink: 'syz.5.1494': attribute type 2 has an invalid length. [ 460.864401][T10797] fuse: Unknown parameter 'group_i00000000000000000000' [ 462.479436][ T46] usb 2-1: USB disconnect, device number 38 [ 462.777970][T10823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1506'. [ 464.357118][T10841] netlink: 'syz.4.1510': attribute type 1 has an invalid length. [ 464.718457][ T9] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 464.889725][ T9] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 464.904799][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.926757][ T9] usb 2-1: config 0 descriptor?? [ 465.228303][ T5896] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 465.345182][ T9] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 465.354206][ T9] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 465.382195][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 465.389049][ T5896] usb 5-1: Using ep0 maxpacket: 8 [ 465.397943][ T9] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 465.405745][ T9] [drm] Initialized udl on minor 2 [ 465.411986][ T5896] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 465.420932][ T5896] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 465.431496][ T9] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 465.440303][ T5896] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 465.450721][ T9] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 465.470134][ T5922] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 465.478528][ T5896] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 465.498736][ T5922] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 465.507052][ T9] usb 2-1: USB disconnect, device number 39 [ 465.536786][ T5896] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 465.555117][ T5922] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 465.573924][ T5896] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 465.594764][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.662194][ T5896] usbtmc 5-1:16.0: bulk endpoints not found [ 466.830565][T10867] xt_TPROXY: Can be used only with -p tcp or -p udp [ 467.335654][T10873] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1521'. [ 467.427487][T10879] FAULT_INJECTION: forcing a failure. [ 467.427487][T10879] name failslab, interval 1, probability 0, space 0, times 0 [ 467.446755][T10879] CPU: 1 UID: 0 PID: 10879 Comm: syz.2.1525 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 467.457229][T10879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 467.467328][T10879] Call Trace: [ 467.470608][T10879] [ 467.473537][T10879] dump_stack_lvl+0x241/0x360 [ 467.478221][T10879] ? __pfx_dump_stack_lvl+0x10/0x10 [ 467.483416][T10879] ? __pfx__printk+0x10/0x10 [ 467.488000][T10879] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 467.493982][T10879] ? __pfx___might_resched+0x10/0x10 [ 467.499277][T10879] should_fail_ex+0x3b0/0x4e0 [ 467.503957][T10879] should_failslab+0xac/0x100 [ 467.508632][T10879] kmem_cache_alloc_node_noprof+0x77/0x380 [ 467.514434][T10879] ? __alloc_skb+0x1c3/0x440 [ 467.519024][T10879] __alloc_skb+0x1c3/0x440 [ 467.523444][T10879] ? __pfx___alloc_skb+0x10/0x10 [ 467.528383][T10879] ? netlink_autobind+0xd6/0x2f0 [ 467.533319][T10879] ? netlink_autobind+0x2b0/0x2f0 [ 467.538339][T10879] netlink_sendmsg+0x638/0xcb0 [ 467.543110][T10879] ? __pfx_netlink_sendmsg+0x10/0x10 [ 467.548401][T10879] ? __pfx_netlink_sendmsg+0x10/0x10 [ 467.553684][T10879] __sock_sendmsg+0x221/0x270 [ 467.558361][T10879] ____sys_sendmsg+0x52a/0x7e0 [ 467.563127][T10879] ? __pfx_____sys_sendmsg+0x10/0x10 [ 467.568407][T10879] ? __fget_files+0x2a/0x410 [ 467.572996][T10879] ? __fget_files+0x2a/0x410 [ 467.577586][T10879] __sys_sendmsg+0x269/0x350 [ 467.582169][T10879] ? __pfx_lock_release+0x10/0x10 [ 467.587191][T10879] ? __pfx___sys_sendmsg+0x10/0x10 [ 467.592306][T10879] ? __pfx_vfs_write+0x10/0x10 [ 467.597084][T10879] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 467.603404][T10879] ? do_syscall_64+0x100/0x230 [ 467.608179][T10879] ? do_syscall_64+0xb6/0x230 [ 467.612881][T10879] do_syscall_64+0xf3/0x230 [ 467.617382][T10879] ? clear_bhb_loop+0x35/0x90 [ 467.622055][T10879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.627944][T10879] RIP: 0033:0x7f2a93b7e819 [ 467.632355][T10879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.651962][T10879] RSP: 002b:00007f2a949ce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 467.660373][T10879] RAX: ffffffffffffffda RBX: 00007f2a93d35fa0 RCX: 00007f2a93b7e819 [ 467.668360][T10879] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000005 [ 467.676337][T10879] RBP: 00007f2a949ce090 R08: 0000000000000000 R09: 0000000000000000 [ 467.684315][T10879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.692284][T10879] R13: 0000000000000000 R14: 00007f2a93d35fa0 R15: 00007ffc46d1e808 [ 467.700261][T10879] [ 467.703362][ C1] vkms_vblank_simulate: vblank timer overrun [ 467.717183][ T9] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 467.788267][ T8] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 468.088278][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 468.095128][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 468.111797][ T9] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 468.126311][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.136076][ T9] usb 4-1: Product: syz [ 468.155476][ T9] usb 4-1: Manufacturer: syz [ 468.195124][ T9] usb 4-1: SerialNumber: syz [ 468.218298][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 468.233332][ T8] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 468.296059][ T8] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 468.314386][ T8] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 468.326663][ T8] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 468.338236][ T8] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 468.372599][ T8] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 468.381104][ T9] usb 4-1: config 0 descriptor?? [ 468.430746][ T8] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 468.549476][ T9] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 468.616492][ T8] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 468.728323][ T5891] usb 4-1: USB disconnect, device number 44 [ 468.743345][ T1106] usb 4-1: Failed to submit usb control message: -71 [ 468.752460][ T1106] usb 4-1: unable to send the bmi data to the device: -71 [ 468.760895][ T1106] usb 4-1: unable to get target info from device [ 468.767492][ T1106] usb 4-1: could not get target info (-71) [ 468.773530][ T1106] usb 4-1: could not probe fw (-71) [ 468.790279][ T8] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 468.801434][ T8] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 468.821356][ T8] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 468.828952][ T8] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 468.840642][ T8] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 468.852488][ T8] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 468.863815][ T8] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 468.893525][ T8] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 468.902726][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.911045][ T8] usb 2-1: Product: syz [ 468.915243][ T8] usb 2-1: Manufacturer: syz [ 468.920451][ T8] usb 2-1: SerialNumber: syz [ 468.950315][T10895] netlink: 'syz.5.1527': attribute type 1 has an invalid length. [ 468.967272][ T46] usb 5-1: USB disconnect, device number 42 [ 469.652028][ T8] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 469.669535][ T8] usb 2-1: USB disconnect, device number 40 [ 469.823482][ T29] audit: type=1326 audit(1732620707.157:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10874 comm="syz.1.1523" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7dc177e819 code=0x0 [ 470.733769][T10919] xt_TPROXY: Can be used only with -p tcp or -p udp [ 471.998316][ T25] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 472.009307][ T5891] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 472.158318][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 472.165171][ T25] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 472.179275][ T5891] usb 2-1: Using ep0 maxpacket: 8 [ 472.183706][T10937] netlink: 'syz.4.1540': attribute type 2 has an invalid length. [ 472.184467][ T25] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 472.210846][ T5891] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 472.228175][ T5891] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 472.239814][ T25] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 472.258213][ T5891] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 472.271510][ T25] usb 6-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 472.288268][ T25] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 472.302619][ T5891] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 472.318209][ T5891] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 472.338198][ T25] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 472.357547][ T5891] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 472.371331][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.393305][ T25] usbtmc 6-1:16.0: bulk endpoints not found [ 472.400386][ T5891] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 472.609338][ T5891] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 472.620825][ T5891] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 472.638641][ T5891] usb 2-1: string descriptor 0 read error: -22 [ 472.644924][ T5891] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 472.654701][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.988575][ T5891] adutux 2-1:168.0: interrupt endpoints not found [ 473.427663][ T5891] usb 2-1: USB disconnect, device number 41 [ 473.642132][ T29] audit: type=1326 audit(1732620710.997:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10931 comm="syz.1.1538" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7dc177e819 code=0x0 [ 473.988227][ T5891] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 474.178683][ T5892] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 474.218975][ T5891] usb 5-1: Using ep0 maxpacket: 32 [ 474.244140][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 474.317512][ T5891] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 474.379289][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.387468][ T5891] usb 5-1: Product: syz [ 474.391958][ T5891] usb 5-1: Manufacturer: syz [ 474.396722][ T5891] usb 5-1: SerialNumber: syz [ 474.476423][ T5891] usb 5-1: config 0 descriptor?? [ 474.491877][ T5892] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 474.504385][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.513143][ T5891] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 474.526429][ T5892] usb 4-1: Product: syz [ 474.534758][ T5892] usb 4-1: Manufacturer: syz [ 474.539575][ T5892] usb 4-1: SerialNumber: syz [ 474.580443][ T5892] r8152-cfgselector 4-1: Unknown version 0x0000 [ 474.594660][ T5892] r8152-cfgselector 4-1: config 0 descriptor?? [ 474.709079][ T5896] usb 5-1: USB disconnect, device number 43 [ 474.709440][ T2999] usb 5-1: Failed to submit usb control message: -71 [ 474.741237][ T2999] usb 5-1: unable to send the bmi data to the device: -71 [ 474.750676][ T8] usb 6-1: USB disconnect, device number 25 [ 474.782206][ T2999] usb 5-1: unable to get target info from device [ 474.818922][ T2999] usb 5-1: could not get target info (-71) [ 474.839462][ T2999] usb 5-1: could not probe fw (-71) [ 475.042469][T10951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.134161][T10951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.395489][T10964] input: syz0 as /devices/virtual/input/input96 [ 475.435240][ T8] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 475.615102][ T5892] r8152-cfgselector 4-1: USB disconnect, device number 45 [ 475.648618][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 475.659936][ T8] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 475.676768][ T8] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 475.693743][ T8] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 475.707879][ T8] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 475.722457][ T8] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 475.743507][ T8] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 475.768237][ T8] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 475.815077][ T8] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 475.848465][ T8] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 475.859859][ T8] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 475.882446][ T8] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 475.894659][ T8] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 475.906555][ T8] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 475.919125][ T8] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 475.937029][ T8] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 476.448819][T10971] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1550'. [ 476.498475][ T8] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 476.508260][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.524959][ T8] usb 6-1: Product: syz [ 476.531592][ T8] usb 6-1: Manufacturer: syz [ 476.536543][ T8] usb 6-1: SerialNumber: syz [ 476.563841][ T29] audit: type=1326 audit(1732620713.917:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10969 comm="syz.4.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258c57e819 code=0x7ffc0000 [ 476.643038][ T29] audit: type=1326 audit(1732620713.917:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10969 comm="syz.4.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f258c57e819 code=0x7ffc0000 [ 476.707435][ T29] audit: type=1326 audit(1732620713.917:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10969 comm="syz.4.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258c57e819 code=0x7ffc0000 [ 476.823454][ T29] audit: type=1326 audit(1732620713.917:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10969 comm="syz.4.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f258c57e819 code=0x7ffc0000 [ 476.930001][ T8] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 476.947112][ T29] audit: type=1326 audit(1732620713.917:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10969 comm="syz.4.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258c57e819 code=0x7ffc0000 [ 477.098907][ T8] usb 6-1: USB disconnect, device number 26 [ 477.152810][ T29] audit: type=1326 audit(1732620713.917:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10969 comm="syz.4.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f258c57e819 code=0x7ffc0000 [ 477.474159][ T29] audit: type=1326 audit(1732620713.917:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10969 comm="syz.4.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258c57e819 code=0x7ffc0000 [ 477.496327][ T29] audit: type=1326 audit(1732620713.917:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10969 comm="syz.4.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f258c57e819 code=0x7ffc0000 [ 477.518148][ T29] audit: type=1326 audit(1732620713.917:32): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=10969 comm="syz.4.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258c57e819 code=0x7ffc0000 [ 477.540309][ T29] audit: type=1326 audit(1732620713.967:33): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=10969 comm="syz.4.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258c57e819 code=0x7ffc0000 [ 477.700150][T10981] netlink: 'syz.1.1551': attribute type 2 has an invalid length. [ 478.478260][ T8] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 479.421392][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 479.429636][ T8] usb 4-1: config 8 has an invalid interface number: 206 but max is 0 [ 479.437888][ T8] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 479.455029][ T8] usb 4-1: config 8 has no interface number 0 [ 479.463362][ T8] usb 4-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 479.477663][ T8] usb 4-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 479.489453][ T8] usb 4-1: config 8 interface 206 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 479.500516][ T8] usb 4-1: config 8 interface 206 has no altsetting 0 [ 479.510058][ T8] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 479.519381][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.527930][ T8] usb 4-1: Product: syz [ 479.532571][ T8] usb 4-1: Manufacturer: syz [ 479.537235][ T8] usb 4-1: SerialNumber: syz [ 479.672125][T11012] fuse: Unknown parameter 'subj_user' [ 479.769406][ T8] garmin_gps 4-1:8.206: Garmin GPS usb/tty converter detected [ 479.790982][ T8] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 479.820738][ T8] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 479.848439][ T8] usb 4-1: USB disconnect, device number 46 [ 479.860085][ T8] garmin_gps 4-1:8.206: device disconnected [ 480.077067][T11021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1563'. [ 480.294355][T11026] netlink: 'syz.1.1565': attribute type 2 has an invalid length. [ 480.608947][ T5891] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 480.852813][ T5891] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 480.888444][ T5892] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 480.942690][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.051039][ T5891] usb 5-1: config 0 descriptor?? [ 481.078563][ T5892] usb 4-1: Using ep0 maxpacket: 8 [ 481.238309][ T5892] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 481.266460][ T5892] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 481.298170][ T5892] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 481.342329][ T5892] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 481.369257][ T8] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 481.379597][ T5892] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 481.398552][ T5892] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 481.406167][ T5892] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 481.423123][ T5892] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 481.435412][ T5892] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 481.446729][ T5892] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 481.465514][ T5892] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 481.473182][ T5892] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 481.484616][ T5892] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 481.496661][ T5892] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 481.508297][ T5892] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 481.522685][ T5892] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 481.528949][ T8] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 481.532312][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.556235][ T5892] usb 4-1: Product: syz [ 481.558974][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.619561][ T8] usb 2-1: config 0 descriptor?? [ 481.769607][ T5891] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 481.778775][ T5891] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 481.786709][ T5892] usb 4-1: Manufacturer: syz [ 481.791753][ T5891] [drm:udl_init] *ERROR* Selecting channel failed [ 481.798583][ T5892] usb 4-1: SerialNumber: syz [ 481.822975][ T5891] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 481.838233][ T5891] [drm] Initialized udl on minor 2 [ 481.846159][ T5891] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 481.860277][ T5891] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 481.867760][ T46] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 481.878336][ T46] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 482.287839][ T5891] usb 5-1: USB disconnect, device number 44 [ 482.489363][ T8] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 482.498041][ T8] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 482.632053][ T5892] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 482.650056][ T8] [drm:udl_init] *ERROR* Selecting channel failed [ 482.665097][ T8] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 3 [ 482.676220][ T8] [drm] Initialized udl on minor 3 [ 482.682319][ T8] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 482.707950][ T8] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 482.726617][ T5922] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 482.738300][ T5892] usb 4-1: USB disconnect, device number 47 [ 482.753605][ T5922] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 482.787829][ T8] usb 2-1: USB disconnect, device number 42 [ 482.879615][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 482.879637][ T29] audit: type=1326 audit(1732620720.227:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11032 comm="syz.3.1568" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff41257e819 code=0x0 [ 483.027337][T11060] batman_adv: batadv0: Adding interface: dummy0 [ 483.034412][T11060] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.060311][T11060] batman_adv: batadv0: Interface activated: dummy0 [ 483.071066][T11060] FAULT_INJECTION: forcing a failure. [ 483.071066][T11060] name failslab, interval 1, probability 0, space 0, times 0 [ 483.162667][T11060] CPU: 1 UID: 0 PID: 11060 Comm: syz.2.1576 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 483.173153][T11060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 483.183229][T11060] Call Trace: [ 483.186518][T11060] [ 483.189461][T11060] dump_stack_lvl+0x241/0x360 [ 483.194164][T11060] ? __pfx_dump_stack_lvl+0x10/0x10 [ 483.199381][T11060] ? __pfx__printk+0x10/0x10 [ 483.203990][T11060] ? fs_reclaim_acquire+0x93/0x130 [ 483.209120][T11060] ? __pfx___might_resched+0x10/0x10 [ 483.214424][T11060] ? dynamic_dname+0x141/0x1b0 [ 483.219219][T11060] should_fail_ex+0x3b0/0x4e0 [ 483.223920][T11060] should_failslab+0xac/0x100 [ 483.228614][T11060] __kmalloc_noprof+0xdd/0x4c0 [ 483.233390][T11060] ? tomoyo_encode+0x26f/0x540 [ 483.238173][T11060] tomoyo_encode+0x26f/0x540 [ 483.242785][T11060] ? __pfx_sockfs_dname+0x10/0x10 [ 483.247834][T11060] tomoyo_realpath_from_path+0x59e/0x5e0 [ 483.253499][T11060] tomoyo_path_number_perm+0x236/0x860 [ 483.258977][T11060] ? __lock_acquire+0x1397/0x2100 [ 483.264020][T11060] ? tomoyo_path_number_perm+0x206/0x860 [ 483.269676][T11060] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 483.275719][T11060] ? __fget_files+0x2a/0x410 [ 483.280333][T11060] ? __fget_files+0x2a/0x410 [ 483.284944][T11060] security_file_ioctl+0xc6/0x2a0 [ 483.290075][T11060] __se_sys_ioctl+0x46/0x170 [ 483.294684][T11060] do_syscall_64+0xf3/0x230 [ 483.299211][T11060] ? clear_bhb_loop+0x35/0x90 [ 483.303901][T11060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.309819][T11060] RIP: 0033:0x7f2a93b7e819 [ 483.314253][T11060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.333878][T11060] RSP: 002b:00007f2a949ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 483.342320][T11060] RAX: ffffffffffffffda RBX: 00007f2a93d35fa0 RCX: 00007f2a93b7e819 [ 483.350308][T11060] RDX: 0000000020000080 RSI: 0000000000008922 RDI: 0000000000000006 [ 483.358298][T11060] RBP: 00007f2a949ce090 R08: 0000000000000000 R09: 0000000000000000 [ 483.366287][T11060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.374271][T11060] R13: 0000000000000000 R14: 00007f2a93d35fa0 R15: 00007ffc46d1e808 [ 483.382276][T11060] [ 483.516472][T11060] ERROR: Out of memory at tomoyo_realpath_from_path. [ 483.526945][T11060] batadv0: mtu less than device minimum [ 483.534222][T11060] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 483.546570][T11060] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 483.558502][T11060] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 483.570152][T11060] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 483.582631][T11060] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 483.595177][T11060] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 483.607646][T11060] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 483.620239][T11060] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 483.632733][T11060] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 483.648832][ T5891] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 483.843534][T11064] netlink: 'syz.1.1577': attribute type 2 has an invalid length. [ 483.854568][ T5891] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 483.870488][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.899068][ T5891] usb 5-1: config 0 descriptor?? [ 484.015961][T11074] syzkaller0: entered allmulticast mode [ 484.622566][T11068] syzkaller0: left allmulticast mode [ 484.751663][ T5891] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 484.752598][T11083] input: syz0 as /devices/virtual/input/input97 [ 484.760389][ T5891] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 484.914756][ T5891] [drm:udl_init] *ERROR* Selecting channel failed [ 486.090153][ T5891] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 486.097198][ T5891] [drm] Initialized udl on minor 2 [ 486.152393][ T5891] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 486.160565][ T5891] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 486.175858][ T46] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 486.185000][ T46] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 486.193154][ T5891] usb 5-1: USB disconnect, device number 45 [ 486.199614][ T46] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 486.651772][ T8] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 487.555445][ T46] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 487.941016][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 488.045000][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 488.073306][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 488.098988][ T8] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 488.126994][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.152117][ T8] usb 4-1: config 0 descriptor?? [ 488.289813][ T46] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 488.306796][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.326440][ T46] usb 2-1: config 0 descriptor?? [ 488.345898][T11123] netlink: 'syz.2.1590': attribute type 2 has an invalid length. [ 488.392493][ T8] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 488.518367][ T25] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 488.558340][ T9] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 488.600627][T11095] iowarrior 4-1:0.0: Error -90 while submitting URB [ 488.610277][ T8] usb 4-1: USB disconnect, device number 48 [ 488.619071][ T8] iowarrior 4-1:0.0: I/O-Warror #0 now disconnected [ 488.700560][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 488.710010][ T9] usb 5-1: config 0 has an invalid interface number: 15 but max is 0 [ 488.710712][ T25] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 488.729349][ T9] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 488.732837][ T25] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 488.748231][ T9] usb 5-1: config 0 has no interface number 1 [ 488.756365][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 488.769689][ T46] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 488.780538][ T46] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 488.791784][ T25] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 488.794012][ T9] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice= 9.75 [ 488.804143][ T46] [drm:udl_init] *ERROR* Selecting channel failed [ 488.821881][ T25] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 488.823473][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.839911][ T25] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 488.841775][ T9] usb 5-1: Product: syz [ 488.857549][ T46] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 488.858557][ T9] usb 5-1: Manufacturer: syz [ 488.865619][ T46] [drm] Initialized udl on minor 2 [ 488.869198][ T9] usb 5-1: SerialNumber: syz [ 488.878343][ T46] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 488.887486][ T25] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 488.899257][ T9] usb 5-1: config 0 descriptor?? [ 488.904539][ T25] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 488.923029][ T46] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 488.930197][ T5892] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 488.949161][ T25] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 488.961665][ T5892] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 488.970059][ T46] usb 2-1: USB disconnect, device number 43 [ 488.986604][ T5892] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 488.999392][ T25] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 489.013363][ T25] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 489.038275][ T25] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 489.045842][ T25] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 489.062012][ T25] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 489.074695][ T25] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 489.084316][ T9] viperboard 5-1:0.0: version 0.00 found at bus 005 address 046 [ 489.087874][ T25] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 489.107686][ T25] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 489.121207][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.130816][ T9] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 489.134824][ T25] usb 6-1: Product: syz [ 489.144471][ T25] usb 6-1: Manufacturer: syz [ 489.148387][ T9] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 489.155576][ T25] usb 6-1: SerialNumber: syz [ 489.188808][ T9] viperboard 5-1:0.15: version 0.00 found at bus 005 address 046 [ 489.218579][ T9] viperboard-i2c viperboard-i2c.5.auto: failure setting i2c_bus_freq to 100 [ 489.227356][ T9] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 489.403647][ T25] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 489.428921][ T25] usb 6-1: USB disconnect, device number 27 [ 489.463399][T11141] netlink: 'syz.1.1597': attribute type 1 has an invalid length. [ 489.760036][T11147] input: syz0 as /devices/virtual/input/input98 [ 489.795555][ T29] audit: type=1326 audit(1732620727.127:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11120 comm="syz.5.1592" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2ad77e819 code=0x0 [ 490.038945][ T25] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 490.119621][ T46] usb 5-1: USB disconnect, device number 46 [ 490.242647][T11152] netlink: 'syz.2.1602': attribute type 1 has an invalid length. [ 490.262550][T11152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1602'. [ 490.266265][ T25] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 490.301715][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 490.323741][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 490.334144][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 490.348575][ T25] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 490.357885][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.366297][ T25] usb 2-1: Product: syz [ 490.382126][ T25] usb 2-1: Manufacturer: syz [ 490.386787][ T25] usb 2-1: SerialNumber: syz [ 490.410613][ T25] usb 2-1: config 0 descriptor?? [ 490.430139][ T25] iguanair 2-1:0.0: failed to submit urb: -90 [ 490.436443][ T25] iguanair 2-1:0.0: probe with driver iguanair failed with error -90 [ 490.516834][T11162] netlink: 'syz.3.1605': attribute type 2 has an invalid length. [ 490.943710][ T25] usb 2-1: USB disconnect, device number 44 [ 491.184013][T11168] FAULT_INJECTION: forcing a failure. [ 491.184013][T11168] name failslab, interval 1, probability 0, space 0, times 0 [ 491.216910][T11168] CPU: 0 UID: 0 PID: 11168 Comm: syz.3.1607 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 491.227388][T11168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 491.237478][T11168] Call Trace: [ 491.240790][T11168] [ 491.243745][T11168] dump_stack_lvl+0x241/0x360 [ 491.248460][T11168] ? __pfx_dump_stack_lvl+0x10/0x10 [ 491.253693][T11168] ? __pfx__printk+0x10/0x10 [ 491.258323][T11168] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 491.264340][T11168] ? __pfx___might_resched+0x10/0x10 [ 491.269675][T11168] should_fail_ex+0x3b0/0x4e0 [ 491.274394][T11168] should_failslab+0xac/0x100 [ 491.279110][T11168] kmem_cache_alloc_node_noprof+0x77/0x380 [ 491.284956][T11168] ? __alloc_skb+0x1c3/0x440 [ 491.289587][T11168] __alloc_skb+0x1c3/0x440 [ 491.294047][T11168] ? __pfx___alloc_skb+0x10/0x10 [ 491.299029][T11168] ? netlink_autobind+0xd6/0x2f0 [ 491.303993][T11168] ? netlink_autobind+0x2b0/0x2f0 [ 491.309048][T11168] netlink_sendmsg+0x638/0xcb0 [ 491.313851][T11168] ? __pfx_netlink_sendmsg+0x10/0x10 [ 491.319179][T11168] ? __pfx_netlink_sendmsg+0x10/0x10 [ 491.324506][T11168] __sock_sendmsg+0x221/0x270 [ 491.329214][T11168] ____sys_sendmsg+0x52a/0x7e0 [ 491.333979][T11168] ? __pfx_____sys_sendmsg+0x10/0x10 [ 491.339257][T11168] ? __fget_files+0x2a/0x410 [ 491.343845][T11168] ? __fget_files+0x2a/0x410 [ 491.348437][T11168] __sys_sendmsg+0x269/0x350 [ 491.353025][T11168] ? __pfx___sys_sendmsg+0x10/0x10 [ 491.358145][T11168] ? __might_fault+0xaa/0x120 [ 491.362820][T11168] ? __pfx_lock_release+0x10/0x10 [ 491.367848][T11168] ? rcu_is_watching+0x15/0xb0 [ 491.372616][T11168] ? trace_sys_enter+0x3d/0x160 [ 491.377476][T11168] do_syscall_64+0xf3/0x230 [ 491.382002][T11168] ? clear_bhb_loop+0x35/0x90 [ 491.386682][T11168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.392579][T11168] RIP: 0033:0x7ff41257e819 [ 491.396991][T11168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.416596][T11168] RSP: 002b:00007ff413357038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 491.425012][T11168] RAX: ffffffffffffffda RBX: 00007ff412735fa0 RCX: 00007ff41257e819 [ 491.432982][T11168] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 491.440950][T11168] RBP: 00007ff413357090 R08: 0000000000000000 R09: 0000000000000000 [ 491.448916][T11168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.456881][T11168] R13: 0000000000000000 R14: 00007ff412735fa0 R15: 00007ffe1a0b2d68 [ 491.464857][T11168] [ 491.892994][T11180] net_ratelimit: 10 callbacks suppressed [ 491.893013][T11180] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 491.909381][T11180] TCP: tcp_parse_options: Illegal window scaling value 16 > 14 received [ 491.955645][T11187] input: syz0 as /devices/virtual/input/input100 [ 493.218562][T11195] netlink: 'syz.4.1617': attribute type 2 has an invalid length. [ 493.410473][T11207] FAULT_INJECTION: forcing a failure. [ 493.410473][T11207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.461864][T11207] CPU: 1 UID: 0 PID: 11207 Comm: syz.1.1618 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 493.472348][T11207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 493.482434][T11207] Call Trace: [ 493.485715][T11207] [ 493.488662][T11207] dump_stack_lvl+0x241/0x360 [ 493.493377][T11207] ? __pfx_dump_stack_lvl+0x10/0x10 [ 493.498620][T11207] ? __pfx__printk+0x10/0x10 [ 493.503256][T11207] should_fail_ex+0x3b0/0x4e0 [ 493.507978][T11207] _copy_to_user+0x31/0xb0 [ 493.512413][T11207] bpf_prog_test_run_syscall+0x34b/0x4e0 [ 493.518065][T11207] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 493.524231][T11207] ? __fget_files+0x2a/0x410 [ 493.528839][T11207] ? fput+0x21b/0x290 [ 493.532856][T11207] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 493.539043][T11207] bpf_prog_test_run+0x2e4/0x360 [ 493.544268][T11207] __sys_bpf+0x48d/0x810 [ 493.548535][T11207] ? __pfx___sys_bpf+0x10/0x10 [ 493.553843][T11207] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 493.559825][T11207] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 493.566158][T11207] ? do_syscall_64+0x100/0x230 [ 493.570928][T11207] __x64_sys_bpf+0x7c/0x90 [ 493.575344][T11207] do_syscall_64+0xf3/0x230 [ 493.579845][T11207] ? clear_bhb_loop+0x35/0x90 [ 493.584523][T11207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.590416][T11207] RIP: 0033:0x7f7dc177e819 [ 493.594825][T11207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 493.614426][T11207] RSP: 002b:00007f7dc25d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 493.622844][T11207] RAX: ffffffffffffffda RBX: 00007f7dc1935fa0 RCX: 00007f7dc177e819 [ 493.630813][T11207] RDX: 000000000000000c RSI: 0000000020000000 RDI: 000000000000000a [ 493.638781][T11207] RBP: 00007f7dc25d4090 R08: 0000000000000000 R09: 0000000000000000 [ 493.646768][T11207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.654769][T11207] R13: 0000000000000000 R14: 00007f7dc1935fa0 R15: 00007ffd9e08a928 [ 493.662763][T11207] [ 493.728342][ T8] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 493.927637][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 493.966558][ T8] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 494.679158][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 494.694405][ T8] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 494.825609][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 494.982902][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 495.288585][ T8] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 495.416873][T11229] random: crng reseeded on system resumption [ 495.433825][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 495.439923][T11231] netlink: 'syz.3.1628': attribute type 21 has an invalid length. [ 495.445842][ T8] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 495.485979][T11231] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1628'. [ 495.495475][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 495.599970][T11234] FAULT_INJECTION: forcing a failure. [ 495.599970][T11234] name failslab, interval 1, probability 0, space 0, times 0 [ 495.628896][T11234] CPU: 1 UID: 0 PID: 11234 Comm: syz.3.1628 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 495.639416][T11234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 495.649505][T11234] Call Trace: [ 495.652816][T11234] [ 495.654247][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 495.655753][T11234] dump_stack_lvl+0x241/0x360 [ 495.655790][T11234] ? __pfx_dump_stack_lvl+0x10/0x10 [ 495.655815][T11234] ? __pfx__printk+0x10/0x10 [ 495.681527][T11234] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 495.687515][T11234] ? __pfx___might_resched+0x10/0x10 [ 495.692839][T11234] should_fail_ex+0x3b0/0x4e0 [ 495.697524][T11234] should_failslab+0xac/0x100 [ 495.702202][T11234] kmem_cache_alloc_node_noprof+0x77/0x380 [ 495.708015][T11234] ? __alloc_skb+0x1c3/0x440 [ 495.712643][T11234] __alloc_skb+0x1c3/0x440 [ 495.717098][T11234] ? __pfx___alloc_skb+0x10/0x10 [ 495.722044][T11234] ? netlink_autobind+0xd6/0x2f0 [ 495.726998][T11234] ? netlink_autobind+0x2b0/0x2f0 [ 495.732033][T11234] netlink_sendmsg+0x638/0xcb0 [ 495.736801][T11234] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.742101][T11234] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.747409][T11234] __sock_sendmsg+0x221/0x270 [ 495.752094][T11234] ____sys_sendmsg+0x52a/0x7e0 [ 495.756874][T11234] ? __pfx_____sys_sendmsg+0x10/0x10 [ 495.762174][T11234] ? __fget_files+0x2a/0x410 [ 495.766786][T11234] ? __fget_files+0x2a/0x410 [ 495.771376][T11234] __sys_sendmmsg+0x36a/0x720 [ 495.776053][T11234] ? __pfx___sys_sendmmsg+0x10/0x10 [ 495.781257][T11234] ? __pfx_lock_release+0x10/0x10 [ 495.786280][T11234] ? kstrtouint_from_user+0x128/0x190 [ 495.791667][T11234] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 495.797565][T11234] ? ksys_write+0x22a/0x2b0 [ 495.802078][T11234] ? __pfx_lock_release+0x10/0x10 [ 495.807115][T11234] ? vfs_write+0x730/0xd30 [ 495.811563][T11234] ? __mutex_unlock_slowpath+0x21e/0x790 [ 495.817307][T11234] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 495.823300][T11234] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 495.829654][T11234] ? do_syscall_64+0x100/0x230 [ 495.834425][T11234] __x64_sys_sendmmsg+0xa0/0xb0 [ 495.839276][T11234] do_syscall_64+0xf3/0x230 [ 495.843790][T11234] ? clear_bhb_loop+0x35/0x90 [ 495.848473][T11234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.854369][T11234] RIP: 0033:0x7ff41257e819 [ 495.858779][T11234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 495.878404][T11234] RSP: 002b:00007ff413336038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 495.886848][T11234] RAX: ffffffffffffffda RBX: 00007ff412736080 RCX: 00007ff41257e819 [ 495.894822][T11234] RDX: 0000000000000001 RSI: 0000000020005200 RDI: 0000000000000003 [ 495.902799][T11234] RBP: 00007ff413336090 R08: 0000000000000000 R09: 0000000000000000 [ 495.910768][T11234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.918738][T11234] R13: 0000000000000001 R14: 00007ff412736080 R15: 00007ffe1a0b2d68 [ 495.926716][T11234] [ 496.018645][ T8] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 496.026238][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 496.037649][ T8] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 496.049621][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 496.061328][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 496.086126][ T8] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 496.097869][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.106138][ T8] usb 3-1: Product: syz [ 496.144299][ T8] usb 3-1: Manufacturer: syz [ 496.149108][ T8] usb 3-1: SerialNumber: syz [ 496.304442][T11243] FAULT_INJECTION: forcing a failure. [ 496.304442][T11243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 496.318871][T11243] CPU: 0 UID: 0 PID: 11243 Comm: syz.3.1633 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 496.329357][T11243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 496.339440][T11243] Call Trace: [ 496.342738][T11243] [ 496.345683][T11243] dump_stack_lvl+0x241/0x360 [ 496.350395][T11243] ? __pfx_dump_stack_lvl+0x10/0x10 [ 496.355629][T11243] ? __pfx__printk+0x10/0x10 [ 496.360264][T11243] should_fail_ex+0x3b0/0x4e0 [ 496.364975][T11243] _copy_from_user+0x2f/0xc0 [ 496.369597][T11243] move_addr_to_kernel+0x82/0x150 [ 496.371019][T11232] [U]  [ 496.374630][T11243] copy_msghdr_from_user+0x43e/0x680 [ 496.374661][T11243] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 496.388734][T11243] ? __fget_files+0x2a/0x410 [ 496.393354][T11243] ? __fget_files+0x2a/0x410 [ 496.397968][T11243] __sys_sendmmsg+0x32b/0x720 [ 496.402669][T11243] ? __pfx___sys_sendmmsg+0x10/0x10 [ 496.407885][T11243] ? __pfx_lock_release+0x10/0x10 [ 496.412909][T11243] ? kstrtouint_from_user+0x128/0x190 [ 496.418304][T11243] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 496.424209][T11243] ? ksys_write+0x22a/0x2b0 [ 496.428710][T11243] ? __pfx_lock_release+0x10/0x10 [ 496.433730][T11243] ? vfs_write+0x730/0xd30 [ 496.438171][T11243] ? __mutex_unlock_slowpath+0x21e/0x790 [ 496.443815][T11243] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 496.449789][T11243] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 496.456110][T11243] ? do_syscall_64+0x100/0x230 [ 496.460874][T11243] __x64_sys_sendmmsg+0xa0/0xb0 [ 496.465720][T11243] do_syscall_64+0xf3/0x230 [ 496.470222][T11243] ? clear_bhb_loop+0x35/0x90 [ 496.474894][T11243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.480782][T11243] RIP: 0033:0x7ff41257e819 [ 496.485190][T11243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 496.504790][T11243] RSP: 002b:00007ff413357038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 496.513206][T11243] RAX: ffffffffffffffda RBX: 00007ff412735fa0 RCX: 00007ff41257e819 [ 496.521173][T11243] RDX: 0000000000000002 RSI: 00000000200027c0 RDI: 0000000000000003 [ 496.529171][T11243] RBP: 00007ff413357090 R08: 0000000000000000 R09: 0000000000000000 [ 496.537154][T11243] R10: 0000000000000041 R11: 0000000000000246 R12: 0000000000000001 [ 496.545131][T11243] R13: 0000000000000000 R14: 00007ff412735fa0 R15: 00007ffe1a0b2d68 [ 496.553129][T11243] [ 496.556193][ C0] vkms_vblank_simulate: vblank timer overrun [ 496.961747][ T8] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 498.286733][ T8] usb 3-1: USB disconnect, device number 44 [ 498.355840][T11257] evm: overlay not supported [ 498.367155][ T29] audit: type=1804 audit(1732620735.717:37): pid=11257 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.1637" name="/newroot/403/bus/bus" dev="overlay" ino=2132 res=1 errno=0 [ 499.301017][T11267] netlink: 'syz.2.1639': attribute type 29 has an invalid length. [ 499.680768][T11271] netlink: 'syz.2.1639': attribute type 29 has an invalid length. [ 499.807772][T11267] netlink: 'syz.2.1639': attribute type 29 has an invalid length. [ 499.859831][T11271] netlink: 'syz.2.1639': attribute type 29 has an invalid length. [ 501.139254][T11292] bridge_slave_0: default FDB implementation only supports local addresses [ 501.168601][ T5891] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 501.804746][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.811320][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.850096][ T5891] usb 4-1: Using ep0 maxpacket: 8 [ 501.859219][ T5891] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 501.867849][ T5891] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 501.886722][ T5891] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 501.898741][ T5891] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 501.910153][ T5891] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 501.974208][ T5891] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 502.028062][ T5891] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 502.058433][ T5891] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 502.070316][ T5891] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 502.081459][ T5891] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 502.094114][ T5891] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 502.103144][ T5891] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 502.117457][ T5891] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 502.130554][ T5891] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 502.141843][ T5891] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 502.156908][ T5891] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 502.171271][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.181477][ T5891] usb 4-1: Product: syz [ 502.185805][ T5891] usb 4-1: Manufacturer: syz [ 502.195390][ T5891] usb 4-1: SerialNumber: syz [ 502.860516][ T5891] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 502.911287][ T5891] usb 4-1: USB disconnect, device number 49 [ 503.056302][ T29] audit: type=1326 audit(1732620740.407:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11285 comm="syz.3.1647" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff41257e819 code=0x0 [ 503.077266][ C0] vkms_vblank_simulate: vblank timer overrun [ 609.458139][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 609.465173][ C1] rcu: 0-...!: (1 GPs behind) idle=69b4/1/0x4000000000000000 softirq=40761/40762 fqs=0 [ 609.476234][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P11320/1:b..l [ 609.484262][ C1] rcu: (detected by 1, t=10505 jiffies, g=40985, q=668 ncpus=2) [ 609.492002][ C1] Sending NMI from CPU 1 to CPUs 0: [ 609.492045][ C0] NMI backtrace for cpu 0 [ 609.492060][ C0] CPU: 0 UID: 0 PID: 6081 Comm: udevd Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 609.492077][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 609.492087][ C0] RIP: 0010:kasan_check_range+0x79/0x290 [ 609.492110][ C0] Code: 4d 89 c1 49 c1 e9 03 49 be 01 00 00 00 00 fc ff df 4f 8d 3c 31 4c 89 fd 4c 29 dd 48 83 fd 10 7f 29 48 85 ed 0f 84 3e 01 00 00 <4c> 89 cd 48 f7 d5 48 01 dd 41 80 3b 00 0f 85 c9 01 00 00 49 ff c3 [ 609.492123][ C0] RSP: 0018:ffffc90000007b90 EFLAGS: 00000002 [ 609.492136][ C0] RAX: 0000000000000001 RBX: 1ffff110170c5910 RCX: ffffffff81728112 [ 609.492147][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff8880b862c880 [ 609.492157][ C0] RBP: 0000000000000001 R08: ffff8880b862c883 R09: 1ffff110170c5910 [ 609.492168][ C0] R10: dffffc0000000000 R11: ffffed10170c5910 R12: ffff8880b862c880 [ 609.492181][ C0] R13: 1ffff92000000f84 R14: dffffc0000000001 R15: ffffed10170c5911 [ 609.492193][ C0] FS: 00007fb493195c80(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 609.492207][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 609.492218][ C0] CR2: 000000110c2a69ac CR3: 000000003542e000 CR4: 00000000003526f0 [ 609.492233][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 609.492243][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 609.492254][ C0] Call Trace: [ 609.492262][ C0] [ 609.492272][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 609.492291][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 609.492309][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 609.492324][ C0] ? nmi_handle+0x2a/0x5a0 [ 609.492347][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 609.492367][ C0] ? nmi_handle+0x14f/0x5a0 [ 609.492383][ C0] ? nmi_handle+0x2a/0x5a0 [ 609.492399][ C0] ? kasan_check_range+0x79/0x290 [ 609.492414][ C0] ? default_do_nmi+0x63/0x160 [ 609.492430][ C0] ? exc_nmi+0x123/0x1f0 [ 609.492445][ C0] ? end_repeat_nmi+0xf/0x53 [ 609.492463][ C0] ? do_raw_spin_lock+0x142/0x370 [ 609.492483][ C0] ? kasan_check_range+0x79/0x290 [ 609.492498][ C0] ? kasan_check_range+0x79/0x290 [ 609.492514][ C0] ? kasan_check_range+0x79/0x290 [ 609.492529][ C0] [ 609.492535][ C0] [ 609.492542][ C0] do_raw_spin_lock+0x142/0x370 [ 609.492563][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 609.492582][ C0] ? advance_sched+0xa02/0xca0 [ 609.492597][ C0] ? advance_sched+0xa02/0xca0 [ 609.492615][ C0] _raw_spin_lock_irq+0xdf/0x120 [ 609.492633][ C0] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 609.492655][ C0] __hrtimer_run_queues+0x670/0xd50 [ 609.492682][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 609.492701][ C0] ? read_tsc+0x9/0x20 [ 609.492720][ C0] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 609.492739][ C0] hrtimer_interrupt+0x403/0xa40 [ 609.492767][ C0] __sysvec_apic_timer_interrupt+0x110/0x420 [ 609.492786][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 609.492805][ C0] [ 609.492811][ C0] [ 609.492817][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 609.492838][ C0] RIP: 0010:lock_release+0x658/0xa30 [ 609.492860][ C0] Code: 3c 3b 00 74 08 4c 89 f7 e8 95 55 8c 00 f6 84 24 91 00 00 00 02 75 77 41 f7 c5 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 27 00 00 00 00 4b c7 44 27 08 00 00 00 00 65 48 8b 04 25 [ 609.492873][ C0] RSP: 0018:ffffc900049a78c0 EFLAGS: 00000206 [ 609.492886][ C0] RAX: 0000000000000001 RBX: 1ffff92000934f2a RCX: ffffc900049a7903 [ 609.492897][ C0] RDX: 0000000000000004 RSI: ffffffff8c0aea80 RDI: ffffffff8c6076a0 [ 609.492909][ C0] RBP: ffffc900049a79f0 R08: ffffffff901d0c37 R09: 1ffffffff203a186 [ 609.492921][ C0] R10: dffffc0000000000 R11: fffffbfff203a187 R12: 1ffff92000934f24 [ 609.492933][ C0] R13: 0000000000000246 R14: ffffc900049a7950 R15: dffffc0000000000 [ 609.492956][ C0] ? dput+0x37/0x2b0 [ 609.492972][ C0] ? __pfx_lock_release+0x10/0x10 [ 609.492988][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 609.493006][ C0] ? inode_maybe_inc_iversion+0x23d/0x290 [ 609.493025][ C0] ? _raw_spin_unlock+0x28/0x50 [ 609.493042][ C0] ? dput+0x37/0x2b0 [ 609.493057][ C0] dput+0x179/0x2b0 [ 609.493073][ C0] shmem_unlink+0x1eb/0x2b0 [ 609.493091][ C0] shmem_rename2+0x214/0x350 [ 609.493108][ C0] ? __pfx_shmem_rename2+0x10/0x10 [ 609.493126][ C0] vfs_rename+0xbdb/0xf00 [ 609.493149][ C0] ? __pfx_vfs_rename+0x10/0x10 [ 609.493166][ C0] ? bpf_lsm_path_rename+0x9/0x10 [ 609.493187][ C0] do_renameat2+0xd94/0x13f0 [ 609.493214][ C0] ? __pfx_do_renameat2+0x10/0x10 [ 609.493234][ C0] ? __virt_addr_valid+0x183/0x530 [ 609.493252][ C0] ? __check_object_size+0x48e/0x900 [ 609.493270][ C0] ? strncpy_from_user+0x152/0x270 [ 609.493291][ C0] ? getname_flags+0x1e3/0x540 [ 609.493310][ C0] __x64_sys_rename+0x82/0x90 [ 609.493326][ C0] do_syscall_64+0xf3/0x230 [ 609.493344][ C0] ? clear_bhb_loop+0x35/0x90 [ 609.493360][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.493380][ C0] RIP: 0033:0x7fb492c9a93b [ 609.493395][ C0] Code: 48 8b 15 f0 64 15 00 83 c8 ff 64 83 3a 15 75 0e 48 8b 7c 24 08 e8 d5 d4 07 00 f7 d8 19 c0 48 83 c4 18 c3 b8 52 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 10 48 8b 15 be 64 15 00 f7 d8 64 89 02 48 83 [ 609.493409][ C0] RSP: 002b:00007ffdc098c4a8 EFLAGS: 00000202 ORIG_RAX: 0000000000000052 [ 609.493424][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb492c9a93b [ 609.493436][ C0] RDX: 000055e529112a34 RSI: 00007ffdc098c4c8 RDI: 00007ffdc098c8c8 [ 609.493447][ C0] RBP: 000055e077153ec0 R08: 0000000000000006 R09: 2182b581b45f7dca [ 609.493459][ C0] R10: 00000000000001b6 R11: 0000000000000202 R12: 000055e077164e70 [ 609.493469][ C0] R13: 00007ffdc098c4c8 R14: 00007ffdc098c8c8 R15: 000055e06108a160 [ 609.493488][ C0] [ 609.494033][ C1] task:syz.3.1660 state:R running task stack:25952 pid:11320 tgid:11320 ppid:5840 flags:0x00000000 [ 610.066168][ C1] Call Trace: [ 610.069458][ C1] [ 610.072402][ C1] __schedule+0x17fb/0x4be0 [ 610.076946][ C1] ? __pfx___schedule+0x10/0x10 [ 610.081816][ C1] ? ep_poll_callback+0x761/0xbc0 [ 610.086852][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 610.092072][ C1] ? preempt_schedule+0xe1/0xf0 [ 610.096937][ C1] preempt_schedule_common+0x84/0xd0 [ 610.102236][ C1] preempt_schedule+0xe1/0xf0 [ 610.106926][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 610.112311][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 610.118301][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 610.124731][ C1] preempt_schedule_thunk+0x1a/0x30 [ 610.129952][ C1] _raw_spin_unlock_irqrestore+0x130/0x140 [ 610.135771][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 610.142157][ C1] __wake_up_common_lock+0x18c/0x1e0 [ 610.147458][ C1] sock_def_readable+0x20f/0x5b0 [ 610.152402][ C1] ? sock_def_readable+0xd7/0x5b0 [ 610.157440][ C1] netlink_broadcast_filtered+0xe9f/0x12a0 [ 610.163279][ C1] netlink_broadcast+0x39/0x50 [ 610.168057][ C1] kobject_uevent_net_broadcast+0x38f/0x580 [ 610.173975][ C1] kobject_uevent_env+0x57d/0x8e0 [ 610.179020][ C1] kvm_uevent_notify_change+0x302/0x3a0 [ 610.184668][ C1] kvm_put_kvm+0xa1/0xf60 [ 610.189009][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 610.194218][ C1] ? kvm_irqfd_release+0x1aa/0x1d0 [ 610.199344][ C1] kvm_vm_release+0x43/0x50 [ 610.203854][ C1] ? __pfx_kvm_vm_release+0x10/0x10 [ 610.209057][ C1] __fput+0x23c/0xa50 [ 610.213062][ C1] task_work_run+0x24f/0x310 [ 610.217663][ C1] ? _raw_spin_unlock+0x28/0x50 [ 610.222531][ C1] ? __pfx_task_work_run+0x10/0x10 [ 610.227658][ C1] ? syscall_exit_to_user_mode+0xa3/0x340 [ 610.233392][ C1] syscall_exit_to_user_mode+0x13f/0x340 [ 610.239041][ C1] do_syscall_64+0x100/0x230 [ 610.243644][ C1] ? clear_bhb_loop+0x35/0x90 [ 610.248342][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.254247][ C1] RIP: 0033:0x7ff41257e819 [ 610.258679][ C1] RSP: 002b:00007ffe1a0b2ec8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 610.267116][ C1] RAX: 0000000000000000 RBX: 000000000007b21b RCX: 00007ff41257e819 [ 610.275105][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 610.283084][ C1] RBP: 00007ff412737ba0 R08: 0000000000000001 R09: 00007ffe1a0b31bf [ 610.291069][ C1] R10: 00007ff412400000 R11: 0000000000000246 R12: 000000000007b271 [ 610.299224][ C1] R13: 00007ff412735fa0 R14: 0000000000000032 R15: ffffffffffffffff [ 610.307221][ C1] [ 610.310252][ C1] rcu: rcu_preempt kthread starved for 10505 jiffies! g40985 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 610.321452][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 610.331426][ C1] rcu: RCU grace-period kthread stack dump: [ 610.337326][ C1] task:rcu_preempt state:R running task stack:25360 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 610.349094][ C1] Call Trace: [ 610.352380][ C1] [ 610.355324][ C1] __schedule+0x17fb/0x4be0 [ 610.359867][ C1] ? __pfx___schedule+0x10/0x10 [ 610.364741][ C1] ? __pfx_lock_release+0x10/0x10 [ 610.369793][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 610.376134][ C1] ? schedule+0x90/0x320 [ 610.380390][ C1] schedule+0x14b/0x320 [ 610.384561][ C1] schedule_timeout+0x15a/0x290 [ 610.389425][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 610.394810][ C1] ? __pfx_process_timeout+0x10/0x10 [ 610.400113][ C1] ? prepare_to_swait_event+0x330/0x350 [ 610.405675][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 610.410535][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 610.415748][ C1] ? rcu_gp_init+0x1256/0x1630 [ 610.420538][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 610.425489][ C1] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 610.431395][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 610.436691][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 610.442605][ C1] ? finish_swait+0xd4/0x1e0 [ 610.447210][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 610.451815][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 610.457025][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 610.462933][ C1] ? __kthread_parkme+0x169/0x1d0 [ 610.467970][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 610.473181][ C1] kthread+0x2f0/0x390 [ 610.477262][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 610.482471][ C1] ? __pfx_kthread+0x10/0x10 [ 610.487070][ C1] ret_from_fork+0x4b/0x80 [ 610.491533][ C1] ? __pfx_kthread+0x10/0x10 [ 610.496132][ C1] ret_from_fork_asm+0x1a/0x30 [ 610.500926][ C1] [ 610.503956][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 610.510285][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 610.520267][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 610.530325][ C1] RIP: 0010:acpi_safe_halt+0x21/0x30 [ 610.535635][ C1] Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 80 d4 03 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d 05 96 a0 00 f3 0f 1e fa fb f4 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 610.555258][ C1] RSP: 0018:ffffc900001a7d08 EFLAGS: 00000246 [ 610.561345][ C1] RAX: ffff88801cee0000 RBX: ffff888141ac9064 RCX: 000000000075d659 [ 610.569324][ C1] RDX: 0000000000000001 RSI: ffff888141ac9000 RDI: ffff888141ac9064 [ 610.577306][ C1] RBP: 000000000003a878 R08: ffff8880b8737cdb R09: 1ffff110170e6f9b [ 610.585282][ C1] R10: dffffc0000000000 R11: ffffffff8bc9af50 R12: ffff88801cbaf000 [ 610.593278][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff8f129a00 [ 610.601268][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 610.610203][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 610.616795][ C1] CR2: 0000555556d57808 CR3: 0000000061bd8000 CR4: 00000000003526f0 [ 610.624867][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 610.632843][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 610.640825][ C1] Call Trace: [ 610.644116][ C1] [ 610.646970][ C1] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 610.653321][ C1] ? print_other_cpu_stall+0x1481/0x15c0 [ 610.658977][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 610.664794][ C1] ? timekeeping_advance+0x5b1/0x740 [ 610.670101][ C1] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 610.676361][ C1] ? rcu_sched_clock_irq+0xa26/0x10e0 [ 610.681759][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 610.687415][ C1] ? update_process_times+0x242/0x2f0 [ 610.692798][ C1] ? tick_nohz_handler+0x37c/0x500 [ 610.697927][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 610.703402][ C1] ? __hrtimer_run_queues+0x551/0xd50 [ 610.708804][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 610.714541][ C1] ? read_tsc+0x9/0x20 [ 610.718628][ C1] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 610.724709][ C1] ? hrtimer_interrupt+0x403/0xa40 [ 610.729856][ C1] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 610.736020][ C1] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 610.741838][ C1] [ 610.744782][ C1] [ 610.747726][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 610.753907][ C1] ? __pfx_acpi_idle_enter+0x10/0x10 [ 610.759211][ C1] ? acpi_safe_halt+0x21/0x30 [ 610.763901][ C1] acpi_idle_enter+0xe4/0x140 [ 610.768596][ C1] cpuidle_enter_state+0x109/0x470 [ 610.773720][ C1] ? __pfx_menu_select+0x10/0x10 [ 610.778675][ C1] cpuidle_enter+0x5d/0xa0 [ 610.783107][ C1] do_idle+0x372/0x5c0 [ 610.787195][ C1] ? __pfx_do_idle+0x10/0x10 [ 610.791813][ C1] cpu_startup_entry+0x42/0x60 [ 610.796590][ C1] start_secondary+0x102/0x110 [ 610.801365][ C1] common_startup_64+0x13e/0x147 [ 610.806325][ C1]