last executing test programs: 3.256325143s ago: executing program 0 (id=711): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={r1, 0x0, 0x30}, &(0x7f00000000c0)=0xc) 3.159360313s ago: executing program 0 (id=714): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) setreuid(0xee00, 0x0) r2 = getuid() setreuid(0x0, r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000400)=0x3fd, 0x4) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}}, 0x400a805) (async) sendmsg$alg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}, 0x20044000) recvmmsg$unix(r1, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001d40)=""/4087, 0xff7}], 0x1}}], 0x1, 0x12040, 0x0) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x808000, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = dup(r6) ioctl$KVM_CREATE_VCPU(r7, 0xaece, 0x0) inotify_add_watch(r7, &(0x7f0000000000)='./cgroup/file0\x00', 0x32000091) 2.707770143s ago: executing program 0 (id=716): creat(&(0x7f0000000200)='./file1\x00', 0x12e) (async) r0 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x20, 0x3, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}]}, 0x20}, 0x1, 0x0, 0x0, 0x200c8}, 0x80) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x20, 0x3, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}]}, 0x20}, 0x1, 0x0, 0x0, 0x200c8}, 0x80) r4 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r4, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r4, 0x0) (async) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r4, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x20) (async) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x20) ioctl$KVM_SET_VCPU_EVENTS(r5, 0xc008aec1, &(0x7f0000000140)=@arm64={0x3, 0x1, 0x81, '\x00', 0x200}) close(r0) (async) close(r0) r6 = socket$inet(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r6, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) (async) connect$inet(r6, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4) sendmmsg$inet(r6, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000006c0)="fac28d000090e9c3aee5dbe57493388f51e611ceb53a5c9866a207ace2b5957fe5ac95a01f7ceb22c6198cb55a91489a9c06457941f270ea9982947c9f2bbe18232844eeab6796f3220606366b66adcdbdaa9d52c6bdc16d311e5da98997031d27dcad941eb670e53fcb75a7c4b9ba6a3027cbbaa9b9fa55ff178181b6d798bbcba0a9195802c8b4c0b6590bd04b22a0e8e7ab058ff877c48c419da077efcb78c2f9fd0359ac3222b9078ad5365c69da29e4c712ba014525d404f85d79d56895b834213eb185136ca623490955eb0a9d6a8447315a2377d1d474c43c228c42f9608d36bf207aae7096c63b9b873c1cb5dd9059914ff4ffa17a05126910e50338080000000000000067474c83564a2b1fbbf11231008bbf11bfa4b75a597b2018ca8c0f36378b62628d59a76c44b1414a7cd5b0a02ed90f9f4cfe10501edbaf114259652efa99a4319211eb0364f6b8224c1da83ae83fd55be72530949197603467e45deed2d2cfd6f74cd14b8d968555d554a623df2069f9b45856de29a5fd334c86c46a57e445db25188ebcb6289779c760ff8eef66afae0cf848c754b80a5fce558bd95963a4d79eaf71304529dea4b28d1a59f1bd069b2e057af846d557a34e48e72f63d0aa5a259647b7ee2f52518308f9f1cad379614a405953ab8c4afe5a48ace74fb163f729fc4949537d6f98c3adc8771d2b1b9014d2b35ebd7dbe24f39adbcace50a90192a5464fa79ddacff779012284a398ac91f4430f8bb902f736c712bc69b9198b7991b3acfd73a16fa7f44c7859b28e35a8ca5c0ac07f824572", 0x241}], 0x1}}], 0x1, 0x80) (async) sendmmsg$inet(r6, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000006c0)="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", 0x241}], 0x1}}], 0x1, 0x80) r7 = fsopen(&(0x7f00000002c0)='ext4\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0xa, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r7}}) creat(&(0x7f0000000140)='./file0\x00', 0x71) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x208003, 0x0) 2.603975663s ago: executing program 0 (id=717): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x2000) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x10) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000240)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, &(0x7f0000000000)={0x0, 0xbd5, 0x2, {0x2, @raw_data="f91fd2868ba3d9189024fc40809db9e19479c0b5fce2c721330d5771dbf9dbfa9e2ad24622489141b4803cfeb0b70909e75715a13fada32fef53473eb9ce014fbe3929ea41fdeb0ff177dfb9d3227f213a6451b667d35b03b25618d20cea1f072990b86d463a0de7513744a2bb3bf4fb6049e30f7c533837beba9566c9fd8721c48fad424a5fb17bc1419fb85e5e7dce382ba5a1ce182b419becd67c18f0ba055b8d72225df5a5e7917f8a87a52b8c2516745c462e944b0c22a7e71ecf492a0ef916598abba0e732"}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl(r2, 0xfffff000, &(0x7f0000000000)) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000210000000000000000000000000a5c000000060a0104000000000000000002000000300004802c0001800c00010062697477697365001c0002800800034040000000080001400000000008000240000000000900010073797a30000000000900020073797a32"], 0x84}}, 0x0) setpriority(0x0, 0x0, 0x4b) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001580)={0x1, 0x0, [{0x10000, 0x0, 0x0}]}) dup3(r3, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ff7000/0x3000)=nil, 0x400c) 2.500467779s ago: executing program 0 (id=718): syz_clone(0x660cf300, 0x0, 0x0, 0x0, 0x0, 0x0) 2.157390236s ago: executing program 0 (id=721): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) sendmmsg$inet6(r2, &(0x7f0000006c40)=[{{&(0x7f0000000280)={0xa, 0x4e23, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x401}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000002c0)='\"', 0x1}], 0x1}}], 0x1, 0x4000) listen(r2, 0xf5db) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r3, 0xc018480d, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) ioctl$HIDIOCSREPORT(r3, 0x400c4808, &(0x7f0000000000)={0x1, 0x3, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) 1.742355411s ago: executing program 2 (id=729): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 1.644750919s ago: executing program 2 (id=732): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, &(0x7f00000000c0)) 1.550630358s ago: executing program 2 (id=734): ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000180)=""/216) r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) flock(r1, 0x8) openat$cgroup_pressure(r1, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='auto_da_alloc', 0x0) 1.427929795s ago: executing program 2 (id=736): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x2000) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x10) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000240)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, &(0x7f0000000000)={0x0, 0xbd5, 0x2, {0x2, @raw_data="f91fd2868ba3d9189024fc40809db9e19479c0b5fce2c721330d5771dbf9dbfa9e2ad24622489141b4803cfeb0b70909e75715a13fada32fef53473eb9ce014fbe3929ea41fdeb0ff177dfb9d3227f213a6451b667d35b03b25618d20cea1f072990b86d463a0de7513744a2bb3bf4fb6049e30f7c533837beba9566c9fd8721c48fad424a5fb17bc1419fb85e5e7dce382ba5a1ce182b419becd67c18f0ba055b8d72225df5a5e7917f8a87a52b8c2516745c462e944b0c22a7e71ecf492a0ef916598abba0e732"}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl(r2, 0xfffff000, &(0x7f0000000000)) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000210000000000000000000000000a5c000000060a0104000000000000000002000000300004802c0001800c00010062697477697365001c0002800800034040000000080001400000000008000240000000000900010073797a30000000000900020073797a32"], 0x84}}, 0x0) setpriority(0x0, 0x0, 0x4b) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001580)={0x1, 0x0, [{0x10000, 0x0, 0x0}]}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ff7000/0x3000)=nil, 0x400c) 1.427781167s ago: executing program 1 (id=737): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x82}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='\"'], 0x922c3) 1.387106049s ago: executing program 2 (id=738): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) r0 = syz_open_dev$I2C(0x0, 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) mlock2(&(0x7f00002e5000/0xc00000)=nil, 0xc00000, 0x0) 1.371512574s ago: executing program 1 (id=739): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)={0x20, 0x3, 0x2, "b23b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000002c0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x82, 0x2, '*M'}, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x84, 0x2, "078d"}, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000500)={0x40, 0x1, 0x2, "3aec"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000540)=ANY=[@ANYBLOB="4005bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x123941, 0x1e3) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}], 0x1, &(0x7f0000000040)}, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000001c0)={'veth1_vlan\x00', {0x2, 0x4e24, @loopback}}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 1.048024475s ago: executing program 2 (id=740): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r9, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x80) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000100)="92034724033eea403a", 0x9}}, 0xee) r14 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) r15 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsetxattr$system_posix_acl(r15, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x3}, [], {0x4, 0x4}, [], {}, {0x20, 0x6}}, 0x24, 0x3) sendmsg$nfc_llcp(r14, &(0x7f00000003c0)={&(0x7f0000000440)={0x27, 0x0, 0x1, 0x3, 0x7, 0xa, "05bb5f2f28fe65251a96e7bd75344996492763774306c67d4b43a7e02ee7e8d7f10c43d79ddd6e0bca1adf2f8ddfddf47736023017df3862090ad29a6c50e2", 0x3a}, 0x60, &(0x7f0000000780)=[{&(0x7f0000000340)="cfe7c5a0231f48a075157e2610cf82167429c74518ce4dafa2389e9f146cf1651d8b950e6b99365578c9b59d3513a38cd640fadfff800629fc793f", 0x3b}, {&(0x7f0000000500)="a5a837515d912aa9ea464abced53c9bbb1889b74b6d4f7634f7ab67a523ccde90990bed9e35dc2e8609bf66b686ae80f1fb84770b65434ea6047f4e0ff18c6267e437e59f650b481e5889b316750d9d7bd016a0391b7937b37ebd8fc637d69856cec61f16adbf3a8df57ccd551bb52393a01cb5b352424308d0c97c7ed7e3eecd2aa954263b19ceac7c94141b5fac13c4d2062c525523c36", 0x98}, {&(0x7f00000005c0)="171aec1fdcd675a219630f3cbb73475190477ded62cb44e69c313db617fea1d2296070f704445c62ddfb1a4d4e433039c26341430c25b0e55030c4a01db7db430a27a490d4b9724694d3b8469fe99c13a20e15cc0ce29c2d30baca6e6f59b3c37f3ab02f63c33585", 0x68}, {&(0x7f0000000640)="b95a3f5d464888408105d77e101930d23afab837f7fb16df7b16bb973849bed5a41a12bd88670d565a4b0688ffa3a698d02a81b8d4d19cb633268c1485b936d907ad7b55b3ff22f12d250118aa8b711e7ebb957603682144664b9432bb5f890ea424e6d6d9357b17ebd9417d6eaa3546020590a5725dca33cbe252b5b6bb396ca1749e41157d2caa", 0x88}, {&(0x7f0000000700)="07bb8096e010d2c45eef3bbf1a1a06b11e589adeddf64f5ac7cc063a5861b4e962b5fd7b067492ce17535e235b7c73f1092321250d22271977c896df2c1be7db756835c9", 0x44}], 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="e00000000000000009010000050000009ae52fe67aec0394fae10a8773e737b4e8592e6bc5c48a77867981add82fab3b6f7b0a253200719f7093fbe143bb01fd30866819caef55832d89a1fecabea140a765d6b953f1839b2e4c762226aefe2d2fc0ff8fd6a3f1cab5f6260621c24bb0241494b11231067ff982896fd1c9d7b362557f98355a0ed777cef3ad6a89d3ce386a081c9bc86802e032f0bceaff17d42fa771348071f49f9d502c724801f46900565208f82e63a08611dac7b242eb9b9a256d0f6d5701bb92211596f2d1f2c6c260b1d04b62f65b608f000000000000"], 0xe0, 0x41}, 0x40810) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x40, r16, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x40}}, 0xc080) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00'}) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) 891.442634ms ago: executing program 3 (id=742): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, &(0x7f00000000c0)) 796.045267ms ago: executing program 3 (id=743): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x4440, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x28) prctl$PR_SET_SECUREBITS(0x1c, 0x6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000b00)=0x6) ioctl$SOUND_MIXER_WRITE_RECSRC(r1, 0xc0044dff, &(0x7f0000000080)=0x3ff) prlimit64(0x0, 0xf, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000044d564b"]) 785.833897ms ago: executing program 1 (id=744): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x82}) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffff9) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000440)=0x20) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) open_by_handle_at(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='\"'], 0x922c3) 708.068864ms ago: executing program 1 (id=745): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYRES64], 0x0) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b5071203000000000001090224000108000000090400000203000000092100000001220500090581030000"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x8, "1f62359a"}, @main=@item_4={0x3, 0x0, 0x11b9febb8c7395f2, "fbbd60b7"}]}}, 0x0}, 0x0) syz_usb_connect(0x4, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xfe, 0xb, 0xeb, 0x10, 0x5ac, 0x1202, 0x720c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0xe1, 0x0, 0x0, 0x8f, 0x1c, 0x86}}]}}]}}, 0x0) syz_usb_connect(0x3, 0x1cb, &(0x7f0000000000)=ANY=[], 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect(0x6d25b2bb301a837c, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8a, 0x31, 0x7c, 0x40, 0x545, 0x800d, 0x30a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb3, 0x8e, 0xd1}}]}}]}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 657.90529ms ago: executing program 3 (id=746): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x2000) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x10) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000240)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, &(0x7f0000000000)={0x0, 0xbd5, 0x2, {0x2, @raw_data="f91fd2868ba3d9189024fc40809db9e19479c0b5fce2c721330d5771dbf9dbfa9e2ad24622489141b4803cfeb0b70909e75715a13fada32fef53473eb9ce014fbe3929ea41fdeb0ff177dfb9d3227f213a6451b667d35b03b25618d20cea1f072990b86d463a0de7513744a2bb3bf4fb6049e30f7c533837beba9566c9fd8721c48fad424a5fb17bc1419fb85e5e7dce382ba5a1ce182b419becd67c18f0ba055b8d72225df5a5e7917f8a87a52b8c2516745c462e944b0c22a7e71ecf492a0ef916598abba0e732"}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl(r2, 0xfffff000, &(0x7f0000000000)) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000210000000000000000000000000a5c000000060a0104000000000000000002000000300004802c0001800c00010062697477697365001c0002800800034040000000080001400000000008000240000000000900010073797a30000000000900020073797a32"], 0x84}}, 0x0) setpriority(0x0, 0x0, 0x4b) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001580)={0x1, 0x0, [{0x10000, 0x0, 0x0}]}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ff7000/0x3000)=nil, 0x400c) 586.729112ms ago: executing program 3 (id=747): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000006c0)=0x15, 0x4) creat(&(0x7f0000001380)='./file0\x00', 0x4) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000004380)=[{{&(0x7f0000004440)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)='P', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x4, 0x10}, 0xc) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03c900eb5024b3d951ddf6c16ce96694ea0e35f6ab2768309f33469a938067d5b3454427960a1192481229c4f67cbce27e2ed6f448be4bf417ec5d42a062f5a7c676c4e1383178d697d5e973575d2facab141d2cc8fa088ec7368ccda80dea621023bc6b740ce0b32f31660ae1f0d7ec41e190ed8d38b1a642e9b6fc391adef5df457a5c094ac8a4938a22d2ec68fc90f86fb250764a75bc4bb4cbe36deb786f00e485f4e15cbf6eed0000000053f2aab880cdb338de8cc920bfcde0c0b2391794cfaff18552198718bad89b283717bedb90a55a6857bcf282600e66cd08de02087f07e9152e8da193ae"], 0xef) syz_open_dev$tty1(0xc, 0x4, 0x3) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0) 488.101215ms ago: executing program 3 (id=748): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r1, 0x6) (async) shutdown(r1, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r2, 0x0) (async) getsockopt$ax25_int(r2, 0x101, 0xc, &(0x7f0000000080), &(0x7f0000000140)=0x4) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) r4 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000340)={r5, 0x1}) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x0, 0x0) (async) syz_open_dev$usbmon(&(0x7f0000000000), 0xffffffffffff8000, 0x658040) 444.95747ms ago: executing program 3 (id=749): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000007140)={0x0, 0x0, &(0x7f0000007100)=[{&(0x7f0000005600)=""/49, 0x31}, {&(0x7f0000006000)=""/4096, 0x1000}], 0x2}, 0x40000102) sendmmsg$inet(r1, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="ec0767", 0x3}, {&(0x7f000000c640)="4dea2e9fc630f1670cf70c207e43667038bf092497c42179b09807f9b234acd0e2bf920be733d5e21ac510b279753142e15c366bd567563a39dc8a1f82c12b5e23e4297fa70d70110fd408097aa1b9c560dae166223968985d838c4dc5cf0b9122d7df3e79c64af3b05fe3dd65bdba33b66aa6e67e71127deb6cab6c7b1ee2858dc8e2aed6de1a8e07dd75b017df1bd495c59812ac39c2066b761f596a88ece33728617f756fd136f6b2819c27981ce35b449f192aec94239f56e68ea969881ae13899dd2fe4193b18c0210a47dd57b02240ed5fbe3b902caf598599", 0xdc}, {&(0x7f00000000c0)="80819a406c4532b29ab729dd0e4b12cffeb3347d8b69fb0fd7cbd350f01b17ad694672000cf10c8ed49156aa8617da1d70dde03283db4bd40fafaf2acecd0b59707d0b4ffbe1d938673cfc2099646e761ddded8cd96605ce080e313344ca123c103fe1bcf68fd4f2890418d9b67537405b0bc2889546f05bd712495b0600000000000000407923b2fff8bf1cfce5b74dd7d77c2e0d02", 0x96}, {&(0x7f000000c5c0)="2cad1cb24db0481cba0fe4efcc9b012f9976ea7f782c100ce30fca34ffa9c98e5c24851bc899a730ff662353fa6cad61e53be4c5d14f555ef2a1a9e7dfca05c8532236694df200cd9fba820c02cec743286b58f4380acfec90d09a8f38dee5976a2b5204b2", 0x65}], 0x4}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000500)}, {&(0x7f0000000600)="c88b24f13e46650376bd62b2a4a9e5529d9c1d28afea7a51dc9057907876a2b013890ed7000000000000000000", 0x2d}, {&(0x7f0000000640)="2d8535ae0c438abd0bc4f58c4e3b", 0xe}, {&(0x7f00000003c0)="28af22ee5579386fc97a788ae2cb0a93652970304dd5154e567b867e4fc749d42f1bb962067560f20849897defddcc9d10bae0452d478880ba507183c7005c1efe9f45f0e7a4ef0b76e656c836f13aab03000000979f369d0138ae25598c12691ae036ea88f7795caa2de286d76cd09ed58bfaa4c19d5ffa7504ae8da3e6cf4ba524ffd11c8235c0e5759bfd1bb1cc82c61e63a1316e3e6ae0acf6c9b445316d6198300df440817a4e505915ce6d77f883da6173830838af380d13e908000000d57a78d4408c4e2a55d011be914c1b93659eb7bbaf94c63636e2c14334e77699a4d77138aa08a37f9fc27503418d52f67852815719c15e8c5caa239fc88628bd3d796454157101667ab4e01dd916b029746792842d8bc070987c377376782167bcb011f7416ee7772710d2", 0x12b}, {&(0x7f0000000800)="dfda34e3ee7dda93a0aeed729cd5cabedf707118f5cf8acfe7747fccf72b6612754caddf60baf2dbe649d3fe02595d224cf75c98174effb4bb82011113ff74b68dc8a2c49e31b3f9576f654b87b67e4e1599c5f0eaa01acb7e6aaf2ad51cb7b0cb2463d665daddf0bd903aa0e78c0912a84c1b3ff60a75dff896f3e8ef5ac614a8223484e5662ab03b927cb375820928976f3f6c4aba8ff8c5cd4671e8f46d1670f45379e9a15d4e27ec2b0a1fd6fbe11c482169b34525f89ced9acc31f6d22df3914597f296aa7b01efcd849bc089e84da99e84b07f22e5f2a4d557f7a7eb86dee45a986a87ba29447a33f15f62be723a5b", 0xf2}, {&(0x7f0000000900)="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", 0xb0e}], 0x6}}], 0x2, 0x8058) 143.617753ms ago: executing program 1 (id=750): mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc}) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x24000080) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x80400, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f0000000200)={0x48, 0x1, 0x0, 0x0, 0x97, 0x8}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="28003300d0799bb4c5e55fcedf01080211000000505050505050"], 0x44}}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000500)={0x28, 0x4, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000380), r8) sendmsg$NLBL_CIPSOV4_C_LISTALL(r8, &(0x7f0000000400)={&(0x7f0000000100), 0xc, &(0x7f00000003c0)={&(0x7f0000000540)={0x370, r9, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x148, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x70}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3c89e867}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5fca2edb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a392fe6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xea3633}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x33fef895}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4755393}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x54949adc}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x46b57971}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4927e4c0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1279f93d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b555f8d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x30}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x36c8ae45}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1de45736}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2ad16ea1}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x65}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6476a608}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7257da62}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x455fc454}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x38}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x34}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5eb469bd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb1c7163}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26cad2ad}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x70}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5}, {0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x64, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xec14}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x67188b49}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61db1c4e}]}, {0x4}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c68f575}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8078}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x40d6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x48626af3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x250aebfa}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7dea9e64}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x33851e8e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x174, 0x8, 0x0, 0x1, [{0x4}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a57678}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x74c24746}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x22cc8d0d}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x39}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x139ad8df}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2334baa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a62b5f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1adb2945}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7fa8c4af}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9f}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x81}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3cae8b2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7fe3a396}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x83}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc1}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x711944ee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x41}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc121a2b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4951241f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x60704988}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c8366ed}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12262b1f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x27648fa6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x81}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x36fa79aa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x655087f6}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x90}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x358dbd4a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe8a9d5b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x10}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x62}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xde}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x370}, 0x1, 0x0, 0x0, 0x4000040}, 0x4040) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r11, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r12 = dup(r11) write$FUSE_BMAP(r12, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r12, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r12}, 0x2c, {[], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r8) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000440)={0xc}) 0s ago: executing program 1 (id=751): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ff0080000000000109022400010000000009040000150300000009214077000001220f0009", @ANYRES16], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) ioctl$LOOP_CONFIGURE(r3, 0xc0401289, 0x0) ioctl$HIDIOCGUCODE(r2, 0xc018480d, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) r4 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x80800) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$HIDIOCSREPORT(r2, 0x400c4808, &(0x7f0000000000)={0x1, 0x3, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) kernel console output (not intermixed with test programs): has an invalid interface number: 51 but max is 0 [ 100.843846][ T1211] usb 1-1: config 0 has no interface number 0 [ 100.848122][ T24] usb 2-1: USB disconnect, device number 5 [ 100.850186][ C0] hid-thrustmaster 0003:044F:B65D.0002: URB to get model id failed with error -71 [ 100.868349][ T1211] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 100.878020][ T1211] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.886072][ T1211] usb 1-1: Product: syz [ 100.890367][ T1211] usb 1-1: Manufacturer: syz [ 100.904958][ T1211] usb 1-1: SerialNumber: syz [ 100.921324][ T1211] usb 1-1: config 0 descriptor?? [ 100.930656][ T1211] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 100.988926][ T5888] gp8psk: usb in 128 operation failed. [ 101.001183][ T5888] gp8psk: usb in 137 operation failed. [ 101.007029][ T5888] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 101.028372][ T5888] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 101.039297][ T5888] usb 4-1: media controller created [ 101.070326][ T5888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 101.097497][ T5888] gp8psk_fe: Frontend attached [ 101.102883][ T5888] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 101.114123][ T5888] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 101.133687][ T6092] netlink: 124 bytes leftover after parsing attributes in process `syz.0.54'. [ 101.218939][ T1211] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 101.232207][ T5888] gp8psk: usb in 138 operation failed. [ 101.237844][ T5888] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 101.252470][ T5888] gp8psk: found Genpix USB device pID = 203 (hex) [ 101.259464][ T1211] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 101.470844][ T1211] usb 4-1: USB disconnect, device number 3 [ 101.674443][ T1211] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 101.715580][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 101.718233][ T5847] usb 1-1: USB disconnect, device number 3 [ 101.763164][ T5847] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 101.812058][ T5847] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 101.832636][ T5847] quatech2 1-1:0.51: device disconnected [ 102.227731][ T24] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 102.382781][ T24] usb 3-1: config 0 has an invalid interface number: 230 but max is 0 [ 102.391646][ T24] usb 3-1: config 0 has no interface number 0 [ 102.398318][ T24] usb 3-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 102.411154][ T24] usb 3-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 102.422888][ T24] usb 3-1: config 0 interface 230 has no altsetting 0 [ 102.432775][ T24] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 102.442528][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.450966][ T24] usb 3-1: Product: syz [ 102.455302][ T24] usb 3-1: Manufacturer: syz [ 102.460754][ T24] usb 3-1: SerialNumber: syz [ 102.469750][ T24] usb 3-1: config 0 descriptor?? [ 102.483218][ T6118] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 102.491434][ T6118] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 102.501784][ T24] ums-usbat 3-1:0.230: USB Mass Storage device detected [ 102.516246][ T24] ums-usbat 3-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 102.674083][ T6125] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.64'. [ 103.194686][ T6142] syz.3.69: attempt to access beyond end of device [ 103.194686][ T6142] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 103.212796][ T6142] hpfs: hpfs_map_sector(): read error [ 103.473902][ T6151] netlink: 36 bytes leftover after parsing attributes in process `syz.3.72'. [ 103.570437][ T6156] fuse: Invalid rootmode [ 103.738661][ T6166] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 103.754542][ T6166] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 103.878543][ T6170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.886053][ T6170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.894974][ T6170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.903975][ T6170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.217669][ T5847] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 104.379756][ T5847] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 104.389555][ T5847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.406137][ T5847] usb 4-1: config 0 descriptor?? [ 104.430500][ T5847] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 104.515606][ T6188] netlink: 20 bytes leftover after parsing attributes in process `syz.1.84'. [ 104.868433][ T5847] gspca_sunplus: reg_w_riv err -71 [ 104.882107][ T5847] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 104.918612][ T5847] usb 4-1: USB disconnect, device number 4 [ 104.970211][ T863] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 105.003649][ T6205] omfs: Invalid superblock (0) [ 105.151753][ T863] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 105.164189][ T863] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.174735][ T863] usb 1-1: config 0 interface 0 has no altsetting 0 [ 105.181863][ T863] usb 1-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 105.191441][ T863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.203865][ T863] usb 1-1: config 0 descriptor?? [ 105.240390][ T5888] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 105.399524][ T5888] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 105.409889][ T5888] usb 2-1: config 0 has no interface number 0 [ 105.416041][ T5888] usb 2-1: config 0 interface 29 has no altsetting 0 [ 105.426060][ T5888] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 105.435352][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.444377][ T5888] usb 2-1: Product: syz [ 105.448884][ T5888] usb 2-1: Manufacturer: syz [ 105.453512][ T5888] usb 2-1: SerialNumber: syz [ 105.463792][ T5888] usb 2-1: config 0 descriptor?? [ 105.537817][ T5847] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 105.640538][ T863] hid-alps 0003:044E:120B.0003: unknown main item tag 0x0 [ 105.651122][ T863] hid-alps 0003:044E:120B.0003: unknown main item tag 0x0 [ 105.660773][ T863] hid-alps 0003:044E:120B.0003: unknown main item tag 0x0 [ 105.668085][ T863] hid-alps 0003:044E:120B.0003: unknown main item tag 0x0 [ 105.675301][ T863] hid-alps 0003:044E:120B.0003: unknown main item tag 0x0 [ 105.680371][ T5888] peak_usb 2-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 105.683654][ T863] hid-alps 0003:044E:120B.0003: unknown main item tag 0x0 [ 105.699025][ T5847] usb 4-1: Using ep0 maxpacket: 16 [ 105.704359][ T863] hid-alps 0003:044E:120B.0003: unknown main item tag 0x0 [ 105.711756][ T863] hid-alps 0003:044E:120B.0003: unknown main item tag 0x0 [ 105.719129][ T863] hid-alps 0003:044E:120B.0003: unknown main item tag 0x0 [ 105.726361][ T863] hid-alps 0003:044E:120B.0003: unknown main item tag 0x0 [ 105.735577][ T5847] usb 4-1: config index 0 descriptor too short (expected 255, got 36) [ 105.743980][ T5847] usb 4-1: config 254 has an invalid interface number: 235 but max is 0 [ 105.759454][ T863] hid-alps 0003:044E:120B.0003: hidraw0: USB HID v0.00 Device [HID 044e:120b] on usb-dummy_hcd.0-1/input0 [ 105.770949][ T5847] usb 4-1: config 254 has no interface number 0 [ 105.777320][ T5847] usb 4-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 105.791993][ T5847] usb 4-1: config 254 interface 235 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 105.804535][ T5847] usb 4-1: config 254 interface 235 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 105.818448][ T5847] usb 4-1: config 254 interface 235 has no altsetting 0 [ 105.832451][ T5847] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 105.841824][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.884231][ T5888] peak_usb 2-1:0.29 can0: sending command failure: -22 [ 105.887303][ T5847] usb 4-1: Product: syz [ 105.894944][ T5888] peak_usb 2-1:0.29 can0: sending command failure: -22 [ 105.895960][ T5847] usb 4-1: Manufacturer: syz [ 105.914154][ T5847] usb 4-1: SerialNumber: syz [ 105.916030][ T5888] peak_usb 2-1:0.29 can0: sending command failure: -22 [ 105.959857][ T5847] usbtest 4-1:254.235: couldn't get endpoints, -22 [ 105.966997][ T5847] usbtest 4-1:254.235: probe with driver usbtest failed with error -22 [ 106.030471][ T5847] usb 1-1: USB disconnect, device number 4 [ 106.062888][ T5888] peak_usb 2-1:0.29: probe with driver peak_usb failed with error -22 [ 106.086855][ T6206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.123515][ T6206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.130966][ T24] ums-usbat 3-1:0.230: probe with driver ums-usbat failed with error -5 [ 106.163179][ T24] usb 3-1: USB disconnect, device number 3 [ 106.178034][ T5874] usb 2-1: USB disconnect, device number 6 [ 106.242670][ T863] usb 4-1: USB disconnect, device number 5 [ 106.338264][ T5840] Bluetooth: hci3: command 0x0405 tx timeout [ 106.567806][ T863] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 106.727637][ T863] usb 4-1: Using ep0 maxpacket: 16 [ 106.749895][ T863] usb 4-1: config index 0 descriptor too short (expected 255, got 36) [ 106.762764][ T863] usb 4-1: config 254 has an invalid interface number: 235 but max is 0 [ 106.771996][ T863] usb 4-1: config 254 has no interface number 0 [ 106.789424][ T863] usb 4-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 106.799891][ T863] usb 4-1: config 254 interface 235 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 106.817793][ T863] usb 4-1: config 254 interface 235 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.838397][ T863] usb 4-1: config 254 interface 235 has no altsetting 0 [ 106.848442][ T863] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 106.862332][ T863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.877829][ T863] usb 4-1: Product: syz [ 106.882041][ T863] usb 4-1: Manufacturer: syz [ 106.886718][ T863] usb 4-1: SerialNumber: syz [ 106.907190][ T863] usbtest 4-1:254.235: couldn't get endpoints, -22 [ 106.917686][ T863] usbtest 4-1:254.235: probe with driver usbtest failed with error -22 [ 107.007685][ T5888] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 107.024061][ T6237] capability: warning: `syz.0.99' uses deprecated v2 capabilities in a way that may be insecure [ 107.107372][ T6213] netlink: 48 bytes leftover after parsing attributes in process `syz.3.92'. [ 107.121559][ T5874] usb 4-1: USB disconnect, device number 6 [ 107.169601][ T5888] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 107.199839][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 107.223855][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 107.250558][ T5888] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 107.267646][ T5888] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 107.284906][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.306786][ T5888] usb 2-1: config 0 descriptor?? [ 107.325486][ T51] Bluetooth: hci2: unexpected cc 0x202d length: 9 > 1 [ 107.471373][ T6242] netlink: 32 bytes leftover after parsing attributes in process `syz.2.101'. [ 107.725854][ T5888] plantronics 0003:047F:FFFF.0004: ignoring exceeding usage max [ 107.781513][ T5888] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 107.858244][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 107.926665][ T6232] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 107.933297][ T6232] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 108.127925][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 108.166367][ T6254] FAULT_INJECTION: forcing a failure. [ 108.166367][ T6254] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 108.188974][ T6254] CPU: 0 UID: 0 PID: 6254 Comm: syz.0.104 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) [ 108.189009][ T6254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 108.189029][ T6254] Call Trace: [ 108.189038][ T6254] [ 108.189046][ T6254] dump_stack_lvl+0x189/0x250 [ 108.189086][ T6254] ? __pfx____ratelimit+0x10/0x10 [ 108.189109][ T6254] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.189133][ T6254] ? __pfx__printk+0x10/0x10 [ 108.189170][ T6254] should_fail_ex+0x414/0x560 [ 108.189209][ T6254] _copy_to_user+0x31/0xb0 [ 108.189232][ T6254] simple_read_from_buffer+0xe1/0x170 [ 108.189262][ T6254] proc_fail_nth_read+0x1df/0x250 [ 108.189293][ T6254] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 108.189324][ T6254] ? rw_verify_area+0x258/0x650 [ 108.189345][ T6254] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 108.189375][ T6254] vfs_read+0x1fd/0x980 [ 108.189402][ T6254] ? __pfx___mutex_lock+0x10/0x10 [ 108.189426][ T6254] ? __pfx_vfs_read+0x10/0x10 [ 108.189449][ T6254] ? __fget_files+0x2a/0x420 [ 108.189480][ T6254] ? __fget_files+0x3a0/0x420 [ 108.189505][ T6254] ? __fget_files+0x2a/0x420 [ 108.189541][ T6254] ksys_read+0x145/0x250 [ 108.189564][ T6254] ? __pfx_ksys_read+0x10/0x10 [ 108.189583][ T6254] ? rcu_is_watching+0x15/0xb0 [ 108.189609][ T6254] ? do_syscall_64+0xbe/0x3b0 [ 108.189636][ T6254] do_syscall_64+0xfa/0x3b0 [ 108.189658][ T6254] ? lockdep_hardirqs_on+0x9c/0x150 [ 108.189679][ T6254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.189699][ T6254] ? clear_bhb_loop+0x60/0xb0 [ 108.189725][ T6254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.189744][ T6254] RIP: 0033:0x7f342f78d33c [ 108.189767][ T6254] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 108.189784][ T6254] RSP: 002b:00007f342d5f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 108.189806][ T6254] RAX: ffffffffffffffda RBX: 00007f342f9b5fa0 RCX: 00007f342f78d33c [ 108.189821][ T6254] RDX: 000000000000000f RSI: 00007f342d5f60a0 RDI: 0000000000000003 [ 108.189833][ T6254] RBP: 00007f342d5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 108.189846][ T6254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.189857][ T6254] R13: 0000000000000000 R14: 00007f342f9b5fa0 R15: 00007ffc2be5ba88 [ 108.189889][ T6254] [ 108.477274][ T6255] mmap: syz.3.103 (6255) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 108.668044][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.677614][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 108.744086][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 108.822335][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 109.037871][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 109.886684][ T6284] program syz.2.116 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.133668][ T5847] usb 2-1: USB disconnect, device number 7 [ 110.308506][ T5847] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 110.498450][ T5847] usb 2-1: config 0 has an invalid interface number: 230 but max is 0 [ 110.507475][ T5847] usb 2-1: config 0 has no interface number 0 [ 110.518821][ T5847] usb 2-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 110.532861][ T5847] usb 2-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 110.571151][ T5847] usb 2-1: config 0 interface 230 has no altsetting 0 [ 110.591428][ T5847] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 110.617797][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.628847][ T5847] usb 2-1: Product: syz [ 110.633073][ T5847] usb 2-1: Manufacturer: syz [ 110.638726][ T5847] usb 2-1: SerialNumber: syz [ 110.651831][ T5847] usb 2-1: config 0 descriptor?? [ 110.657526][ T6280] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 110.676085][ T6280] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 110.686097][ T6311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.124'. [ 110.711481][ T5847] ums-usbat 2-1:0.230: USB Mass Storage device detected [ 110.736927][ T5847] ums-usbat 2-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 110.804495][ T6318] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 110.814380][ T6318] VFS: Can't find a romfs filesystem on dev rnullb0. [ 110.814380][ T6318] [ 110.833928][ T51] Bluetooth: hci3: unexpected subevent 0x01 length: 5 < 18 [ 110.914550][ T6323] netlink: 16 bytes leftover after parsing attributes in process `syz.3.127'. [ 111.277776][ T863] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 111.460033][ T863] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 111.470164][ T863] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 111.480290][ T863] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.496944][ T863] usb 4-1: New USB device found, idVendor=0004, idProduct=a4a8, bcdDevice= 0.40 [ 111.506213][ T863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.514309][ T863] usb 4-1: Product: syz [ 111.518655][ T863] usb 4-1: Manufacturer: syz [ 111.523276][ T863] usb 4-1: SerialNumber: syz [ 111.534207][ T863] hub 4-1:1.0: bad descriptor, ignoring hub [ 111.541562][ T863] hub 4-1:1.0: probe with driver hub failed with error -5 [ 111.669291][ T5874] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 111.740733][ T863] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0004 pid 0xA4A8 [ 111.837777][ T5874] usb 1-1: Using ep0 maxpacket: 16 [ 111.845173][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 111.857294][ T5874] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 111.866763][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.874889][ T5874] usb 1-1: Product: syz [ 111.879380][ T5874] usb 1-1: Manufacturer: syz [ 111.884018][ T5874] usb 1-1: SerialNumber: syz [ 111.884412][ T6341] PKCS8: Unsupported PKCS#8 version [ 111.892239][ T5874] usb 1-1: config 0 descriptor?? [ 111.909830][ T5874] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 111.919418][ T5874] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 111.977660][ T5888] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 112.029244][ T1211] usb 4-1: USB disconnect, device number 7 [ 112.040068][ T1211] usblp0: removed [ 112.514255][ T5874] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 112.847642][ T43] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 112.977804][ T43] usb 4-1: device descriptor read/64, error -71 [ 112.989763][ T5847] ums-usbat 2-1:0.230: probe with driver ums-usbat failed with error -5 [ 113.133029][ T6338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.143153][ T6338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.154266][ T5874] em28xx 1-1:0.0: read from i2c device at 0xa0 failed with unknown error (status=90) [ 113.165828][ T5874] em28xx 1-1:0.0: board has no eeprom [ 113.217769][ T43] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 113.359398][ T43] usb 4-1: device descriptor read/64, error -71 [ 113.417632][ T5874] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 113.425669][ T5874] em28xx 1-1:0.0: dvb set to bulk mode. [ 113.433503][ T24] em28xx 1-1:0.0: Binding DVB extension [ 113.447496][ T5874] usb 1-1: USB disconnect, device number 5 [ 113.466034][ T5874] em28xx 1-1:0.0: Disconnecting em28xx [ 113.473426][ T43] usb usb4-port1: attempt power cycle [ 113.527398][ T24] em28xx 1-1:0.0: Registering input extension [ 113.536024][ T5874] em28xx 1-1:0.0: Closing input extension [ 113.558960][ T5874] em28xx 1-1:0.0: Freeing device [ 113.817690][ T43] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 113.840672][ T43] usb 4-1: device descriptor read/8, error -71 [ 114.077748][ T43] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 114.098509][ T43] usb 4-1: device descriptor read/8, error -71 [ 114.210908][ T43] usb usb4-port1: unable to enumerate USB device [ 114.237879][ T1211] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 114.252868][ T10] usb 2-1: USB disconnect, device number 8 [ 114.331500][ T6352] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 114.440376][ T1211] usb 1-1: not running at top speed; connect to a high speed hub [ 114.449751][ T1211] usb 1-1: config 1 interface 0 altsetting 10 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 114.464735][ T1211] usb 1-1: config 1 interface 0 has no altsetting 0 [ 114.473972][ T1211] usb 1-1: New USB device found, idVendor=056a, idProduct=00ef, bcdDevice= 0.40 [ 114.484395][ T1211] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.493638][ T1211] usb 1-1: Product: 《 [ 114.498470][ T1211] usb 1-1: Manufacturer: 㰮巶Ờ池閘㖩狿鴨먎뤉ᷧ蜸쑳⫻䌿㯄퇇銫䕯륥빶霝퓊慬氹 [ 114.509923][ T1211] usb 1-1: SerialNumber: у [ 114.525590][ T6350] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 114.836146][ T1211] usbhid 1-1:1.0: can't add hid device: -71 [ 114.860466][ T1211] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 114.880783][ T1211] usb 1-1: USB disconnect, device number 6 [ 115.316768][ T6362] pim6reg1: entered promiscuous mode [ 115.322600][ T6362] pim6reg1: entered allmulticast mode [ 115.502243][ T6365] syz.0.142: attempt to access beyond end of device [ 115.502243][ T6365] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 115.517112][ T6365] FAT-fs (loop0): unable to read boot sector [ 115.766882][ T6359] Process accounting resumed [ 115.815497][ T6370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.834083][ T6373] process 'syz.1.145' launched './file1' with NULL argv: empty string added [ 115.837364][ T6370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.057888][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 116.230400][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 116.239021][ T9] usb 4-1: config 1 interface 0 altsetting 193 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.255312][ T9] usb 4-1: config 1 interface 0 altsetting 193 endpoint 0x2 has an invalid bInterval 64, changing to 10 [ 116.267862][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 116.278479][ T9] usb 4-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.40 [ 116.289574][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.302734][ T9] usb 4-1: Product: П [ 116.306947][ T9] usb 4-1: Manufacturer: ᦮改羬ಝ㧙迂ࢡ☷畘⠕⛙禜؈樈捆൨ [ 116.316536][ T9] usb 4-1: SerialNumber: syz [ 116.417710][ T5888] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 116.452053][ T6383] netlink: 188 bytes leftover after parsing attributes in process `syz.2.149'. [ 116.477445][ T6383] NILFS (rnullb0): couldn't find nilfs on the device [ 116.553736][ T9] usbhid 4-1:1.0: can't add hid device: -71 [ 116.562128][ T9] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 116.592616][ T5888] usb 1-1: config 0 has an invalid interface number: 230 but max is 0 [ 116.605155][ T9] usb 4-1: USB disconnect, device number 12 [ 116.616367][ T5888] usb 1-1: config 0 has no interface number 0 [ 116.630207][ T5888] usb 1-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 116.644431][ T5888] usb 1-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 116.666154][ T5888] usb 1-1: config 0 interface 230 has no altsetting 0 [ 116.688680][ T5888] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 116.699884][ T6388] NILFS (rnullb0): couldn't find nilfs on the device [ 116.707721][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.725953][ T5888] usb 1-1: Product: syz [ 116.730683][ T5888] usb 1-1: Manufacturer: syz [ 116.735762][ T5888] usb 1-1: SerialNumber: syz [ 116.753994][ T6386] NILFS (rnullb0): couldn't find nilfs on the device [ 116.768909][ T5888] usb 1-1: config 0 descriptor?? [ 116.785164][ T6379] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 116.793353][ T6379] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 116.803279][ T5888] ums-usbat 1-1:0.230: USB Mass Storage device detected [ 116.820283][ T5888] ums-usbat 1-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 116.964787][ T6399] netlink: 24 bytes leftover after parsing attributes in process `syz.2.153'. [ 116.995028][ T6400] netlink: 60 bytes leftover after parsing attributes in process `syz.1.151'. [ 117.004698][ T6394] netlink: 60 bytes leftover after parsing attributes in process `syz.1.151'. [ 117.016911][ T6394] netlink: 60 bytes leftover after parsing attributes in process `syz.1.151'. [ 117.029845][ T6397] netlink: 60 bytes leftover after parsing attributes in process `syz.1.151'. [ 117.040643][ T6401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.153'. [ 117.229531][ T6406] syzkaller1: entered promiscuous mode [ 117.235167][ T6406] syzkaller1: entered allmulticast mode [ 117.237705][ T1211] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 117.397640][ T1211] usb 2-1: Using ep0 maxpacket: 32 [ 117.405294][ T1211] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.424936][ T1211] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.436037][ T1211] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 117.455075][ T1211] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 117.465265][ T1211] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 117.476767][ T1211] usb 2-1: Product: syz [ 117.481380][ T1211] usb 2-1: Manufacturer: syz [ 117.486109][ T1211] usb 2-1: SerialNumber: syz [ 117.487698][ T5874] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 117.516031][ T1211] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input7 [ 117.669806][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.680968][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.690800][ T5874] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 117.703850][ T5874] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 117.712613][ T1211] usb 2-1: USB disconnect, device number 9 [ 117.713035][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.733020][ T5874] usb 4-1: config 0 descriptor?? [ 117.764216][ T1211] appletouch 2-1:1.0: input: appletouch disconnected [ 118.179034][ T5874] usbhid 4-1:0.0: can't add hid device: -71 [ 118.185086][ T5874] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 118.229891][ T5874] usb 4-1: USB disconnect, device number 13 [ 118.828757][ T5840] Bluetooth: hci3: command 0x0405 tx timeout [ 119.100772][ T5888] ums-usbat 1-1:0.230: probe with driver ums-usbat failed with error -5 [ 119.243756][ T6428] netlink: 16 bytes leftover after parsing attributes in process `syz.2.160'. [ 119.312237][ T6428] block device autoloading is deprecated and will be removed. [ 119.321240][ T6428] syz.2.160: attempt to access beyond end of device [ 119.321240][ T6428] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 119.879604][ T6437] overlayfs: failed to resolve './file0': -2 [ 119.943120][ T51] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 119.953376][ T51] Bluetooth: hci0: Injecting HCI hardware error event [ 119.962633][ T51] Bluetooth: hci0: hardware error 0x00 [ 120.204251][ T6447] netlink: 'syz.3.167': attribute type 1 has an invalid length. [ 120.277680][ T5888] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 120.319875][ T1211] usb 1-1: USB disconnect, device number 7 [ 120.409363][ T5840] Bluetooth: hci3: unexpected event for opcode 0x203d [ 120.418074][ T5888] usb 3-1: device descriptor read/64, error -71 [ 120.700073][ T5888] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 120.827720][ T1211] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 120.847664][ T5888] usb 3-1: device descriptor read/64, error -71 [ 120.881949][ T30] audit: type=1400 audit(1750945048.853:4): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=6461 comm="syz.1.172" [ 120.969059][ T5888] usb usb3-port1: attempt power cycle [ 120.991826][ T1211] usb 4-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.009345][ T1211] usb 4-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.019622][ T1211] usb 4-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.033183][ T1211] usb 4-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 121.044462][ T1211] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.147678][ T43] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 121.307756][ T5888] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 121.313549][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 121.324225][ T43] usb 2-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 247, changing to 11 [ 121.328430][ T5888] usb 3-1: device descriptor read/8, error -71 [ 121.336184][ T43] usb 2-1: config 1 interface 0 has no altsetting 0 [ 121.351220][ T43] usb 2-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice= 0.40 [ 121.360405][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=235 [ 121.369923][ T43] usb 2-1: Product: syz [ 121.374144][ T43] usb 2-1: Manufacturer: syz [ 121.378860][ T43] usb 2-1: SerialNumber: syz [ 121.476556][ T1211] megaworld 0003:07B5:0312.0005: item fetching failed at offset 1/5 [ 121.486703][ T1211] megaworld 0003:07B5:0312.0005: parse failed [ 121.493314][ T1211] megaworld 0003:07B5:0312.0005: probe with driver megaworld failed with error -22 [ 121.589716][ T5888] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 121.600810][ T6463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.610238][ T6463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.619055][ T5888] usb 3-1: device descriptor read/8, error -71 [ 121.672634][ T5896] usb 4-1: USB disconnect, device number 14 [ 121.731679][ T5888] usb usb3-port1: unable to enumerate USB device [ 122.017667][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 122.627854][ T5874] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 122.777745][ T5874] usb 4-1: Using ep0 maxpacket: 16 [ 122.784935][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.796111][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.805983][ T5874] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 122.815265][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.826332][ T5874] usb 4-1: config 0 descriptor?? [ 123.184917][ T6478] FAT-fs (rnullb0): bogus number of reserved sectors [ 123.192096][ T6478] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 123.840715][ T43] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input8 [ 123.846279][ T6489] program syz.0.178 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 123.905323][ T43] usb 2-1: USB disconnect, device number 10 [ 124.267421][ T6502] kvm: MWAIT instruction emulated as NOP! [ 124.420498][ T51] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 124.432106][ T51] Bluetooth: hci3: Injecting HCI hardware error event [ 124.440436][ T51] Bluetooth: hci3: hardware error 0x00 [ 124.677746][ T863] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 124.837707][ T863] usb 2-1: Using ep0 maxpacket: 8 [ 124.850355][ T863] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 124.867622][ T863] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 124.927650][ T863] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 124.944336][ T863] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 124.958938][ T863] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 124.968245][ T863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.222065][ T30] audit: type=1326 audit(1750945053.193:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6527 comm="syz.2.189" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f631c58e929 code=0x0 [ 125.243930][ T6508] ======================================================= [ 125.243930][ T6508] WARNING: The mand mount option has been deprecated and [ 125.243930][ T6508] and is ignored by this kernel. Remove the mand [ 125.243930][ T6508] option from the mount to silence this warning. [ 125.243930][ T6508] ======================================================= [ 125.286330][ T6529] overlayfs: overlapping lowerdir path [ 125.295791][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 125.320663][ T863] usb 2-1: GET_CAPABILITIES returned 0 [ 125.327683][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 125.347080][ T863] usbtmc 2-1:16.0: can't read capabilities [ 125.421718][ T5874] usbhid 4-1:0.0: can't add hid device: -71 [ 125.430739][ T5874] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 125.443087][ T5874] usb 4-1: USB disconnect, device number 15 [ 125.531775][ T863] usb 2-1: USB disconnect, device number 11 [ 125.741031][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 125.792722][ T6538] netlink: 'syz.0.191': attribute type 1 has an invalid length. [ 126.101917][ T6549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.133447][ T6549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.195676][ T3550] Bluetooth: hci4: Frame reassembly failed (-84) [ 126.314772][ T6557] kvm: pic: non byte write [ 126.338775][ T863] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 126.358082][ T6553] kvm: vcpu 0: requested 64 ns lapic timer period limited to 200000 ns [ 126.408999][ T5843] Bluetooth: hci2: unexpected event 0x01 length: 4 > 1 [ 126.498308][ T51] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 126.500433][ T863] usb 1-1: device descriptor read/64, error -71 [ 126.754949][ T6574] overlayfs: conflicting lowerdir path [ 126.798691][ T863] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 126.927738][ T863] usb 1-1: device descriptor read/64, error -71 [ 127.040402][ T863] usb usb1-port1: attempt power cycle [ 127.047786][ T5874] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 127.209713][ T5874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 127.221597][ T5874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.231447][ T5874] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 127.243171][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.255678][ T5874] usb 2-1: config 0 descriptor?? [ 127.265430][ T5874] hub 2-1:0.0: USB hub found [ 127.378411][ T43] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 127.387688][ T863] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 127.408412][ T863] usb 1-1: device descriptor read/8, error -71 [ 127.465481][ T5874] hub 2-1:0.0: config failed, can't read hub descriptor (err -90) [ 127.507791][ T43] usb 3-1: device descriptor read/64, error -71 [ 127.657768][ T863] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 127.675758][ T6574] binder: 6573:6574 ioctl c0286405 200000000800 returned -22 [ 127.678427][ T863] usb 1-1: device descriptor read/8, error -71 [ 127.693387][ T5874] usbhid 2-1:0.0: can't add hid device: -71 [ 127.701394][ T5874] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 127.728447][ T5874] usb 2-1: USB disconnect, device number 12 [ 127.747873][ T43] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 127.808120][ T863] usb usb1-port1: unable to enumerate USB device [ 127.877782][ T43] usb 3-1: device descriptor read/64, error -71 [ 127.987972][ T43] usb usb3-port1: attempt power cycle [ 128.259106][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 128.266207][ T5840] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 128.328029][ T43] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 128.381793][ T43] usb 3-1: device descriptor read/8, error -71 [ 128.627702][ T43] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 128.660061][ T43] usb 3-1: device descriptor read/8, error -71 [ 128.769333][ T43] usb usb3-port1: unable to enumerate USB device [ 128.927680][ T1211] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 129.098713][ T1211] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 129.104707][ T6604] pimreg3: entered allmulticast mode [ 129.106396][ T1211] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 129.124114][ T1211] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 129.142718][ T1211] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 129.147150][ T6604] NILFS (rnullb0): couldn't find nilfs on the device [ 129.154548][ T1211] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 129.202740][ T1211] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 129.213052][ T1211] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 129.253863][ T1211] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 129.290660][ T1211] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 129.302994][ T1211] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 129.316460][ T1211] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 129.326798][ T1211] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 129.341808][ T1211] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 129.354603][ T1211] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 129.371358][ T1211] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 129.386894][ T1211] usb 2-1: string descriptor 0 read error: -22 [ 129.393762][ T1211] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 129.403205][ T1211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.428918][ T1211] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 129.661279][ T6612] syz.3.215: attempt to access beyond end of device [ 129.661279][ T6612] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 129.675673][ T6612] SQUASHFS error: Failed to read block 0x0: -5 [ 129.682178][ T6612] unable to read squashfs_super_block [ 130.957662][ T5874] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 131.078016][ T43] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 131.110823][ T5874] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 131.120871][ T5874] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.133988][ T5874] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 131.143247][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.228448][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 131.244164][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.262376][ T43] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.273567][ T43] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.286424][ T43] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 131.299801][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 131.317663][ T43] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 131.326803][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.352454][ T43] usb 1-1: config 0 descriptor?? [ 131.381365][ T5874] usb 4-1: usb_control_msg returned -32 [ 131.387104][ T5874] usbtmc 4-1:16.0: can't read capabilities [ 131.596212][ T6641] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 131.706435][ T5874] usb 2-1: USB disconnect, device number 13 [ 131.770942][ T43] hid_parser_main: 1 callbacks suppressed [ 131.770966][ T43] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 131.820690][ T43] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 131.846980][ T43] hid-thrustmaster 0003:044F:B65D.0006: item fetching failed at offset 2/5 [ 131.878485][ T43] hid-thrustmaster 0003:044F:B65D.0006: parse failed with error -22 [ 131.886631][ T43] hid-thrustmaster 0003:044F:B65D.0006: probe with driver hid-thrustmaster failed with error -22 [ 132.163774][ T5888] usb 1-1: USB disconnect, device number 12 [ 132.181653][ T1211] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 132.347619][ T1211] usb 3-1: Using ep0 maxpacket: 8 [ 132.359167][ T1211] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 132.377644][ T1211] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 132.390919][ T1211] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 132.401583][ T1211] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.425426][ T1211] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 132.436216][ T1211] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.656089][ T1211] usb 3-1: GET_CAPABILITIES returned 0 [ 132.668128][ T1211] usbtmc 3-1:16.0: can't read capabilities [ 132.822613][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.830129][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.870179][ T43] usb 3-1: USB disconnect, device number 13 [ 133.600378][ T6673] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 133.607347][ T6673] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 133.619499][ T6673] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 133.628030][ T6673] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 133.634116][ T6673] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 133.644678][ T6673] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 133.714804][ T6680] bpq0: entered promiscuous mode [ 133.870923][ T5888] usb 4-1: USB disconnect, device number 16 [ 133.918135][ T1211] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 134.057642][ T1211] usb 3-1: device descriptor read/64, error -71 [ 134.214268][ T6697] binder: 6696:6697 ioctl c0306201 200000001900 returned -14 [ 134.290608][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 134.319339][ T1211] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 134.458274][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 134.466257][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.477337][ T1211] usb 3-1: device descriptor read/64, error -71 [ 134.483839][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.503437][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 134.512701][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.522611][ T10] usb 1-1: Product: syz [ 134.529406][ T10] usb 1-1: Manufacturer: syz [ 134.534068][ T10] usb 1-1: SerialNumber: syz [ 134.550934][ T10] usb 1-1: selecting invalid altsetting 1 [ 134.589041][ T1211] usb usb3-port1: attempt power cycle [ 134.928054][ T1211] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 134.983133][ T1211] usb 3-1: device descriptor read/8, error -71 [ 135.259355][ T1211] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 135.280316][ T1211] usb 3-1: device descriptor read/8, error -71 [ 135.369570][ T10] cdc_ncm 1-1:1.0: SET_NTB_FORMAT failed [ 135.398119][ T1211] usb usb3-port1: unable to enumerate USB device [ 135.404660][ T10] usb 1-1: selecting invalid altsetting 1 [ 135.427685][ T10] cdc_ncm 1-1:1.0: bind() failure [ 135.473575][ T10] usb 1-1: USB disconnect, device number 13 [ 135.537732][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 135.673296][ T43] IPVS: starting estimator thread 0... [ 135.697750][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 135.778468][ T6718] IPVS: using max 25 ests per chain, 60000 per kthread [ 136.195356][ T6736] /dev/rnullb0: Can't open blockdev [ 136.297679][ T43] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 136.427734][ T5874] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 136.435431][ T43] usb 4-1: device descriptor read/64, error -71 [ 136.567645][ T5874] usb 1-1: device descriptor read/64, error -71 [ 136.687936][ T43] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 136.807708][ T5874] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 136.827728][ T43] usb 4-1: device descriptor read/64, error -71 [ 136.886772][ T6740] loop6: detected capacity change from 0 to 2560 [ 136.899985][ T6740] Buffer I/O error on dev loop6, logical block 0, async page read [ 136.908544][ T6740] Buffer I/O error on dev loop6, logical block 0, async page read [ 136.916544][ T6740] Buffer I/O error on dev loop6, logical block 0, async page read [ 136.924726][ T6740] Buffer I/O error on dev loop6, logical block 0, async page read [ 136.932955][ T6740] Buffer I/O error on dev loop6, logical block 0, async page read [ 136.937668][ T5874] usb 1-1: device descriptor read/64, error -71 [ 136.942616][ T6740] Buffer I/O error on dev loop6, logical block 0, async page read [ 136.960778][ T43] usb usb4-port1: attempt power cycle [ 136.967894][ T6740] Buffer I/O error on dev loop6, logical block 0, async page read [ 137.021826][ T6740] Buffer I/O error on dev loop6, logical block 0, async page read [ 137.026663][ T6743] qnx4: no qnx4 filesystem (no root dir). [ 137.036240][ T6740] ldm_validate_partition_table(): Disk read failed. [ 137.060187][ T6740] Buffer I/O error on dev loop6, logical block 0, async page read [ 137.070288][ T5874] usb usb1-port1: attempt power cycle [ 137.077934][ T6740] Buffer I/O error on dev loop6, logical block 0, async page read [ 137.108825][ T6740] Dev loop6: unable to read RDB block 0 [ 137.119413][ T6740] loop6: unable to read partition table [ 137.126372][ T6740] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 137.297755][ T43] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 137.319231][ T43] usb 4-1: device descriptor read/8, error -71 [ 137.377686][ T863] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 137.420123][ T5874] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 137.448474][ T5874] usb 1-1: device descriptor read/8, error -71 [ 137.527660][ T863] usb 2-1: Using ep0 maxpacket: 8 [ 137.534810][ T863] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 137.544957][ T863] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 137.555083][ T5847] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 137.562790][ T863] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 40224, setting to 1024 [ 137.574131][ T43] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 137.583172][ T863] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 137.593921][ T863] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 137.608480][ T863] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 137.618365][ T863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.626507][ T43] usb 4-1: device descriptor read/8, error -71 [ 137.628129][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 137.707769][ T5874] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 137.727668][ T5847] usb 3-1: Using ep0 maxpacket: 8 [ 137.733970][ T5874] usb 1-1: device descriptor read/8, error -71 [ 137.743003][ T5847] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 137.750592][ T43] usb usb4-port1: unable to enumerate USB device [ 137.757134][ T5847] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 137.769085][ T5847] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 137.781000][ T5847] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 137.787664][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 137.792184][ T5847] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 137.812045][ T5847] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 137.819584][ T5847] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 137.830965][ T5847] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 137.842801][ T5847] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 137.859458][ T5874] usb usb1-port1: unable to enumerate USB device [ 137.866009][ T5847] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 137.879449][ T863] usb 2-1: GET_CAPABILITIES returned 0 [ 137.885026][ T863] usbtmc 2-1:16.0: can't read capabilities [ 137.893751][ T5847] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 137.913184][ T5847] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 137.934252][ T5847] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 137.946266][ T5847] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 137.957445][ T5847] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 137.972508][ T5847] usb 3-1: string descriptor 0 read error: -22 [ 137.978963][ T5847] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 137.988659][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.009622][ T5847] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 138.094366][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 138.105317][ T10] usb 2-1: USB disconnect, device number 14 [ 138.470130][ T51] Bluetooth: hci2: unexpected event for opcode 0x0c03 [ 138.681982][ T6752] FAULT_INJECTION: forcing a failure. [ 138.681982][ T6752] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 138.697337][ T6752] CPU: 1 UID: 0 PID: 6752 Comm: syz.1.267 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) [ 138.697359][ T6752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 138.697369][ T6752] Call Trace: [ 138.697375][ T6752] [ 138.697381][ T6752] dump_stack_lvl+0x189/0x250 [ 138.697413][ T6752] ? __pfx____ratelimit+0x10/0x10 [ 138.697430][ T6752] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.697447][ T6752] ? __pfx__printk+0x10/0x10 [ 138.697466][ T6752] ? fs_reclaim_acquire+0x7d/0x100 [ 138.697491][ T6752] should_fail_ex+0x414/0x560 [ 138.697533][ T6752] prepare_alloc_pages+0x213/0x610 [ 138.697567][ T6752] __alloc_frozen_pages_noprof+0x123/0x370 [ 138.697598][ T6752] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 138.697633][ T6752] ? policy_nodemask+0x27c/0x720 [ 138.697661][ T6752] alloc_pages_mpol+0x232/0x4a0 [ 138.697689][ T6752] folio_alloc_mpol_noprof+0x39/0x70 [ 138.697715][ T6752] shmem_alloc_and_add_folio+0x447/0xf60 [ 138.697741][ T6752] ? filemap_get_entry+0xad/0x2f0 [ 138.697766][ T6752] ? filemap_get_entry+0xad/0x2f0 [ 138.697789][ T6752] ? filemap_get_entry+0xad/0x2f0 [ 138.697816][ T6752] ? filemap_get_entry+0x28f/0x2f0 [ 138.697845][ T6752] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 138.697873][ T6752] ? shmem_allowable_huge_orders+0x1f8/0x420 [ 138.697913][ T6752] shmem_get_folio_gfp+0x59d/0x1660 [ 138.697961][ T6752] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 138.698000][ T6752] shmem_write_begin+0xf7/0x2b0 [ 138.698029][ T6752] generic_perform_write+0x2c4/0x910 [ 138.698075][ T6752] ? __pfx_generic_perform_write+0x10/0x10 [ 138.698114][ T6752] ? file_update_time+0x2da/0x490 [ 138.698152][ T6752] shmem_file_write_iter+0xf8/0x120 [ 138.698178][ T6752] vfs_write+0x548/0xa90 [ 138.698206][ T6752] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 138.698230][ T6752] ? __pfx_vfs_write+0x10/0x10 [ 138.698265][ T6752] ? __fget_files+0x2a/0x420 [ 138.698303][ T6752] ksys_write+0x145/0x250 [ 138.698328][ T6752] ? __pfx_ksys_write+0x10/0x10 [ 138.698348][ T6752] ? rcu_is_watching+0x15/0xb0 [ 138.698375][ T6752] ? do_syscall_64+0xbe/0x3b0 [ 138.698405][ T6752] do_syscall_64+0xfa/0x3b0 [ 138.698427][ T6752] ? lockdep_hardirqs_on+0x9c/0x150 [ 138.698449][ T6752] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.698471][ T6752] ? clear_bhb_loop+0x60/0xb0 [ 138.698497][ T6752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.698517][ T6752] RIP: 0033:0x7f794c78e929 [ 138.698543][ T6752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.698561][ T6752] RSP: 002b:00007f794d6d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 138.698591][ T6752] RAX: ffffffffffffffda RBX: 00007f794c9b5fa0 RCX: 00007f794c78e929 [ 138.698607][ T6752] RDX: 000000000000000e RSI: 0000200000000200 RDI: 0000000000000003 [ 138.698620][ T6752] RBP: 00007f794d6d7090 R08: 0000000000000000 R09: 0000000000000000 [ 138.698632][ T6752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.698645][ T6752] R13: 0000000000000000 R14: 00007f794c9b5fa0 R15: 00007ffd965e4ff8 [ 138.698678][ T6752] [ 139.190340][ T6759] tls_set_device_offload_rx: netdev not found [ 139.232416][ T6760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.271'. [ 139.698226][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 139.877804][ T863] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 140.029839][ T863] usb 2-1: config 1 interface 0 has no altsetting 0 [ 140.038472][ T863] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 140.047768][ T863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.058008][ T863] usb 2-1: Product: syz [ 140.062657][ T863] usb 2-1: Manufacturer: syz [ 140.067290][ T863] usb 2-1: SerialNumber: syz [ 140.320109][ T5874] usb 3-1: USB disconnect, device number 18 [ 140.367668][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 140.528510][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 140.538687][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 140.557113][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 140.587426][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 40224, setting to 1024 [ 140.617710][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 140.637209][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.673488][ T6787] vcan0: tx drop: invalid da for name 0x0000000000feffff [ 140.685777][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 140.697063][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.930280][ T10] usb 4-1: GET_CAPABILITIES returned 0 [ 140.936327][ T10] usbtmc 4-1:16.0: can't read capabilities [ 141.166576][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 141.187154][ T10] usb 4-1: USB disconnect, device number 21 [ 141.921555][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802c204400: rx timeout, send abort [ 142.017833][ T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 142.031799][ T6799] syz.0.284: attempt to access beyond end of device [ 142.031799][ T6799] loop0: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 142.045319][ T6799] EXT4-fs (loop0): unable to read superblock [ 142.180795][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.193845][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 142.206156][ T10] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 142.217438][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 142.225660][ T10] usb 4-1: SerialNumber: syz [ 142.430986][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802c204400: abort rx timeout. Force session deactivation [ 142.455773][ T10] usb 4-1: 0:2 : does not exist [ 142.469204][ T10] usb 4-1: unit 5 not found! [ 142.538036][ T10] usb 4-1: USB disconnect, device number 22 [ 142.604259][ T5833] udevd[5833]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.701010][ T6806] fuse: Unknown parameter 'rootJode' [ 142.723244][ T863] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 142.769241][ T863] usb 2-1: USB disconnect, device number 15 [ 142.809666][ T863] usblp0: removed [ 142.922645][ T6812] loop7: detected capacity change from 0 to 1 [ 142.931294][ T6813] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 143.145449][ T6821] tipc: Started in network mode [ 143.152809][ T6821] tipc: Node identity 4, cluster identity 4711 [ 143.161154][ T6821] tipc: Node number set to 4 [ 143.387777][ T1211] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 143.408807][ T863] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 143.567643][ T863] usb 2-1: Using ep0 maxpacket: 8 [ 143.567658][ T1211] usb 1-1: Using ep0 maxpacket: 8 [ 143.569863][ T1211] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 143.583575][ T863] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 143.598763][ T1211] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 143.598799][ T1211] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 40224, setting to 1024 [ 143.598829][ T1211] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 143.598854][ T1211] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.598900][ T1211] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 143.598927][ T1211] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.697160][ T863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.712050][ T863] usb 2-1: Product: syz [ 143.716300][ T863] usb 2-1: Manufacturer: syz [ 143.722840][ T863] usb 2-1: SerialNumber: syz [ 143.753952][ T863] usb 2-1: config 0 descriptor?? [ 143.780040][ T863] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 143.827167][ T1211] usb 1-1: GET_CAPABILITIES returned 0 [ 143.841470][ T1211] usbtmc 1-1:16.0: can't read capabilities [ 144.063426][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 144.101628][ T1211] usb 1-1: USB disconnect, device number 18 [ 144.374456][ T6845] netlink: 32 bytes leftover after parsing attributes in process `syz.2.302'. [ 145.767634][ T10] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 145.897653][ T10] usb 1-1: device descriptor read/64, error -71 [ 146.147754][ T10] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 146.297703][ T10] usb 1-1: device descriptor read/64, error -71 [ 146.389761][ T6900] tmpfs: Unknown parameter '-rjf;r[ ' [ 146.410421][ T10] usb usb1-port1: attempt power cycle [ 146.612822][ T863] gspca_sonixj: i2c_w8 err -71 [ 146.657845][ T863] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 146.669129][ T863] usb 2-1: USB disconnect, device number 16 [ 146.748450][ T10] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 146.768361][ T10] usb 1-1: device descriptor read/8, error -71 [ 147.017749][ T10] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 147.050618][ T10] usb 1-1: device descriptor read/8, error -71 [ 147.100621][ T6915] hfs: can't find a HFS filesystem on dev rnullb0 [ 147.158656][ T10] usb usb1-port1: unable to enumerate USB device [ 147.306224][ T6923] netlink: 1144 bytes leftover after parsing attributes in process `syz.1.325'. [ 147.448820][ T6934] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 147.627797][ T10] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 147.710455][ T6936] netlink: 60 bytes leftover after parsing attributes in process `syz.2.329'. [ 147.720938][ T6936] netlink: 60 bytes leftover after parsing attributes in process `syz.2.329'. [ 147.731873][ T6936] netlink: 60 bytes leftover after parsing attributes in process `syz.2.329'. [ 147.751749][ T6936] netlink: 12 bytes leftover after parsing attributes in process `syz.2.329'. [ 147.764656][ T6936] overlayfs: failed to resolve './file0': -2 [ 147.799634][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.811570][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 147.822630][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 147.840818][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 147.851442][ T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 147.863899][ T10] usb 2-1: Manufacturer: syz [ 147.871538][ T10] usb 2-1: config 0 descriptor?? [ 147.984682][ T6939] hfs: can't find a HFS filesystem on dev rnullb0 [ 148.755512][ T6964] FAULT_INJECTION: forcing a failure. [ 148.755512][ T6964] name failslab, interval 1, probability 0, space 0, times 0 [ 148.787925][ T6964] CPU: 1 UID: 0 PID: 6964 Comm: syz.0.334 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) [ 148.787957][ T6964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 148.787970][ T6964] Call Trace: [ 148.787978][ T6964] [ 148.787986][ T6964] dump_stack_lvl+0x189/0x250 [ 148.788015][ T6964] ? __pfx____ratelimit+0x10/0x10 [ 148.788040][ T6964] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.788064][ T6964] ? __pfx__printk+0x10/0x10 [ 148.788096][ T6964] ? __ip_dev_find+0x444/0x4e0 [ 148.788129][ T6964] should_fail_ex+0x414/0x560 [ 148.788169][ T6964] should_failslab+0xa8/0x100 [ 148.788195][ T6964] kmem_cache_alloc_noprof+0x73/0x3c0 [ 148.788236][ T6964] ? dst_alloc+0x105/0x170 [ 148.788273][ T6964] dst_alloc+0x105/0x170 [ 148.788302][ T6964] ? ip_check_mc_rcu+0x4c7/0x680 [ 148.788338][ T6964] ip_route_output_key_hash_rcu+0x1482/0x23a0 [ 148.788376][ T6964] ? find_exception+0x6a5/0xa00 [ 148.788409][ T6964] ? ip_route_output_key_hash+0xde/0x2e0 [ 148.788443][ T6964] ip_route_output_key_hash+0x1b9/0x2e0 [ 148.788475][ T6964] ? __lock_acquire+0xab9/0xd20 [ 148.788510][ T6964] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 148.788562][ T6964] ip_route_output_flow+0x2a/0x150 [ 148.788590][ T6964] ? security_sk_classify_flow+0x70/0x180 [ 148.788627][ T6964] udp_sendmsg+0x140c/0x2300 [ 148.788652][ T6964] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 148.788687][ T6964] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 148.788720][ T6964] ? __pfx_udp_sendmsg+0x10/0x10 [ 148.788750][ T6964] ? count_memcg_event_mm+0x21/0x260 [ 148.788790][ T6964] ? count_memcg_event_mm+0x21/0x260 [ 148.788836][ T6964] ? __pfx_aa_sk_perm+0x10/0x10 [ 148.788857][ T6964] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 148.788889][ T6964] ? sock_rps_record_flow+0x19/0x410 [ 148.788914][ T6964] ? inet_sendmsg+0x29c/0x370 [ 148.788933][ T6964] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 148.788966][ T6964] __sock_sendmsg+0x19c/0x270 [ 148.788992][ T6964] ____sys_sendmsg+0x52d/0x830 [ 148.789029][ T6964] ? __pfx_____sys_sendmsg+0x10/0x10 [ 148.789070][ T6964] ? import_iovec+0x74/0xa0 [ 148.789095][ T6964] ___sys_sendmsg+0x21f/0x2a0 [ 148.789129][ T6964] ? __pfx____sys_sendmsg+0x10/0x10 [ 148.789200][ T6964] ? __fget_files+0x2a/0x420 [ 148.789233][ T6964] ? __fget_files+0x3a0/0x420 [ 148.789273][ T6964] __sys_sendmmsg+0x227/0x430 [ 148.789310][ T6964] ? __pfx___sys_sendmmsg+0x10/0x10 [ 148.789337][ T6964] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 148.789392][ T6964] ? ksys_write+0x22a/0x250 [ 148.789419][ T6964] ? __pfx_ksys_write+0x10/0x10 [ 148.789439][ T6964] ? rcu_is_watching+0x15/0xb0 [ 148.789468][ T6964] __x64_sys_sendmmsg+0xa0/0xc0 [ 148.789501][ T6964] do_syscall_64+0xfa/0x3b0 [ 148.789524][ T6964] ? lockdep_hardirqs_on+0x9c/0x150 [ 148.789547][ T6964] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.789568][ T6964] ? clear_bhb_loop+0x60/0xb0 [ 148.789595][ T6964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.789616][ T6964] RIP: 0033:0x7f342f78e929 [ 148.789635][ T6964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.789653][ T6964] RSP: 002b:00007f342d5d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 148.789676][ T6964] RAX: ffffffffffffffda RBX: 00007f342f9b6080 RCX: 00007f342f78e929 [ 148.789692][ T6964] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000004 [ 148.789706][ T6964] RBP: 00007f342d5d5090 R08: 0000000000000000 R09: 0000000000000000 [ 148.789719][ T6964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.789732][ T6964] R13: 0000000000000000 R14: 00007f342f9b6080 R15: 00007ffc2be5ba88 [ 148.789765][ T6964] [ 149.700787][ T6986] FAULT_INJECTION: forcing a failure. [ 149.700787][ T6986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.714282][ T6986] CPU: 1 UID: 0 PID: 6986 Comm: syz.0.337 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) [ 149.714312][ T6986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 149.714326][ T6986] Call Trace: [ 149.714334][ T6986] [ 149.714342][ T6986] dump_stack_lvl+0x189/0x250 [ 149.714373][ T6986] ? __pfx____ratelimit+0x10/0x10 [ 149.714396][ T6986] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.714420][ T6986] ? __pfx__printk+0x10/0x10 [ 149.714443][ T6986] ? __might_fault+0xb0/0x130 [ 149.714474][ T6986] should_fail_ex+0x414/0x560 [ 149.714513][ T6986] _copy_from_user+0x2d/0xb0 [ 149.714534][ T6986] ___sys_sendmsg+0x158/0x2a0 [ 149.714569][ T6986] ? __pfx____sys_sendmsg+0x10/0x10 [ 149.714636][ T6986] ? __fget_files+0x2a/0x420 [ 149.714662][ T6986] ? __fget_files+0x3a0/0x420 [ 149.714698][ T6986] __x64_sys_sendmsg+0x19b/0x260 [ 149.714732][ T6986] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 149.714770][ T6986] ? __pfx_ksys_write+0x10/0x10 [ 149.714789][ T6986] ? rcu_is_watching+0x15/0xb0 [ 149.714815][ T6986] ? do_syscall_64+0xbe/0x3b0 [ 149.714842][ T6986] do_syscall_64+0xfa/0x3b0 [ 149.714865][ T6986] ? lockdep_hardirqs_on+0x9c/0x150 [ 149.714886][ T6986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.714905][ T6986] ? clear_bhb_loop+0x60/0xb0 [ 149.714931][ T6986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.714951][ T6986] RIP: 0033:0x7f342f78e929 [ 149.714969][ T6986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.714985][ T6986] RSP: 002b:00007f342d5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.715007][ T6986] RAX: ffffffffffffffda RBX: 00007f342f9b5fa0 RCX: 00007f342f78e929 [ 149.715023][ T6986] RDX: 0000000020000000 RSI: 00002000000019c0 RDI: 0000000000000003 [ 149.715037][ T6986] RBP: 00007f342d5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 149.715049][ T6986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.715061][ T6986] R13: 0000000000000000 R14: 00007f342f9b5fa0 R15: 00007ffc2be5ba88 [ 149.715092][ T6986] [ 150.141673][ T6992] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.330198][ T5847] usb 2-1: USB disconnect, device number 17 [ 150.731547][ T7012] binder: 7011:7012 unknown command 0 [ 150.737008][ T7012] binder: 7011:7012 ioctl c0306201 2000000003c0 returned -22 [ 150.870007][ T1211] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 151.037877][ T1211] usb 2-1: Using ep0 maxpacket: 16 [ 151.047494][ T1211] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 151.056174][ T1211] usb 2-1: config 0 has no interface number 0 [ 151.062728][ T1211] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 151.072779][ T1211] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 151.082763][ T1211] usb 2-1: config 0 interface 41 has no altsetting 0 [ 151.091938][ T1211] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 151.097780][ T5847] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 151.101080][ T1211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.117252][ T1211] usb 2-1: Product: syz [ 151.121566][ T1211] usb 2-1: Manufacturer: syz [ 151.126374][ T1211] usb 2-1: SerialNumber: syz [ 151.134372][ T1211] usb 2-1: config 0 descriptor?? [ 151.153437][ T7007] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 151.161339][ T7007] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 151.180553][ T863] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 151.291347][ T5847] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 151.300206][ T5847] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 151.308820][ T5847] usb 3-1: config 0 has no interface number 0 [ 151.315008][ T5847] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 151.333291][ T5847] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 151.343610][ T5847] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 151.352872][ T863] usb 1-1: Using ep0 maxpacket: 16 [ 151.358336][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.377092][ T7007] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 151.389717][ T5847] usb 3-1: config 0 descriptor?? [ 151.400292][ T7007] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 151.636690][ T7019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.650880][ T7019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.899193][ T1211] Error reading MAC address [ 151.906936][ T7007] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 152.054579][ T5847] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.21/input/input9 [ 152.070681][ T7007] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 152.109522][ T5847] input: failed to attach handler kbd to device input9, error: -5 [ 152.261034][ T5847] usb 3-1: USB disconnect, device number 19 [ 152.527344][ T1211] sr9700 2-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 152.592758][ T863] usb 1-1: unable to get BOS descriptor or descriptor too short [ 152.618208][ T863] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 152.637355][ T863] usb 1-1: can't read configurations, error -71 [ 152.732182][ T7007] netlink: 'syz.1.345': attribute type 21 has an invalid length. [ 152.740349][ T7007] IPv6: NLM_F_CREATE should be specified when creating new route [ 152.748661][ T7007] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 152.756253][ T7007] IPv6: NLM_F_CREATE should be set when creating new route [ 152.763655][ T7007] IPv6: NLM_F_CREATE should be set when creating new route [ 152.770972][ T7007] IPv6: NLM_F_CREATE should be set when creating new route [ 152.781600][ T5896] usb 2-1: USB disconnect, device number 18 [ 152.857703][ T1211] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 153.010623][ T863] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 153.013503][ T1211] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 153.031230][ T1211] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 153.041604][ T1211] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 153.054067][ T1211] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 153.070830][ T1211] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 153.084705][ T1211] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 153.094682][ T1211] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 153.102808][ T1211] usb 4-1: Product: syz [ 153.110604][ T1211] usb 4-1: Manufacturer: syz [ 153.122161][ T1211] cdc_wdm 4-1:1.0: skipping garbage [ 153.128214][ T1211] cdc_wdm 4-1:1.0: skipping garbage [ 153.135538][ T1211] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 153.141702][ T1211] cdc_wdm 4-1:1.0: Unknown control protocol [ 153.200561][ T863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.212684][ T863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.222713][ T863] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 153.232057][ T863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.242803][ T863] usb 1-1: config 0 descriptor?? [ 153.348439][ T5847] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 153.530221][ T5847] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.541595][ T5847] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 153.553048][ T5847] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 153.562828][ T5847] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 153.582523][ T5847] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 153.591767][ T5847] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 153.599952][ T5847] usb 3-1: Manufacturer: syz [ 153.609051][ T5847] usb 3-1: config 0 descriptor?? [ 153.627694][ T1211] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 153.790147][ T1211] usb 2-1: Using ep0 maxpacket: 16 [ 153.798139][ T1211] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 153.814863][ T1211] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 153.824051][ T1211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.832240][ T1211] usb 2-1: Product: syz [ 153.836465][ T1211] usb 2-1: Manufacturer: syz [ 153.841211][ T1211] usb 2-1: SerialNumber: syz [ 153.849813][ T1211] usb 2-1: config 0 descriptor?? [ 153.868432][ T1211] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 153.868667][ T863] hid (null): global environment stack underflow [ 153.879141][ T1211] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 153.912810][ T863] hid-steam 0003:28DE:1142.0007: global environment stack underflow [ 153.921704][ T863] hid-steam 0003:28DE:1142.0007: item 0 0 1 11 parsing failed [ 153.930899][ T863] hid-steam 0003:28DE:1142.0007: steam_probe:parse of hid interface failed [ 153.941852][ T863] hid-steam 0003:28DE:1142.0007: probe with driver hid-steam failed with error -22 [ 153.951652][ T5847] rc_core: IR keymap rc-hauppauge not found [ 153.958111][ T5847] Registered IR keymap rc-empty [ 153.965171][ T5847] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 153.987745][ T5847] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 154.009445][ T5847] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 154.025846][ T5847] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input10 [ 154.051900][ T5847] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 154.077794][ T5847] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 154.101495][ T5847] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 154.130330][ T5847] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 154.158749][ T5847] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 154.177984][ T5847] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 154.207850][ T5847] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 154.227845][ T5847] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 154.247736][ T5847] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 154.268434][ T5847] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 154.291261][ T5847] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 154.303693][ T5847] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 154.316962][ T5847] usb 3-1: USB disconnect, device number 20 [ 154.477184][ T1211] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 155.309710][ T1211] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 155.318881][ T1211] em28xx 2-1:0.0: board has no eeprom [ 155.387826][ T1211] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 155.395923][ T1211] em28xx 2-1:0.0: dvb set to bulk mode. [ 155.401643][ T5896] em28xx 2-1:0.0: Binding DVB extension [ 155.418063][ T1211] usb 2-1: USB disconnect, device number 19 [ 155.425212][ T1211] em28xx 2-1:0.0: Disconnecting em28xx [ 155.494552][ T5896] em28xx 2-1:0.0: Registering input extension [ 155.501911][ T1211] em28xx 2-1:0.0: Closing input extension [ 155.521622][ T1211] em28xx 2-1:0.0: Freeing device [ 155.615210][ T5847] usb 4-1: USB disconnect, device number 23 [ 155.660525][ T7035] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 155.797117][ T1211] usb 1-1: USB disconnect, device number 24 [ 155.836049][ T7067] capability: warning: `syz.3.360' uses 32-bit capabilities (legacy support in use) [ 155.953005][ T7070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.985074][ T7070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.023398][ T5847] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 156.024065][ T7070] fuse: Unknown parameter '/dev/snd/seq' [ 156.065276][ T5847] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 156.100891][ T7078] vxfs: WRONG superblock magic 00000000 at 1 [ 156.128082][ T7078] vxfs: WRONG superblock magic 00000000 at 8 [ 156.145364][ T7078] vxfs: can't find superblock. [ 156.305096][ T7083] netlink: 24 bytes leftover after parsing attributes in process `syz.2.365'. [ 156.547722][ T1211] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 156.730179][ T1211] usb 1-1: Using ep0 maxpacket: 32 [ 156.740535][ T1211] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 156.757674][ T1211] usb 1-1: config 0 has no interface number 0 [ 156.765572][ T1211] usb 1-1: config 0 interface 12 has no altsetting 0 [ 156.776324][ T1211] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 156.786548][ T1211] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.795134][ T1211] usb 1-1: Product: syz [ 156.800457][ T1211] usb 1-1: Manufacturer: syz [ 156.805481][ T1211] usb 1-1: SerialNumber: syz [ 156.816828][ T1211] usb 1-1: config 0 descriptor?? [ 157.157698][ T10] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 157.310453][ T10] usb 4-1: config index 0 descriptor too short (expected 3133, got 61) [ 157.318993][ T10] usb 4-1: config 0 has an invalid interface number: 156 but max is 1 [ 157.327234][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.338964][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 157.350549][ T10] usb 4-1: config 0 has no interface number 0 [ 157.356708][ T10] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 157.368529][ T10] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 157.378684][ T10] usb 4-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 157.391953][ T10] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 157.401387][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.413046][ T10] usb 4-1: config 0 descriptor?? [ 157.423090][ T10] gspca_main: spca561-2.14.0 probing abcd:cdee [ 157.507827][ T43] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 157.625609][ T10] spca561 4-1:0.156: probe with driver spca561 failed with error -22 [ 157.644723][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 157.652439][ T10] usb 4-1: MIDIStreaming interface descriptor not found [ 157.662595][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 157.691727][ T43] usb 2-1: unable to get BOS descriptor or descriptor too short [ 157.718885][ T43] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 157.737673][ T43] usb 2-1: can't read configurations, error -71 [ 157.784949][ T10] usb 4-1: USB disconnect, device number 24 [ 158.131316][ T7117] syzkaller1: entered promiscuous mode [ 158.136857][ T7117] syzkaller1: entered allmulticast mode [ 158.470792][ T7126] kvm: pic: non byte write [ 158.574755][ T7130] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 158.831816][ T7136] netlink: 16 bytes leftover after parsing attributes in process `syz.1.383'. [ 158.853565][ T7136] tipc: Enabled bearer , priority 22 [ 159.036615][ T7141] evm: overlay not supported [ 159.287623][ T863] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 159.473984][ T863] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 159.483770][ T863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.494918][ T863] usb 3-1: Product: syz [ 159.499483][ T863] usb 3-1: Manufacturer: syz [ 159.504301][ T863] usb 3-1: SerialNumber: syz [ 159.521821][ T863] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 159.555216][ T43] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 159.933736][ T1211] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 159.946857][ T1211] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 159.971314][ T7141] program syz.2.385 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 159.981112][ T1211] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 160.000301][ T5888] usb 3-1: USB disconnect, device number 21 [ 160.016748][ T1211] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 160.079124][ T1211] usb 1-1: USB disconnect, device number 25 [ 160.359050][ T5847] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 160.781038][ T7165] netlink: 12 bytes leftover after parsing attributes in process `syz.2.394'. [ 160.790678][ T7166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.393'. [ 160.856869][ T7166] netlink: 'syz.0.393': attribute type 10 has an invalid length. [ 160.914415][ T43] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 160.923770][ T43] ath9k_htc: Failed to initialize the device [ 160.940681][ T5888] usb 3-1: ath9k_htc: USB layer deinitialized [ 160.956354][ T5847] usb 2-1: config index 0 descriptor too short (expected 3133, got 61) [ 160.965361][ T5847] usb 2-1: config 0 has an invalid interface number: 156 but max is 1 [ 160.987610][ T5847] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.027717][ T5847] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 161.036648][ T5847] usb 2-1: config 0 has no interface number 0 [ 161.052336][ T7166] veth0_vlan: left promiscuous mode [ 161.070119][ T5847] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 161.127655][ T5847] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 161.162056][ T7166] veth0_vlan: entered promiscuous mode [ 161.166315][ T5847] usb 2-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 161.194473][ T5847] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 161.217674][ T5847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.230402][ T5847] usb 2-1: config 0 descriptor?? [ 161.235231][ T7166] team0: Device veth0_vlan failed to register rx_handler [ 161.246518][ T5847] gspca_main: spca561-2.14.0 probing abcd:cdee [ 161.453611][ T5847] spca561 2-1:0.156: probe with driver spca561 failed with error -22 [ 161.478637][ T5847] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 161.497615][ T5847] usb 2-1: MIDIStreaming interface descriptor not found [ 161.602049][ T5847] usb 2-1: USB disconnect, device number 22 [ 162.253346][ T7183] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 162.274083][ T7183] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 162.747692][ T43] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 162.748695][ T7195] /dev/sg0: Can't lookup blockdev [ 162.917615][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 162.917712][ T5888] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 162.931420][ T43] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.954029][ T43] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 162.978315][ T43] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 163.000744][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.017699][ T43] usb 3-1: Product: syz [ 163.021942][ T43] usb 3-1: Manufacturer: syz [ 163.026579][ T43] usb 3-1: SerialNumber: syz [ 163.078692][ T5888] usb 2-1: Using ep0 maxpacket: 32 [ 163.086288][ T5888] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 163.104583][ T5888] usb 2-1: config 0 has no interface number 0 [ 163.120677][ T5888] usb 2-1: config 0 interface 12 has no altsetting 0 [ 163.144594][ T5888] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 163.162470][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.172177][ T5888] usb 2-1: Product: syz [ 163.176517][ T5888] usb 2-1: Manufacturer: syz [ 163.188174][ T5888] usb 2-1: SerialNumber: syz [ 163.206894][ T5888] usb 2-1: config 0 descriptor?? [ 163.450107][ T7185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.479858][ T7185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.568451][ T7185] netlink: 100 bytes leftover after parsing attributes in process `syz.2.398'. [ 163.838126][ T43] usb 3-1: cannot find UAC_HEADER [ 163.864016][ T43] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 163.878786][ T43] usb 3-1: USB disconnect, device number 22 [ 163.905300][ T6216] udevd[6216]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 164.028251][ T10] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 164.203602][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.214981][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.227268][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 164.240983][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 164.250695][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.270021][ T10] usb 1-1: config 0 descriptor?? [ 164.550813][ T7217] NILFS (rnullb0): couldn't find nilfs on the device [ 164.699590][ T7219] overlayfs: failed to resolve './file1/file0': -2 [ 164.711160][ T10] plantronics 0003:047F:FFFF.0009: report_id 3542678193 is invalid [ 164.730636][ T10] plantronics 0003:047F:FFFF.0009: item 0 4 1 8 parsing failed [ 164.766551][ T10] plantronics 0003:047F:FFFF.0009: parse failed [ 164.777792][ T10] plantronics 0003:047F:FFFF.0009: probe with driver plantronics failed with error -22 [ 164.911965][ T10] usb 1-1: USB disconnect, device number 26 [ 165.624628][ T30] audit: type=1326 audit(1750945093.593:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7229 comm="syz.3.415" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f26b1f8e929 code=0x0 [ 166.581211][ T5888] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -32 [ 166.627647][ T5888] f81534 2-1:0.12: f81534_find_config_idx: read failed: -32 [ 166.652504][ T5888] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 166.684556][ T5888] f81534 2-1:0.12: probe with driver f81534 failed with error -32 [ 166.728339][ T5888] usb 2-1: USB disconnect, device number 23 [ 167.157979][ T10] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 167.329783][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.347595][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.355125][ T7262] syzkaller1: entered promiscuous mode [ 167.368238][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 167.375532][ T7262] syzkaller1: entered allmulticast mode [ 167.394466][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 167.411721][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.431792][ T10] usb 1-1: config 0 descriptor?? [ 167.865430][ T10] plantronics 0003:047F:FFFF.000A: ignoring exceeding usage max [ 167.917610][ T10] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 168.130588][ T7242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.155041][ T7242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.225527][ T10] usb 1-1: USB disconnect, device number 27 [ 168.635087][ T59] tipc: Subscription rejected, illegal request [ 168.738020][ T30] audit: type=1326 audit(1750945096.713:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7286 comm="syz.2.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631c58e929 code=0x7ffc0000 [ 168.766691][ T30] audit: type=1326 audit(1750945096.733:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7286 comm="syz.2.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631c58e929 code=0x7ffc0000 [ 168.814455][ T30] audit: type=1326 audit(1750945096.763:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7286 comm="syz.2.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f631c58e929 code=0x7ffc0000 [ 168.846205][ T30] audit: type=1326 audit(1750945096.763:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7286 comm="syz.2.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631c58e929 code=0x7ffc0000 [ 168.895632][ T30] audit: type=1326 audit(1750945096.763:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7286 comm="syz.2.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631c58e929 code=0x7ffc0000 [ 168.953741][ T30] audit: type=1326 audit(1750945096.763:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7286 comm="syz.2.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f631c58e929 code=0x7ffc0000 [ 168.994383][ T7292] omfs: Invalid superblock (0) [ 169.037677][ T30] audit: type=1326 audit(1750945096.763:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7286 comm="syz.2.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631c58e929 code=0x7ffc0000 [ 169.117743][ T30] audit: type=1326 audit(1750945096.763:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7286 comm="syz.2.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f631c58e929 code=0x7ffc0000 [ 169.204229][ T7299] vxfs: WRONG superblock magic 00000000 at 1 [ 169.216503][ T30] audit: type=1326 audit(1750945096.763:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7286 comm="syz.2.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631c58e929 code=0x7ffc0000 [ 169.228270][ T7299] vxfs: WRONG superblock magic 00000000 at 8 [ 169.296343][ T7299] vxfs: can't find superblock. [ 169.565485][ T7313] tmpfs: Bad value for 'mpol' [ 169.634225][ T7316] netlink: 60 bytes leftover after parsing attributes in process `syz.0.444'. [ 169.659670][ T7316] netlink: 60 bytes leftover after parsing attributes in process `syz.0.444'. [ 169.681902][ T7316] netlink: 60 bytes leftover after parsing attributes in process `syz.0.444'. [ 169.710523][ T7316] overlayfs: overlapping lowerdir path [ 169.936777][ T7322] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/rnullb0": -EINTR [ 170.436394][ T7346] netlink: 'syz.2.453': attribute type 29 has an invalid length. [ 170.611023][ T43] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 170.769453][ T43] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 170.782687][ T43] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 170.792490][ T43] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.809527][ T43] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 170.821115][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.829271][ T43] usb 4-1: Product: syz [ 170.833465][ T43] usb 4-1: Manufacturer: syz [ 170.838167][ T43] usb 4-1: SerialNumber: syz [ 171.054922][ T43] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 171.590128][ T7363] Falling back ldisc for ptm0. [ 172.107729][ T10] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 172.272356][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.284837][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.294964][ T10] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 172.311829][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.324416][ T10] usb 3-1: config 0 descriptor?? [ 172.581191][ T7382] mmap: syz.0.466 (7382): VmData 37728256 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 172.747176][ T7371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.759871][ T7371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.769684][ T7386] can: request_module (can-proto-0) failed. [ 173.052133][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 173.058602][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 173.071966][ T10] usb 3-1: USB disconnect, device number 23 [ 173.421326][ T43] usb 4-1: USB disconnect, device number 25 [ 173.440985][ T43] usblp0: removed [ 173.648846][ T7400] fuse: Bad value for 'rootmode' [ 173.749518][ T7402] MTD: Couldn't look up '/dev/rnullb0': -15 [ 173.933130][ T7416] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.478'. [ 174.047627][ T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 174.210054][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 174.218981][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.231496][ T10] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 174.241165][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.253440][ T10] usb 3-1: config 0 descriptor?? [ 174.655776][ T7427] exFAT-fs (rnullb0): invalid boot record signature [ 174.663942][ T7427] exFAT-fs (rnullb0): failed to read boot sector [ 174.674910][ T7427] exFAT-fs (rnullb0): failed to recognize exfat type [ 174.686497][ T7427] configfs: Unknown parameter 'exfat' [ 174.694842][ T10] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 174.709396][ T10] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 174.717033][ T10] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 174.727931][ T10] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 174.735033][ T10] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 174.754414][ T10] mcp2221 0003:04D8:00DD.000B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 174.805832][ T7431] fuseblk: Bad value for 'fd' [ 174.934943][ T10] usb 3-1: USB disconnect, device number 24 [ 175.120486][ T7444] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.450064][ T43] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 175.617817][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 175.630612][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 175.643771][ T43] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 175.653223][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.664198][ T43] usb 4-1: Product: syz [ 175.678214][ T43] usb 4-1: Manufacturer: syz [ 175.687604][ T43] usb 4-1: SerialNumber: syz [ 175.716643][ T43] usb 4-1: config 0 descriptor?? [ 175.736665][ T43] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 175.747680][ T43] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 176.232353][ T7487] /dev/rnullb0: Can't lookup blockdev [ 176.278301][ T24] usb 3-1: new low-speed USB device number 25 using dummy_hcd [ 176.331284][ T43] em28xx 4-1:0.0: chip ID is em2874 [ 176.427928][ T24] usb 3-1: Invalid ep0 maxpacket: 32 [ 176.520286][ T10] Process accounting resumed [ 176.539555][ T7446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.551755][ T7446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.569971][ T24] usb 3-1: new low-speed USB device number 26 using dummy_hcd [ 176.632158][ T43] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 176.661100][ T43] em28xx 4-1:0.0: board has no eeprom [ 176.774303][ T7499] overlayfs: failed to clone lowerpath [ 176.783771][ T7499] overlayfs: failed to clone upperpath [ 176.851647][ T43] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 176.862713][ T43] em28xx 4-1:0.0: dvb set to bulk mode. [ 176.868469][ T863] em28xx 4-1:0.0: Binding DVB extension [ 176.878361][ T24] usb 3-1: Invalid ep0 maxpacket: 32 [ 176.887943][ T24] usb usb3-port1: attempt power cycle [ 176.898002][ T43] usb 4-1: USB disconnect, device number 26 [ 176.905623][ T43] em28xx 4-1:0.0: Disconnecting em28xx [ 176.968865][ T7505] netlink: 16 bytes leftover after parsing attributes in process `syz.0.513'. [ 177.015635][ T863] em28xx 4-1:0.0: Registering input extension [ 177.045244][ T7508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.514'. [ 177.118461][ T863] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 177.128249][ T863] Registered IR keymap rc-empty [ 177.139788][ T863] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 177.171596][ T863] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input13 [ 177.202522][ T863] em28xx 4-1:0.0: Input extension successfully initialized [ 177.212350][ T43] em28xx 4-1:0.0: Closing input extension [ 177.247732][ T24] usb 3-1: new low-speed USB device number 27 using dummy_hcd [ 177.289202][ T24] usb 3-1: Invalid ep0 maxpacket: 32 [ 177.354431][ T43] em28xx 4-1:0.0: Freeing device [ 177.419472][ T24] usb 3-1: new low-speed USB device number 28 using dummy_hcd [ 177.449985][ T24] usb 3-1: Invalid ep0 maxpacket: 32 [ 177.459521][ T24] usb usb3-port1: unable to enumerate USB device [ 177.525489][ T7523] trusted_key: syz.3.519 sent an empty control message without MSG_MORE. [ 179.232005][ T7569] /dev/rnullb0: Can't lookup blockdev [ 179.909962][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 179.909982][ T30] audit: type=1326 audit(1750945107.883:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.1.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f794c78e929 code=0x7ffc0000 [ 179.964055][ T30] audit: type=1326 audit(1750945107.883:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.1.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f794c78e929 code=0x7ffc0000 [ 179.987005][ T30] audit: type=1326 audit(1750945107.883:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.1.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f794c78e929 code=0x7ffc0000 [ 180.010337][ T30] audit: type=1326 audit(1750945107.883:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.1.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f794c78e929 code=0x7ffc0000 [ 180.047652][ T30] audit: type=1326 audit(1750945107.883:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.1.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f794c78e929 code=0x7ffc0000 [ 180.088004][ T30] audit: type=1326 audit(1750945107.883:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.1.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f794c78e929 code=0x7ffc0000 [ 180.134305][ T30] audit: type=1326 audit(1750945107.883:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.1.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f794c78e929 code=0x7ffc0000 [ 180.157231][ T30] audit: type=1326 audit(1750945107.883:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.1.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f794c78e929 code=0x7ffc0000 [ 180.181955][ T30] audit: type=1326 audit(1750945107.883:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.1.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f794c78e929 code=0x7ffc0000 [ 180.217867][ T30] audit: type=1326 audit(1750945107.883:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.1.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f794c78e929 code=0x7ffc0000 [ 181.431108][ T7603] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 181.449469][ T7603] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 181.997660][ T863] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 182.161673][ T863] usb 4-1: config 160 has an invalid interface number: 200 but max is 0 [ 182.170279][ T863] usb 4-1: config 160 has no interface number 0 [ 182.176600][ T863] usb 4-1: config 160 interface 200 has no altsetting 0 [ 182.186304][ T863] usb 4-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 182.196244][ T863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.204486][ T863] usb 4-1: Product: syz [ 182.209133][ T863] usb 4-1: Manufacturer: syz [ 182.213883][ T863] usb 4-1: SerialNumber: syz [ 182.453205][ T7616] /dev/rnullb0: Can't lookup blockdev [ 182.535214][ T863] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 182.562062][ T863] usb 4-1: MIDIStreaming interface descriptor not found [ 182.626268][ T7627] vcan0: entered allmulticast mode [ 182.660035][ T863] usb 4-1: USB disconnect, device number 27 [ 182.779646][ T6215] udevd[6215]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 183.597785][ T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 183.757908][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 183.766261][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.776733][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 183.792493][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 183.801798][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.810097][ T10] usb 4-1: Product: ࡠ [ 183.814291][ T10] usb 4-1: Manufacturer: ⠊ [ 183.819030][ T10] usb 4-1: SerialNumber: 䄆Î⧆璸ᰍ鯢쥒ᾟ魈ᛃᰠ殔屍ꨪ종鋎鞴핇婊ʞ萰ᓉ㧊㍾ἇ磾攽ꈑꄀ㉭ﰂ覤轑啡녰媡⪜睹ᗨ一儃럡炖쟘጑뢇塐甔ጠ躿掋蹡⟍錭㍠깆뗠ந頗覍괏㬫醕宬쟦&吤ퟙ [ 184.265768][ T10] usb 4-1: 0:2 : does not exist [ 184.285535][ T10] usb 4-1: USB disconnect, device number 28 [ 184.321355][ T6216] udevd[6216]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 185.127858][ T10] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 185.293059][ T30] kauditd_printk_skb: 129 callbacks suppressed [ 185.293077][ T30] audit: type=1326 audit(1750945122.263:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7678 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631c58e929 code=0x7ffc0000 [ 185.323926][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 185.339986][ T10] usb 4-1: too many configurations: 152, using maximum allowed: 8 [ 185.346116][ T30] audit: type=1326 audit(1750945122.293:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7678 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f631c58e929 code=0x7ffc0000 [ 185.370195][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.379479][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 185.389629][ T10] usb 4-1: can't read configurations, error -61 [ 185.408223][ T30] audit: type=1326 audit(1750945122.293:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7678 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631c58e929 code=0x7ffc0000 [ 185.463940][ T30] audit: type=1326 audit(1750945122.293:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7678 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f631c58e929 code=0x7ffc0000 [ 185.486158][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.494728][ T30] audit: type=1326 audit(1750945122.293:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7678 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631c58e929 code=0x7ffc0000 [ 185.516963][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.539462][ T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 185.550801][ T30] audit: type=1326 audit(1750945122.303:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7678 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f631c58e929 code=0x7ffc0000 [ 185.576743][ T30] audit: type=1326 audit(1750945122.303:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7678 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631c58e929 code=0x7ffc0000 [ 185.599523][ T51] Bluetooth: hci1: unexpected subevent 0x0a length: 91 > 30 [ 185.612073][ T51] Bluetooth: hci1: unexpected subevent 0x0a length: 91 > 30 [ 185.619615][ T51] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 185.642535][ T51] Bluetooth: hci1: unexpected subevent 0x0a length: 91 > 30 [ 185.650005][ T51] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 185.659036][ T51] Bluetooth: hci1: unexpected subevent 0x0a length: 91 > 30 [ 185.666407][ T51] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 185.675422][ T51] Bluetooth: hci1: unexpected subevent 0x0a length: 91 > 30 [ 185.682860][ T51] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 185.692761][ T51] Bluetooth: hci1: unexpected subevent 0x0a length: 91 > 30 [ 185.700212][ T51] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 185.707800][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 185.717304][ T51] Bluetooth: hci1: unexpected subevent 0x0a length: 91 > 30 [ 185.726327][ T51] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 185.728143][ T10] usb 4-1: too many configurations: 152, using maximum allowed: 8 [ 185.735313][ T51] Bluetooth: hci1: unexpected subevent 0x0a length: 91 > 30 [ 185.748185][ T30] audit: type=1326 audit(1750945122.303:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7678 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f631c58e929 code=0x7ffc0000 [ 185.750500][ T51] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 185.783327][ T51] Bluetooth: hci1: unexpected subevent 0x0a length: 91 > 30 [ 185.790806][ T51] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 185.802740][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 185.821027][ T10] usb 4-1: can't read configurations, error -61 [ 185.831122][ T10] usb usb4-port1: attempt power cycle [ 185.837202][ T30] audit: type=1326 audit(1750945122.303:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7678 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631c58e929 code=0x7ffc0000 [ 185.864165][ T30] audit: type=1326 audit(1750945122.303:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7678 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f631c58e929 code=0x7ffc0000 [ 185.886183][ C1] vkms_vblank_simulate: vblank timer overrun [ 186.207722][ T10] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 186.228312][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 186.234003][ T10] usb 4-1: too many configurations: 152, using maximum allowed: 8 [ 186.244808][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 186.252683][ T10] usb 4-1: can't read configurations, error -61 [ 186.387679][ T10] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 186.408426][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 186.414191][ T10] usb 4-1: too many configurations: 152, using maximum allowed: 8 [ 186.424059][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 186.431887][ T10] usb 4-1: can't read configurations, error -61 [ 186.438577][ T10] usb usb4-port1: unable to enumerate USB device [ 186.621596][ T7702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.587'. [ 186.774679][ T7708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.590'. [ 187.333575][ T7718] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.594'. [ 188.011360][ T7726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.598'. [ 188.576742][ T7747] netlink: 104 bytes leftover after parsing attributes in process `syz.3.605'. [ 189.183529][ T7769] tmpfs: Unknown parameter '00000000000000000000000' [ 189.240645][ T7772] /dev/rnullb0: Can't lookup blockdev [ 189.241747][ T7773] /dev/rnullb0: Can't lookup blockdev [ 189.291786][ T7775] netlink: 'syz.0.616': attribute type 8 has an invalid length. [ 189.372261][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059dfb400: rx timeout, send abort [ 189.880610][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059dfb400: abort rx timeout. Force session deactivation [ 190.372754][ T7815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.633'. [ 190.860686][ T7817] >: renamed from veth0_vlan (while UP) [ 191.240585][ T30] kauditd_printk_skb: 127 callbacks suppressed [ 191.240722][ T30] audit: type=1326 audit(1750945128.213:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7829 comm="syz.3.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b1f8e929 code=0x7ffc0000 [ 191.274536][ T30] audit: type=1326 audit(1750945128.213:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7829 comm="syz.3.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b1f8e929 code=0x7ffc0000 [ 191.302796][ T30] audit: type=1326 audit(1750945128.213:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7829 comm="syz.3.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f26b1f8e929 code=0x7ffc0000 [ 191.333207][ T30] audit: type=1326 audit(1750945128.213:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7829 comm="syz.3.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b1f8e929 code=0x7ffc0000 [ 191.377451][ T30] audit: type=1326 audit(1750945128.213:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7829 comm="syz.3.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b1f8e929 code=0x7ffc0000 [ 191.411177][ T30] audit: type=1326 audit(1750945128.243:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7829 comm="syz.3.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f26b1f8e929 code=0x7ffc0000 [ 191.433970][ T30] audit: type=1326 audit(1750945128.243:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7829 comm="syz.3.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b1f8e929 code=0x7ffc0000 [ 191.459142][ T30] audit: type=1326 audit(1750945128.243:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7829 comm="syz.3.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b1f8e929 code=0x7ffc0000 [ 191.484375][ T30] audit: type=1326 audit(1750945128.243:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7829 comm="syz.3.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f26b1f8e929 code=0x7ffc0000 [ 191.510766][ T30] audit: type=1326 audit(1750945128.243:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7829 comm="syz.3.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b1f8e929 code=0x7ffc0000 [ 191.639987][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880326cfc00: rx timeout, send abort [ 192.140055][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880326cfc00: abort rx timeout. Force session deactivation [ 192.313590][ T7841] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 193.027794][ T24] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 193.188034][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 193.203677][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 193.222926][ T24] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 193.233418][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.249346][ T24] usb 3-1: config 0 descriptor?? [ 193.264484][ T7853] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 193.479668][ T24] ath6kl: Failed to submit usb control message: -71 [ 193.499505][ T24] ath6kl: unable to send the bmi data to the device: -71 [ 193.512263][ T24] ath6kl: Unable to send get target info: -71 [ 193.520613][ T24] ath6kl: Failed to init ath6kl core: -71 [ 193.533469][ T24] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 193.561548][ T24] usb 3-1: USB disconnect, device number 29 [ 193.631784][ T7890] overlayfs: failed to clone upperpath [ 193.897635][ T7901] tipc: Started in network mode [ 193.902711][ T7901] tipc: Node identity ac14142a, cluster identity 4711 [ 193.914218][ T7901] tipc: Enabled bearer , priority 10 [ 194.106950][ T7908] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 194.116357][ T7908] UDF-fs: Scanning with blocksize 4096 failed [ 194.233463][ T7916] program syz.3.676 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 194.246708][ T7917] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 194.255079][ T7917] UDF-fs: Scanning with blocksize 4096 failed [ 194.267037][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.273720][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.388004][ T24] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 194.409671][ T7920] netlink: 28 bytes leftover after parsing attributes in process `syz.3.677'. [ 194.567578][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 194.580324][ T7924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.679'. [ 194.593279][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 194.603559][ T24] usb 3-1: config 4 interface 0 has no altsetting 0 [ 194.623380][ T24] usb 3-1: string descriptor 0 read error: -22 [ 194.633922][ T24] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 194.654736][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.682811][ T24] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 194.741477][ T24] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 194.759844][ T24] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 194.771496][ T24] usb 3-1: media controller created [ 194.836461][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 195.039288][ T1211] tipc: Node number set to 2886997034 [ 195.049671][ T7910] usb 3-1: dvb_usb_au6610: wlen=0, aborting [ 195.084200][ T7910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.101410][ T7910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.120118][ T24] zl10353_read_register: readreg error (reg=127, ret==0) [ 195.240305][ T24] usb 3-1: USB disconnect, device number 30 [ 195.772813][ T7943] tipc: Started in network mode [ 195.888124][ T7943] tipc: Node identity 82b921b9f10c, cluster identity 4711 [ 195.895861][ T7943] tipc: Enabled bearer , priority 0 [ 195.906580][ T7943] syzkaller0: entered promiscuous mode [ 195.912441][ T7943] syzkaller0: entered allmulticast mode [ 195.924974][ T7942] tipc: Resetting bearer [ 196.001608][ T7942] tipc: Disabling bearer [ 196.196284][ T7953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.691'. [ 196.525832][ T205] Bluetooth: hci4: Frame reassembly failed (-84) [ 196.539538][ T7962] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 196.546381][ T7962] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 196.556168][ T7962] vhci_hcd vhci_hcd.0: Device attached [ 196.601452][ T7963] vhci_hcd: connection closed [ 196.603582][ T205] vhci_hcd: stop threads [ 196.614705][ T205] vhci_hcd: release socket [ 196.619575][ T205] vhci_hcd: disconnect device [ 196.668595][ T1211] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 196.822357][ T1211] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 196.832433][ T1211] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.840493][ T1211] usb 4-1: Product: syz [ 196.844683][ T1211] usb 4-1: Manufacturer: syz [ 196.849427][ T1211] usb 4-1: SerialNumber: syz [ 196.858012][ T1211] usb 4-1: config 0 descriptor?? [ 196.869119][ T1211] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 197.070976][ T1211] gspca_sunplus: reg_r err -71 [ 197.084155][ T1211] usb 4-1: USB disconnect, device number 33 [ 197.902490][ T7983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.701'. [ 197.927633][ T24] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 198.094789][ T24] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 198.104152][ T24] usb 4-1: config 8 has no interface number 0 [ 198.111496][ T24] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 198.125405][ T24] usb 4-1: config 8 interface 177 has no altsetting 0 [ 198.133841][ T24] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 198.145580][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.168979][ T7973] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 198.254978][ T30] kauditd_printk_skb: 81 callbacks suppressed [ 198.254996][ T30] audit: type=1326 audit(1750945135.223:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7992 comm="syz.1.705" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f794c78e929 code=0x0 [ 198.363807][ T7994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.705'. [ 198.380567][ T24] usb 4-1: string descriptor 0 read error: -71 [ 198.392196][ T24] ir_toy 4-1:8.177: required endpoints not found [ 198.402074][ T24] usb 4-1: USB disconnect, device number 34 [ 198.578605][ T5840] Bluetooth: hci4: command 0x1003 tx timeout [ 198.586913][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 199.467777][ T1211] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 199.659734][ T1211] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 213 [ 199.677555][ T1211] usb 3-1: config 0 has an invalid descriptor of length 163, skipping remainder of the config [ 199.707596][ T1211] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 199.744275][ T1211] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 199.754335][ T1211] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.772622][ T1211] usb 3-1: Product: syz [ 199.787073][ T1211] usb 3-1: Manufacturer: syz [ 199.793086][ T1211] usb 3-1: SerialNumber: syz [ 199.808121][ T1211] usb 3-1: config 0 descriptor?? [ 199.817056][ T1211] usb-storage 3-1:0.0: USB Mass Storage device detected [ 199.844801][ T1211] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 200.026037][ T24] usb 3-1: USB disconnect, device number 31 [ 200.210092][ T8040] netlink: 84 bytes leftover after parsing attributes in process `syz.3.720'. [ 201.340085][ T8083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.740'. [ 202.579163][ T59] ------------[ cut here ]------------ [ 202.585135][ T59] WARNING: net/ipv6/ip6mr.c:2376 at ip6_mr_output+0xe0b/0x1040, CPU#1: kworker/u8:4/59 [ 202.594888][ T59] Modules linked in: [ 202.599228][ T59] CPU: 1 UID: 0 PID: 59 Comm: kworker/u8:4 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) [ 202.610822][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 202.621060][ T59] Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker [ 202.628069][ T59] RIP: 0010:ip6_mr_output+0xe0b/0x1040 [ 202.633575][ T59] Code: f7 49 bd 00 00 00 00 00 fc ff df 48 8b 74 24 38 45 31 f6 31 ff ba 02 00 00 00 e8 e0 16 1b ff e9 a7 fd ff ff e8 76 65 86 f7 90 <0f> 0b 90 e9 c7 f3 ff ff e8 68 65 86 f7 90 0f 0b 90 43 80 3c 2e 00 [ 202.653199][ C1] vkms_vblank_simulate: vblank timer overrun [ 202.659308][ T59] RSP: 0018:ffffc9000210f3e0 EFLAGS: 00010293 [ 202.665436][ T59] RAX: ffffffff8a39a70a RBX: 0000000000000000 RCX: ffff88801c3f0000 [ 202.673498][ T59] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 202.681544][ T59] RBP: ffffc9000210f658 R08: ffffc9000210f5c7 R09: 0000000000000000 [ 202.689640][ T59] R10: ffffc9000210f570 R11: fffff52000421eb9 R12: 1ffff92000421e8c [ 202.697692][ T59] R13: dffffc0000000000 R14: ffffc9000210f570 R15: ffff888076360dc0 [ 202.705719][ T59] FS: 0000000000000000(0000) GS:ffff888125ae6000(0000) knlGS:0000000000000000 [ 202.714711][ T59] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 202.721388][ T59] CR2: 00007f794c771d60 CR3: 000000007be16000 CR4: 00000000003526f0 [ 202.729490][ T59] Call Trace: [ 202.732800][ T59] [ 202.735773][ T59] ? __pfx_ip6t_do_table+0x10/0x10 [ 202.740982][ T59] ? __pfx_ip6_mr_output+0x10/0x10 [ 202.746136][ T59] ? __ip6_local_out+0x609/0x870 [ 202.751181][ T59] ? __ip6_local_out+0x82c/0x870 [ 202.756149][ T59] ? ip6_dst_lookup_tail+0x2ca/0x1510 [ 202.761588][ T59] ? __ip6_local_out+0x609/0x870 [ 202.766567][ T59] ? __lock_acquire+0xab9/0xd20 [ 202.771493][ T59] ? udp6_set_csum+0x995/0xee0 [ 202.776287][ T59] ? skb_dst+0x4f/0xd0 [ 202.780438][ T59] ? dst_output+0x177/0x1c0 [ 202.784991][ T59] udp_tunnel6_xmit_skb+0x640/0xad0 [ 202.790285][ T59] send6+0x5ac/0x8d0 [ 202.794241][ T59] ? send6+0x220/0x8d0 [ 202.798394][ T59] ? __pfx_send6+0x10/0x10 [ 202.802875][ T59] ? wg_socket_send_buffer_to_peer+0x13b/0x1c0 [ 202.809154][ T59] wg_socket_send_skb_to_peer+0x111/0x1d0 [ 202.814941][ T59] wg_packet_handshake_send_worker+0x1db/0x320 [ 202.821229][ T59] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 202.828038][ T59] ? _raw_spin_unlock_irq+0x23/0x50 [ 202.833273][ T59] ? process_scheduled_works+0x9ef/0x17b0 [ 202.839102][ T59] ? process_scheduled_works+0x9ef/0x17b0 [ 202.844882][ T59] process_scheduled_works+0xade/0x17b0 [ 202.850578][ T59] ? __pfx_process_scheduled_works+0x10/0x10 [ 202.856630][ T59] worker_thread+0x8a0/0xda0 [ 202.861307][ T59] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 202.867760][ T59] ? __kthread_parkme+0x7b/0x200 [ 202.872747][ T59] kthread+0x711/0x8a0 [ 202.876859][ T59] ? __pfx_worker_thread+0x10/0x10 [ 202.882065][ T59] ? __pfx_kthread+0x10/0x10 [ 202.886772][ T59] ? _raw_spin_unlock_irq+0x23/0x50 [ 202.892064][ T59] ? lockdep_hardirqs_on+0x9c/0x150 [ 202.897304][ T59] ? __pfx_kthread+0x10/0x10 [ 202.902090][ T59] ret_from_fork+0x3fc/0x770 [ 202.906745][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 202.911979][ T59] ? __switch_to_asm+0x39/0x70 [ 202.916883][ T59] ? __switch_to_asm+0x33/0x70 [ 202.921766][ T59] ? __pfx_kthread+0x10/0x10 [ 202.926410][ T59] ret_from_fork_asm+0x1a/0x30 [ 202.931298][ T59] [ 202.934366][ T59] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 202.941659][ T59] CPU: 1 UID: 0 PID: 59 Comm: kworker/u8:4 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) [ 202.953224][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 202.963498][ T59] Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker [ 202.970468][ T59] Call Trace: [ 202.973763][ T59] [ 202.976715][ T59] dump_stack_lvl+0x99/0x250 [ 202.981320][ T59] ? __asan_memcpy+0x40/0x70 [ 202.985936][ T59] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.991156][ T59] ? __pfx__printk+0x10/0x10 [ 202.995793][ T59] panic+0x2db/0x790 [ 202.999704][ T59] ? __pfx_panic+0x10/0x10 [ 203.004146][ T59] ? ret_from_fork_asm+0x1a/0x30 [ 203.009105][ T59] __warn+0x334/0x4c0 [ 203.013283][ T59] ? ip6_mr_output+0xe0b/0x1040 [ 203.018151][ T59] ? ip6_mr_output+0xe0b/0x1040 [ 203.023051][ T59] report_bug+0x2be/0x4f0 [ 203.027391][ T59] ? ip6_mr_output+0xe0b/0x1040 [ 203.032253][ T59] ? ip6_mr_output+0xe0b/0x1040 [ 203.037122][ T59] ? ip6_mr_output+0xe0d/0x1040 [ 203.041987][ T59] handle_bug+0x84/0x160 [ 203.046246][ T59] exc_invalid_op+0x1a/0x50 [ 203.050763][ T59] asm_exc_invalid_op+0x1a/0x20 [ 203.055631][ T59] RIP: 0010:ip6_mr_output+0xe0b/0x1040 [ 203.061109][ T59] Code: f7 49 bd 00 00 00 00 00 fc ff df 48 8b 74 24 38 45 31 f6 31 ff ba 02 00 00 00 e8 e0 16 1b ff e9 a7 fd ff ff e8 76 65 86 f7 90 <0f> 0b 90 e9 c7 f3 ff ff e8 68 65 86 f7 90 0f 0b 90 43 80 3c 2e 00 [ 203.080762][ T59] RSP: 0018:ffffc9000210f3e0 EFLAGS: 00010293 [ 203.086857][ T59] RAX: ffffffff8a39a70a RBX: 0000000000000000 RCX: ffff88801c3f0000 [ 203.094942][ T59] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 203.102924][ T59] RBP: ffffc9000210f658 R08: ffffc9000210f5c7 R09: 0000000000000000 [ 203.110906][ T59] R10: ffffc9000210f570 R11: fffff52000421eb9 R12: 1ffff92000421e8c [ 203.118913][ T59] R13: dffffc0000000000 R14: ffffc9000210f570 R15: ffff888076360dc0 [ 203.126908][ T59] ? ip6_mr_output+0xe0a/0x1040 [ 203.131782][ T59] ? __pfx_ip6t_do_table+0x10/0x10 [ 203.136917][ T59] ? __pfx_ip6_mr_output+0x10/0x10 [ 203.142051][ T59] ? __ip6_local_out+0x609/0x870 [ 203.147021][ T59] ? __ip6_local_out+0x82c/0x870 [ 203.151975][ T59] ? ip6_dst_lookup_tail+0x2ca/0x1510 [ 203.157361][ T59] ? __ip6_local_out+0x609/0x870 [ 203.162311][ T59] ? __lock_acquire+0xab9/0xd20 [ 203.167200][ T59] ? udp6_set_csum+0x995/0xee0 [ 203.171969][ T59] ? skb_dst+0x4f/0xd0 [ 203.176043][ T59] ? dst_output+0x177/0x1c0 [ 203.180550][ T59] udp_tunnel6_xmit_skb+0x640/0xad0 [ 203.185767][ T59] send6+0x5ac/0x8d0 [ 203.189683][ T59] ? send6+0x220/0x8d0 [ 203.193789][ T59] ? __pfx_send6+0x10/0x10 [ 203.198225][ T59] ? wg_socket_send_buffer_to_peer+0x13b/0x1c0 [ 203.204397][ T59] wg_socket_send_skb_to_peer+0x111/0x1d0 [ 203.210131][ T59] wg_packet_handshake_send_worker+0x1db/0x320 [ 203.216331][ T59] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 203.223037][ T59] ? _raw_spin_unlock_irq+0x23/0x50 [ 203.228245][ T59] ? process_scheduled_works+0x9ef/0x17b0 [ 203.233982][ T59] ? process_scheduled_works+0x9ef/0x17b0 [ 203.239719][ T59] process_scheduled_works+0xade/0x17b0 [ 203.245311][ T59] ? __pfx_process_scheduled_works+0x10/0x10 [ 203.251324][ T59] worker_thread+0x8a0/0xda0 [ 203.255927][ T59] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 203.262269][ T59] ? __kthread_parkme+0x7b/0x200 [ 203.267665][ T59] kthread+0x711/0x8a0 [ 203.271752][ T59] ? __pfx_worker_thread+0x10/0x10 [ 203.276876][ T59] ? __pfx_kthread+0x10/0x10 [ 203.281471][ T59] ? _raw_spin_unlock_irq+0x23/0x50 [ 203.286675][ T59] ? lockdep_hardirqs_on+0x9c/0x150 [ 203.291896][ T59] ? __pfx_kthread+0x10/0x10 [ 203.296500][ T59] ret_from_fork+0x3fc/0x770 [ 203.301108][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 203.306247][ T59] ? __switch_to_asm+0x39/0x70 [ 203.311023][ T59] ? __switch_to_asm+0x33/0x70 [ 203.315795][ T59] ? __pfx_kthread+0x10/0x10 [ 203.320401][ T59] ret_from_fork_asm+0x1a/0x30 [ 203.325191][ T59] [ 203.328587][ T59] Kernel Offset: disabled [ 203.332920][ T59] Rebooting in 86400 seconds..