last executing test programs: 4.384405125s ago: executing program 3 (id=1084): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28010000060a010400000000000000000a0000040900010073797a31000000000900020073797a3200000000fc000480f80001800b00010064796e7365740000e800028008240340000000020900010073797a320100000008000340000000010800054000000001080004"], 0x150}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 4.269968272s ago: executing program 3 (id=1086): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0x0, 0x25dfdbfe}, 0x10}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0xb, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_COMPAT_NAME={0xc, 0x1, 'r*-**{:\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x22040007}, 0x4000010) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100060}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x40081) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc50c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x100, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0x99, 0x0, 0x0, 0x2, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x100, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x9, 0x0, 0x3, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x350bae1a, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x7, 0xf2, 0x10, 0x5, 0x8, 0x10001, 0x401, 0x80000000, 0x2401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0x0, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x3, 0xa, 0x0, 0x10000, 0x401, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xff, 0x5cb5, 0xfffffffe, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0x0, 0x401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4b, 0x8000, 0x2, 0xb, 0x6, 0x4fa4, 0x80000002, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x40, 0xa, 0x1b, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0x1, 0x3, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0xf1a, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x4, 0x6, 0xffffffff, 0x6, 0x10001, 0x8, 0x68, 0x7, 0x1, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x64, 0x4, 0x7fff, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x7, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x8, 0x6688, 0x45e3, 0x5, 0x7, 0x1, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0xce, 0xf, 0x0, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37d, 0x10001, 0xc, 0x1, 0x1, 0x2, 0x6, 0x4, 0x6, 0x1, 0x9, 0x6, 0xfffffffa, 0x2, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0xe, 0x89, 0x2, 0x8, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x2, 0x80000004, 0x29, 0x9, 0x0, 0x4, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x7, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x1, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xc, 0x6, 0x7, 0xfffffeff, 0x4, 0x2, 0x7fff, 0x101, 0x7, 0x6, 0x706, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x6, 0x1, 0xa9c, 0x9, 0x9, 0x1, 0x2, 0x5, 0x1000, 0x5, 0x1ff, 0x9, 0x3, 0x3, 0x10001, 0xffff0000, 0xf, 0x1, 0xffffa5ba, 0xffffa9b4, 0x1, 0x4, 0x5, 0x7, 0x4b5f, 0x6, 0xa, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8f, 0x1, 0x7, 0x8, 0x1, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x5, 0x4, 0xfff, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x7f, 0x4, 0x2, 0x80000000, 0xd, 0x3, 0x1, 0x0, 0x5, 0xb6, 0x101, 0x401, 0x2, 0xb, 0xc, 0x6623258, 0xf2, 0x741, 0xae6, 0x9, 0xffffa0ae, 0x9, 0x6, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x2, 0x20000000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x8000001, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xfff, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0xa, 0x1, 0x9, 0x1, 0xd, 0x9, 0x7619, 0xfffffe01, 0x1, 0x6, 0x0, 0x3, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x9, 0xffffc487, 0x200, 0x10001, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x0, 0x2, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x9, 0x3, 0xffffffff, 0x9, 0x7f, 0x6, 0x8, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0x10000, 0x80000001, 0x5, 0x8001, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0xffff, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x9, 0x8, 0x0, 0x5, 0xf, 0x5, 0xe, 0x8, 0x3ff, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x4000, 0x1, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x43, 0x3, 0x9, 0x5, 0x80000000, 0x9, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x8000002, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0xfb4, 0xbf8, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0x3, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x4, 0x3, 0x6, 0x80000000, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x7fffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x6, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0x0, 0x924, 0x6, 0x100, 0x1, 0x5, 0xffff351b, 0x8, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x1, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x5, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x8, 0x5, 0xfffffff7, 0x7, 0x7, 0x5, 0x6330, 0x0, 0x6, 0xea, 0x0, 0xfff, 0x809, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0xffffffff, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x2ec, 0x9, 0x6, 0x3ff, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x8, 0x3, 0xe, 0x1, 0x1, 0xc, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x26c, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xfffffff8, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x8, 0x1, 0xfffffffb, 0x1af88, 0x2, 0x30a6, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x40, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x7fff, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x1, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x8, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0xfffffff8, 0x8000, 0x7, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0x9, 0x1, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) keyctl$set_reqkey_keyring(0xe, 0x4) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x4c, r3, 0x1, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x30, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8b}]}]}, 0x4c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2.970481572s ago: executing program 1 (id=1109): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f0000001080)='cramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(,\xc7', 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB="88000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="6b0033008000de00ffffffffffff080211000000505050505050000007000000000000006400824403010e0503ff4f063c040180"], 0x88}, 0x1, 0x0, 0x0, 0x880}, 0x0) 2.966001766s ago: executing program 1 (id=1110): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x24800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x6b2c00, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB, @ANYBLOB=',rootmode=0', @ANYBLOB=',grou', @ANYBLOB=',']) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.851553845s ago: executing program 1 (id=1111): ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000140)=0x4) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) write(r0, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) socket(0x2, 0x80000, 0x3) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x7, 0x4) 2.658423601s ago: executing program 1 (id=1112): socket$inet6_tcp(0xa, 0x1, 0x0) socket$tipc(0x1e, 0x5, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) epoll_create1(0x80000) epoll_create1(0x80000) pselect6(0x40, &(0x7f00000001c0)={0x4, 0x300, 0x3, 0xfffffffffffffffd, 0x0, 0x81, 0x300}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x400}, 0x0, 0x0) 2.658017898s ago: executing program 0 (id=1113): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0xfff, 0x2}, 0x1c) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0xffffff80, 0xbbb, 0x7}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000100}, 0xc000) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r4, 0x541b, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20008054}, 0x4000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000506030000000000000000000000000a05000100070000000900020073797a30000000000900030073798b30000000000900030073797a30000000000900030073797a30000000000900020073797a31000000000500010007000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000050}, 0x4800) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x690, 0x1000, 0xbbba, 0x2, 0x0, 0x100, {0x0, 0x2000}, {0x5, 0x2, 0x1}, {0x4000000}, {0x0, 0x8}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2}) ftruncate(r5, 0x200c17a) ioctl$HIDIOCGSTRING(r5, 0x81044804, &(0x7f0000000040)={0x2c, "feefef90cf6543531f65f978d0e440bef8ddfd8efe0d0b7dc501232dfdf2857fae4c595505de2de98f64b325"}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000880)=[{&(0x7f0000000280)=""/184, 0xb8}, {&(0x7f0000000380)=""/243, 0xf3}, {&(0x7f0000000500)=""/244, 0xf4}, {&(0x7f0000000600)=""/86, 0x56}, {&(0x7f0000000480)=""/12, 0xc}, {&(0x7f0000000680)=""/185, 0xb9}, {&(0x7f00000007c0)=""/131, 0x83}], 0x7, 0x8, 0x2) getsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000740), &(0x7f0000000900)=0x4) ioctl$FIBMAP(r7, 0x401070cd, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="beef915d564c90c200"/24, 0x18) write$UHID_SET_REPORT_REPLY(r7, &(0x7f0000000940)={0xe, {0x8, 0x4, 0x7a, 0xc9, "161de995e9b18ebd1ea37f64a38d1b79e0fa0287c16762690b309869e8c5b6b89156da5a46b63b4ad4a05fd343044db9d471b9e0a3e8040328faa4784f04f4f31b2bf9781a95bd1a7099954ae4c4764d9fd7210826555971133690512ab9df87254907ef58134751f3b4ab9e68f6f7f0a6e9b753634e6f24d51497622cc389ee6d8eda1a9b03908a1d61fcd6d2dc9b59eb659c220819789ef8b44520293c3d197e931767ca0b46a80126405cd983fe16867ddc9945495cae1e83704a13271f5e72bf314d08f45b2bc8"}}, 0xd5) r9 = accept$alg(r8, 0x0, 0x0) write$binfmt_script(r9, 0x0, 0x0) recvmmsg(r9, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000500)}, 0x1009}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000010000100000020000022a569e279d254d75d340743757fd78e0000000100000a14000000"], 0x28}, 0x1, 0x0, 0x0, 0x24044800}, 0x24004040) 2.647683836s ago: executing program 3 (id=1114): sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x148, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_EXPECT_MASTER={0x84, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT={0x58, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x200}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x39}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, @CTA_EXPECT_MASTER={0x58, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast1}}}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[], 0x4c}}, 0x4040810) 2.44979661s ago: executing program 3 (id=1116): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000002c0)={0x10, 0x2}) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xca03, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x37, [{{0x9, 0x4, 0x0, 0xb9, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x880, 0x5, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x1, "2a2b8b6b"}]}}, 0x0}, 0x0) 2.298261837s ago: executing program 0 (id=1117): sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="0a001800030303030303000004005a8020005a8018"], 0x4c}}, 0x4040810) 2.067020687s ago: executing program 0 (id=1119): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x28, r1, 0x4, 0x70bd2c, 0x25d7dbfb, {{}, {@val={0x8, 0x1, 0x5d}, @void, @val={0xc, 0x99, {0x3, 0x1c}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@xattr}]}) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0xc028ae92, &(0x7f0000000040)={0x0, 0x4}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\a\x00', @ANYRES16=r5, @ANYBLOB="000328bd7000fbdbdf25120000000c009900ff7f0000350000000c00430086070000c3000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x8800) 1.830219837s ago: executing program 0 (id=1120): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x24800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x6b2c00, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248422a878423c342d2dacc", @ANYBLOB=',rootmode=0', @ANYBLOB=',grou', @ANYBLOB=',']) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.829811514s ago: executing program 2 (id=1121): r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5411, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01060000000000000000090000001c0004801300010062726f6164636173742d6cdd1a959c"], 0x30}}, 0xc000) syz_emit_vhci(0x0, 0xb) syz_emit_vhci(&(0x7f00000005c0)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x1}}}, 0x4) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000100)) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, &(0x7f0000000040)={0x0, 0x5, 0x0, 0x4}) r4 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2) r5 = syz_open_dev$usbmon(&(0x7f0000000cc0), 0xa, 0x2) close(r5) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x2f, 0x2, 0x0, "d52b3d000000fa44966262631e8ac11e0000000000000000000000000100"}) 1.741388899s ago: executing program 2 (id=1122): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x6, 0x1, 0x0, 0x0, 0x2) sendmsg$can_j1939(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x1d, r5, 0x1, {0x2, 0xf0, 0x3}, 0xfe}, 0x18, &(0x7f0000000280)={&(0x7f00000001c0)="f5b8fe574cc886f9654b3584c0a1e35e1f8bbd1dce973b11be39b504f8029e0d5d036f5c2e7681d2605e4591afa0a91f71dc8b13963ac72f5f93ffa1c76fc2f4f50ab1c0caf00285ab26a9bacf2bc894990d8c199f1cf3a00f65c7cfc835081a2e27c15b07b9d0247dbf90a2d94254153836e8e7d1ff63e07ab3e10340b1889bcacc327a44fba02c", 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x4) ioctl$sock_netrom_SIOCDELRT(r3, 0x890c, &(0x7f0000000080)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x5, 'syz1\x00', @default, 0x8000, 0x2, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) 1.69859852s ago: executing program 1 (id=1123): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0x0, 0x25dfdbfe}, 0x10}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0xb, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_COMPAT_NAME={0xc, 0x1, 'r*-**{:\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x22040007}, 0x4000010) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100060}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x40081) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc50c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x100, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0x99, 0x0, 0x0, 0x2, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x100, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x9, 0x0, 0x3, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x350bae1a, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x7, 0xf2, 0x10, 0x5, 0x8, 0x10001, 0x401, 0x80000000, 0x2401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0x0, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x3, 0xa, 0x0, 0x10000, 0x401, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xff, 0x5cb5, 0xfffffffe, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0x0, 0x401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4b, 0x8000, 0x2, 0xb, 0x6, 0x4fa4, 0x80000002, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x40, 0xa, 0x1b, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0x1, 0x3, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0xf1a, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x4, 0x6, 0xffffffff, 0x6, 0x10001, 0x8, 0x68, 0x7, 0x1, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x64, 0x4, 0x7fff, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x7, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x8, 0x6688, 0x45e3, 0x5, 0x7, 0x1, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0xce, 0xf, 0x0, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37d, 0x10001, 0xc, 0x1, 0x1, 0x2, 0x6, 0x4, 0x6, 0x1, 0x9, 0x6, 0xfffffffa, 0x2, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0xe, 0x89, 0x2, 0x8, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x2, 0x80000004, 0x29, 0x9, 0x0, 0x4, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x7, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x1, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xc, 0x6, 0x7, 0xfffffeff, 0x4, 0x2, 0x7fff, 0x101, 0x7, 0x6, 0x706, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x6, 0x1, 0xa9c, 0x9, 0x9, 0x1, 0x2, 0x5, 0x1000, 0x5, 0x1ff, 0x9, 0x3, 0x3, 0x10001, 0xffff0000, 0xf, 0x1, 0xffffa5ba, 0xffffa9b4, 0x1, 0x4, 0x5, 0x7, 0x4b5f, 0x6, 0xa, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8f, 0x1, 0x7, 0x8, 0x1, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x5, 0x4, 0xfff, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x7f, 0x4, 0x2, 0x80000000, 0xd, 0x3, 0x1, 0x0, 0x5, 0xb6, 0x101, 0x401, 0x2, 0xb, 0xc, 0x6623258, 0xf2, 0x741, 0xae6, 0x9, 0xffffa0ae, 0x9, 0x6, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x2, 0x20000000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x8000001, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xfff, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0xa, 0x1, 0x9, 0x1, 0xd, 0x9, 0x7619, 0xfffffe01, 0x1, 0x6, 0x0, 0x3, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x9, 0xffffc487, 0x200, 0x10001, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x0, 0x2, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x9, 0x3, 0xffffffff, 0x9, 0x7f, 0x6, 0x8, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0x10000, 0x80000001, 0x5, 0x8001, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0xffff, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x9, 0x8, 0x0, 0x5, 0xf, 0x5, 0xe, 0x8, 0x3ff, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x4000, 0x1, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x43, 0x3, 0x9, 0x5, 0x80000000, 0x9, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x8000002, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0xfb4, 0xbf8, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0x3, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x4, 0x3, 0x6, 0x80000000, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x7fffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x6, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0x0, 0x924, 0x6, 0x100, 0x1, 0x5, 0xffff351b, 0x8, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x1, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x5, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x8, 0x5, 0xfffffff7, 0x7, 0x7, 0x5, 0x6330, 0x0, 0x6, 0xea, 0x0, 0xfff, 0x809, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0xffffffff, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x2ec, 0x9, 0x6, 0x3ff, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x8, 0x3, 0xe, 0x1, 0x1, 0xc, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x26c, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xfffffff8, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x8, 0x1, 0xfffffffb, 0x1af88, 0x2, 0x30a6, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x40, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x7fff, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x1, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x8, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0xfffffff8, 0x8000, 0x7, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0x9, 0x1, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) keyctl$set_reqkey_keyring(0xe, 0x4) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x4c, r3, 0x1, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x30, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8b}]}]}, 0x4c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.543387645s ago: executing program 0 (id=1124): sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x148, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_EXPECT_MASTER={0x84, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT={0x58, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x200}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x39}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, @CTA_EXPECT_MASTER={0x58, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast1}}}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[], 0x4c}}, 0x4040810) 1.493911195s ago: executing program 0 (id=1125): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) r1 = fsopen(&(0x7f0000000000)='f2fs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='v2to_da_alloc', 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) sendmsg$kcm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f0016000800000000000000200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a6683f5aeb4edbb57a5025ccca9e00360db398262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee2a920e9703920723f9a94100"/216, 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000000303010100000000006b0b4d660000000c40445fb74f6c0000ff00005962a6ff72aa94bddd0b"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r5, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe) accept4$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @loopback}, &(0x7f0000000300)=0x10, 0x80800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000040)={0x99b, 0x8, 0xc051, 0x3, 0x2, 0xff}, 0xc) ppoll(&(0x7f0000000000)=[{r2, 0x1000}], 0x1, &(0x7f0000000380), 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x8054) syz_usb_connect(0x0, 0x2d, &(0x7f0000000680)={{0x12, 0x1, 0x110, 0xb1, 0x74, 0x1f, 0x10, 0xeb0, 0x3457, 0x328e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x3, 0x80, 0x0, [{{0x9, 0x4, 0xfa, 0xe5, 0x1, 0xda, 0x5e, 0x7a, 0x1, [], [{{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x6, 0x2, 0x77}}]}}]}}]}}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x20000890) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) rt_sigprocmask(0x1, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, 0x0, 0x240440c9) ioctl$TCSETS(r0, 0x8910, &(0x7f0000000080)={0x2, 0xe, 0x10, 0x6af, 0x15, "1a9f0a3f7b52f26ea6fa6a6638d7219c6a5310"}) 806.125222ms ago: executing program 2 (id=1126): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000080)={0x3}, 0x1) sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0xfffe7523, 0x10000, 0xefcb, 0xe08c, 0xb2, "20ab980900eea4a7446c180000cd681ec267a0", 0x6, 0x4}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 756.158902ms ago: executing program 2 (id=1127): sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="0a001800030303030303000004005a8020005a8018"], 0x4c}}, 0x4040810) 684.335958ms ago: executing program 2 (id=1128): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x7) listen(r0, 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, 0xffffffffffffffff, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) mbind(&(0x7f000021d000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x82000000000005a, 0x3) 522.366253ms ago: executing program 3 (id=1129): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x1701) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r3, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r1, 0x3b8c, &(0x7f0000000100)={0x30, r5, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x44, &(0x7f0000000080)={0x2, 0x3, 0x17, 0xff81}, 0x8, 0x20, 0x3, 0x0, 0x4bf, 0x404, 0x0}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x0, {0x0, 0x0, 0x6}}, 0x18) bind$can_j1939(r6, &(0x7f0000000180)={0x1d, r7, 0x0, {0x1, 0xff, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000007c0)="81b641f1f3843704b65c06d1f9195c689efef2ed73e6e49b5d132f361f27858fae3d8a81b3bcdf4b73e39b2c1234f47f130989279ce10140885317a2cd553ec131725da209e7ada724b3b331bf334d6c429997227c7c5c50ed317ceba923dd1b7a393db4994936c6dd5d0fa65656ebfddcd7a82ec988324298134401b8ecac8a58f085b3e165df5bdd09ae61854a89dfa8599fdeb743b5f714957c459ccd4c788eff3aff4f1e94930bbbb6c42e8a87e257ac7d4ee9e6dd2b883a02db7584d69bd5a72cd9dd9964c2c9fe33fd2fccf0ae5953a6bc31f1be27", 0xd8}, {&(0x7f0000000380)="e7b499f9dcf7418477105685854940a0847aa87154f75f5789e9112edd9b13259344540daf147d085349440377d196565bea3ffb5ecf4ae3734c70b1fdddb4dfa61cee36ba90c79a80f6a6c97103b5bee864854e45ed0e2ac8ceb0b1a9ea42ff6578c290dad1b803db3b1699d57edca01a5368d661501fbb0480270f3f6cdeb6e33b3b149cd2abfc793d28c2699bbfe711cc6ce7368c", 0x96}, {&(0x7f00000002c0)="2b43c2c11e7fbc96a4ab2b9f619d6cf7b89538798a0327535519ed5f3ea9dbd762bd07a132c9d657ba205e", 0xffffff0a}], 0x3}, 0x24040881) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB="88000000", @ANYRES16=r10, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r11, @ANYBLOB="6b0033008000de00ffffffffffff080211000000505050505050000007000000000000006400824403010e0503ff4f063c040180"], 0x88}, 0x1, 0x0, 0x0, 0x880}, 0x0) 499.943193ms ago: executing program 2 (id=1130): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES32=r0], 0x1c}}, 0x40408d0) (async) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000b40), &(0x7f0000000b80)={'enc=', 'pkcs1', ' hash=', {'crct10dif-pclmul\x00'}}, 0x0, 0x0) (async) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000400)={r3, 0x200}, 0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r5, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) connect$pppoe(r1, &(0x7f0000000240)={0x18, 0x0, {0x0, @multicast, 'syzkaller1\x00'}}, 0x1e) (async, rerun: 32) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0) (rerun: 32) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r7, 0x84, 0x19, &(0x7f00000002c0)={r6, 0x9}, 0x8) (async) r8 = syz_open_dev$vim2m(&(0x7f0000000040), 0x4000000000000103, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000300)={0x2, @pix_mp={0x0, 0x0, 0x52424752}}) (async, rerun: 32) syz_usb_connect$uac1(0x69a90eab3db9c902, 0xa3, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x91, 0x3, 0x1, 0x5, 0xa0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfff7, 0x7}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x300, 0x3, 0x6, 0xb}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x82, 0x4, 0x9, 0x10, "", "ca"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9, 0x4, 0x7, 0x6, "f7e04239"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xea, 0xc8, 0x3, {0x7, 0x25, 0x1, 0x81, 0x4, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x4, 0x3, 0xff, 0x31}, @as_header={0x7, 0x24, 0x1, 0x1, 0x10, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x50, 0x5, 0x8, 0x41, {0x7, 0x25, 0x1, 0x82, 0xfe, 0x7}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) (rerun: 32) 291.194098ms ago: executing program 3 (id=1131): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf", @ANYRES8], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000680)={&(0x7f0000000e80)={0x44, r2, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x14, 0x1, "4abee33957edf8aaae14574df4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac09}]}]}, 0x44}}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000001b40), 0x0, 0x0) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x1100011, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000240)) ioctl$SG_SET_COMMAND_Q(r5, 0x227e, 0xfffffffffffffffe) r6 = dup(r0) write$uinput_user_dev(r6, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0x7f, 0x1, 0x7f5d, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x4, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0x9, 0x7, 0x0, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x9, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x1, 0x6, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0x5, 0xa3, 0x3, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0xd21e, 0x9, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x6, 0x47, 0x7, 0x0, 0x11, 0x3, 0xffd, 0x7, 0x7, 0x8000, 0x8, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71d, 0x8], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x40, 0x9, 0x6, 0xc41f, 0x80000001, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x0, 0x53, 0xc, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400, 0x9, 0x0, 0x8, 0x7, 0x9a33247, 0x8, 0x2, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) lsm_set_self_attr(0x0, &(0x7f0000000100)={0x6c, 0x8000000000000001, 0x10f, 0xef, "ee058320830d64db86430d3040b8a736ff6bbd84265abd1945572cb8c815d2c782ef4dbb23a112c32fc09a92d5cf16827508b1101b92b515f73b2a7afeceb941e7f1b3a5ddc2bbb277803645d2d6180e76c040128fc683f1cc783acf3500ab901a00dcf747d090815d995ad16a22cf1835e24b2e44cbd1159af74d9d375936f5bd4d4b818838814954e78418c53000dfb26f96b64b9c06ea119734392e74bd00d59bc6d2a5e0c531ed4e8057445a9452f222c01cae5c47d444e16368e84b5ce76c4b298a13de008367a713114c662e03f6fdad95505a8b65f26c59ac913e79bf29bc1acb5e912cc4305186be1b3dbd"}, 0x10f, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000080)={{0x3, 0x5cc, 0x7, 0x81}, 'syz0\x00', 0x2b}) 0s ago: executing program 1 (id=1132): r0 = socket$inet6(0xa, 0x5, 0x8000000003c) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x5, @mcast1, 0x7}, 0x1c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0xfffc, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0xe) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x541b, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r4 = dup(r1) r5 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904800000ff"], 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) syz_usb_control_io(r5, 0x0, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000040), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r6, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x300a}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000100)=0xa5, 0x4) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="2015bc"], 0x0, 0x0, 0x0, 0x0}) bind$bt_rfcomm(r4, &(0x7f0000000140)={0x1f, @none, 0x2}, 0xa) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x30}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xfd87) ioctl$LOOP_GET_STATUS64(r4, 0x4c05, &(0x7f0000000380)) kernel console output (not intermixed with test programs): ============================== [ 138.693525][ T7436] WARNING: The mand mount option has been deprecated and [ 138.693525][ T7436] and is ignored by this kernel. Remove the mand [ 138.693525][ T7436] option from the mount to silence this warning. [ 138.693525][ T7436] ======================================================= [ 138.722611][ T5839] usb 1-1: USB disconnect, device number 16 [ 138.731449][ C1] vkms_vblank_simulate: vblank timer overrun [ 138.735791][ T7436] overlayfs: missing 'lowerdir' [ 138.738739][ T5906] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 138.764109][ T5971] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 138.774266][ T5971] em28xx 4-1:0.132: board has no eeprom [ 138.795877][ T6327] udevd[6327]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 138.832868][ T5971] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 138.840726][ T5971] em28xx 4-1:0.132: analog set to bulk mode. [ 138.848162][ T5907] em28xx 4-1:0.132: Registering V4L2 extension [ 138.858802][ T5951] usb 3-1: unable to get BOS descriptor or descriptor too short [ 138.868959][ T5951] usb 3-1: not running at top speed; connect to a high speed hub [ 138.885410][ T5971] usb 4-1: USB disconnect, device number 12 [ 138.899922][ T5951] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 138.911998][ T5971] em28xx 4-1:0.132: Disconnecting em28xx [ 138.921167][ T5951] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 138.931325][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.939514][ T5951] usb 3-1: Product: syz [ 138.943747][ T5951] usb 3-1: Manufacturer: syz [ 138.948355][ T5951] usb 3-1: SerialNumber: syz [ 138.952616][ T5906] usb 2-1: Using ep0 maxpacket: 32 [ 138.962986][ T5906] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 138.973883][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.985578][ T5906] usb 2-1: config 0 descriptor?? [ 139.024822][ T5907] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 139.032372][ T5907] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 139.039519][ T5907] em28xx 4-1:0.132: No AC97 audio processor [ 139.049448][ T5907] usb 4-1: Decoder not found [ 139.054180][ T5907] em28xx 4-1:0.132: failed to create media graph [ 139.061008][ T5907] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 139.074291][ T5907] em28xx 4-1:0.132: Remote control support is not available for this card. [ 139.084945][ T5971] em28xx 4-1:0.132: Closing input extension [ 139.102807][ T5971] em28xx 4-1:0.132: Freeing device [ 139.171633][ T7464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.185764][ T7464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.196837][ T5906] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 139.214525][ T5951] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 139.225655][ T5906] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 139.236354][ T5951] usb 3-1: unit 51 not found! [ 139.253408][ T5951] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 139.253785][ T5906] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 139.268653][ T5951] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 139.280073][ T5906] usb 2-1: media controller created [ 139.303459][ T5951] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 139.342976][ T5906] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 139.343057][ T5951] usb 3-1: USB disconnect, device number 19 [ 139.452480][ T5845] udevd[5845]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 139.742399][ T5925] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 139.906613][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 139.917787][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.929880][ T5925] usb 4-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 139.939396][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.950163][ T5925] usb 4-1: config 0 descriptor?? [ 140.022399][ T5951] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 140.184279][ T5951] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 140.192638][ T5951] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 140.212361][ T5951] usb 3-1: config 0 has no interface number 0 [ 140.220486][ T5951] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 140.229669][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.238934][ T5951] usb 3-1: Product: syz [ 140.244651][ T5951] usb 3-1: Manufacturer: syz [ 140.249287][ T5951] usb 3-1: SerialNumber: syz [ 140.252331][ T5906] stb0899_attach: Driver disabled by Kconfig [ 140.258339][ T5951] usb 3-1: config 0 descriptor?? [ 140.260242][ T5906] az6027: no front-end attached [ 140.260242][ T5906] [ 140.275386][ T5906] az6027: usb out operation failed. (-71) [ 140.281400][ T5906] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 140.291786][ T5906] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input10 [ 140.292595][ T43] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 140.312070][ T5906] dvb-usb: schedule remote query interval to 400 msecs. [ 140.320540][ T5906] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 140.334592][ T5906] usb 2-1: USB disconnect, device number 16 [ 140.371281][ T5925] chicony 0003:04F2:1421.0006: item fetching failed at offset 4/5 [ 140.381851][ T5925] chicony 0003:04F2:1421.0006: Chicony hid parse failed: -22 [ 140.400653][ T5925] chicony 0003:04F2:1421.0006: probe with driver chicony failed with error -22 [ 140.420201][ T5906] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 140.472368][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 140.478989][ T43] usb 1-1: config 0 has an invalid interface number: 124 but max is 0 [ 140.489527][ T43] usb 1-1: config 0 has no interface number 0 [ 140.499142][ T43] usb 1-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=72.01 [ 140.508361][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.516709][ T43] usb 1-1: Product: syz [ 140.520952][ T43] usb 1-1: Manufacturer: syz [ 140.525617][ T43] usb 1-1: SerialNumber: syz [ 140.532483][ T43] usb 1-1: config 0 descriptor?? [ 140.678539][ T7485] tracefs: Bad value for 'gid' [ 140.683626][ T7485] tracefs: Bad value for 'gid' [ 140.705719][ T7490] netlink: 168 bytes leftover after parsing attributes in process `syz.3.646'. [ 140.758935][ T7487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.788836][ T7487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.948964][ T5951] uvcvideo 3-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 140.964848][ T5951] uvcvideo 3-1:0.64: No valid video chain found. [ 140.988661][ T5951] usb 3-1: USB disconnect, device number 20 [ 141.075348][ T5162] Bluetooth: hci2: hardware error 0x03 [ 141.182944][ T5906] usb 1-1: USB disconnect, device number 17 [ 141.211663][ T5951] usb 4-1: USB disconnect, device number 13 [ 141.240647][ T7511] devtmpfs: Cannot disable swap on remount [ 141.266360][ T7511] devtmpfs: Cannot disable swap on remount [ 141.374855][ T7516] loop6: detected capacity change from 0 to 7 [ 141.383754][ T5845] Dev loop6: unable to read RDB block 7 [ 141.389382][ T5845] loop6: unable to read partition table [ 141.404086][ T5845] loop6: partition table beyond EOD, truncated [ 141.412602][ T7516] Dev loop6: unable to read RDB block 7 [ 141.418214][ T7516] loop6: unable to read partition table [ 141.424983][ T7516] loop6: partition table beyond EOD, truncated [ 141.431216][ T7516] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 141.443103][ T7514] delete_channel: no stack [ 141.902616][ T5906] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 141.910356][ T5925] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 141.971453][ T7531] netlink: 'syz.3.658': attribute type 16 has an invalid length. [ 141.981095][ T7531] netlink: 156 bytes leftover after parsing attributes in process `syz.3.658'. [ 141.994539][ T7531] netlink: 'syz.3.658': attribute type 11 has an invalid length. [ 142.098822][ T5925] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 142.108360][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.117223][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.132664][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.142920][ T5925] usb 3-1: Product: syz [ 142.147095][ T5925] usb 3-1: Manufacturer: syz [ 142.151711][ T5925] usb 3-1: SerialNumber: syz [ 142.157221][ T5906] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 142.174087][ T5925] usb 3-1: config 0 descriptor?? [ 142.184861][ T5906] usb 2-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 142.210807][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.230021][ T5906] usb 2-1: config 0 descriptor?? [ 142.322418][ T1207] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 142.385342][ T5925] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 142.458555][ T7545] fuse: Unknown parameter 'grou00000000000000000000' [ 142.483833][ T1207] usb 1-1: Using ep0 maxpacket: 8 [ 142.502667][ T1207] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.518393][ T1207] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 142.528193][ T1207] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.543222][ T1207] usb 1-1: config 0 descriptor?? [ 142.563839][ T1207] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 142.638417][ T5925] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 142.683604][ T5925] usb 3-1: USB disconnect, device number 21 [ 143.062939][ T5925] usb 3-1: new low-speed USB device number 22 using dummy_hcd [ 143.182505][ T5162] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 143.222383][ T5925] usb 3-1: device descriptor read/64, error -71 [ 143.366256][ T1207] gspca_vc032x: reg_w err -71 [ 143.375265][ T5951] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 143.379411][ T1207] vc032x 1-1:0.0: probe with driver vc032x failed with error -71 [ 143.393763][ T1207] usb 1-1: USB disconnect, device number 18 [ 143.462400][ T5925] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 143.532403][ T5951] usb 4-1: Using ep0 maxpacket: 16 [ 143.539300][ T5951] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 143.551598][ T5951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 143.565040][ T5951] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 143.574639][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.588588][ T5951] usb 4-1: Product: syz [ 143.592872][ T5951] usb 4-1: Manufacturer: syz [ 143.597498][ T5951] usb 4-1: SerialNumber: syz [ 143.602715][ T5925] usb 3-1: device descriptor read/64, error -71 [ 143.607854][ T5951] usb 4-1: config 0 descriptor?? [ 143.619114][ T5951] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 143.628469][ T5951] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 143.714304][ T5925] usb usb3-port1: attempt power cycle [ 144.062636][ T5925] usb 3-1: new low-speed USB device number 24 using dummy_hcd [ 144.084788][ T5925] usb 3-1: device descriptor read/8, error -71 [ 144.102727][ T7568] fuse: Unknown parameter 'grou00000000000000000000' [ 144.220249][ T5951] em28xx 4-1:0.0: unknown em28xx chip ID (142) [ 144.322434][ T5925] usb 3-1: new low-speed USB device number 25 using dummy_hcd [ 144.345053][ T5925] usb 3-1: device descriptor read/8, error -71 [ 144.428047][ T5951] em28xx 4-1:0.0: Config register raw data: 0x71 [ 144.435953][ T5951] em28xx 4-1:0.0: I2S Audio (5 sample rate(s)) [ 144.442444][ T5951] em28xx 4-1:0.0: No AC97 audio processor [ 144.452957][ T5925] usb usb3-port1: unable to enumerate USB device [ 144.649940][ T5951] usb 4-1: USB disconnect, device number 14 [ 144.666874][ T5906] usbhid 2-1:0.0: can't add hid device: -71 [ 144.692960][ T5906] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 144.700737][ T7579] FAULT_INJECTION: forcing a failure. [ 144.700737][ T7579] name failslab, interval 1, probability 0, space 0, times 0 [ 144.730418][ T5906] usb 2-1: USB disconnect, device number 17 [ 144.746805][ T7579] CPU: 1 UID: 0 PID: 7579 Comm: syz.1.677 Not tainted syzkaller #0 PREEMPT(full) [ 144.746831][ T7579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 144.746841][ T7579] Call Trace: [ 144.746847][ T7579] [ 144.746855][ T7579] dump_stack_lvl+0x189/0x250 [ 144.746878][ T7579] ? __pfx____ratelimit+0x10/0x10 [ 144.746896][ T7579] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.746916][ T7579] ? __pfx__printk+0x10/0x10 [ 144.746939][ T7579] ? __pfx___might_resched+0x10/0x10 [ 144.746965][ T7579] should_fail_ex+0x414/0x560 [ 144.746995][ T7579] should_failslab+0xa8/0x100 [ 144.747017][ T7579] __kmalloc_noprof+0xcb/0x7f0 [ 144.747032][ T7579] ? kfree+0x4d/0x6d0 [ 144.747051][ T7579] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 144.747078][ T7579] tomoyo_realpath_from_path+0xe3/0x5d0 [ 144.747101][ T7579] ? tomoyo_domain+0xd9/0x130 [ 144.747126][ T7579] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 144.747152][ T7579] tomoyo_path_number_perm+0x1e8/0x5a0 [ 144.747180][ T7579] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 144.747239][ T7579] ? __fget_files+0x2a/0x420 [ 144.747263][ T7579] ? __fget_files+0x3a0/0x420 [ 144.747281][ T7579] ? __fget_files+0x2a/0x420 [ 144.747304][ T7579] security_file_ioctl+0xcb/0x2d0 [ 144.747330][ T7579] __se_sys_ioctl+0x47/0x170 [ 144.747349][ T7579] do_syscall_64+0xfa/0xfa0 [ 144.747365][ T7579] ? lockdep_hardirqs_on+0x9c/0x150 [ 144.747383][ T7579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.747398][ T7579] ? clear_bhb_loop+0x60/0xb0 [ 144.747418][ T7579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.747435][ T7579] RIP: 0033:0x7fe30b58eec9 [ 144.747450][ T7579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.747464][ T7579] RSP: 002b:00007fe30c3a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 144.747483][ T7579] RAX: ffffffffffffffda RBX: 00007fe30b7e5fa0 RCX: 00007fe30b58eec9 [ 144.747497][ T7579] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000004 [ 144.747573][ T7579] RBP: 00007fe30c3a2090 R08: 0000000000000000 R09: 0000000000000000 [ 144.747584][ T7579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.747595][ T7579] R13: 00007fe30b7e6038 R14: 00007fe30b7e5fa0 R15: 00007ffc9f36aba8 [ 144.747629][ T7579] [ 144.762399][ T7579] ERROR: Out of memory at tomoyo_realpath_from_path. [ 145.201514][ T7595] fuse: Unknown parameter 'grou00000000000000000000' [ 145.253284][ T5951] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 145.406442][ T5951] usb 1-1: too many configurations: 29, using maximum allowed: 8 [ 145.417516][ T5951] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 145.436834][ T5951] usb 1-1: can't read configurations, error -61 [ 145.565060][ T5906] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 145.582486][ T5951] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 145.739711][ T5906] usb 2-1: Using ep0 maxpacket: 32 [ 145.745551][ T5951] usb 1-1: too many configurations: 29, using maximum allowed: 8 [ 145.764617][ T5951] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 145.772236][ T5951] usb 1-1: can't read configurations, error -61 [ 145.775019][ T5906] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 145.781377][ T5906] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 145.803897][ T5951] usb usb1-port1: attempt power cycle [ 145.886797][ T5906] usb 2-1: config 0 interface 0 has no altsetting 0 [ 145.903204][ T5906] usb 2-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 145.912761][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.933805][ T5906] usb 2-1: config 0 descriptor?? [ 146.162643][ T5951] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 146.194272][ T5951] usb 1-1: too many configurations: 29, using maximum allowed: 8 [ 146.209779][ T5951] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 146.221233][ T5951] usb 1-1: can't read configurations, error -61 [ 146.300860][ T7610] FAULT_INJECTION: forcing a failure. [ 146.300860][ T7610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.322024][ T7610] CPU: 0 UID: 0 PID: 7610 Comm: syz.3.686 Not tainted syzkaller #0 PREEMPT(full) [ 146.322053][ T7610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 146.322064][ T7610] Call Trace: [ 146.322071][ T7610] [ 146.322079][ T7610] dump_stack_lvl+0x189/0x250 [ 146.322103][ T7610] ? __pfx____ratelimit+0x10/0x10 [ 146.322121][ T7610] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.322136][ T7610] ? __pfx__printk+0x10/0x10 [ 146.322151][ T7610] ? __might_fault+0xb0/0x130 [ 146.322177][ T7610] should_fail_ex+0x414/0x560 [ 146.322205][ T7610] core_sys_select+0x729/0xa20 [ 146.322237][ T7610] ? __pfx_core_sys_select+0x10/0x10 [ 146.322278][ T7610] ? __pfx_set_user_sigmask+0x10/0x10 [ 146.322310][ T7610] __se_sys_pselect6+0x27a/0x300 [ 146.322333][ T7610] ? __pfx___se_sys_pselect6+0x10/0x10 [ 146.322353][ T7610] ? __pfx_ksys_write+0x10/0x10 [ 146.322373][ T7610] ? __x64_sys_pselect6+0x21/0xf0 [ 146.322392][ T7610] do_syscall_64+0xfa/0xfa0 [ 146.322409][ T7610] ? lockdep_hardirqs_on+0x9c/0x150 [ 146.322426][ T7610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.322442][ T7610] ? clear_bhb_loop+0x60/0xb0 [ 146.322461][ T7610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.322476][ T7610] RIP: 0033:0x7fc20f78eec9 [ 146.322492][ T7610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.322504][ T7610] RSP: 002b:00007fc2105ba038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 146.322522][ T7610] RAX: ffffffffffffffda RBX: 00007fc20f9e6090 RCX: 00007fc20f78eec9 [ 146.322554][ T7610] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 146.322565][ T7610] RBP: 00007fc2105ba090 R08: 0000000000000000 R09: 0000000000000000 [ 146.322577][ T7610] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 146.322588][ T7610] R13: 00007fc20f9e6128 R14: 00007fc20f9e6090 R15: 00007ffcfb008d78 [ 146.322618][ T7610] [ 146.514073][ T5951] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 146.546910][ T5951] usb 1-1: too many configurations: 29, using maximum allowed: 8 [ 146.556556][ T5951] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 146.564850][ T5951] usb 1-1: can't read configurations, error -61 [ 146.570542][ T5906] a4tech 0003:09DA:022B.0007: unknown main item tag 0x0 [ 146.583376][ T5906] a4tech 0003:09DA:022B.0007: unknown main item tag 0x0 [ 146.586382][ T5951] usb usb1-port1: unable to enumerate USB device [ 146.590371][ T5906] a4tech 0003:09DA:022B.0007: unknown main item tag 0x0 [ 146.598749][ T7637] mmap: syz.2.691 (7637) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 146.620613][ T5906] a4tech 0003:09DA:022B.0007: unknown main item tag 0x0 [ 146.627758][ T5906] a4tech 0003:09DA:022B.0007: unknown main item tag 0x0 [ 146.650666][ T5906] a4tech 0003:09DA:022B.0007: hidraw0: USB HID v0.05 Device [HID 09da:022b] on usb-dummy_hcd.1-1/input0 [ 146.754764][ T5951] usb 2-1: USB disconnect, device number 18 [ 147.212994][ T5951] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 147.371703][ T5951] usb 3-1: Using ep0 maxpacket: 8 [ 147.373501][ T7672] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 147.380763][ T5951] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 147.411448][ T5951] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 147.421910][ T5951] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 147.433681][ T5951] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 147.447120][ T5951] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 147.457460][ T5951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.601684][ T5971] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 147.675442][ T5951] usb 3-1: GET_CAPABILITIES returned 0 [ 147.681018][ T5951] usbtmc 3-1:16.0: can't read capabilities [ 147.742065][ T5971] usb 2-1: device descriptor read/64, error -71 [ 147.898336][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 147.908290][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 147.917413][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 147.926613][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 147.935841][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 147.986358][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 147.992743][ T5971] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 147.995504][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 148.017241][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 148.026384][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 148.035492][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 148.044675][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 148.079504][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 148.088652][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 148.097759][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 148.106856][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 148.129994][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 148.140416][ T1207] usb 3-1: USB disconnect, device number 26 [ 148.183871][ T5971] usb 2-1: device descriptor read/64, error -71 [ 148.291344][ T5907] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 148.303622][ T5971] usb usb2-port1: attempt power cycle [ 148.461197][ T5907] usb 4-1: Using ep0 maxpacket: 32 [ 148.468467][ T5907] usb 4-1: config 0 has an invalid interface number: 247 but max is 0 [ 148.476812][ T5907] usb 4-1: config 0 has no interface number 0 [ 148.484819][ T5907] usb 4-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 148.494150][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 148.502279][ T5907] usb 4-1: Product: syz [ 148.506456][ T5907] usb 4-1: Manufacturer: syz [ 148.513547][ T5907] usb 4-1: config 0 descriptor?? [ 148.641196][ T5971] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 148.661490][ T5971] usb 2-1: device descriptor read/8, error -71 [ 148.910953][ T5971] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 148.921028][ T1207] usb 3-1: new low-speed USB device number 27 using dummy_hcd [ 148.931346][ T5971] usb 2-1: device descriptor read/8, error -71 [ 149.041072][ T5971] usb usb2-port1: unable to enumerate USB device [ 149.074479][ T1207] usb 3-1: unable to get BOS descriptor or descriptor too short [ 149.088270][ T1207] usb 3-1: string descriptor 0 read error: -22 [ 149.096342][ T1207] usb 3-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 149.105461][ T1207] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.116809][ T1207] usb 3-1: config 0 descriptor?? [ 149.324700][ T1207] dvb-usb: found a 'Sony PlayTV' in warm state. [ 149.334946][ T1207] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 149.349667][ T1207] dvbdev: DVB: registering new adapter (Sony PlayTV) [ 149.360022][ T1207] usb 3-1: media controller created [ 149.382671][ T1207] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 149.437554][ T1207] DVB: Unable to find symbol dib7000p_attach() [ 149.443817][ T1207] dvb-usb: no frontend was attached by 'Sony PlayTV' [ 149.452698][ T1207] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 149.462683][ T1207] dvbdev: DVB: registering new adapter (Sony PlayTV) [ 149.469433][ T1207] usb 3-1: media controller created [ 149.494442][ T1207] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 149.555148][ T1207] DVB: Unable to find symbol dib7000p_attach() [ 149.561435][ T1207] dvb-usb: no frontend was attached by 'Sony PlayTV' [ 149.571571][ T5971] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 149.590154][ T7719] mkiss: ax0: crc mode is auto. [ 149.641411][ T1207] rc_core: IR keymap rc-dib0700-rc5 not found [ 149.647534][ T1207] Registered IR keymap rc-empty [ 149.655971][ T1207] dvb-usb: could not initialize remote control. [ 149.663045][ T1207] dvb-usb: Sony PlayTV successfully initialized and connected. [ 149.730608][ T5971] usb 1-1: Using ep0 maxpacket: 16 [ 149.738014][ T5971] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.748329][ T5971] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 149.764172][ T5971] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 149.773388][ T5971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.781468][ T5971] usb 1-1: Product: syz [ 149.785682][ T5971] usb 1-1: Manufacturer: syz [ 149.790333][ T5971] usb 1-1: SerialNumber: syz [ 149.827008][ T5906] usb 4-1: USB disconnect, device number 15 [ 150.003420][ T5971] usb 1-1: 0:2 : does not exist [ 150.008554][ T5971] usb 1-1: unit 9 not found! [ 150.016966][ T5971] usb 1-1: 4:0: cannot get min/max values for control 1 (id 4) [ 150.028554][ T5971] usb 1-1: 4:0: cannot get min/max values for control 3 (id 4) [ 150.040768][ T5971] usb 1-1: 4:0: cannot get min/max values for control 4 (id 4) [ 150.059771][ T5971] usb 1-1: USB disconnect, device number 23 [ 150.085353][ T5845] udevd[5845]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 150.434876][ T7723] netlink: 108 bytes leftover after parsing attributes in process `syz.3.713'. [ 150.499044][ T7727] fuse: Unknown parameter 'group_id00000000000000000000' [ 150.618054][ T7731] syzkaller1: entered promiscuous mode [ 150.628013][ T7731] syzkaller1: entered allmulticast mode [ 150.980029][ T5906] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 151.204561][ T7747] netlink: 184 bytes leftover after parsing attributes in process `syz.3.720'. [ 151.250051][ T5906] usb 2-1: Using ep0 maxpacket: 8 [ 151.277153][ T5906] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.339322][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 151.350528][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 151.365483][ T5906] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 151.382190][ T5906] usb 2-1: New USB device found, idVendor=15c2, idProduct=0043, bcdDevice= 2.c9 [ 151.393552][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.402532][ T5906] usb 2-1: Product: syz [ 151.406904][ T5906] usb 2-1: Manufacturer: syz [ 151.411850][ T5906] usb 2-1: SerialNumber: syz [ 151.430962][ T5906] usb 2-1: config 0 descriptor?? [ 151.449787][ T5906] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 151.468158][ T5906] imon 2-1:0.0: unable to initialize intf0, err -19 [ 151.469408][ T7753] netlink: 108 bytes leftover after parsing attributes in process `syz.3.722'. [ 151.488445][ T5906] imon:imon_probe: failed to initialize context! [ 151.496835][ T5906] imon 2-1:0.0: unable to register, err -19 [ 151.643059][ T7737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.651880][ T7737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.716182][ T1207] usb 3-1: USB disconnect, device number 27 [ 151.791092][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 151.797887][ T7759] fuse: Unknown parameter 'group_id00000000000000000000' [ 151.872265][ T1207] dvb-usb: Sony PlayTV successfully deinitialized and disconnected. [ 151.952043][ T7764] FAULT_INJECTION: forcing a failure. [ 151.952043][ T7764] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.965352][ T7764] CPU: 0 UID: 0 PID: 7764 Comm: syz.2.727 Not tainted syzkaller #0 PREEMPT(full) [ 151.965376][ T7764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 151.965386][ T7764] Call Trace: [ 151.965393][ T7764] [ 151.965400][ T7764] dump_stack_lvl+0x189/0x250 [ 151.965424][ T7764] ? __pfx____ratelimit+0x10/0x10 [ 151.965443][ T7764] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.965460][ T7764] ? __pfx__printk+0x10/0x10 [ 151.965476][ T7764] ? __might_fault+0xb0/0x130 [ 151.965503][ T7764] should_fail_ex+0x414/0x560 [ 151.965531][ T7764] _copy_from_user+0x2d/0xb0 [ 151.965553][ T7764] ___sys_sendmsg+0x158/0x2a0 [ 151.965576][ T7764] ? __pfx____sys_sendmsg+0x10/0x10 [ 151.965625][ T7764] ? __fget_files+0x2a/0x420 [ 151.965647][ T7764] ? __fget_files+0x3a0/0x420 [ 151.965675][ T7764] __x64_sys_sendmsg+0x19b/0x260 [ 151.965695][ T7764] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 151.965721][ T7764] ? __pfx_ksys_write+0x10/0x10 [ 151.965741][ T7764] ? do_syscall_64+0xbe/0xfa0 [ 151.965773][ T7764] do_syscall_64+0xfa/0xfa0 [ 151.965789][ T7764] ? lockdep_hardirqs_on+0x9c/0x150 [ 151.965809][ T7764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.965825][ T7764] ? clear_bhb_loop+0x60/0xb0 [ 151.965845][ T7764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.965861][ T7764] RIP: 0033:0x7fef4ed8eec9 [ 151.965878][ T7764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.965893][ T7764] RSP: 002b:00007fef4fbd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.965913][ T7764] RAX: ffffffffffffffda RBX: 00007fef4efe5fa0 RCX: 00007fef4ed8eec9 [ 151.965925][ T7764] RDX: 0000000004040810 RSI: 00002000000002c0 RDI: 0000000000000004 [ 151.965936][ T7764] RBP: 00007fef4fbd7090 R08: 0000000000000000 R09: 0000000000000000 [ 151.965946][ T7764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.965957][ T7764] R13: 00007fef4efe6038 R14: 00007fef4efe5fa0 R15: 00007ffd85005378 [ 151.965986][ T7764] [ 152.221965][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 152.228755][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 152.244841][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 152.254660][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.350528][ T10] usb 4-1: Product: syz [ 152.354749][ T10] usb 4-1: Manufacturer: syz [ 152.359453][ T10] usb 4-1: SerialNumber: syz [ 152.367694][ T10] usb 4-1: config 0 descriptor?? [ 152.382980][ T10] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 152.392360][ T10] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 152.402296][ T7777] netlink: 108 bytes leftover after parsing attributes in process `syz.0.731'. [ 153.008299][ T10] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 153.178110][ T7786] fuse: Bad value for 'user_id' [ 153.183593][ T7786] fuse: Bad value for 'user_id' [ 153.225692][ T7789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.237048][ T7789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.478656][ T1207] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 153.651778][ T1207] usb 3-1: unable to get BOS descriptor or descriptor too short [ 153.660491][ T1207] usb 3-1: not running at top speed; connect to a high speed hub [ 153.669993][ T1207] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 153.683769][ T1207] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 153.693239][ T1207] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.701562][ T1207] usb 3-1: Product: syz [ 153.704431][ T5971] usb 2-1: USB disconnect, device number 23 [ 153.705769][ T1207] usb 3-1: Manufacturer: syz [ 153.718767][ T1207] usb 3-1: SerialNumber: syz [ 153.779093][ T7794] netlink: 184 bytes leftover after parsing attributes in process `syz.1.738'. [ 153.831622][ T10] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 153.857749][ T10] em28xx 4-1:0.0: board has no eeprom [ 153.949950][ T10] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 153.960243][ T10] em28xx 4-1:0.0: dvb set to bulk mode. [ 153.970621][ T5925] em28xx 4-1:0.0: Binding DVB extension [ 153.981441][ T1207] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 154.004655][ T10] usb 4-1: USB disconnect, device number 16 [ 154.019665][ T10] em28xx 4-1:0.0: Disconnecting em28xx [ 154.068593][ T1207] usb 3-1: USB disconnect, device number 28 [ 154.084429][ T5925] em28xx 4-1:0.0: Registering input extension [ 154.115490][ T10] em28xx 4-1:0.0: Closing input extension [ 154.117775][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 154.189359][ T10] em28xx 4-1:0.0: Freeing device [ 154.458204][ T5925] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 154.590492][ T7809] fuse: Bad value for 'user_id' [ 154.595403][ T7809] fuse: Bad value for 'user_id' [ 154.632300][ T5925] usb 2-1: config 162 has an invalid interface number: 96 but max is 1 [ 154.640677][ T5925] usb 2-1: config 162 has an invalid interface number: 136 but max is 1 [ 154.649086][ T5925] usb 2-1: config 162 has no interface number 0 [ 154.655391][ T5925] usb 2-1: config 162 has no interface number 1 [ 154.662498][ T5925] usb 2-1: config 162 interface 96 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 154.677422][ T5925] usb 2-1: config 162 interface 136 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 154.688390][ T5925] usb 2-1: config 162 interface 136 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 154.699491][ T5925] usb 2-1: config 162 interface 136 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 154.710691][ T5925] usb 2-1: config 162 interface 136 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 154.730479][ T5925] usb 2-1: config 162 interface 136 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 64 [ 154.758065][ T5925] usb 2-1: config 162 interface 136 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 154.778305][ T5925] usb 2-1: config 162 interface 96 has no altsetting 0 [ 154.794773][ T5925] usb 2-1: config 162 interface 136 has no altsetting 0 [ 154.818573][ T5925] usb 2-1: New USB device found, idVendor=040d, idProduct=3801, bcdDevice=c1.63 [ 154.827940][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.836148][ T5925] usb 2-1: Product: syz [ 154.841816][ T5925] usb 2-1: Manufacturer: syz [ 154.846669][ T5925] usb 2-1: SerialNumber: syz [ 155.169271][ T7824] dvmrp0: entered allmulticast mode [ 155.205040][ T5925] usb 2-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 155.225401][ T5925] usb 2-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 155.249003][ T5925] usb 2-1: USB disconnect, device number 24 [ 155.332710][ T7831] netlink: 'syz.0.750': attribute type 8 has an invalid length. [ 155.629633][ T7847] fuse: Bad value for 'user_id' [ 155.634597][ T7847] fuse: Bad value for 'user_id' [ 155.667592][ T1207] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 155.671613][ T7849] IPv6: NLM_F_CREATE should be specified when creating new route [ 155.727614][ T5907] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 155.800302][ T1207] usb 4-1: device descriptor read/64, error -71 [ 155.900182][ T5907] usb 1-1: Using ep0 maxpacket: 32 [ 155.907653][ T5907] usb 1-1: config 0 has no interfaces? [ 155.916456][ T5907] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 155.926194][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.934476][ T5907] usb 1-1: Product: syz [ 155.940323][ T5907] usb 1-1: Manufacturer: syz [ 155.945099][ T5907] usb 1-1: SerialNumber: syz [ 155.961747][ T5907] usb 1-1: config 0 descriptor?? [ 155.998960][ T5925] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 156.037326][ T1207] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 156.157303][ T5925] usb 3-1: Using ep0 maxpacket: 32 [ 156.164192][ T5925] usb 3-1: config 6 has an invalid interface number: 97 but max is 0 [ 156.172446][ T1207] usb 4-1: device descriptor read/64, error -71 [ 156.178763][ T5925] usb 3-1: config 6 has no interface number 0 [ 156.184885][ T5925] usb 3-1: config 6 interface 97 altsetting 5 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 156.195876][ T5925] usb 3-1: config 6 interface 97 altsetting 5 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 156.209019][ T5925] usb 3-1: config 6 interface 97 has no altsetting 0 [ 156.229213][ T5925] usb 3-1: New USB device found, idVendor=0763, idProduct=1011, bcdDevice=d3.83 [ 156.238602][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.246787][ T5925] usb 3-1: Product: syz [ 156.251444][ T5925] usb 3-1: Manufacturer: syz [ 156.256767][ T5925] usb 3-1: SerialNumber: syz [ 156.298711][ T1207] usb usb4-port1: attempt power cycle [ 156.369923][ T5907] usb 1-1: USB disconnect, device number 24 [ 156.490047][ T7852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.756'. [ 156.614763][ T5925] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 156.657180][ T1207] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 156.700179][ T1207] usb 4-1: device descriptor read/8, error -71 [ 156.726683][ T5925] usb 3-1: USB disconnect, device number 29 [ 156.783502][ T6469] udevd[6469]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:6.97/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.936919][ T1207] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 156.957417][ T1207] usb 4-1: device descriptor read/8, error -71 [ 157.068112][ T1207] usb usb4-port1: unable to enumerate USB device [ 157.192209][ T7879] netlink: 'syz.2.764': attribute type 3 has an invalid length. [ 157.199948][ T7879] netlink: 'syz.2.764': attribute type 1 has an invalid length. [ 157.207670][ T7879] netlink: 220 bytes leftover after parsing attributes in process `syz.2.764'. [ 157.448610][ T7883] FAULT_INJECTION: forcing a failure. [ 157.448610][ T7883] name failslab, interval 1, probability 0, space 0, times 0 [ 157.461553][ T7883] CPU: 1 UID: 0 PID: 7883 Comm: syz.0.766 Not tainted syzkaller #0 PREEMPT(full) [ 157.461578][ T7883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 157.461589][ T7883] Call Trace: [ 157.461596][ T7883] [ 157.461603][ T7883] dump_stack_lvl+0x189/0x250 [ 157.461618][ T7883] ? __pfx____ratelimit+0x10/0x10 [ 157.461630][ T7883] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.461639][ T7883] ? __pfx__printk+0x10/0x10 [ 157.461651][ T7883] ? __pfx___might_resched+0x10/0x10 [ 157.461663][ T7883] ? fs_reclaim_acquire+0x7d/0x100 [ 157.461677][ T7883] should_fail_ex+0x414/0x560 [ 157.461694][ T7883] should_failslab+0xa8/0x100 [ 157.461706][ T7883] __kmalloc_noprof+0xcb/0x7f0 [ 157.461715][ T7883] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 157.461733][ T7883] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 157.461750][ T7883] genl_family_rcv_msg_doit+0xb8/0x300 [ 157.461767][ T7883] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 157.461784][ T7883] ? apparmor_capable+0x137/0x1b0 [ 157.461798][ T7883] ? bpf_lsm_capable+0x9/0x20 [ 157.461811][ T7883] ? security_capable+0x7e/0x2e0 [ 157.461825][ T7883] genl_rcv_msg+0x60e/0x790 [ 157.461840][ T7883] ? __pfx_genl_rcv_msg+0x10/0x10 [ 157.461852][ T7883] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 157.461861][ T7883] ? __pfx_nl80211_join_mesh+0x10/0x10 [ 157.461872][ T7883] ? __pfx_nl80211_post_doit+0x10/0x10 [ 157.461888][ T7883] netlink_rcv_skb+0x208/0x470 [ 157.461898][ T7883] ? __lock_acquire+0xab9/0xd20 [ 157.461909][ T7883] ? __pfx_genl_rcv_msg+0x10/0x10 [ 157.461923][ T7883] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 157.461943][ T7883] ? down_read+0x1ad/0x2e0 [ 157.461956][ T7883] genl_rcv+0x28/0x40 [ 157.461968][ T7883] netlink_unicast+0x82f/0x9e0 [ 157.461982][ T7883] ? __pfx_netlink_unicast+0x10/0x10 [ 157.461992][ T7883] ? netlink_sendmsg+0x642/0xb30 [ 157.462001][ T7883] ? skb_put+0x11b/0x210 [ 157.462014][ T7883] netlink_sendmsg+0x805/0xb30 [ 157.462029][ T7883] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.462042][ T7883] ? aa_sock_msg_perm+0xf1/0x1d0 [ 157.462055][ T7883] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 157.462065][ T7883] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.462076][ T7883] __sock_sendmsg+0x21c/0x270 [ 157.462092][ T7883] ____sys_sendmsg+0x505/0x830 [ 157.462115][ T7883] ? __pfx_____sys_sendmsg+0x10/0x10 [ 157.462131][ T7883] ? import_iovec+0x74/0xa0 [ 157.462145][ T7883] ___sys_sendmsg+0x21f/0x2a0 [ 157.462158][ T7883] ? __pfx____sys_sendmsg+0x10/0x10 [ 157.462189][ T7883] ? __fget_files+0x2a/0x420 [ 157.462201][ T7883] ? __fget_files+0x3a0/0x420 [ 157.462218][ T7883] __x64_sys_sendmsg+0x19b/0x260 [ 157.462231][ T7883] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 157.462248][ T7883] ? __pfx_ksys_write+0x10/0x10 [ 157.462261][ T7883] ? do_syscall_64+0xbe/0xfa0 [ 157.462274][ T7883] do_syscall_64+0xfa/0xfa0 [ 157.462283][ T7883] ? lockdep_hardirqs_on+0x9c/0x150 [ 157.462294][ T7883] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.462303][ T7883] ? clear_bhb_loop+0x60/0xb0 [ 157.462315][ T7883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.462324][ T7883] RIP: 0033:0x7f8d33d8eec9 [ 157.462335][ T7883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.462343][ T7883] RSP: 002b:00007f8d34bfb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.462357][ T7883] RAX: ffffffffffffffda RBX: 00007f8d33fe5fa0 RCX: 00007f8d33d8eec9 [ 157.462364][ T7883] RDX: 0000000004040810 RSI: 00002000000002c0 RDI: 0000000000000004 [ 157.462371][ T7883] RBP: 00007f8d34bfb090 R08: 0000000000000000 R09: 0000000000000000 [ 157.462377][ T7883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.462382][ T7883] R13: 00007f8d33fe6038 R14: 00007f8d33fe5fa0 R15: 00007fff376d2128 [ 157.462399][ T7883] [ 158.108782][ T7898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.772'. [ 158.137020][ T30] audit: type=1400 audit(1759527843.188:4): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=7897 comm="syz.1.774" [ 158.200993][ T7902] fuse: Bad value for 'fd' [ 158.308939][ T7904] FAULT_INJECTION: forcing a failure. [ 158.308939][ T7904] name failslab, interval 1, probability 0, space 0, times 0 [ 158.324043][ T7904] CPU: 0 UID: 0 PID: 7904 Comm: syz.2.776 Not tainted syzkaller #0 PREEMPT(full) [ 158.324077][ T7904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 158.324088][ T7904] Call Trace: [ 158.324095][ T7904] [ 158.324103][ T7904] dump_stack_lvl+0x189/0x250 [ 158.324126][ T7904] ? __pfx____ratelimit+0x10/0x10 [ 158.324146][ T7904] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.324164][ T7904] ? __pfx__printk+0x10/0x10 [ 158.324187][ T7904] ? __pfx___might_resched+0x10/0x10 [ 158.324213][ T7904] should_fail_ex+0x414/0x560 [ 158.324244][ T7904] should_failslab+0xa8/0x100 [ 158.324266][ T7904] kmem_cache_alloc_node_noprof+0x77/0x710 [ 158.324292][ T7904] ? __alloc_skb+0x112/0x2d0 [ 158.324317][ T7904] __alloc_skb+0x112/0x2d0 [ 158.324336][ T7904] netlink_ack+0x146/0xa50 [ 158.324354][ T7904] ? __pfx_genl_rcv_msg+0x10/0x10 [ 158.324375][ T7904] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 158.324392][ T7904] ? __pfx_nl80211_post_doit+0x10/0x10 [ 158.324423][ T7904] netlink_rcv_skb+0x28c/0x470 [ 158.324439][ T7904] ? __lock_acquire+0xab9/0xd20 [ 158.324461][ T7904] ? __pfx_genl_rcv_msg+0x10/0x10 [ 158.324485][ T7904] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 158.324522][ T7904] ? down_read+0x1ad/0x2e0 [ 158.324546][ T7904] genl_rcv+0x28/0x40 [ 158.324566][ T7904] netlink_unicast+0x82f/0x9e0 [ 158.324593][ T7904] ? __pfx_netlink_unicast+0x10/0x10 [ 158.324613][ T7904] ? netlink_sendmsg+0x642/0xb30 [ 158.324630][ T7904] ? skb_put+0x11b/0x210 [ 158.324654][ T7904] netlink_sendmsg+0x805/0xb30 [ 158.324682][ T7904] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.324706][ T7904] ? aa_sock_msg_perm+0xf1/0x1d0 [ 158.324729][ T7904] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 158.324749][ T7904] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.324769][ T7904] __sock_sendmsg+0x21c/0x270 [ 158.324797][ T7904] ____sys_sendmsg+0x505/0x830 [ 158.324824][ T7904] ? __pfx_____sys_sendmsg+0x10/0x10 [ 158.324855][ T7904] ? import_iovec+0x74/0xa0 [ 158.324880][ T7904] ___sys_sendmsg+0x21f/0x2a0 [ 158.324903][ T7904] ? __pfx____sys_sendmsg+0x10/0x10 [ 158.324960][ T7904] ? __fget_files+0x2a/0x420 [ 158.324982][ T7904] ? __fget_files+0x3a0/0x420 [ 158.325014][ T7904] __x64_sys_sendmsg+0x19b/0x260 [ 158.325038][ T7904] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 158.325075][ T7904] ? __pfx_ksys_write+0x10/0x10 [ 158.325100][ T7904] ? do_syscall_64+0xbe/0xfa0 [ 158.325123][ T7904] do_syscall_64+0xfa/0xfa0 [ 158.325141][ T7904] ? lockdep_hardirqs_on+0x9c/0x150 [ 158.325160][ T7904] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.325177][ T7904] ? clear_bhb_loop+0x60/0xb0 [ 158.325198][ T7904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.325215][ T7904] RIP: 0033:0x7fef4ed8eec9 [ 158.325231][ T7904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.325246][ T7904] RSP: 002b:00007fef4fbd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.325266][ T7904] RAX: ffffffffffffffda RBX: 00007fef4efe5fa0 RCX: 00007fef4ed8eec9 [ 158.325280][ T7904] RDX: 0000000004040810 RSI: 00002000000002c0 RDI: 0000000000000004 [ 158.325292][ T7904] RBP: 00007fef4fbd7090 R08: 0000000000000000 R09: 0000000000000000 [ 158.325302][ T7904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.325313][ T7904] R13: 00007fef4efe6038 R14: 00007fef4efe5fa0 R15: 00007ffd85005378 [ 158.325343][ T7904] [ 158.817231][ T7912] ieee802154 phy0 wpan0: encryption failed: -22 [ 158.840475][ T7912] netlink: 'syz.2.779': attribute type 2 has an invalid length. [ 158.877562][ T7912] netlink: 'syz.2.779': attribute type 7 has an invalid length. [ 158.889702][ T7914] binder: 7913:7914 ioctl 5406 200000000040 returned -22 [ 158.917753][ T7914] binder: 7913:7914 ioctl c0306201 200000000240 returned -14 [ 159.147001][ T7930] fuse: Bad value for 'fd' [ 159.319140][ T5925] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 159.354764][ T7937] netlink: 184 bytes leftover after parsing attributes in process `syz.3.787'. [ 159.475716][ T5925] usb 2-1: Using ep0 maxpacket: 32 [ 159.485434][ T5925] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 159.497133][ T5925] usb 2-1: config 0 has no interface number 0 [ 159.506942][ T5925] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 159.516571][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.524944][ T5925] usb 2-1: Product: syz [ 159.529216][ T5925] usb 2-1: Manufacturer: syz [ 159.533823][ T5925] usb 2-1: SerialNumber: syz [ 159.547831][ T5925] usb 2-1: config 0 descriptor?? [ 159.558928][ T5925] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 159.584286][ T7945] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 159.759201][ T5925] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 159.798399][ T5925] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 159.962238][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 6 [ 160.076870][ T7960] fuse: Bad value for 'fd' [ 160.129668][ T7963] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_0, syncid = 1, id = 0 [ 160.133512][ T7962] netlink: 'syz.3.795': attribute type 6 has an invalid length. [ 160.170323][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 160.170741][ T5951] usb 2-1: USB disconnect, device number 25 [ 160.199274][ T5951] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 160.233880][ T5951] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 160.242126][ T7966] raw_sendmsg: syz.3.796 forgot to set AF_INET. Fix it! [ 160.251606][ T5951] quatech2 2-1:0.51: device disconnected [ 160.366956][ T7972] netlink: 184 bytes leftover after parsing attributes in process `syz.2.797'. [ 160.406942][ T7974] FAULT_INJECTION: forcing a failure. [ 160.406942][ T7974] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.420134][ T7974] CPU: 1 UID: 0 PID: 7974 Comm: syz.2.798 Not tainted syzkaller #0 PREEMPT(full) [ 160.420158][ T7974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 160.420169][ T7974] Call Trace: [ 160.420179][ T7974] [ 160.420188][ T7974] dump_stack_lvl+0x189/0x250 [ 160.420212][ T7974] ? __pfx____ratelimit+0x10/0x10 [ 160.420226][ T7974] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.420235][ T7974] ? __pfx__printk+0x10/0x10 [ 160.420251][ T7974] should_fail_ex+0x414/0x560 [ 160.420269][ T7974] _copy_to_user+0x31/0xb0 [ 160.420283][ T7974] simple_read_from_buffer+0xe1/0x170 [ 160.420298][ T7974] proc_fail_nth_read+0x1b3/0x220 [ 160.420311][ T7974] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 160.420322][ T7974] ? rw_verify_area+0x2a6/0x4d0 [ 160.420332][ T7974] ? __lock_acquire+0xab9/0xd20 [ 160.420343][ T7974] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 160.420354][ T7974] vfs_read+0x200/0xa30 [ 160.420364][ T7974] ? fdget_pos+0x247/0x320 [ 160.420378][ T7974] ? __pfx___mutex_lock+0x10/0x10 [ 160.420390][ T7974] ? __pfx_vfs_read+0x10/0x10 [ 160.420402][ T7974] ? __fget_files+0x2a/0x420 [ 160.420416][ T7974] ? __fget_files+0x3a0/0x420 [ 160.420427][ T7974] ? __fget_files+0x2a/0x420 [ 160.420443][ T7974] ksys_read+0x145/0x250 [ 160.420455][ T7974] ? __pfx_ksys_read+0x10/0x10 [ 160.420467][ T7974] ? do_syscall_64+0xbe/0xfa0 [ 160.420480][ T7974] do_syscall_64+0xfa/0xfa0 [ 160.420491][ T7974] ? lockdep_hardirqs_on+0x9c/0x150 [ 160.420501][ T7974] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.420511][ T7974] ? clear_bhb_loop+0x60/0xb0 [ 160.420523][ T7974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.420532][ T7974] RIP: 0033:0x7fef4ed8d8dc [ 160.420543][ T7974] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 160.420551][ T7974] RSP: 002b:00007fef4fbd7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 160.420563][ T7974] RAX: ffffffffffffffda RBX: 00007fef4efe5fa0 RCX: 00007fef4ed8d8dc [ 160.420570][ T7974] RDX: 000000000000000f RSI: 00007fef4fbd70a0 RDI: 0000000000000003 [ 160.420577][ T7974] RBP: 00007fef4fbd7090 R08: 0000000000000000 R09: 0000000000000000 [ 160.420583][ T7974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.420588][ T7974] R13: 00007fef4efe6038 R14: 00007fef4efe5fa0 R15: 00007ffd85005378 [ 160.420617][ T7974] [ 160.777806][ T7981] binder: 7980:7981 ioctl c0306201 200000000100 returned -14 [ 160.800001][ T7983] fuse: Unknown parameter 'grou00000000000000000000' [ 160.877663][ T7988] fuse: Invalid rootmode [ 160.956790][ T7992] netlink: 184 bytes leftover after parsing attributes in process `syz.3.806'. [ 161.095003][ T5907] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 161.253250][ T8004] netlink: 4 bytes leftover after parsing attributes in process `syz.3.811'. [ 161.268634][ T5907] usb 1-1: Using ep0 maxpacket: 16 [ 161.273958][ T5971] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 161.284561][ T5907] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 161.295479][ T5907] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 161.305512][ T5907] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 161.315752][ T5907] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 161.331419][ T5907] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 161.341465][ T5907] usb 1-1: config 1 interface 0 has no altsetting 0 [ 161.348405][ T5907] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 161.357873][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.371698][ T5907] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 161.451036][ T5971] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 161.460467][ T5971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.468553][ T5971] usb 2-1: Product: syz [ 161.472776][ T5971] usb 2-1: Manufacturer: syz [ 161.477527][ T5971] usb 2-1: SerialNumber: syz [ 161.490011][ T5971] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 161.506597][ T24] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 161.573335][ T7985] loop3: detected capacity change from 0 to 7 [ 161.580391][ T5925] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 161.590669][ T7985] Dev loop3: unable to read RDB block 7 [ 161.596695][ T7985] loop3: unable to read partition table [ 161.602974][ T7985] loop3: partition table beyond EOD, truncated [ 161.609496][ T7985] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 161.622477][ T7985] f2fs: Unknown parameter 'norecovery' [ 161.634077][ T7985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.648119][ T7985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.757353][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.757371][ T8015] fuse: Invalid rootmode [ 161.759457][ T5907] ums-sddr09 1-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 161.790491][ T5925] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 161.804103][ T5925] usb 4-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 161.833159][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.841909][ T5907] usb 1-1: USB disconnect, device number 25 [ 161.876168][ T5925] usb 4-1: config 0 descriptor?? [ 161.944917][ T5971] usb 2-1: USB disconnect, device number 26 [ 162.096823][ T8029] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 162.112960][ T8029] kvm: pic: non byte read [ 162.119486][ T8029] kvm: pic: level sensitive irq not supported [ 162.119606][ T8029] kvm: pic: non byte read [ 162.131900][ T8029] kvm: pic: level sensitive irq not supported [ 162.132012][ T8029] kvm: pic: non byte read [ 162.144644][ T8029] kvm: pic: level sensitive irq not supported [ 162.144714][ T8029] kvm: pic: non byte read [ 162.155939][ T8029] kvm: pic: level sensitive irq not supported [ 162.156009][ T8029] kvm: pic: non byte read [ 162.168630][ T8029] kvm: pic: level sensitive irq not supported [ 162.168700][ T8029] kvm: pic: non byte read [ 162.300387][ T5907] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 162.310965][ T5925] usbhid 4-1:0.0: can't add hid device: -71 [ 162.322963][ T5925] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 162.338268][ T5925] usb 4-1: USB disconnect, device number 21 [ 162.472907][ T5907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.484392][ T5907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.494600][ T5907] usb 1-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 162.503733][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.523044][ T5907] usb 1-1: config 0 descriptor?? [ 162.534265][ T24] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 162.541585][ T24] ath9k_htc: Failed to initialize the device [ 162.554167][ T5971] usb 2-1: ath9k_htc: USB layer deinitialized [ 162.564424][ T43] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 162.716044][ T43] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 162.727966][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 162.738444][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 162.750865][ T43] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 162.760794][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.769874][ T43] usb 3-1: Product: syz [ 162.775038][ T43] usb 3-1: Manufacturer: syz [ 162.779701][ T43] usb 3-1: SerialNumber: syz [ 162.787162][ T43] usb 3-1: config 0 descriptor?? [ 162.797082][ T43] port100 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 162.862920][ T8040] netlink: 184 bytes leftover after parsing attributes in process `syz.3.822'. [ 162.960720][ T8031] netlink: 40 bytes leftover after parsing attributes in process `syz.0.819'. [ 162.975868][ T5907] usbhid 1-1:0.0: can't add hid device: -71 [ 162.982205][ T5907] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 162.993016][ T5907] usb 1-1: USB disconnect, device number 26 [ 163.009789][ T8035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.021498][ T8035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.031295][ T5925] usb 3-1: USB disconnect, device number 30 [ 163.442465][ T8045] fuse: Unknown parameter 'grou00000000000000000000' [ 163.639071][ T8055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.828'. [ 163.792744][ T8060] netlink: 'syz.0.829': attribute type 21 has an invalid length. [ 163.800785][ T8060] netlink: 'syz.0.829': attribute type 1 has an invalid length. [ 163.809069][ T8060] netlink: 100 bytes leftover after parsing attributes in process `syz.0.829'. [ 163.887468][ T8064] netlink: 184 bytes leftover after parsing attributes in process `syz.0.831'. [ 163.900670][ T8062] nfs: Unknown parameter 'defcontext' [ 163.987905][ T8062] loop6: detected capacity change from 0 to 7 [ 163.995737][ T8062] Dev loop6: unable to read RDB block 7 [ 164.001352][ T8062] loop6: unable to read partition table [ 164.014823][ T8062] loop6: partition table beyond EOD, truncated [ 164.033687][ T8062] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 164.055209][ T8067] fuse: Unknown parameter 'group_i00000000000000000000' [ 164.177164][ T30] audit: type=1326 audit(1759527849.251:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8050 comm="syz.1.827" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe30b58eec9 code=0x0 [ 164.569672][ T8078] tipc: Started in network mode [ 164.587888][ T8078] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 164.607809][ T8078] tipc: Enabled bearer , priority 10 [ 164.839341][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.840'. [ 164.929423][ T8094] fuse: Unknown parameter 'group_i00000000000000000000' [ 164.998399][ T8096] netlink: 'syz.3.843': attribute type 16 has an invalid length. [ 165.142825][ T5971] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 165.219856][ T8108] netlink: 64 bytes leftover after parsing attributes in process `syz.0.847'. [ 165.306421][ T5971] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 165.319479][ T5971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.340740][ T5971] usb 2-1: config 0 descriptor?? [ 165.408562][ T8119] fuse: Unknown parameter 'group_i00000000000000000000' [ 165.423058][ T5925] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 165.594601][ T5925] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.605826][ T5925] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 165.617526][ T1207] tipc: Node number set to 10136234 [ 165.631764][ T5925] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 165.640154][ T8125] capability: warning: `syz.0.853' uses 32-bit capabilities (legacy support in use) [ 165.641074][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.658543][ T5925] usb 4-1: Product: syz [ 165.663276][ T5925] usb 4-1: Manufacturer: syz [ 165.667980][ T5925] usb 4-1: SerialNumber: syz [ 165.687239][ T5925] cdc_mbim 4-1:1.0: skipping garbage [ 165.697690][ T8125] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 165.712633][ T8125] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 165.756566][ T8092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.786193][ T8092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.814309][ T5971] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 165.824763][ T5971] [drm:udl_init] *ERROR* Selecting channel failed [ 165.846236][ T5971] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 165.876067][ T5971] [drm] Initialized udl on minor 2 [ 165.896945][ T8106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.909058][ T5971] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 165.922168][ T8106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.937107][ T8106] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 165.963840][ T5971] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 165.998409][ T43] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 166.007867][ T5971] usb 2-1: USB disconnect, device number 27 [ 166.038017][ T43] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 166.442325][ T5839] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 166.550202][ T8106] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 166.558684][ T5925] cdc_mbim 4-1:1.0: setting tx_max = 16384 [ 166.569712][ T5925] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 166.588008][ T5925] wwan wwan0: port wwan0mbim0 attached [ 166.614735][ T5839] usb 1-1: config 0 has an invalid interface number: 24 but max is 0 [ 166.638571][ T5839] usb 1-1: config 0 has no interface number 0 [ 166.646667][ T1207] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 166.655721][ T5925] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 1a:4a:5c:fb:f5:58 [ 166.667146][ T5839] usb 1-1: config 0 interface 24 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 166.700807][ T5839] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 166.720951][ T5839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.743519][ T5839] usb 1-1: config 0 descriptor?? [ 166.754844][ T5839] cp210x 1-1:0.24: cp210x converter detected [ 166.805399][ C1] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 166.812371][ C1] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 166.820177][ C1] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 166.826899][ C1] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 166.833883][ C1] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 166.840601][ C1] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 166.842071][ T1207] usb 2-1: Using ep0 maxpacket: 8 [ 166.847344][ C1] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 166.847370][ C1] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 166.847739][ C1] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 166.866060][ T1207] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 166.872594][ C1] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 166.873229][ C1] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 166.894652][ C1] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 166.901768][ C1] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 166.904932][ T1207] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 166.908575][ C1] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 166.909083][ C1] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 166.930449][ C1] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 166.937635][ C1] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 166.944439][ C1] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 166.947456][ T1207] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 166.951667][ C1] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 166.966462][ C1] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 166.988975][ T8152] overlayfs: failed to resolve './file0': -2 [ 167.007933][ T1207] usb 2-1: Product: syz [ 167.021900][ T1207] usb 2-1: Manufacturer: syz [ 167.031963][ T1207] usb 2-1: SerialNumber: syz [ 167.096275][ T8106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.112965][ T8106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.163012][ T5925] usb 4-1: USB disconnect, device number 22 [ 167.170920][ T5925] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 167.190980][ T5839] cp210x 1-1:0.24: failed to get vendor val 0x000e size 3: -71 [ 167.223695][ T5839] usb 1-1: cp210x converter now attached to ttyUSB0 [ 167.261399][ T5839] usb 1-1: USB disconnect, device number 27 [ 167.271770][ T1207] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 167.280170][ T1207] usb 2-1: Handspring Visor / Palm OS: port 0, is for Console use [ 167.293325][ T1207] usb 2-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 167.306059][ T1207] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 167.314724][ T5925] wwan wwan0: port wwan0mbim0 disconnected [ 167.327364][ T5839] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 167.372687][ T5839] cp210x 1-1:0.24: device disconnected [ 167.469618][ T1207] usb 2-1: palm_os_3_probe - error -71 getting bytes available request [ 167.483635][ T1207] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 167.496073][ T1207] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 167.516985][ T1207] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 167.534631][ T1207] usb 2-1: USB disconnect, device number 28 [ 167.551192][ T1207] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 167.567565][ T1207] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 167.579895][ T1207] visor 2-1:1.0: device disconnected [ 168.071694][ T5971] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 168.261345][ T5971] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 168.274647][ T5971] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 212, changing to 7 [ 168.308963][ T5971] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 168.321739][ T5971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.339155][ T5971] usb 1-1: Product: 돤ꁒ㧏돈권ꀲ离錏̯㎏玢퓧섎㏌Ἣ㏜蝉렆Ↄ᛽渔濙慫픻똤葈埣폟輜㋘ꉦꑂ䲹銒塗᧓䥪⭹䱒䚂阄腇ퟜ腙끮裀ꬩ膴䭾ꇛ掅猸㥠禜疜죥뺧哬ᕊẾ붮䦾蒒 [ 168.375608][ T5907] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 168.402709][ T5971] usb 1-1: Manufacturer: ӿ [ 168.407262][ T5971] usb 1-1: SerialNumber: syz [ 168.433037][ T8179] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 168.470882][ T8207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.489796][ T8207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.543685][ T5907] usb 2-1: Using ep0 maxpacket: 16 [ 168.562323][ T5907] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 168.575416][ T5907] usb 2-1: config 1 has an invalid descriptor of length 191, skipping remainder of the config [ 168.589852][ T5907] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 168.598880][ T8210] netlink: 'syz.3.876': attribute type 1 has an invalid length. [ 168.608488][ T8210] netlink: 'syz.3.876': attribute type 4 has an invalid length. [ 168.616644][ T8210] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.876'. [ 168.618018][ T5907] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 168.647613][ T5907] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 168.679213][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.691716][ T5971] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 168.730716][ T5907] usb 2-1: Product: syz [ 168.736812][ T5907] usb 2-1: Manufacturer: syz [ 168.754155][ T5907] usb 2-1: SerialNumber: syz [ 168.780055][ T5971] usb 1-1: USB disconnect, device number 28 [ 168.840463][ T5845] udevd[5845]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 169.044924][ T5907] usb 2-1: 0:2 : does not exist [ 169.095741][ T5907] usb 2-1: USB disconnect, device number 29 [ 169.148608][ T5845] udevd[5845]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 169.290765][ T5971] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 169.450478][ T8229] netlink: 184 bytes leftover after parsing attributes in process `syz.3.881'. [ 169.452454][ T5971] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.476965][ T5971] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 169.489916][ T5971] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 169.499905][ T5971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.508832][ T5971] usb 3-1: Product: syz [ 169.529826][ T5971] usb 3-1: Manufacturer: syz [ 169.540953][ T5971] usb 3-1: SerialNumber: syz [ 169.559377][ T5971] cdc_mbim 3-1:1.0: skipping garbage [ 169.579785][ T8230] binder: 8224:8230 unknown command 0 [ 169.585796][ T8230] binder: 8224:8230 ioctl c0306201 200000000080 returned -22 [ 169.596561][ T8230] binder: BINDER_SET_CONTEXT_MGR already set [ 169.602947][ T8230] binder: 8224:8230 ioctl 4018620d 200000000040 returned -16 [ 169.613666][ T8230] binder: 8224:8230 ioctl 40806685 200000000280 returned -22 [ 169.685998][ T8234] fuse: Unknown parameter '' [ 169.762661][ T8221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.772639][ T8221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.785821][ T8221] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 170.386499][ T8257] fuse: Bad value for 'user_id' [ 170.387869][ T8258] overlayfs: failed to resolve './file1': -2 [ 170.397167][ T8221] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 170.398728][ T8257] fuse: Bad value for 'user_id' [ 170.426948][ T5971] cdc_mbim 3-1:1.0: setting tx_max = 16384 [ 170.440436][ T5971] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 170.465716][ T5971] wwan wwan0: port wwan0mbim0 attached [ 170.502824][ T5971] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, be:d9:92:27:60:4c [ 170.526706][ T8260] netlink: 324 bytes leftover after parsing attributes in process `syz.3.892'. [ 170.670947][ T5951] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 170.692498][ T8221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.708996][ T8221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.712068][ T8265] binder: 8264:8265 ioctl c0306201 0 returned -14 [ 170.743348][ T5907] usb 3-1: USB disconnect, device number 31 [ 170.755878][ T5907] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 170.824162][ T5907] wwan wwan0: port wwan0mbim0 disconnected [ 170.852375][ T5951] usb 1-1: Using ep0 maxpacket: 8 [ 170.867005][ T5951] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 170.909896][ T5951] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 170.918032][ T5951] usb 1-1: config 0 has no interface number 0 [ 170.949974][ T5951] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 170.970888][ T5951] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 170.982676][ T5951] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 170.997188][ T5951] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 171.009875][ T5951] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 171.018963][ T5951] usb 1-1: Product: syz [ 171.033036][ T5951] usb 1-1: config 0 descriptor?? [ 171.040980][ T8258] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 171.220420][ T5839] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 171.232231][ T8274] C: renamed from team_slave_0 (while UP) [ 171.277712][ T5951] usb 1-1: USB disconnect, device number 29 [ 171.290966][ T8274] netlink: 'syz.3.895': attribute type 2 has an invalid length. [ 171.298814][ T8274] netlink: 128 bytes leftover after parsing attributes in process `syz.3.895'. [ 171.343443][ T8274] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 171.371723][ T5839] usb 2-1: Using ep0 maxpacket: 8 [ 171.380263][ T5839] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 171.398571][ T5839] usb 2-1: config 0 has no interface number 0 [ 171.420103][ T5839] usb 2-1: config 0 interface 1 has no altsetting 0 [ 171.439176][ T5839] usb 2-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 171.459264][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.479626][ T5839] usb 2-1: Product: syz [ 171.483855][ T5839] usb 2-1: Manufacturer: syz [ 171.488563][ T5839] usb 2-1: SerialNumber: syz [ 171.595751][ T5839] usb 2-1: config 0 descriptor?? [ 171.629560][ T5971] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 171.782455][ T5971] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.792790][ T5971] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=c0.c5 [ 171.802435][ T5971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.812276][ T5839] i2c-cp2615 2-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 171.834340][ T5971] usb 3-1: config 0 descriptor?? [ 172.075705][ T5971] usb 3-1: string descriptor 0 read error: -71 [ 172.095891][ T5971] hub 3-1:0.0: bad descriptor, ignoring hub [ 172.104075][ T5971] hub 3-1:0.0: probe with driver hub failed with error -5 [ 172.128843][ T5971] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 172.130450][ T3580] usb 3-1: Failed to submit usb control message: -71 [ 172.151206][ T3580] usb 3-1: unable to send the bmi data to the device: -71 [ 172.158474][ T3580] usb 3-1: unable to get target info from device [ 172.164919][ T3580] usb 3-1: could not get target info (-71) [ 172.172382][ T3580] usb 3-1: could not probe fw (-71) [ 172.180476][ T5971] usb 3-1: USB disconnect, device number 32 [ 172.195184][ T5907] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 172.359192][ T5907] usb 1-1: Using ep0 maxpacket: 32 [ 172.366345][ T5907] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.378420][ T5907] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.390013][ T5907] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 172.403194][ T5907] usb 1-1: config 0 interface 0 has no altsetting 0 [ 172.409895][ T5907] usb 1-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 172.419029][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.429242][ T5907] usb 1-1: config 0 descriptor?? [ 172.654612][ T8317] netlink: 'syz.2.901': attribute type 29 has an invalid length. [ 172.803258][ T8325] binder: 8323:8325 ioctl c0306201 0 returned -14 [ 172.844994][ T5907] saitek 0003:06A3:0621.0008: unknown main item tag 0x0 [ 172.855935][ T5907] saitek 0003:06A3:0621.0008: unknown main item tag 0x0 [ 172.864262][ T5907] saitek 0003:06A3:0621.0008: unknown main item tag 0x0 [ 172.873338][ T5907] saitek 0003:06A3:0621.0008: unknown main item tag 0x0 [ 172.885880][ T5907] saitek 0003:06A3:0621.0008: unknown main item tag 0x0 [ 172.903028][ T5907] saitek 0003:06A3:0621.0008: hidraw0: USB HID v4.06 Device [HID 06a3:0621] on usb-dummy_hcd.0-1/input0 [ 173.044060][ T1207] usb 1-1: USB disconnect, device number 30 [ 173.158860][ T5951] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 173.169256][ T5971] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 173.310853][ T5951] usb 4-1: config 0 has an invalid interface number: 10 but max is 0 [ 173.319426][ T5951] usb 4-1: config 0 has no interface number 0 [ 173.325655][ T5951] usb 4-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=69.f6 [ 173.334958][ T5951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.343732][ T5971] usb 3-1: too many configurations: 118, using maximum allowed: 8 [ 173.357852][ T5951] usb 4-1: config 0 descriptor?? [ 173.363863][ T5971] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 173.371884][ T5971] usb 3-1: can't read configurations, error -61 [ 173.508686][ T5971] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 173.608859][ T30] audit: type=1326 audit(1759527858.675:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8332 comm="syz.0.906" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d33d8eec9 code=0x0 [ 173.659949][ T5971] usb 3-1: too many configurations: 118, using maximum allowed: 8 [ 173.671053][ T5971] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 173.680915][ T5971] usb 3-1: can't read configurations, error -61 [ 173.687483][ T5971] usb usb3-port1: attempt power cycle [ 173.980657][ T5907] usb 2-1: USB disconnect, device number 30 [ 174.038630][ T5971] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 174.060546][ T5971] usb 3-1: too many configurations: 118, using maximum allowed: 8 [ 174.071069][ T5971] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 174.079964][ T5971] usb 3-1: can't read configurations, error -61 [ 174.208533][ T5971] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 174.242951][ T5971] usb 3-1: too many configurations: 118, using maximum allowed: 8 [ 174.253748][ T5971] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 174.262280][ T5971] usb 3-1: can't read configurations, error -61 [ 174.270398][ T5971] usb usb3-port1: unable to enumerate USB device [ 175.697634][ T1207] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 175.847519][ T1207] usb 2-1: Using ep0 maxpacket: 32 [ 175.864952][ T1207] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 175.884350][ T1207] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 175.918866][ T1207] usb 2-1: New USB device found, idVendor=ae6f, idProduct=79f4, bcdDevice=8f.99 [ 175.937214][ T1207] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.942219][ T5951] pegasus 4-1:0.10: setup Pegasus II specific registers [ 175.949692][ T1207] usb 2-1: Product: syz [ 175.961828][ T1207] usb 2-1: Manufacturer: syz [ 175.966474][ T1207] usb 2-1: SerialNumber: syz [ 175.992480][ T1207] usb 2-1: config 0 descriptor?? [ 176.084830][ T5951] pegasus 4-1:0.10: can't locate MII phy, using default [ 176.114631][ T5951] pegasus 4-1:0.10: eth1, Belkin F5U122 10/100 USB Ethernet, 2e:e8:18:39:f2:ff [ 176.134368][ T8381] overlayfs: missing 'lowerdir' [ 176.149529][ T5951] usb 4-1: USB disconnect, device number 23 [ 176.196599][ T8381] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 176.231249][ T1207] usb 2-1: USB disconnect, device number 31 [ 176.401863][ T8388] fuse: Unknown parameter 'user_id00000000000000000000' [ 176.447512][ T5839] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 176.577156][ T5839] usb 1-1: device descriptor read/64, error -71 [ 176.617113][ T1207] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 176.767324][ T1207] usb 2-1: device descriptor read/64, error -71 [ 176.781122][ T8403] netlink: 248 bytes leftover after parsing attributes in process `syz.3.927'. [ 176.836954][ T5839] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 176.991328][ T5839] usb 1-1: device descriptor read/64, error -71 [ 176.998153][ T5925] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 177.083627][ T1207] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 177.108634][ T8409] ucma_write: process 584 (syz.3.927) changed security contexts after opening file descriptor, this is not allowed. [ 177.127239][ T5839] usb usb1-port1: attempt power cycle [ 177.170246][ T5925] usb 3-1: unable to get BOS descriptor or descriptor too short [ 177.180378][ T5925] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 177.201849][ T5925] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 177.223377][ T5925] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 177.232554][ T1207] usb 2-1: device descriptor read/64, error -71 [ 177.246756][ T5925] usb 3-1: config 1 has no interface number 1 [ 177.256901][ T5925] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 177.294464][ T5925] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 177.324066][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.342649][ T5925] usb 3-1: Product: syz [ 177.352870][ T5925] usb 3-1: Manufacturer: syz [ 177.360911][ T1207] usb usb2-port1: attempt power cycle [ 177.386661][ T5925] usb 3-1: SerialNumber: syz [ 177.506607][ T5839] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 177.575724][ T5839] usb 1-1: device descriptor read/8, error -71 [ 177.581054][ T8421] FAULT_INJECTION: forcing a failure. [ 177.581054][ T8421] name failslab, interval 1, probability 0, space 0, times 0 [ 177.603442][ T5162] Bluetooth: hci0: Malformed LE Event: 0x0b [ 177.652173][ T8421] CPU: 0 UID: 0 PID: 8421 Comm: syz.3.928 Not tainted syzkaller #0 PREEMPT(full) [ 177.652200][ T8421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 177.652211][ T8421] Call Trace: [ 177.652218][ T8421] [ 177.652225][ T8421] dump_stack_lvl+0x189/0x250 [ 177.652248][ T8421] ? __pfx____ratelimit+0x10/0x10 [ 177.652266][ T8421] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.652287][ T8421] ? __pfx__printk+0x10/0x10 [ 177.652309][ T8421] ? __pfx___might_resched+0x10/0x10 [ 177.652336][ T8421] should_fail_ex+0x414/0x560 [ 177.652367][ T8421] should_failslab+0xa8/0x100 [ 177.652388][ T8421] __kmalloc_noprof+0xcb/0x7f0 [ 177.652404][ T8421] ? kfree+0x4d/0x6d0 [ 177.652423][ T8421] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 177.652451][ T8421] tomoyo_realpath_from_path+0xe3/0x5d0 [ 177.652473][ T8421] ? tomoyo_domain+0xd9/0x130 [ 177.652499][ T8421] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 177.652524][ T8421] tomoyo_path_number_perm+0x1e8/0x5a0 [ 177.652551][ T8421] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 177.652614][ T8421] ? __fget_files+0x2a/0x420 [ 177.652639][ T8421] ? __fget_files+0x3a0/0x420 [ 177.652658][ T8421] ? __fget_files+0x2a/0x420 [ 177.652682][ T8421] security_file_ioctl+0xcb/0x2d0 [ 177.652709][ T8421] __se_sys_ioctl+0x47/0x170 [ 177.652730][ T8421] do_syscall_64+0xfa/0xfa0 [ 177.652748][ T8421] ? lockdep_hardirqs_on+0x9c/0x150 [ 177.652767][ T8421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.652783][ T8421] ? clear_bhb_loop+0x60/0xb0 [ 177.652805][ T8421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.652821][ T8421] RIP: 0033:0x7fc20f78eec9 [ 177.652837][ T8421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.652852][ T8421] RSP: 002b:00007fc2105db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 177.652871][ T8421] RAX: ffffffffffffffda RBX: 00007fc20f9e5fa0 RCX: 00007fc20f78eec9 [ 177.652884][ T8421] RDX: 0000200000000080 RSI: 000000000000890c RDI: 0000000000000004 [ 177.652895][ T8421] RBP: 00007fc2105db090 R08: 0000000000000000 R09: 0000000000000000 [ 177.652906][ T8421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.652916][ T8421] R13: 00007fc20f9e6038 R14: 00007fc20f9e5fa0 R15: 00007ffcfb008d78 [ 177.652947][ T8421] [ 177.653816][ T8421] ERROR: Out of memory at tomoyo_realpath_from_path. [ 177.904241][ T5925] usb 3-1: found format II with max.bitrate = 8, frame size=9 [ 177.911839][ T5925] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 177.939399][ T5925] usb 3-1: USB disconnect, device number 37 [ 177.947190][ T1207] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 177.979357][ T1207] usb 2-1: device descriptor read/8, error -71 [ 178.027769][ T5839] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 178.044271][ T5845] udevd[5845]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 178.083468][ T5839] usb 1-1: device descriptor read/8, error -71 [ 178.197196][ T5839] usb usb1-port1: unable to enumerate USB device [ 178.216727][ T1207] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 178.256764][ T1207] usb 2-1: device descriptor read/8, error -71 [ 178.376621][ T1207] usb usb2-port1: unable to enumerate USB device [ 178.546197][ T5925] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 178.707947][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.721429][ T5925] usb 3-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 178.730850][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.743401][ T5925] usb 3-1: config 0 descriptor?? [ 179.161138][ T8445] netlink: 248 bytes leftover after parsing attributes in process `syz.3.937'. [ 179.225221][ T5925] usbhid 3-1:0.0: can't add hid device: -71 [ 179.251708][ T5925] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 179.276251][ T8445] netlink: 16 bytes leftover after parsing attributes in process `syz.3.937'. [ 179.280575][ T5925] usb 3-1: USB disconnect, device number 38 [ 179.487220][ T5162] Bluetooth: hci1: unexpected event for opcode 0x1804 [ 179.996344][ T8474] netlink: 108 bytes leftover after parsing attributes in process `syz.2.941'. [ 180.368335][ T8496] openvswitch: netlink: Port -65536 exceeds max allowable 65535 [ 180.444384][ T8498] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 180.565119][ T5951] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 180.738805][ T5951] usb 3-1: Using ep0 maxpacket: 16 [ 180.752410][ T5951] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.766593][ T5951] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 180.788117][ T5951] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 180.797817][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.806037][ T5951] usb 3-1: Product: syz [ 180.810290][ T5951] usb 3-1: Manufacturer: syz [ 180.817639][ T5951] usb 3-1: SerialNumber: syz [ 180.874974][ T5971] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 180.964863][ T5907] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 181.029631][ T5971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.032401][ T8492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.043643][ T5971] usb 4-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 181.052582][ T8492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.059966][ T5971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.077575][ T8492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.088056][ T8492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.097808][ T5971] usb 4-1: config 0 descriptor?? [ 181.107645][ T8492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.118950][ T8492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.119893][ T5907] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 181.131156][ T8492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.141631][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.149950][ T8492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.155823][ T5907] usb 1-1: Product: syz [ 181.165659][ T5907] usb 1-1: Manufacturer: syz [ 181.170422][ T5907] usb 1-1: SerialNumber: syz [ 181.174045][ T5907] usb 1-1: config 0 descriptor?? [ 181.193193][ T5951] usb 3-1: 0:2 : does not exist [ 181.224579][ T5951] usb 3-1: USB disconnect, device number 39 [ 181.242846][ T5845] udevd[5845]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 181.390717][ T5907] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 181.526609][ T5971] usbhid 4-1:0.0: can't add hid device: -71 [ 181.532745][ T5971] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 181.569713][ T5971] usb 4-1: USB disconnect, device number 24 [ 182.247369][ T5971] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 182.406856][ T5971] usb 2-1: config 0 has an invalid interface number: 10 but max is 0 [ 182.415424][ T5971] usb 2-1: config 0 has no interface number 0 [ 182.421689][ T5971] usb 2-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=69.f6 [ 182.430924][ T5971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.443085][ T5971] usb 2-1: config 0 descriptor?? [ 182.851596][ T8548] netlink: 32 bytes leftover after parsing attributes in process `syz.2.961'. [ 183.487767][ T5162] Bluetooth: hci1: unexpected event for opcode 0x1804 [ 183.566678][ T5162] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 183.567853][ T5907] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 183.576681][ T5162] Bluetooth: hci1: Injecting HCI hardware error event [ 183.595774][ T5907] usb 1-1: USB disconnect, device number 35 [ 183.596012][ T5856] Bluetooth: hci1: hardware error 0x00 [ 183.743557][ T1207] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 183.905926][ T1207] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.916959][ T1207] usb 3-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 183.926451][ T1207] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.937420][ T1207] usb 3-1: config 0 descriptor?? [ 184.370353][ T1207] usbhid 3-1:0.0: can't add hid device: -71 [ 184.388136][ T1207] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 184.399036][ T1207] usb 3-1: USB disconnect, device number 40 [ 184.727350][ T5971] pegasus 2-1:0.10: setup Pegasus II specific registers [ 184.846097][ T5971] pegasus 2-1:0.10: can't locate MII phy, using default [ 184.862454][ T5971] pegasus 2-1:0.10: eth1, Belkin F5U122 10/100 USB Ethernet, 42:e1:ef:77:f7:76 [ 184.885443][ T5971] usb 2-1: USB disconnect, device number 36 [ 185.054715][ T30] audit: type=1326 audit(1759527870.141:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8584 comm="syz.2.972" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fef4ed8eec9 code=0x0 [ 185.481230][ T5162] Bluetooth: hci3: unexpected event for opcode 0x1804 [ 185.643001][ T5856] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 185.822497][ T5971] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 185.974429][ T5971] usb 1-1: config 0 has an invalid interface number: 252 but max is 0 [ 185.983315][ T5971] usb 1-1: config 0 has no interface number 0 [ 185.992210][ T5971] usb 1-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 186.002032][ T5971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.010512][ T5971] usb 1-1: Product: syz [ 186.036878][ T5971] usb 1-1: Manufacturer: syz [ 186.050655][ T5971] usb 1-1: SerialNumber: syz [ 186.058690][ T5971] usb 1-1: config 0 descriptor?? [ 186.065829][ T5971] usb-storage 1-1:0.252: USB Mass Storage device detected [ 186.080992][ T5971] usb-storage 1-1:0.252: device ignored [ 186.100134][ T8616] kvm: pic: non byte write [ 186.153004][ T5907] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 186.267260][ T24] usb 1-1: USB disconnect, device number 36 [ 186.305786][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.317044][ T5907] usb 4-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 186.326332][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.337167][ T5907] usb 4-1: config 0 descriptor?? [ 186.493641][ T5971] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 186.652131][ T5971] usb 2-1: Using ep0 maxpacket: 8 [ 186.658688][ T5971] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 186.666968][ T5971] usb 2-1: config 0 has no interface number 0 [ 186.675949][ T5971] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 186.685474][ T5971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.694192][ T5971] usb 2-1: Product: syz [ 186.698394][ T5971] usb 2-1: Manufacturer: syz [ 186.704446][ T5971] usb 2-1: SerialNumber: syz [ 186.711266][ T5971] usb 2-1: config 0 descriptor?? [ 186.761157][ T5907] usbhid 4-1:0.0: can't add hid device: -71 [ 186.768255][ T5907] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 186.786617][ T5907] usb 4-1: USB disconnect, device number 25 [ 186.824696][ T24] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 186.934716][ T8624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.946933][ T8624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.960181][ T5971] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 186.979460][ T5971] uvcvideo 2-1:0.31: Entity type for entity Output 6 was not initialized! [ 186.990093][ T5971] uvcvideo 2-1:0.31: Failed to create links for entity 5 [ 186.997793][ T5971] uvcvideo 2-1:0.31: Failed to register entities (-22). [ 187.013926][ T24] usb 3-1: config 0 has an invalid interface number: 10 but max is 0 [ 187.023107][ T24] usb 3-1: config 0 has no interface number 0 [ 187.033387][ T24] usb 3-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=69.f6 [ 187.043783][ T5971] usb 2-1: USB disconnect, device number 37 [ 187.057789][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.077427][ T24] usb 3-1: config 0 descriptor?? [ 187.457720][ T8648] netlink: 184 bytes leftover after parsing attributes in process `syz.0.991'. [ 187.459638][ T8649] sctp: [Deprecated]: syz.3.990 (pid 8649) Use of int in max_burst socket option deprecated. [ 187.459638][ T8649] Use struct sctp_assoc_value instead [ 187.639235][ T8656] Invalid source name [ 187.647525][ T8656] Invalid source name [ 187.653813][ T8656] Invalid source name [ 187.659629][ T8656] Invalid source name [ 187.665241][ T8656] Invalid source name [ 187.670615][ T8656] Invalid source name [ 187.678247][ T8656] Invalid source name [ 187.684085][ T8656] Invalid source name [ 187.688836][ T8656] Invalid source name [ 187.695137][ T8656] Invalid source name [ 187.700261][ T8656] Invalid source name [ 187.706233][ T8656] Invalid source name [ 187.711253][ T8656] Invalid source name [ 187.717190][ T8656] Invalid source name [ 187.724911][ T8656] Invalid source name [ 187.732859][ T8656] Invalid source name [ 187.737732][ T8656] Invalid source name [ 187.745909][ T8656] Invalid source name [ 187.751035][ T8656] Invalid source name [ 187.756842][ T8656] Invalid source name [ 187.762348][ T8656] Invalid source name [ 187.767483][ T8656] Invalid source name [ 187.773215][ T8656] Invalid source name [ 187.778356][ T8656] Invalid source name [ 187.785459][ T8656] Invalid source name [ 187.790533][ T8656] Invalid source name [ 187.796125][ T8656] Invalid source name [ 187.801159][ T8656] Invalid source name [ 187.806902][ T8656] Invalid source name [ 187.812385][ T8656] Invalid source name [ 187.817290][ T8656] Invalid source name [ 187.822923][ T8656] Invalid source name [ 187.831005][ T8656] Invalid source name [ 187.931710][ T8659] tmpfs: Cannot change global quota limit on remount [ 188.672319][ T8684] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1002'. [ 188.701483][ T8687] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1003'. [ 188.821562][ T5850] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 188.889775][ T8694] fuse: Unknown parameter 'grou00000000000000000000' [ 188.992786][ T5850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.010834][ T5850] usb 2-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 189.026476][ T5850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.041837][ T5850] usb 2-1: config 0 descriptor?? [ 189.070935][ T5971] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 189.230786][ T5971] usb 1-1: Using ep0 maxpacket: 8 [ 189.242192][ T5971] usb 1-1: config 1 interface 0 altsetting 98 endpoint 0x81 has an invalid bInterval 85, changing to 10 [ 189.257527][ T5971] usb 1-1: config 1 interface 0 altsetting 98 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 189.272402][ T5971] usb 1-1: config 1 interface 0 has no altsetting 0 [ 189.284328][ T5971] usb 1-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.40 [ 189.294873][ T5971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.303907][ T5971] usb 1-1: Product: syz [ 189.308355][ T5971] usb 1-1: Manufacturer: syz [ 189.313332][ T5971] usb 1-1: SerialNumber: syz [ 189.480936][ T5856] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 189.490604][ T5856] Bluetooth: hci3: Injecting HCI hardware error event [ 189.499583][ T5856] Bluetooth: hci3: hardware error 0x00 [ 189.514965][ T5850] usbhid 2-1:0.0: can't add hid device: -71 [ 189.525218][ T5850] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 189.538936][ T5850] usb 2-1: USB disconnect, device number 38 [ 189.575180][ T5971] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input15 [ 189.608659][ T24] pegasus 3-1:0.10: setup Pegasus II specific registers [ 189.630049][ T5196] bcm5974 1-1:1.0: could not read from device [ 189.643555][ T5196] bcm5974 1-1:1.0: could not read from device [ 189.664053][ T5196] bcm5974 1-1:1.0: could not read from device [ 189.676499][ T5196] bcm5974 1-1:1.0: could not read from device [ 189.682403][ T5971] usb 1-1: USB disconnect, device number 37 [ 189.745679][ T24] pegasus 3-1:0.10: can't locate MII phy, using default [ 189.844309][ T24] pegasus 3-1:0.10: eth1, Belkin F5U122 10/100 USB Ethernet, b6:52:0e:d4:75:b6 [ 189.910641][ T24] usb 3-1: USB disconnect, device number 41 [ 190.678787][ T5162] Bluetooth: hci0: unexpected event for opcode 0x2002 [ 190.690020][ T5925] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 190.690343][ T8738] afs: Unknown parameter '{#jN MV9m)|Tۼ@/¼$#O[^!|^R c/ -3JL)ۈwVډMxړVuMGb4YTU[' [ 190.770078][ T8746] IPVS: set_ctl: invalid protocol: 47 172.20.20.64:20001 [ 190.790021][ T5951] usb 2-1: new low-speed USB device number 39 using dummy_hcd [ 190.859178][ T5925] usb 4-1: Using ep0 maxpacket: 8 [ 190.960090][ T5925] usb 4-1: unable to get BOS descriptor or descriptor too short [ 190.975394][ T5951] usb 2-1: unable to get BOS descriptor or descriptor too short [ 190.980710][ T5925] usb 4-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid wMaxPacketSize 0 [ 190.992226][ T5951] usb 2-1: config 1 has an invalid interface number: 131 but max is 0 [ 191.005446][ T5925] usb 4-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 0 [ 191.020251][ T5951] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.025588][ T5925] usb 4-1: config 8 interface 0 has no altsetting 0 [ 191.050217][ T5951] usb 2-1: config 1 has no interface number 0 [ 191.052159][ T5925] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 191.057117][ T5951] usb 2-1: config 1 interface 131 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 191.084337][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.100045][ T5925] usb 4-1: Product: syz [ 191.110057][ T5925] usb 4-1: Manufacturer: syz [ 191.111787][ T5951] usb 2-1: config 1 interface 131 has no altsetting 0 [ 191.123615][ T5925] usb 4-1: SerialNumber: syz [ 191.125564][ T5951] usb 2-1: string descriptor 0 read error: -22 [ 191.135402][ T5951] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 191.159778][ T5951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.184655][ T5951] usb 2-1: bad CDC descriptors [ 191.270754][ T24] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 191.369555][ T5925] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 191.382230][ T5925] usb 4-1: selecting invalid altsetting 0 [ 191.394180][ T5951] usb 2-1: USB disconnect, device number 39 [ 191.441230][ T24] usb 1-1: config 0 has an invalid interface number: 6 but max is 0 [ 191.451547][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.467134][ T24] usb 1-1: config 0 has no interface number 0 [ 191.477360][ T24] usb 1-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 191.491001][ T24] usb 1-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 191.507215][ T24] usb 1-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 191.517561][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.525662][ T24] usb 1-1: Product: syz [ 191.530052][ T24] usb 1-1: Manufacturer: syz [ 191.534665][ T24] usb 1-1: SerialNumber: syz [ 191.549071][ T24] usb 1-1: config 0 descriptor?? [ 191.562334][ T5856] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 191.565420][ T8752] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 191.577374][ T5925] snd-usb-audio 4-1:8.0: probe with driver snd-usb-audio failed with error -12 [ 191.586696][ T8752] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 191.609898][ T5925] usb 4-1: USB disconnect, device number 26 [ 191.659787][ T24] comedi comedi4: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 191.710660][ T6467] udevd[6467]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 191.845022][ T5850] usb 1-1: USB disconnect, device number 38 [ 192.382621][ T8788] fuse: Unknown parameter '0x0000000000000003' [ 192.848941][ T5850] usb 3-1: new low-speed USB device number 42 using dummy_hcd [ 193.035280][ T5850] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 193.063657][ T5850] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.076943][ T8808] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1032'. [ 193.108922][ T8808] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1032'. [ 193.117497][ T5850] usb 3-1: config 0 descriptor?? [ 193.358532][ T5850] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 193.566603][ T8819] fuse: Unknown parameter '0x0000000000000003' [ 193.728776][ T1207] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 193.868507][ T5839] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 193.889045][ T1207] usb 2-1: Using ep0 maxpacket: 8 [ 193.895927][ T1207] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 193.907908][ T1207] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 193.918268][ T1207] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 193.928422][ T1207] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 193.941961][ T1207] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 193.951458][ T1207] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.049530][ T5839] usb 1-1: Using ep0 maxpacket: 32 [ 194.056983][ T5839] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 194.066686][ T5839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.080889][ T5839] usb 1-1: config 0 descriptor?? [ 194.090016][ T5839] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 194.165907][ T1207] usb 2-1: GET_CAPABILITIES returned 0 [ 194.171801][ T1207] usbtmc 2-1:16.0: can't read capabilities [ 194.293985][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.302379][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.416248][ T8814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.425638][ T8814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.441973][ T5907] usb 2-1: USB disconnect, device number 40 [ 194.503599][ T8816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.526180][ T8816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.549015][ T8834] input: syz1 as /devices/virtual/input/input16 [ 194.579533][ T5850] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 194.600617][ T8817] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1036'. [ 194.614469][ T5850] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 194.636173][ T5850] asix 3-1:0.0: probe with driver asix failed with error -71 [ 194.666255][ T5850] usb 3-1: USB disconnect, device number 42 [ 194.774055][ T5839] gspca_vc032x: reg_w err -71 [ 194.781211][ T5839] gspca_vc032x: I2c Bus Busy Wait 00 [ 194.786612][ T5839] gspca_vc032x: I2c Bus Busy Wait 00 [ 194.793697][ T5839] gspca_vc032x: I2c Bus Busy Wait 00 [ 194.799589][ T5839] gspca_vc032x: I2c Bus Busy Wait 00 [ 194.804890][ T5839] gspca_vc032x: I2c Bus Busy Wait 00 [ 194.810238][ T5839] gspca_vc032x: I2c Bus Busy Wait 00 [ 194.815520][ T5839] gspca_vc032x: I2c Bus Busy Wait 00 [ 194.821287][ T5839] gspca_vc032x: I2c Bus Busy Wait 00 [ 194.826584][ T5839] gspca_vc032x: I2c Bus Busy Wait 00 [ 194.832028][ T5839] gspca_vc032x: I2c Bus Busy Wait 00 [ 194.837333][ T5839] gspca_vc032x: I2c Bus Busy Wait 00 [ 194.842921][ T5839] gspca_vc032x: I2c Bus Busy Wait 00 [ 194.849065][ T5839] gspca_vc032x: I2c Bus Busy Wait 00 [ 194.854398][ T5839] gspca_vc032x: I2c Bus Busy Wait 00 [ 194.860587][ T5839] gspca_vc032x: I2c Bus Busy Wait 00 [ 194.865869][ T5839] gspca_vc032x: I2c Bus Busy Wait 00 [ 194.871213][ T5839] gspca_vc032x: I2c Bus Busy Wait 00 [ 194.876620][ T5839] gspca_vc032x: I2c Bus Busy Wait 00 [ 194.882651][ T5839] gspca_vc032x: Unknown sensor... [ 194.887956][ T5839] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 194.900126][ T5839] usb 1-1: USB disconnect, device number 39 [ 194.998670][ T5925] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 195.154400][ T8841] fuse: Unknown parameter '0x0000000000000003' [ 195.156154][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.199747][ T5925] usb 4-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 195.221983][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.234780][ T5925] usb 4-1: config 0 descriptor?? [ 195.336279][ T8845] fuse: Unknown parameter 'user_i00000000000000000000' [ 195.672449][ T5925] usbhid 4-1:0.0: can't add hid device: -71 [ 195.691636][ T5925] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 195.717813][ T5925] usb 4-1: USB disconnect, device number 27 [ 195.934986][ T8867] sctp: [Deprecated]: syz.1.1055 (pid 8867) Use of int in max_burst socket option. [ 195.934986][ T8867] Use struct sctp_assoc_value instead [ 196.098022][ T5907] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 196.178480][ T8881] fuse: Unknown parameter 'user_id00000000000000000000' [ 196.257522][ T5907] usb 3-1: Using ep0 maxpacket: 16 [ 196.266900][ T5907] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 196.292852][ T5907] usb 3-1: config 0 has no interface number 0 [ 196.312440][ T5907] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.349246][ T5907] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.351104][ T8887] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1062'. [ 196.363219][ T5907] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 196.379130][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.398420][ T5907] usb 3-1: config 0 descriptor?? [ 196.528768][ T5839] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 196.697080][ T5951] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 196.698901][ T5839] usb 2-1: config 0 has an invalid interface number: 10 but max is 0 [ 196.713324][ T5839] usb 2-1: config 0 has no interface number 0 [ 196.719541][ T5839] usb 2-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=69.f6 [ 196.728704][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.741565][ T5839] usb 2-1: config 0 descriptor?? [ 196.849887][ T5951] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 196.865703][ T5951] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 196.876552][ T5951] usb 4-1: config 220 interface 0 has no altsetting 0 [ 196.885966][ T5951] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 196.895140][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.903378][ T5951] usb 4-1: Product: syz [ 196.907753][ T5951] usb 4-1: Manufacturer: syz [ 196.912385][ T5951] usb 4-1: SerialNumber: syz [ 197.078241][ T5907] uclogic 0003:28BD:0071.0009: pen parameters not found [ 197.085358][ T5907] uclogic 0003:28BD:0071.0009: interface is invalid, ignoring [ 197.156202][ T5951] uvcvideo 4-1:220.0: Found Unit with invalid ID 0 [ 197.169252][ T5951] uvcvideo 4-1:220.0: probe with driver uvcvideo failed with error -22 [ 197.192693][ T5951] usb 4-1: USB disconnect, device number 28 [ 197.319722][ T5850] usb 3-1: USB disconnect, device number 43 [ 197.498878][ T8904] fuse: Unknown parameter 'user_id00000000000000000000' [ 197.616711][ T5951] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 197.776510][ T5951] usb 4-1: device descriptor read/64, error -71 [ 197.876562][ T8910] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1071'. [ 197.888074][ T5850] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 198.026442][ T5951] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 198.060015][ T5850] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.072848][ T5850] usb 1-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 198.082746][ T5850] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.097975][ T5850] usb 1-1: config 0 descriptor?? [ 198.156501][ T5951] usb 4-1: device descriptor read/64, error -71 [ 198.178892][ T8916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1074'. [ 198.194125][ T8916] tipc: Disabling bearer [ 198.266529][ T5951] usb usb4-port1: attempt power cycle [ 198.606090][ T5951] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 198.636642][ T5951] usb 4-1: device descriptor read/8, error -71 [ 198.644235][ T5850] usbhid 1-1:0.0: can't add hid device: -71 [ 198.685016][ T5850] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 198.748319][ T5850] usb 1-1: USB disconnect, device number 40 [ 198.876852][ T5839] pegasus 2-1:0.10: setup Pegasus II specific registers [ 198.895927][ T5951] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 198.916519][ T5951] usb 4-1: device descriptor read/8, error -71 [ 198.998858][ T5839] pegasus 2-1:0.10: can't locate MII phy, using default [ 199.027392][ T5839] pegasus 2-1:0.10: eth1, Belkin F5U122 10/100 USB Ethernet, ba:ac:b2:43:fa:73 [ 199.036095][ T5951] usb usb4-port1: unable to enumerate USB device [ 199.060156][ T5839] usb 2-1: USB disconnect, device number 41 [ 199.295352][ T8935] fuse: Unknown parameter 'user_id00000000000000000000' [ 199.430209][ T8940] fuse: Unknown parameter 'group_i00000000000000000000' [ 199.727077][ T24] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 199.895859][ T24] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 199.915444][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 199.915444][ T5839] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 199.917719][ T24] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 199.957690][ T24] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 199.988559][ T24] usb 1-1: Product: syz [ 199.992777][ T24] usb 1-1: Manufacturer: syz [ 199.997874][ T24] usb 1-1: SerialNumber: syz [ 200.010888][ T24] usb 1-1: config 0 descriptor?? [ 200.037250][ T24] usb 1-1: selecting invalid altsetting 0 [ 200.086324][ T5839] usb 2-1: Using ep0 maxpacket: 32 [ 200.094106][ T5839] usb 2-1: config 0 has an invalid interface number: 247 but max is 0 [ 200.102919][ T5839] usb 2-1: config 0 has no interface number 0 [ 200.123276][ T5839] usb 2-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 200.147201][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 200.162650][ T5839] usb 2-1: Product: syz [ 200.167294][ T5839] usb 2-1: Manufacturer: syz [ 200.182092][ T5839] usb 2-1: config 0 descriptor?? [ 200.241031][ T24] usb 1-1: USB disconnect, device number 41 [ 200.424475][ T8967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.456484][ T8948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.458163][ T8967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.489611][ T8948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.507443][ T8967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.534503][ T8967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.596681][ T5850] usb 2-1: USB disconnect, device number 42 [ 200.733872][ T8971] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1084'. [ 200.863686][ T8977] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1087'. [ 201.013437][ T8988] autofs: Bad value for 'fd' [ 201.074966][ T24] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 201.258406][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.280341][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 201.291387][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.303927][ T24] usb 4-1: config 0 descriptor?? [ 201.318881][ T9008] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1097'. [ 201.324727][ T5971] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 201.484765][ T5971] usb 1-1: Using ep0 maxpacket: 8 [ 201.498738][ T5971] usb 1-1: unable to get BOS descriptor or descriptor too short [ 201.508348][ T5971] usb 1-1: config 13 has an invalid interface number: 185 but max is 0 [ 201.517325][ T5971] usb 1-1: config 13 has no interface number 0 [ 201.528084][ T5971] usb 1-1: config 13 interface 185 has no altsetting 0 [ 201.549320][ T5971] usb 1-1: New USB device found, idVendor=04b4, idProduct=9320, bcdDevice=ed.7f [ 201.559864][ T5971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.568747][ T5971] usb 1-1: Product: syz [ 201.573096][ T5971] usb 1-1: Manufacturer: syz [ 201.578575][ T5971] usb 1-1: SerialNumber: syz [ 201.794851][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 201.824950][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.838841][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 201.851738][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.871700][ T5971] usb 1-1: can't set first interface for hiFace device. [ 201.884873][ T24] usb 4-1: USB disconnect, device number 33 [ 201.893786][ T5971] snd-usb-hiface 1-1:13.185: probe with driver snd-usb-hiface failed with error -5 [ 201.922566][ T5971] usb 1-1: USB disconnect, device number 42 [ 202.012118][ T9033] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1107'. [ 202.264597][ T9042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1111'. [ 202.917627][ T9062] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1117'. [ 202.994294][ T10] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 203.090066][ T9068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1118'. [ 203.103234][ T9067] new mount options do not match the existing superblock, will be ignored [ 203.175852][ T10] usb 4-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.200565][ T10] usb 4-1: config 0 interface 0 altsetting 185 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 203.233747][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 203.244305][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 203.267628][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.295493][ T10] usb 4-1: config 0 descriptor?? [ 203.631392][ T9084] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 203.697942][ T9086] netlink: 'syz.0.1125': attribute type 21 has an invalid length. [ 203.706539][ T9086] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1125'. [ 203.715827][ T9086] netlink: 'syz.0.1125': attribute type 6 has an invalid length. [ 203.729890][ T5839] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 203.738968][ T10] logitech 0003:046D:CA03.000A: hidraw0: USB HID v8.80 Device [HID 046d:ca03] on usb-dummy_hcd.3-1/input0 [ 203.755645][ T9086] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1125'. [ 203.765072][ T9089] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1125'. [ 203.773515][ T10] logitech 0003:046D:CA03.000A: no inputs found [ 203.926227][ T5839] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.928956][ T5971] usb 4-1: USB disconnect, device number 34 [ 203.950090][ T5839] usb 2-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 203.975462][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.003976][ T5839] usb 2-1: config 0 descriptor?? [ 204.047411][ T5907] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 204.213657][ T5907] usb 1-1: Using ep0 maxpacket: 16 [ 204.226426][ T5907] usb 1-1: config 0 has an invalid interface number: 250 but max is 0 [ 204.243373][ T5907] usb 1-1: config 0 has no interface number 0 [ 204.263236][ T5907] usb 1-1: config 0 interface 250 altsetting 229 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 204.285932][ T5907] usb 1-1: config 0 interface 250 has no altsetting 0 [ 204.295903][ T5907] usb 1-1: New USB device found, idVendor=0eb0, idProduct=3457, bcdDevice=32.8e [ 204.311924][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.324800][ T5907] usb 1-1: Product: syz [ 204.329006][ T5907] usb 1-1: Manufacturer: syz [ 204.344313][ T5907] usb 1-1: SerialNumber: syz [ 204.355423][ T5907] usb 1-1: config 0 descriptor?? [ 204.472426][ T5839] usbhid 2-1:0.0: can't add hid device: -71 [ 204.482973][ T5839] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 204.549989][ T5839] usb 2-1: USB disconnect, device number 43 [ 204.650397][ T9117] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 204.681429][ T9117] usb usb8: usbfs: process 9117 (syz.3.1129) did not claim interface 0 before use [ 205.142843][ T5925] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 205.312714][ T5925] usb 4-1: Using ep0 maxpacket: 16 [ 205.319608][ T5925] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 205.328059][ T5925] usb 4-1: config 0 has no interface number 0 [ 205.335777][ T5925] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 205.348962][ T5925] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 205.358415][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 205.366909][ T5925] usb 4-1: Product: syz [ 205.371101][ T5925] usb 4-1: SerialNumber: syz [ 205.380950][ T5925] usb 4-1: config 0 descriptor?? [ 205.390013][ T5925] cm109 4-1:0.8: invalid payload size 255, expected 4 [ 205.399347][ T5925] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input17 [ 205.433236][ T5839] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 205.598276][ T5839] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 205.606649][ T5839] usb 2-1: config 0 has no interface number 0 [ 205.615769][ T5839] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 205.624983][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.633070][ T5839] usb 2-1: Product: syz [ 205.638725][ T5839] usb 2-1: Manufacturer: syz [ 205.643451][ T5839] usb 2-1: SerialNumber: syz [ 205.650872][ T5839] usb 2-1: config 0 descriptor?? [ 205.797724][ T9126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.806792][ T9126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.063969][ T5839] usb 2-1: Firmware: major: 0, minor: 0, hardware type: UNKNOWN (10) [ 206.081133][ T5839] usb 2-1: Firmware version (0.0) predates our first public release. [ 206.090769][ C0] cm109 4-1:0.8: cm109_urb_irq_callback: urb status -71 [ 206.090997][ T24] usb 4-1: USB disconnect, device number 35 [ 206.097771][ C0] ------------[ cut here ]------------ [ 206.097855][ C0] URB ffff8880282d5d00 submitted while active [ 206.098851][ C0] WARNING: drivers/usb/core/urb.c:380 at usb_submit_urb+0xf8c/0x18b0, CPU#0: acpid/5196 [ 206.125798][ C0] Modules linked in: [ 206.125904][ C0] CPU: 0 UID: 0 PID: 5196 Comm: acpid Not tainted syzkaller #0 PREEMPT(full) [ 206.138768][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 206.148833][ C0] RIP: 0010:usb_submit_urb+0xf8c/0x18b0 [ 206.154594][ C0] Code: 00 00 00 e8 96 eb c6 fa e9 25 f1 ff ff e8 8c eb c6 fa c6 05 c8 75 8f 08 01 90 48 c7 c7 a0 14 12 8c 48 89 de e8 c5 58 8a fa 90 <0f> 0b 90 90 e9 ec f0 ff ff e8 66 eb c6 fa c6 05 f7 c0 a5 08 01 41 [ 206.174206][ C0] RSP: 0018:ffffc90000007878 EFLAGS: 00010046 [ 206.180301][ C0] RAX: 8d856b7a48c99100 RBX: ffff8880282d5d00 RCX: 0000000000040000 [ 206.188287][ C0] RDX: ffffc900021c1000 RSI: 00000000000029d4 RDI: 00000000000029d5 [ 206.196441][ C0] RBP: 000000000000000f R08: ffffffff8e131203 R09: 1ffffffff1c26240 [ 206.204532][ C0] R10: dffffc0000000000 R11: fffffbfff1c26241 R12: 0000000000000820 [ 206.212523][ C0] R13: ffff888029d50030 R14: ffff8880282d5d08 R15: dffffc0000000000 [ 206.220495][ C0] FS: 00007f6128982740(0000) GS:ffff888125d18000(0000) knlGS:0000000000000000 [ 206.229497][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 206.236138][ C0] CR2: 00007fc2105ba9c8 CR3: 000000007dbb2000 CR4: 00000000003526f0 [ 206.244850][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 206.252869][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 206.260894][ C0] Call Trace: [ 206.264180][ C0] [ 206.267028][ C0] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 206.272444][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 206.278372][ C0] ? kcov_remote_start+0x97/0x7f0 [ 206.283441][ C0] cm109_urb_irq_callback+0x709/0xca0 [ 206.288843][ C0] __usb_hcd_giveback_urb+0x376/0x540 [ 206.294293][ C0] dummy_timer+0x85f/0x44c0 [ 206.298934][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 206.304355][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 206.309299][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 206.314253][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 206.319218][ C0] __hrtimer_run_queues+0x52c/0xc60 [ 206.324470][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 206.330212][ C0] ? read_tsc+0x9/0x20 [ 206.334287][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 206.340309][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 206.345486][ C0] handle_softirqs+0x286/0x870 [ 206.350503][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 206.355297][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 206.360789][ C0] __irq_exit_rcu+0xca/0x1f0 [ 206.365439][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 206.370695][ C0] irq_exit_rcu+0x9/0x30 [ 206.375007][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 206.380699][ C0] [ 206.383637][ C0] [ 206.386581][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 206.392683][ C0] RIP: 0010:debug_lockdep_rcu_enabled+0x23/0x40 [ 206.398953][ C0] Code: 90 90 90 90 90 90 90 f3 0f 1e fa 31 c0 83 3d a7 ae 5a 04 00 74 1e 83 3d aa dd 5a 04 00 74 15 65 48 8b 0c 25 08 80 90 92 31 c0 <83> b9 2c 0b 00 00 00 0f 94 c0 c3 cc cc cc cc cc cc cc cc cc cc cc [ 206.418675][ C0] RSP: 0018:ffffc900034c7658 EFLAGS: 00000246 [ 206.424777][ C0] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88807da90000 [ 206.432766][ C0] RDX: 0000000000000001 RSI: ffffffff8d9f687f RDI: ffffffff8bc0f3e0 [ 206.440764][ C0] RBP: ffffc900034c7b90 R08: 0000000000000000 R09: ffffffff823d0f52 [ 206.448770][ C0] R10: ffffc900034c7c68 R11: fffff52000698f8e R12: 000000000000000b [ 206.456777][ C0] R13: ffffc900034c7c68 R14: ffffc900034c7c58 R15: 0000000000000008 [ 206.464858][ C0] ? do_select+0xf2/0x17d0 [ 206.469304][ C0] ? do_select+0x116/0x17d0 [ 206.473823][ C0] do_select+0x11f/0x17d0 [ 206.478207][ C0] ? do_select+0x8a1/0x17d0 [ 206.482805][ C0] ? do_select+0xf2/0x17d0 [ 206.487273][ C0] ? __pfx_do_select+0x10/0x10 [ 206.492047][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 206.497967][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 206.503242][ C0] ? __might_fault+0xb0/0x130 [ 206.507951][ C0] ? __lock_acquire+0xab9/0xd20 [ 206.512850][ C0] ? __might_fault+0xb0/0x130 [ 206.517580][ C0] core_sys_select+0x6e2/0xa20 [ 206.522386][ C0] ? __pfx_core_sys_select+0x10/0x10 [ 206.527731][ C0] ? __pfx_set_user_sigmask+0x10/0x10 [ 206.533140][ C0] __se_sys_pselect6+0x27a/0x300 [ 206.538106][ C0] ? __pfx___se_sys_pselect6+0x10/0x10 [ 206.543596][ C0] ? __pfx_ksys_read+0x10/0x10 [ 206.548474][ C0] ? __x64_sys_pselect6+0x21/0xf0 [ 206.553518][ C0] do_syscall_64+0xfa/0xfa0 [ 206.558042][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.564135][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 206.570312][ C0] ? clear_bhb_loop+0x60/0xb0 [ 206.574996][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.580926][ C0] RIP: 0033:0x7f6128a0c407 [ 206.585353][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 206.604967][ C0] RSP: 002b:00007ffc7ee651a0 EFLAGS: 00000202 ORIG_RAX: 000000000000010e [ 206.613418][ C0] RAX: ffffffffffffffda RBX: 00007f6128982740 RCX: 00007f6128a0c407 [ 206.621415][ C0] RDX: 0000000000000000 RSI: 00007ffc7ee652b0 RDI: 000000000000000b [ 206.629400][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 206.637383][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 000055c693ee31e4 [ 206.645371][ C0] R13: 0000000000000000 R14: 0000000000000007 R15: 000000000000000a [ 206.653397][ C0] [ 206.656445][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 206.663734][ C0] CPU: 0 UID: 0 PID: 5196 Comm: acpid Not tainted syzkaller #0 PREEMPT(full) [ 206.672602][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 206.682850][ C0] Call Trace: [ 206.686154][ C0] [ 206.689011][ C0] dump_stack_lvl+0x99/0x250 [ 206.693630][ C0] ? __asan_memcpy+0x40/0x70 [ 206.698256][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.703485][ C0] ? __pfx__printk+0x10/0x10 [ 206.708097][ C0] vpanic+0x237/0x6d0 [ 206.712112][ C0] ? __pfx_vpanic+0x10/0x10 [ 206.716651][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 206.721903][ C0] panic+0xb9/0xc0 [ 206.725650][ C0] ? __pfx_panic+0x10/0x10 [ 206.730099][ C0] __warn+0x334/0x4c0 [ 206.734114][ C0] ? usb_submit_urb+0xf8c/0x18b0 [ 206.739087][ C0] ? usb_submit_urb+0xf8c/0x18b0 [ 206.744038][ C0] report_bug+0x2be/0x4f0 [ 206.748383][ C0] ? usb_submit_urb+0xf8c/0x18b0 [ 206.753344][ C0] ? usb_submit_urb+0xf8c/0x18b0 [ 206.758286][ C0] ? usb_submit_urb+0xf8e/0x18b0 [ 206.763236][ C0] handle_bug+0x84/0x160 [ 206.767504][ C0] exc_invalid_op+0x1a/0x50 [ 206.772029][ C0] asm_exc_invalid_op+0x1a/0x20 [ 206.776897][ C0] RIP: 0010:usb_submit_urb+0xf8c/0x18b0 [ 206.782462][ C0] Code: 00 00 00 e8 96 eb c6 fa e9 25 f1 ff ff e8 8c eb c6 fa c6 05 c8 75 8f 08 01 90 48 c7 c7 a0 14 12 8c 48 89 de e8 c5 58 8a fa 90 <0f> 0b 90 90 e9 ec f0 ff ff e8 66 eb c6 fa c6 05 f7 c0 a5 08 01 41 [ 206.804432][ C0] RSP: 0018:ffffc90000007878 EFLAGS: 00010046 [ 206.810921][ C0] RAX: 8d856b7a48c99100 RBX: ffff8880282d5d00 RCX: 0000000000040000 [ 206.818912][ C0] RDX: ffffc900021c1000 RSI: 00000000000029d4 RDI: 00000000000029d5 [ 206.827083][ C0] RBP: 000000000000000f R08: ffffffff8e131203 R09: 1ffffffff1c26240 [ 206.835768][ C0] R10: dffffc0000000000 R11: fffffbfff1c26241 R12: 0000000000000820 [ 206.843759][ C0] R13: ffff888029d50030 R14: ffff8880282d5d08 R15: dffffc0000000000 [ 206.851776][ C0] ? usb_submit_urb+0xf8b/0x18b0 [ 206.856739][ C0] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 206.862136][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 206.868062][ C0] ? kcov_remote_start+0x97/0x7f0 [ 206.873198][ C0] cm109_urb_irq_callback+0x709/0xca0 [ 206.878614][ C0] __usb_hcd_giveback_urb+0x376/0x540 [ 206.884024][ C0] dummy_timer+0x85f/0x44c0 [ 206.888563][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 206.893989][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 206.899118][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 206.904118][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 206.909120][ C0] __hrtimer_run_queues+0x52c/0xc60 [ 206.914367][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 206.920117][ C0] ? read_tsc+0x9/0x20 [ 206.924217][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 206.930154][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 206.935292][ C0] handle_softirqs+0x286/0x870 [ 206.940169][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 206.944966][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 206.950366][ C0] __irq_exit_rcu+0xca/0x1f0 [ 206.954980][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 206.960230][ C0] irq_exit_rcu+0x9/0x30 [ 206.964513][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 206.970164][ C0] [ 206.973097][ C0] [ 206.976071][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 206.982070][ C0] RIP: 0010:debug_lockdep_rcu_enabled+0x23/0x40 [ 206.988344][ C0] Code: 90 90 90 90 90 90 90 f3 0f 1e fa 31 c0 83 3d a7 ae 5a 04 00 74 1e 83 3d aa dd 5a 04 00 74 15 65 48 8b 0c 25 08 80 90 92 31 c0 <83> b9 2c 0b 00 00 00 0f 94 c0 c3 cc cc cc cc cc cc cc cc cc cc cc [ 207.007971][ C0] RSP: 0018:ffffc900034c7658 EFLAGS: 00000246 [ 207.014057][ C0] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88807da90000 [ 207.022041][ C0] RDX: 0000000000000001 RSI: ffffffff8d9f687f RDI: ffffffff8bc0f3e0 [ 207.030034][ C0] RBP: ffffc900034c7b90 R08: 0000000000000000 R09: ffffffff823d0f52 [ 207.038009][ C0] R10: ffffc900034c7c68 R11: fffff52000698f8e R12: 000000000000000b [ 207.045980][ C0] R13: ffffc900034c7c68 R14: ffffc900034c7c58 R15: 0000000000000008 [ 207.053962][ C0] ? do_select+0xf2/0x17d0 [ 207.058396][ C0] ? do_select+0x116/0x17d0 [ 207.062891][ C0] do_select+0x11f/0x17d0 [ 207.067243][ C0] ? do_select+0x8a1/0x17d0 [ 207.071863][ C0] ? do_select+0xf2/0x17d0 [ 207.076309][ C0] ? __pfx_do_select+0x10/0x10 [ 207.081105][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 207.087041][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.092273][ C0] ? __might_fault+0xb0/0x130 [ 207.096982][ C0] ? __lock_acquire+0xab9/0xd20 [ 207.101861][ C0] ? __might_fault+0xb0/0x130 [ 207.106570][ C0] core_sys_select+0x6e2/0xa20 [ 207.111362][ C0] ? __pfx_core_sys_select+0x10/0x10 [ 207.116690][ C0] ? __pfx_set_user_sigmask+0x10/0x10 [ 207.122093][ C0] __se_sys_pselect6+0x27a/0x300 [ 207.127049][ C0] ? __pfx___se_sys_pselect6+0x10/0x10 [ 207.132513][ C0] ? __pfx_ksys_read+0x10/0x10 [ 207.137313][ C0] ? __x64_sys_pselect6+0x21/0xf0 [ 207.142430][ C0] do_syscall_64+0xfa/0xfa0 [ 207.146968][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.153046][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 207.159217][ C0] ? clear_bhb_loop+0x60/0xb0 [ 207.163914][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.169834][ C0] RIP: 0033:0x7f6128a0c407 [ 207.174270][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 207.194043][ C0] RSP: 002b:00007ffc7ee651a0 EFLAGS: 00000202 ORIG_RAX: 000000000000010e [ 207.202501][ C0] RAX: ffffffffffffffda RBX: 00007f6128982740 RCX: 00007f6128a0c407 [ 207.210497][ C0] RDX: 0000000000000000 RSI: 00007ffc7ee652b0 RDI: 000000000000000b [ 207.218589][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 207.226575][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 000055c693ee31e4 [ 207.234551][ C0] R13: 0000000000000000 R14: 0000000000000007 R15: 000000000000000a [ 207.242968][ C0] [ 207.246253][ C0] Kernel Offset: disabled [ 207.250709][ C0] Rebooting in 86400 seconds..