last executing test programs: 20.94649503s ago: executing program 3 (id=1096): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 20.317647559s ago: executing program 3 (id=1099): syz_usb_connect(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120110031fcd1b08cf100355af750102030109022d"], 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x70bd24, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x4, 0x20000, 0x1, 0xffffffffffffffff, 0x0, 0x9, {0x0, 0x2, 0x7, 0x0, 0xfffffffffffffff7, 0x0, 0x5, 0xfffffff9, 0x0, 0x2000, 0x0, 0xee01, 0xee01, 0x0, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 19.780798135s ago: executing program 1 (id=1101): r0 = socket(0x840000000002, 0x3, 0xfa) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10, 0x0}}], 0x2, 0x4c040) connect$inet(r0, &(0x7f0000000b00)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x34, 0x0, &(0x7f0000000000)) 19.175272253s ago: executing program 1 (id=1103): syz_io_uring_setup(0x366b, &(0x7f00000000c0)={0x0, 0xf41d, 0x80, 0x3, 0x69}, &(0x7f0000000140), &(0x7f0000000180)) r0 = syz_io_uring_setup(0x70e4, &(0x7f0000000800)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x2578, &(0x7f0000000340)={0x0, 0x13ea, 0x2000, 0x2, 0x4000207, 0x0, r0}, &(0x7f0000000040), &(0x7f0000000080)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="240000000104050000000000000000000700000006000640005ce8000500010002"], 0x24}}, 0x2000004) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_io_uring_setup(0x304, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x2, 0xe1}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) r6 = accept$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @private1}, &(0x7f00000003c0)=0x1c) sendto(r6, &(0x7f0000000400)="48693d7f209398393806cf2b5e776220848cbc5fb33a12eae01a91f31225aa6e256abb61595a4ae6b622fe3b5d2abdd1d25d92845d95bd1b975022dcb4c6bcd3512aa0b45ad219f3d0bae11145e79a70719a9bce705e8a59a558c13884825c3c9bf538074c7b69bd956954e90319671e88d63a22705fdf2981c7918bec0425eaa9fb844a6d0a916405be7f548cddaa5e34cc4941e20816b8072cb2327dbdf2b8c2e91cb994d5e0fdf1896192eb39f1b727f1c83a5383f7a7ce377f35850d89d2b0c92922eff00cc66565cbfa0f51a7e454ed2a44575560a175876e25a36fe5259694e1380fd69d508f38fa3d5f1137e14e13edacd4f1f10a", 0xf8, 0x20004005, &(0x7f0000000600)=@caif=@rfm={0x25, 0xd5, "af1369c9daf1694efe0abd3704012880"}, 0x80) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x12, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 19.046672336s ago: executing program 1 (id=1105): socket$kcm(0x11, 0xa, 0x300) r0 = socket$kcm(0xa, 0x0, 0x3a) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6}]}, 0x10) listen(r2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x20000, 0x100002, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) r8 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r3, 0x0, 0x0, 0x0, 0x10100}) io_uring_enter(r5, 0x47f6, 0x0, 0x2, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000"], 0x80}}, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r10 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000b00)=@assoc_value={0x0}, &(0x7f0000000ac0)=0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x84, &(0x7f0000000140)={r11, @in={{0x2, 0x4e21, @empty}}}, &(0x7f0000000200)=0x90) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 18.958650258s ago: executing program 3 (id=1106): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008304"]) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000014c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "5d15"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0) r4 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r6, &(0x7f0000000100)=[{&(0x7f0000000140)=""/197, 0xc5}], 0x1, 0x36, 0x0) write$UHID_GET_REPORT_REPLY(r6, &(0x7f0000000180)={0xa, {0x3, 0x2b, 0x4}}, 0xa) syz_emit_ethernet(0x3eb, &(0x7f00000023c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x3dd, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}, "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"}}}}, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000040)="f0456f73f18f843a03b42d2efae72143", 0x10) 18.242682175s ago: executing program 3 (id=1107): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0) syz_usb_disconnect(r0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x5c, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x5, 0x12, 0x400, 0x1, 0x200}}, {0x4}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44004}, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f00e50000008700060000090581030002c0b9ff09058202080000fd00090503020002"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000dd66ca2021046e04a9dc010203010902360001046b40090904c904000202ff0405241a"], 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) r4 = getpgrp(0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000100)=r4) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb}, 0x1c) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_SYNTH_INFO(r6, 0xc08c5102, &(0x7f00000001c0)={"72aff7419fafa9c292bb02544fad6385edfd65925ca2001700", 0x2, 0x1, 0x401, 0x401, 0x4, 0x3, 0x2, 0x4, [0x2, 0x4, 0xc, 0x7, 0x8a0, 0x7, 0xffffffff, 0xff000000, 0x3ff, 0x6, 0xfd, 0x1000002, 0x9, 0x8, 0x8, 0x6, 0x9, 0x6956, 0x5]}) r7 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000002080), 0x80000, 0x0) syz_usb_connect$uac1(0x2, 0xcb, &(0x7f0000000540)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb9, 0x3, 0x1, 0xa5, 0x0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x101, 0x9}, [@selector_unit={0x5, 0x24, 0x5, 0x6, 0x1}, @processing_unit={0x7, 0x24, 0x7, 0x1, 0x0, 0x5a}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x101, 0x4, 0x0, 0xc977, 0x2, 0x5}, @mixer_unit={0x7, 0x24, 0x4, 0x1, 0x6, "fe9c"}, @selector_unit={0x5, 0x24, 0x5, 0x4, 0x9}, @mixer_unit={0x7, 0x24, 0x4, 0x2, 0x9, "92e4"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xa3, 0xe1, 0x8, {0x7, 0x25, 0x1, 0x1, 0x1, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x80, 0x0, 0x3}, @as_header={0x7, 0x24, 0x1, 0x3, 0x6}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xf8, 0x1, 0xfe, 0x85, "c86e", "c8"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xd, 0x4, 0x9, 0x5, "a157", "b5155f"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x9, 0x4, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x5, 0x5, 0x2, {0x7, 0x25, 0x1, 0x2, 0x8, 0x3ff}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x250, 0x3, 0x6, 0x2, 0x40, 0x10}, 0x5, &(0x7f0000000500)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x425}}]}) close(r7) syz_emit_ethernet(0x66, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd60003a0400033afffe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) sendmsg$nl_route(r3, 0x0, 0x0) 17.866789228s ago: executing program 2 (id=1111): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000240)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@ack={0x1e, 0x10, 0x1f, 0x4, "753212e605dc9e586e7f428b"}, @nop]}}}}}}}}, 0x0) unshare(0x2c060000) unshare(0x24020400) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x0, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) add_key$user(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)={0x1c, r3, 0x1, 0x0, 0x25dfdbfd, {0x54}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) 17.511209082s ago: executing program 0 (id=1115): r0 = syz_io_uring_setup(0x304, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x2, 0xe1}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x12, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 17.421813366s ago: executing program 0 (id=1117): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x0) 17.219822984s ago: executing program 0 (id=1118): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x141, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r3}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000040)={r7, 0x0, 0x0, 0x6, 0xacd}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r5], &(0x7f00000000c0), &(0x7f0000000580)=[r4], &(0x7f0000000040)}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000480)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0xa, 0x7, 0x5, 0x0, r5}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="20000000150a01ede37eca9138f5d0fb010000000472da57228904230000000000020000090900010073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r10, &(0x7f0000000180), 0x8) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r10, 0xc02064b9, &(0x7f0000000640)={&(0x7f00000005c0)=[0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, r8, 0xbbbbbbbb}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r13 = socket$kcm(0x10, 0x3, 0x10) write$yama_ptrace_scope(r1, &(0x7f0000000400)='0\x00', 0x2) sendmsg$kcm(r13, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c030002a60000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r11, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r12, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 17.057574682s ago: executing program 2 (id=1120): r0 = io_uring_setup(0x115d, &(0x7f0000000500)={0x0, 0xafa, 0x12, 0x2, 0xc6}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) syz_open_procfs(0x0, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(r1, &(0x7f0000000ec0)={'syz0\x00', {}, 0x0, [0x8, 0xe74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0xb16, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f1, 0x0, 0x0, 0x0, 0x0, 0x5], [0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x100e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbcd5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0xc63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdec, 0x0, 0x0, 0x0, 0xfffffffd, 0x1000, 0x0, 0x0, 0x80000003, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x1ab}, 0x0, &(0x7f00000000c0)) close_range(r0, 0xffffffffffffffff, 0x0) 16.666323217s ago: executing program 4 (id=1121): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00'}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f00000003c0)={0x48}) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r3) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x104, 0x0, 0x0, [], [0x0, 0xfb3b, 0x200000], [], [0x8001]}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000100)={0x28, 0x6, 0x0, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe4}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(r4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r7, 0x4008af04, &(0x7f0000000740)=0xffffffffffffffff) 16.660778257s ago: executing program 2 (id=1122): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="8c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b000100697036677265000030000280140007002001000000000000000000000000000014000600fc020000000000000000000000000000040012"], 0x8c}}, 0x0) (fail_nth: 11) 16.547417233s ago: executing program 0 (id=1123): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat2(r0, &(0x7f0000000140)='./mnt\x00', r0, &(0x7f0000000200)='./file0\x00', 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x30, 0x2f, 0x37, 0x8, 0xe8d, 0x3, 0x7891, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x6b, 0x0, 0x1, 0xa, 0x0, 0x0, 0xff, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0xf, "94ef6333ef"}]}}]}}]}}]}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 15.904824769s ago: executing program 2 (id=1124): bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e1e, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x2, 0x0, 0x2}) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000080)="00000000de7a8c0180000000002dd5", 0xf, 0x80, &(0x7f0000000340)={0x11, 0x8100, r3, 0x1, 0x6, 0x6, @broadcast}, 0x14) 15.751960854s ago: executing program 1 (id=1125): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x1, 0x6}, 0x8, 0x1, 0x1}}, 0xb8}}, 0x0) 15.659119263s ago: executing program 3 (id=1126): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000200)) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = landlock_create_ruleset(&(0x7f0000006f80)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r2, 0x2, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x7, &(0x7f0000000440)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000240)={'syztnl2\x00', r4, 0x8, 0x7800, 0x1, 0xff, {{0x9, 0x4, 0x1, 0x33, 0x24, 0x68, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x40}, @broadcast, {[@lsrr={0x83, 0xf, 0x23, [@dev={0xac, 0x14, 0x14, 0x3d}, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000340)={r7, 0x1, 0x6}, 0x10) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="05000000030e00000400000000000000", @ANYRES64, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="0000004001"], 0x80}}, 0x0) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) sendto$packet(r3, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000080)={0x8000000, 0x7, 0x3}) r9 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r9, 0x10d, 0x5, 0x0, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x8, 0x3, 0x328, 0xf0, 0x43, 0xa0, 0xf0, 0x98, 0x290, 0x178, 0x178, 0x290, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x4000000, 0x0, 'veth0_to_bond\x00', 'syzkaller0\x00', {}, {}, 0x5e}, 0x12a, 0xd0, 0xf0, 0x0, {0x0, 0x7a010000}, [@inet=@rpfilter={{0x28}, {0x7}}, @common=@unspec=@connbytes={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x168, 0x1a0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@mcast2, [], @ipv6=@loopback, [0x0, 0x0, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv4=@multicast1, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x9}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x388) mkdir(&(0x7f00000000c0)='./file0\x00', 0x54) fcntl$addseals(r9, 0x409, 0x2) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0xfffffffd, 0xa, 0x1, "3258c54601cccfcf1e009200090000000000001800010300ff00000000b28d00", 0x38414261}) 15.456364583s ago: executing program 1 (id=1127): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000300)={0x40, 0xf, 0x2, "9cda"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x18, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000440)={0x10, &(0x7f0000000140)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000080)={0x40, 0xf, 0x45, {0x45, 0x22, "8e9eb94723a35491f279dfdfe40867811662839b2e18719790a667315ffebf407bb9010175f44c7e7ac80423a40f8e142b3547c444384918a49541ce08212b06d19df5"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000004c0)={0x44, &(0x7f0000002c80)=ANY=[@ANYBLOB="2015780000005323b879a0a6c72663159101bd61301fc17889c0c0e9b5b61c59c56c6dca4cb27e9be12fedf3f5665c0e873003cd57e0c36b4ffff1a824f983e0ec46ca8e8996d577481fa3ddaa95ac6d74b2f6f64860d0faceca02ee43259bc93a1fb05f04b4bbdca3e844eee533cb820648da8995eb4d5b681cf9d005d7cc5ffe2f6d3ba9164ce4747aa577d8dbe9ffa84ae4eb50d52097b4cf936ea51adb369d8d37ce94a0f97c74b0a95bb41e57d39981c67d7f3709"], &(0x7f0000000280)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000340)={0x20, 0x80, 0x1c, {0x9, 0xde, 0x6, 0x2, 0x7f, 0x8, 0x3, 0xfffffffe, 0x0, 0x1, 0x2, 0x2}}, &(0x7f0000000380)={0x20, 0x85, 0x4, 0x10001}, &(0x7f00000003c0)={0x20, 0x83, 0x2}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0x7}, &(0x7f0000000480)={0x20, 0x89, 0x2}}) 15.314907505s ago: executing program 2 (id=1128): syz_open_dev$video(&(0x7f0000000000), 0x200, 0x40) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfffffffffffffefe}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x3) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e24, 0x200, @empty, 0x10000000}, 0x1c) recvmmsg(r2, 0x0, 0x0, 0x12180, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) io_uring_setup(0x3e45, &(0x7f00000001c0)) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) 14.52685193s ago: executing program 4 (id=1129): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') ioctl$BTRFS_IOC_RM_DEV(r0, 0x8004b707, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000110f00000000ff1ddf24ffff08009675526198eaea530babb50abd28d6094907c4a95e6a8119927e4eccb88fbe694733b2266f739ce5f37c489091442c45a624991aaef2ba0b", @ANYRES32=0x0, @ANYBLOB="04010000000000002800128009000100766c616e00000000180002800c0002001b0000001d000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB], 0x58}}, 0x0) 14.481852712s ago: executing program 3 (id=1130): timer_create(0x3, 0x0, &(0x7f0000bbdffc)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000003380)) r3 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000001c0)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)={0x0, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f00000000c0), 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x1, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r6}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r10 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close(r10) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 14.365054883s ago: executing program 4 (id=1131): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 14.075043467s ago: executing program 4 (id=1132): r0 = io_uring_setup(0x115d, &(0x7f0000000500)={0x0, 0xafa, 0x12, 0x2, 0xc6}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) syz_open_procfs(0x0, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(r1, 0x0, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x1ab}, 0x0, &(0x7f00000000c0)) close_range(r0, 0xffffffffffffffff, 0x0) 13.715545394s ago: executing program 4 (id=1133): r0 = syz_io_uring_setup(0x3e9, &(0x7f0000000000)={0x0, 0x92c2, 0x40, 0x3, 0x11e}, &(0x7f0000000080), &(0x7f00000000c0)) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, &(0x7f0000000100), 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x402, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x401, 0x4000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x20009}, [@IFLA_PORT_SELF={0x4}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x7}, @IFLA_ALT_IFNAME={0x14, 0x35, 'batadv_slave_0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8014}, 0x8010) syz_io_uring_setup(0x3e9, &(0x7f0000000000)={0x0, 0x92c2, 0x40, 0x3, 0x11e}, &(0x7f0000000080), &(0x7f00000000c0)) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, &(0x7f0000000100), 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0}], 0x2) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x402, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x401, 0x4000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x20009}, [@IFLA_PORT_SELF={0x4}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x7}, @IFLA_ALT_IFNAME={0x14, 0x35, 'batadv_slave_0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8014}, 0x8010) (async) 13.690322636s ago: executing program 0 (id=1134): syz_io_uring_setup(0x366b, &(0x7f00000000c0)={0x0, 0xf41d, 0x80, 0x3, 0x69}, &(0x7f0000000140), &(0x7f0000000180)) r0 = syz_io_uring_setup(0x70e4, &(0x7f0000000800)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x2578, &(0x7f0000000340)={0x0, 0x13ea, 0x2000, 0x2, 0x4000207, 0x0, r0}, &(0x7f0000000040), &(0x7f0000000080)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="240000000104050000000000000000000700000006000640005ce8000500010002"], 0x24}}, 0x2000004) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_io_uring_setup(0x304, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x2, 0xe1}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) r6 = accept$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @private1}, &(0x7f00000003c0)=0x1c) sendto(r6, &(0x7f0000000400)="48693d7f209398393806cf2b5e776220848cbc5fb33a12eae01a91f31225aa6e256abb61595a4ae6b622fe3b5d2abdd1d25d92845d95bd1b975022dcb4c6bcd3512aa0b45ad219f3d0bae11145e79a70719a9bce705e8a59a558c13884825c3c9bf538074c7b69bd956954e90319671e88d63a22705fdf2981c7918bec0425eaa9fb844a6d0a916405be7f548cddaa5e34cc4941e20816b8072cb2327dbdf2b8c2e91cb994d5e0fdf1896192eb39f1b727f1c83a5383f7a7ce377f35850d89d2b0c92922eff00cc66565cbfa0f51a7e454ed2a44575560a175876e25a36fe5259694e1380fd69d508f38fa3d5f1137e14e13edacd4f1f10a", 0xf8, 0x20004005, &(0x7f0000000600)=@caif=@rfm={0x25, 0xd5, "af1369c9daf1694efe0abd3704012880"}, 0x80) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x12, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 13.427150035s ago: executing program 4 (id=1135): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000180)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(r4, 0x1) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, 0x0, &(0x7f0000000900), 0x0, 0x0, 0x0, 0x0, r6}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) close(r7) sendmmsg$inet(r3, &(0x7f00000004c0)=[{{&(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000180)}}], 0x1, 0xf00) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x26800, 0x0) 13.292622481s ago: executing program 0 (id=1136): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = syz_open_dev$loop(&(0x7f0000000d80), 0x2, 0x201002) fallocate(r5, 0x8, 0x7fffffffffffffff, 0x3ff) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) socket$rxrpc(0x21, 0x2, 0x2) r6 = syz_open_procfs(0x0, &(0x7f0000000280)='net/wireless\x00') pread64(r6, &(0x7f0000000180)=""/246, 0xf6, 0x20d5) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) capset(0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001714"], 0x38}}, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000380)={0x28, 0x3, r9, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb}) 8.611397302s ago: executing program 1 (id=1137): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000001c0)={0x0, 0x0}) getpgid(r3) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000), 0x0, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000300), 0x82880, 0x0) ioctl$FBIOBLANK(r5, 0x4611, 0x1) socket$alg(0x26, 0x5, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) close(r6) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="e5db029ea53c"}) write$cgroup_devices(r0, 0x0, 0xffdd) r8 = socket$netlink(0x10, 0x3, 0x1d) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='iocharset', &(0x7f0000000200)='io#harset', 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x9) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000001100)='iocharset', 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0xffffa888}, 0x0) 0s ago: executing program 2 (id=1138): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="00000000de7a8c0180000000002dd5", 0xf, 0x80, &(0x7f0000000340)={0x11, 0x8100, r1, 0x1, 0x6, 0x6, @broadcast}, 0x14) kernel console output (not intermixed with test programs): ig 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 367.590726][ T5901] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 367.624185][ T5901] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 367.644451][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.655354][ T5901] usb 3-1: config 0 descriptor?? [ 367.922482][ T5901] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 71 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 368.394044][ T8953] sctp: [Deprecated]: syz.2.818 (pid 8953) Use of int in max_burst socket option. [ 368.394044][ T8953] Use struct sctp_assoc_value instead [ 369.601753][ T8993] netlink: 44 bytes leftover after parsing attributes in process `syz.3.829'. [ 369.632278][ T5901] usb 3-1: USB disconnect, device number 71 [ 369.651116][ T5901] usblp0: removed [ 369.810432][ T8993] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 369.921616][ T8997] netlink: 'syz.1.831': attribute type 6 has an invalid length. [ 370.069163][ T5901] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 370.231879][ T9001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.833'. [ 370.251481][ T5901] usb 3-1: Using ep0 maxpacket: 8 [ 370.261695][ T9001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.833'. [ 370.275057][ T5901] usb 3-1: config 150 has an invalid interface number: 204 but max is 1 [ 370.283593][ T5901] usb 3-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 370.308554][ T5901] usb 3-1: config 150 has 1 interface, different from the descriptor's value: 2 [ 370.342144][ T5901] usb 3-1: config 150 has no interface number 0 [ 370.363023][ T5901] usb 3-1: config 150 interface 204 has no altsetting 0 [ 370.435295][ T5901] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 370.449877][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.469551][ T5901] usb 3-1: Product: syz [ 370.479522][ T5901] usb 3-1: Manufacturer: syz [ 370.492035][ T5901] usb 3-1: SerialNumber: syz [ 370.808299][ T9011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.842664][ T9011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.874485][ T5902] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 370.983833][ T9015] xt_hashlimit: size too large, truncated to 1048576 [ 371.034468][ T5902] usb 1-1: Using ep0 maxpacket: 16 [ 371.047351][ T5902] usb 1-1: config 0 has an invalid interface number: 242 but max is 0 [ 371.059468][ T5902] usb 1-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config [ 371.087982][ T5902] usb 1-1: config 0 has no interface number 0 [ 371.106790][ T5902] usb 1-1: config 0 interface 242 altsetting 204 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 371.153054][ T5902] usb 1-1: config 0 interface 242 has no altsetting 0 [ 371.187569][ T5902] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 371.213920][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.252028][ T5902] usb 1-1: Product: syz [ 371.269738][ T5902] usb 1-1: Manufacturer: syz [ 371.292847][ T5902] usb 1-1: SerialNumber: syz [ 371.326134][ T5902] usb 1-1: config 0 descriptor?? [ 371.719897][ T9009] netlink: 64 bytes leftover after parsing attributes in process `syz.0.837'. [ 372.086260][ T5901] xr_serial 3-1:150.204: skipping garbage [ 372.096829][ T5901] usb 3-1: USB disconnect, device number 72 [ 372.168323][ T5972] udevd[5972]: setting mode of /dev/bus/usb/003/072 to 020664 failed: No such file or directory [ 372.226907][ T5972] udevd[5972]: setting owner of /dev/bus/usb/003/072 to uid=0, gid=0 failed: No such file or directory [ 372.362855][ T5902] dm9601 1-1:0.242: probe with driver dm9601 failed with error -22 [ 372.395988][ T5903] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 372.409542][ T5902] sr9700 1-1:0.242: probe with driver sr9700 failed with error -22 [ 372.570798][ T5902] usb 1-1: USB disconnect, device number 79 [ 372.604424][ T5903] usb 2-1: Using ep0 maxpacket: 32 [ 372.615319][ T5903] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 372.629990][ T5903] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 372.643529][ T5903] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 372.667233][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 372.692959][ T5903] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 372.740549][ T5903] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 372.754746][ T5901] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 372.794913][ T5903] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 372.821487][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.947102][ T5901] usb 4-1: Using ep0 maxpacket: 16 [ 372.958952][ T5901] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 372.975046][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.975993][ T5903] usb 2-1: config 0 descriptor?? [ 372.992519][ T5901] usb 4-1: config 0 descriptor?? [ 373.164559][ T6091] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 373.335587][ T6091] usb 1-1: Using ep0 maxpacket: 16 [ 373.382243][ T5903] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 68 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 373.395288][ T6091] usb 1-1: config 0 has no interfaces? [ 373.422016][ T9030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.842'. [ 373.457084][ T6091] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 373.514172][ T9043] netlink: 'syz.2.846': attribute type 6 has an invalid length. [ 373.554576][ T6091] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.583605][ T5901] lenovo 0003:17EF:6047.0008: item fetching failed at offset 2/5 [ 373.594455][ T9020] sctp: [Deprecated]: syz.1.840 (pid 9020) Use of int in max_burst socket option. [ 373.594455][ T9020] Use struct sctp_assoc_value instead [ 373.614516][ T6091] usb 1-1: Product: syz [ 373.623357][ T6091] usb 1-1: Manufacturer: syz [ 373.628623][ T5901] lenovo 0003:17EF:6047.0008: hid_parse failed [ 373.640489][ T6091] usb 1-1: SerialNumber: syz [ 373.652822][ T5901] lenovo 0003:17EF:6047.0008: probe with driver lenovo failed with error -22 [ 373.668891][ T9045] netlink: 44 bytes leftover after parsing attributes in process `syz.2.847'. [ 373.672994][ T6091] usb 1-1: config 0 descriptor?? [ 373.711619][ T5903] usb 4-1: USB disconnect, device number 97 [ 373.780949][ T9045] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 374.331565][ T9052] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 375.024601][ T6091] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 375.216457][ T6091] usb 4-1: Using ep0 maxpacket: 16 [ 375.347485][ T6091] usb 4-1: unable to get BOS descriptor or descriptor too short [ 375.362319][ T6091] usb 4-1: config 1 interface 0 has no altsetting 0 [ 375.478676][ T6091] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 375.491020][ T6091] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.499273][ T6091] usb 4-1: Product: syz [ 375.504084][ T6091] usb 4-1: Manufacturer: syz [ 375.542571][ T6091] usb 4-1: SerialNumber: syz [ 375.544626][ T5844] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 375.574072][ T52] usb 2-1: USB disconnect, device number 68 [ 375.585737][ T52] usblp0: removed [ 375.653222][ T9073] xt_hashlimit: size too large, truncated to 1048576 [ 375.733656][ T5844] usb 3-1: Using ep0 maxpacket: 32 [ 375.924422][ T5844] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 375.977825][ T5901] usb 1-1: USB disconnect, device number 80 [ 376.087411][ T5844] usb 3-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 376.120830][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.170961][ T5844] usb 3-1: Product: syz [ 376.216341][ T5844] usb 3-1: Manufacturer: syz [ 376.225116][ T5844] usb 3-1: SerialNumber: syz [ 376.325411][ T5844] usb 3-1: config 0 descriptor?? [ 376.428865][ T5844] hdpvr 3-1:0.0: Could not find bulk-in endpoint [ 376.517637][ T5844] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 376.739246][ T5902] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 377.036453][ T5902] usb 2-1: Using ep0 maxpacket: 8 [ 377.047387][ T5902] usb 2-1: config 5 has an invalid descriptor of length 251, skipping remainder of the config [ 377.070821][ T5902] usb 2-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 377.124150][ T5902] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 377.202527][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.221269][ T5902] usb 2-1: Product: syz [ 377.228012][ T5902] usb 2-1: Manufacturer: syz [ 377.237625][ T5902] usb 2-1: SerialNumber: syz [ 377.773604][ T6091] usbhid 4-1:1.0: can't add hid device: -71 [ 377.788860][ T6091] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 377.916239][ T6091] usb 4-1: USB disconnect, device number 98 [ 377.981202][ T5901] usb 3-1: USB disconnect, device number 73 [ 378.175830][ T5902] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 378.334507][ T6091] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 378.334677][ T5902] usb 1-1: Using ep0 maxpacket: 32 [ 378.351675][ T5902] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 378.362997][ T5902] usb 1-1: config 0 has no interface number 0 [ 378.370683][ T5902] usb 1-1: config 0 interface 184 has no altsetting 0 [ 378.383740][ T5902] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 378.393551][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.407289][ T5902] usb 1-1: Product: syz [ 378.411564][ T5902] usb 1-1: Manufacturer: syz [ 378.417724][ T5902] usb 1-1: SerialNumber: syz [ 378.432421][ T5902] usb 1-1: config 0 descriptor?? [ 378.441431][ T5902] smsc75xx v1.0.0 [ 378.506240][ T6091] usb 4-1: config 12 has no interfaces? [ 378.514713][ T5901] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 378.526350][ T6091] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 378.539614][ T6091] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.549849][ T6091] usb 4-1: Product: syz [ 378.560530][ T6091] usb 4-1: Manufacturer: syz [ 378.569207][ T6091] usb 4-1: SerialNumber: syz [ 378.590794][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.597148][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.694354][ T5901] usb 3-1: Using ep0 maxpacket: 16 [ 378.703426][ T5901] usb 3-1: config 0 has an invalid interface number: 68 but max is 0 [ 378.718456][ T5901] usb 3-1: config 0 has no interface number 0 [ 378.724751][ T5901] usb 3-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.757178][ T5901] usb 3-1: config 0 interface 68 altsetting 0 endpoint 0x81 has invalid maxpacket 59138, setting to 1024 [ 378.788789][ T5901] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 378.808199][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.847359][ T5901] usb 3-1: Product: syz [ 378.857576][ T5901] usb 3-1: Manufacturer: syz [ 378.867603][ T5901] usb 3-1: SerialNumber: syz [ 378.888191][ T5901] usb 3-1: config 0 descriptor?? [ 378.902309][ T9100] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 378.928023][ T5901] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 379.044714][ T5902] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 379.078828][ T5902] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 379.130427][ T9100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.154700][ T9100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.173874][ T9100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.185886][ T9100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.222523][ T53] usb 3-1: Failed to submit usb control message: -71 [ 379.222907][ T5844] usb 3-1: USB disconnect, device number 74 [ 379.242065][ T53] usb 3-1: unable to send the bmi data to the device: -71 [ 379.251825][ T5902] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 379.265783][ T5902] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 379.281262][ T5902] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 379.293536][ T5902] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 379.305635][ T5902] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 379.320901][ T53] usb 3-1: unable to get target info from device [ 379.328398][ T53] usb 3-1: could not get target info (-71) [ 379.337358][ T53] usb 3-1: could not probe fw (-71) [ 379.432833][ T5902] usb 2-1: USB disconnect, device number 69 [ 380.065333][ T6091] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 380.236871][ T6091] usb 3-1: Using ep0 maxpacket: 16 [ 380.246697][ T6091] usb 3-1: config 0 has no interfaces? [ 380.255279][ T6091] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 380.267348][ T6091] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.277353][ T6091] usb 3-1: Product: syz [ 380.281583][ T6091] usb 3-1: Manufacturer: syz [ 380.288878][ T6091] usb 3-1: SerialNumber: syz [ 380.297222][ T6091] usb 3-1: config 0 descriptor?? [ 380.554835][ T9124] xt_CT: No such helper "snmp" [ 380.794430][ T6091] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 380.905290][ T5903] usb 4-1: USB disconnect, device number 99 [ 380.944501][ T6091] usb 2-1: Using ep0 maxpacket: 16 [ 380.965148][ T6091] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 380.979381][ T6091] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 380.991683][ T9129] netlink: 40 bytes leftover after parsing attributes in process `syz.3.867'. [ 381.000833][ T6091] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.009218][ T6091] usb 2-1: Product: syz [ 381.014001][ T6091] usb 2-1: Manufacturer: syz [ 381.018974][ T6091] usb 2-1: SerialNumber: syz [ 381.027681][ T6091] usb 2-1: config 0 descriptor?? [ 381.036462][ T5859] Bluetooth: hci1: hardware error 0x06 [ 381.076555][ T6091] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 381.216111][ T5903] usb 1-1: USB disconnect, device number 81 [ 381.261938][ T6091] usb 2-1: USB disconnect, device number 70 [ 381.264562][ T12] usb 2-1: Failed to submit usb control message: -71 [ 381.275192][ T12] usb 2-1: unable to send the bmi data to the device: -71 [ 381.282340][ T12] usb 2-1: unable to get target info from device [ 381.299069][ T12] usb 2-1: could not get target info (-71) [ 381.544878][ T12] usb 2-1: could not probe fw (-71) [ 381.734504][ T5902] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 381.830048][ T9149] tipc: Can't bind to reserved service type 0 [ 381.898281][ T5902] usb 4-1: Using ep0 maxpacket: 16 [ 381.931726][ T5902] usb 4-1: unable to get BOS descriptor or descriptor too short [ 381.951112][ T5902] usb 4-1: config 1 interface 0 has no altsetting 0 [ 381.963914][ T5902] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 381.979405][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.987925][ T5902] usb 4-1: Product: syz [ 381.992114][ T5902] usb 4-1: Manufacturer: syz [ 382.011596][ T5902] usb 4-1: SerialNumber: syz [ 382.058482][ T9153] warning: `syz.0.871' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 383.054530][ T5859] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 383.354581][ T6091] usb 3-1: USB disconnect, device number 75 [ 384.230768][ T9178] vivid-001: kernel_thread() failed [ 384.354417][ T6091] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 384.514490][ T6091] usb 3-1: Using ep0 maxpacket: 32 [ 384.529149][ T6091] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 384.564409][ T6091] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 384.592064][ T5902] usbhid 4-1:1.0: can't add hid device: -71 [ 384.613551][ T5902] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 384.631744][ T6091] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 384.663653][ T6091] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 384.698838][ T5902] usb 4-1: USB disconnect, device number 100 [ 384.702106][ T6091] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 384.753233][ T6091] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 384.802252][ T9193] FAULT_INJECTION: forcing a failure. [ 384.802252][ T9193] name failslab, interval 1, probability 0, space 0, times 0 [ 384.818940][ T6091] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 384.852594][ T9193] CPU: 0 UID: 0 PID: 9193 Comm: syz.0.883 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 384.852624][ T9193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 384.852639][ T9193] Call Trace: [ 384.852646][ T9193] [ 384.852652][ T9193] dump_stack_lvl+0x241/0x360 [ 384.852680][ T9193] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.852710][ T9193] ? __pfx__printk+0x10/0x10 [ 384.852734][ T9193] ? __pfx___might_resched+0x10/0x10 [ 384.852754][ T9193] should_fail_ex+0x424/0x570 [ 384.852773][ T9193] should_failslab+0xac/0x100 [ 384.852795][ T9193] __kmalloc_cache_noprof+0x73/0x370 [ 384.852814][ T9193] ? alloc_netdev_mqs+0xc1a/0x1210 [ 384.852831][ T9193] ? __xdp_rxq_info_reg+0x186/0x290 [ 384.852847][ T9193] alloc_netdev_mqs+0xc1a/0x1210 [ 384.852870][ T9193] rtnl_create_link+0x2f7/0xea0 [ 384.852894][ T9193] rtnl_newlink_create+0x2f2/0xcb0 [ 384.852909][ T9193] ? __mutex_lock+0x380/0x10c0 [ 384.852930][ T9193] ? __pfx_aa_get_newest_label+0x10/0x10 [ 384.852954][ T9193] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 384.852970][ T9193] ? __pfx___mutex_lock+0x10/0x10 [ 384.852994][ T9193] ? ns_capable+0x8a/0xf0 [ 384.853011][ T9193] rtnl_newlink+0x18b0/0x1fe0 [ 384.853034][ T9193] ? stack_depot_save_flags+0x44/0x940 [ 384.853060][ T9193] ? __pfx_rtnl_newlink+0x10/0x10 [ 384.853078][ T9193] ? __netlink_deliver_tap+0x561/0x7f0 [ 384.853098][ T9193] ? netlink_deliver_tap+0x19d/0x1b0 [ 384.853117][ T9193] ? netlink_unicast+0x7c6/0x9a0 [ 384.853133][ T9193] ? netlink_sendmsg+0x8c3/0xcd0 [ 384.853152][ T9193] ? __sock_sendmsg+0x221/0x270 [ 384.853170][ T9193] ? ____sys_sendmsg+0x523/0x860 [ 384.853183][ T9193] ? __sys_sendmsg+0x271/0x360 [ 384.853196][ T9193] ? do_syscall_64+0xf3/0x230 [ 384.853213][ T9193] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.853253][ T9193] ? kasan_quarantine_put+0xdc/0x230 [ 384.853267][ T9193] ? lockdep_hardirqs_on+0x9d/0x150 [ 384.853287][ T9193] ? nlmon_xmit+0xaf/0x100 [ 384.853314][ T9193] ? __local_bh_enable_ip+0x168/0x200 [ 384.853328][ T9193] ? lockdep_hardirqs_on+0x9d/0x150 [ 384.853350][ T9193] ? aa_get_newest_label+0x101/0x6f0 [ 384.853374][ T9193] ? __lock_acquire+0xad5/0xd80 [ 384.853404][ T9193] ? __pfx_rtnl_newlink+0x10/0x10 [ 384.853426][ T9193] rtnetlink_rcv_msg+0x80f/0xd70 [ 384.853447][ T9193] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 384.853471][ T9193] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 384.853496][ T9193] ? ref_tracker_free+0x63e/0x7e0 [ 384.853517][ T9193] netlink_rcv_skb+0x208/0x480 [ 384.853538][ T9193] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 384.853560][ T9193] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 384.853593][ T9193] ? netlink_deliver_tap+0x2e/0x1b0 [ 384.853616][ T9193] ? netlink_deliver_tap+0x2e/0x1b0 [ 384.853638][ T9193] netlink_unicast+0x7f8/0x9a0 [ 384.853663][ T9193] ? __pfx_netlink_unicast+0x10/0x10 [ 384.853683][ T9193] ? skb_put+0x114/0x1f0 [ 384.853705][ T9193] netlink_sendmsg+0x8c3/0xcd0 [ 384.853736][ T9193] ? __pfx_netlink_sendmsg+0x10/0x10 [ 384.853760][ T9193] ? aa_sock_msg_perm+0x91/0x160 [ 384.853784][ T9193] ? __pfx_netlink_sendmsg+0x10/0x10 [ 384.853804][ T9193] __sock_sendmsg+0x221/0x270 [ 384.853825][ T9193] ____sys_sendmsg+0x523/0x860 [ 384.853847][ T9193] ? __pfx_____sys_sendmsg+0x10/0x10 [ 384.853861][ T9193] ? __fget_files+0x2a/0x420 [ 384.853877][ T9193] ? __fget_files+0x2a/0x420 [ 384.853896][ T9193] __sys_sendmsg+0x271/0x360 [ 384.853915][ T9193] ? __pfx___sys_sendmsg+0x10/0x10 [ 384.853969][ T9193] ? do_syscall_64+0xb6/0x230 [ 384.853989][ T9193] do_syscall_64+0xf3/0x230 [ 384.854007][ T9193] ? clear_bhb_loop+0x45/0xa0 [ 384.854024][ T9193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.854038][ T9193] RIP: 0033:0x7facf138e169 [ 384.854051][ T9193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.854063][ T9193] RSP: 002b:00007facf22da038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 384.854078][ T9193] RAX: ffffffffffffffda RBX: 00007facf15b5fa0 RCX: 00007facf138e169 [ 384.854089][ T9193] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 384.854098][ T9193] RBP: 00007facf22da090 R08: 0000000000000000 R09: 0000000000000000 [ 384.854107][ T9193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 384.854115][ T9193] R13: 0000000000000000 R14: 00007facf15b5fa0 R15: 00007facf16dfa28 [ 384.854137][ T9193] [ 385.394932][ T6091] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.475514][ T6091] usb 3-1: config 0 descriptor?? [ 385.777942][ T6091] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 76 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 385.977788][ T9183] sctp: [Deprecated]: syz.2.880 (pid 9183) Use of int in max_burst socket option. [ 385.977788][ T9183] Use struct sctp_assoc_value instead [ 386.100431][ T5859] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 387.736547][ T52] usb 3-1: USB disconnect, device number 76 [ 387.778327][ T9223] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 387.794074][ T52] usblp0: removed [ 387.924363][ T6091] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 388.074476][ T6091] usb 4-1: Using ep0 maxpacket: 16 [ 388.090276][ T6091] usb 4-1: unable to get BOS descriptor or descriptor too short [ 388.101324][ T6091] usb 4-1: config 1 interface 0 has no altsetting 0 [ 388.138065][ T9225] xt_CT: No such helper "snmp" [ 388.203399][ T6091] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 388.214243][ T6091] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.223805][ T6091] usb 4-1: Product: syz [ 388.236473][ T6091] usb 4-1: Manufacturer: syz [ 388.262593][ T6091] usb 4-1: SerialNumber: syz [ 388.428475][ T52] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 388.598937][ T52] usb 3-1: Using ep0 maxpacket: 16 [ 388.608624][ T52] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 388.623138][ T52] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 388.634720][ T52] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.647076][ T52] usb 3-1: Product: syz [ 388.653726][ T52] usb 3-1: Manufacturer: syz [ 388.663802][ T52] usb 3-1: SerialNumber: syz [ 388.689671][ T52] usb 3-1: config 0 descriptor?? [ 388.713785][ T52] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 388.909158][ T12] usb 3-1: Failed to submit usb control message: -71 [ 388.909443][ T5902] usb 3-1: USB disconnect, device number 77 [ 388.931049][ T12] usb 3-1: unable to send the bmi data to the device: -71 [ 388.938697][ T12] usb 3-1: unable to get target info from device [ 388.945570][ T12] usb 3-1: could not get target info (-71) [ 388.951573][ T12] usb 3-1: could not probe fw (-71) [ 388.996527][ T9200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 390.604391][ T5902] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 390.914573][ T5902] usb 1-1: Using ep0 maxpacket: 8 [ 390.954375][ T5903] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 390.997609][ T5902] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 391.124418][ T5902] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 391.205336][ T5903] usb 2-1: Using ep0 maxpacket: 32 [ 391.260041][ T5902] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 391.335726][ T5903] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 391.408490][ T5902] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 391.426197][ T5903] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 391.552459][ T6091] usbhid 4-1:1.0: can't add hid device: -71 [ 391.572727][ T5903] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 391.582472][ T6091] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 391.662964][ T5902] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 391.712655][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 391.717964][ T6091] usb 4-1: USB disconnect, device number 101 [ 391.744367][ T5902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.783831][ T5903] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 391.888776][ T5903] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 392.071336][ T5903] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 392.093504][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.114397][ T6091] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 392.143566][ T5903] usb 2-1: config 0 descriptor?? [ 392.276458][ T6091] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 392.285006][ T6091] usb 4-1: config 0 has no interface number 0 [ 392.291307][ T6091] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 392.425173][ T5903] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 71 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 392.641705][ T9265] sctp: [Deprecated]: syz.1.903 (pid 9265) Use of int in max_burst socket option. [ 392.641705][ T9265] Use struct sctp_assoc_value instead [ 392.668316][ T6091] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.677268][ T24] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 392.769278][ T6091] usb 4-1: config 0 descriptor?? [ 392.809321][ T6091] usb 4-1: selecting invalid altsetting 1 [ 392.821471][ T6091] dvb_ttusb_budget: ttusb_init_controller: error [ 392.856764][ T6091] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 392.996502][ T24] usb 3-1: config 0 has no interfaces? [ 393.005040][ T24] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 393.014468][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.071361][ T24] usb 3-1: Product: syz [ 393.089117][ T24] usb 3-1: Manufacturer: syz [ 393.109538][ T24] usb 3-1: SerialNumber: syz [ 393.132699][ T24] usb 3-1: config 0 descriptor?? [ 393.219937][ T6091] DVB: Unable to find symbol cx22700_attach() [ 393.487672][ T6091] DVB: Unable to find symbol tda10046_attach() [ 393.494108][ T6091] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 393.787740][ T6091] usb 2-1: USB disconnect, device number 71 [ 393.819641][ T6091] usblp0: removed [ 393.862970][ T9283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.908'. [ 394.066918][ T5902] usb 1-1: usb_control_msg returned -71 [ 394.072677][ T5902] usbtmc 1-1:16.0: can't read capabilities [ 394.102737][ T5902] usb 1-1: USB disconnect, device number 82 [ 394.750863][ T5902] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 394.837064][ T6091] usb 4-1: USB disconnect, device number 102 [ 395.095737][ T5902] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 395.137727][ T5902] usb 2-1: config 0 interface 0 has no altsetting 0 [ 395.200078][ T5902] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 395.304413][ T975] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 395.455929][ T5901] usb 3-1: USB disconnect, device number 78 [ 395.550656][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.624465][ T975] usb 1-1: Using ep0 maxpacket: 32 [ 395.821197][ T5902] usb 2-1: config 0 descriptor?? [ 395.827746][ T9302] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 395.848372][ T975] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 395.857951][ T975] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 395.867473][ T975] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 395.877444][ T975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 396.198819][ T975] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 396.261867][ T975] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 396.277846][ T975] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 396.287421][ T975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.310983][ T975] usb 1-1: config 0 descriptor?? [ 396.383615][ T5902] konepure 0003:1E7D:2DBE.0009: unknown main item tag 0x0 [ 396.394738][ T5902] konepure 0003:1E7D:2DBE.0009: unknown main item tag 0x0 [ 396.413816][ T5902] konepure 0003:1E7D:2DBE.0009: hidraw0: USB HID v80.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.1-1/input0 [ 396.644756][ T9310] sctp: [Deprecated]: syz.0.915 (pid 9310) Use of int in max_burst socket option. [ 396.644756][ T9310] Use struct sctp_assoc_value instead [ 396.696119][ T975] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 83 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 396.786295][ T975] usb 1-1: USB disconnect, device number 83 [ 396.814581][ T5903] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 396.834767][ T5902] usb 2-1: USB disconnect, device number 72 [ 396.852699][ T975] usblp0: removed [ 396.995286][ T5903] usb 4-1: Using ep0 maxpacket: 32 [ 397.012966][ T5903] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 397.038805][ T5903] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 397.049971][ T5903] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 397.061410][ T5903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 397.211615][ T5903] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 397.255199][ T5903] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 397.350350][ T5903] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 397.380683][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.410990][ T5903] usb 4-1: config 0 descriptor?? [ 397.693851][ T5903] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 103 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 397.856786][ T9319] sctp: [Deprecated]: syz.3.919 (pid 9319) Use of int in max_burst socket option. [ 397.856786][ T9319] Use struct sctp_assoc_value instead [ 398.447875][ T9353] capability: warning: `syz.0.928' uses 32-bit capabilities (legacy support in use) [ 398.514439][ T6091] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 398.597252][ T975] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 398.714651][ T6091] usb 3-1: Using ep0 maxpacket: 16 [ 398.772321][ T6091] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 398.782891][ T975] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 398.812960][ T975] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 398.826354][ T9357] gretap0: entered promiscuous mode [ 398.840025][ T6091] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 398.844908][ T9357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.930'. [ 398.858364][ T975] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 398.873771][ T975] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 398.883791][ T6091] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.892492][ T9357] gretap0: left promiscuous mode [ 398.894961][ T6091] usb 3-1: Product: syz [ 398.901523][ T975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.946815][ T975] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 398.955362][ T975] usb 2-1: invalid MIDI out EP 0 [ 398.972117][ T6091] usb 3-1: Manufacturer: syz [ 399.034435][ T6091] usb 3-1: SerialNumber: syz [ 399.053620][ T6091] usb 3-1: config 0 descriptor?? [ 399.082680][ T975] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 399.159226][ T5958] udevd[5958]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 399.243776][ T5902] usb 2-1: USB disconnect, device number 73 [ 399.313721][ T9350] delete_channel: no stack [ 399.380286][ T10] usb 4-1: USB disconnect, device number 103 [ 399.386415][ T975] usb 1-1: new full-speed USB device number 84 using dummy_hcd [ 399.407643][ T10] usblp0: removed [ 399.547237][ T975] usb 1-1: config 0 has an invalid interface number: 207 but max is 0 [ 399.555805][ T975] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 399.570420][ T975] usb 1-1: config 0 has no interface number 0 [ 399.580984][ T975] usb 1-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 399.593104][ T975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.602437][ T975] usb 1-1: Product: syz [ 399.607344][ T975] usb 1-1: Manufacturer: syz [ 399.612143][ T975] usb 1-1: SerialNumber: syz [ 399.621417][ T975] usb 1-1: config 0 descriptor?? [ 399.846938][ T975] qmi_wwan 1-1:0.207: probe with driver qmi_wwan failed with error -22 [ 399.906650][ T975] usb 1-1: USB disconnect, device number 84 [ 400.834469][ T5901] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 400.875444][ T9388] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 401.004600][ T5901] usb 4-1: Using ep0 maxpacket: 32 [ 401.011979][ T5901] usb 4-1: too many endpoints for config 0 interface 0 altsetting 64: 255, using maximum allowed: 30 [ 401.023546][ T5901] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 108, changing to 10 [ 401.038155][ T5901] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.064793][ T5901] usb 4-1: config 0 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 401.097258][ T5901] usb 4-1: config 0 interface 0 has no altsetting 0 [ 401.138166][ T5901] usb 4-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 401.187719][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.250794][ T975] usb 3-1: USB disconnect, device number 79 [ 401.525108][ T5901] usb 4-1: config 0 descriptor?? [ 401.704852][ T24] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 401.885983][ T5901] waltop 0003:172F:0038.000A: unknown main item tag 0x3 [ 401.922858][ T5901] waltop 0003:172F:0038.000A: hidraw0: USB HID v0.07 Device [HID 172f:0038] on usb-dummy_hcd.3-1/input0 [ 402.087718][ T9401] FAULT_INJECTION: forcing a failure. [ 402.087718][ T9401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 402.141578][ T24] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 402.164629][ T24] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 402.189424][ T10] usb 4-1: USB disconnect, device number 104 [ 402.218710][ T24] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 402.237045][ T9401] CPU: 1 UID: 0 PID: 9401 Comm: syz.2.941 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 402.237067][ T9401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 402.237075][ T9401] Call Trace: [ 402.237080][ T9401] [ 402.237086][ T9401] dump_stack_lvl+0x241/0x360 [ 402.237112][ T9401] ? __pfx_dump_stack_lvl+0x10/0x10 [ 402.237131][ T9401] ? __pfx__printk+0x10/0x10 [ 402.237158][ T9401] should_fail_ex+0x424/0x570 [ 402.237176][ T9401] _copy_to_user+0x31/0xb0 [ 402.237207][ T9401] simple_read_from_buffer+0xc4/0x170 [ 402.237229][ T9401] proc_fail_nth_read+0x1ef/0x260 [ 402.237246][ T9401] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 402.237262][ T9401] ? rw_verify_area+0x246/0x630 [ 402.237276][ T9401] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 402.237291][ T9401] vfs_read+0x21f/0xb90 [ 402.237309][ T9401] ? __pfx___mutex_lock+0x10/0x10 [ 402.237327][ T9401] ? __pfx_vfs_read+0x10/0x10 [ 402.237344][ T9401] ? __fget_files+0x2a/0x420 [ 402.237358][ T9401] ? __fget_files+0x39d/0x420 [ 402.237369][ T9401] ? __fget_files+0x2a/0x420 [ 402.237386][ T9401] ksys_read+0x19d/0x2d0 [ 402.237402][ T9401] ? __pfx_ksys_read+0x10/0x10 [ 402.237417][ T9401] ? arch_syscall_is_vdso_sigreturn+0x125/0x1a0 [ 402.237434][ T9401] ? syscall_user_dispatch+0x4e/0x90 [ 402.237453][ T9401] do_syscall_64+0xf3/0x230 [ 402.237470][ T9401] ? clear_bhb_loop+0x45/0xa0 [ 402.237487][ T9401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.237499][ T9401] RIP: 0033:0x7f93db18cb7c [ 402.237512][ T9401] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 402.237524][ T9401] RSP: 002b:00007f93dbf14030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 402.237538][ T9401] RAX: ffffffffffffffda RBX: 00007f93db3b5fa0 RCX: 00007f93db18cb7c [ 402.237548][ T9401] RDX: 000000000000000f RSI: 00007f93dbf140a0 RDI: 0000000000000003 [ 402.237556][ T9401] RBP: 00007f93dbf14090 R08: 0000000000000000 R09: 0000000000000000 [ 402.237565][ T9401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.237572][ T9401] R13: 0000000000000000 R14: 00007f93db3b5fa0 R15: 00007f93db4dfa28 [ 402.237592][ T9401] [ 402.460833][ C1] vkms_vblank_simulate: vblank timer overrun [ 402.524697][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 402.533935][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.559914][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 402.567563][ T24] usb 2-1: invalid MIDI out EP 0 [ 402.642308][ T24] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 402.693409][ T5898] udevd[5898]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 402.995024][ T10] usb 2-1: USB disconnect, device number 74 [ 403.125273][ T9393] delete_channel: no stack [ 403.276560][ T5903] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 403.496612][ T5903] usb 3-1: Using ep0 maxpacket: 32 [ 403.506497][ T5903] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 403.515919][ T5903] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 403.556592][ T5903] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 403.583545][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 403.614051][ T5903] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 403.647231][ T5903] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 403.684580][ T5902] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 403.706692][ T5903] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 403.734120][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.759322][ T5903] usb 3-1: config 0 descriptor?? [ 403.837008][ T5902] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 403.849989][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.899080][ T5902] usb 4-1: config 0 descriptor?? [ 403.982819][ T5903] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 80 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 404.154849][ T5901] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 404.185986][ T9403] sctp: [Deprecated]: syz.2.942 (pid 9403) Use of int in max_burst socket option. [ 404.185986][ T9403] Use struct sctp_assoc_value instead [ 404.314570][ T5901] usb 2-1: Using ep0 maxpacket: 16 [ 404.343823][ T5901] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.347351][ T5902] ath6kl: Failed to submit usb control message: -71 [ 404.366141][ T5902] ath6kl: unable to send the bmi data to the device: -71 [ 404.373497][ T5901] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 404.386396][ T5902] ath6kl: Unable to send get target info: -71 [ 404.414920][ T5902] ath6kl: Failed to init ath6kl core: -71 [ 404.421575][ T5902] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 404.434121][ T5902] usb 4-1: USB disconnect, device number 105 [ 404.538995][ T5901] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 404.562345][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.583650][ T5901] usb 2-1: Product: syz [ 404.593295][ T5901] usb 2-1: Manufacturer: syz [ 404.601381][ T5901] usb 2-1: SerialNumber: syz [ 404.618838][ T5901] usb 2-1: config 0 descriptor?? [ 405.915105][ T24] usb 3-1: USB disconnect, device number 80 [ 405.929671][ T24] usblp0: removed [ 406.404525][ T24] usb 3-1: new low-speed USB device number 81 using dummy_hcd [ 406.647195][ T24] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 406.681201][ T24] usb 3-1: config 0 has no interface number 0 [ 406.693938][ T24] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 406.706714][ T24] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 406.721727][ T24] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 406.733702][ T24] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 406.745509][ T24] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 406.759813][ T24] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 406.782375][ T24] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 406.802440][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.864786][ T5901] usb 2-1: USB disconnect, device number 75 [ 406.890421][ T24] usb 3-1: config 0 descriptor?? [ 406.899216][ T9441] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 406.920354][ T24] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 407.103296][ T9458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.955'. [ 407.115964][ T9441] ldusb 3-1:0.55: Couldn't submit interrupt_in_urb -90 [ 407.434734][ T10] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 407.609389][ T10] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 407.622831][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.638820][ T10] usb 2-1: Product: syz [ 407.643015][ T10] usb 2-1: Manufacturer: syz [ 407.670295][ T10] usb 2-1: SerialNumber: syz [ 407.692687][ T10] usb 2-1: config 0 descriptor?? [ 407.963112][ T10] hso 2-1:0.0: Failed to find BULK IN ep [ 407.977956][ T10] usb-storage 2-1:0.0: USB Mass Storage device detected [ 408.169986][ T10] usb 2-1: USB disconnect, device number 76 [ 408.214542][ T5902] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 408.376343][ T5902] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 408.404431][ T5902] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 408.439530][ T5902] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 408.459197][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.488167][ T9475] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 408.586879][ T5902] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 409.052159][ T5902] usb 4-1: USB disconnect, device number 106 [ 409.104473][ T975] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 409.246767][ T5901] usb 3-1: USB disconnect, device number 81 [ 409.259143][ T5901] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 409.424504][ T975] usb 1-1: Using ep0 maxpacket: 32 [ 409.429359][ T6057] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 409.447449][ T975] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 409.492376][ T975] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 409.549665][ T5898] udevd[5898]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 409.567567][ T975] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 409.580388][ T6057] dvb_usb_az6027 5-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 409.604406][ T975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 409.652259][ T975] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 409.681368][ T6057] usb 5-1: USB disconnect, device number 70 [ 409.818707][ T9491] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 409.827835][ T9491] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 409.851162][ T9491] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 409.860827][ T975] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 410.038105][ T9491] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 410.047955][ T975] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 410.054466][ T6057] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 410.091425][ T975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.110946][ T9491] geneve2: entered promiscuous mode [ 410.129528][ T9491] geneve2: entered allmulticast mode [ 410.224478][ T6057] usb 5-1: Using ep0 maxpacket: 32 [ 410.234632][ T24] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 410.257751][ T6057] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 410.271565][ T975] usb 1-1: config 0 descriptor?? [ 410.290383][ T6057] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 410.349993][ T6057] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 410.383748][ T6057] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 410.400195][ T24] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 410.422519][ T24] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 410.466177][ T6057] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 410.482429][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 410.493328][ T6057] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 410.510151][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.535726][ T6057] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 410.549667][ T9493] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 410.563191][ T9496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.966'. [ 410.588910][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 410.621893][ T6057] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.647961][ T9496] trusted_key: encrypted_key: insufficient parameters specified [ 410.661240][ T9496] netlink: 52 bytes leftover after parsing attributes in process `syz.2.966'. [ 410.753850][ T975] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 85 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 410.945391][ T6057] usb 5-1: config 0 descriptor?? [ 410.976758][ T6057] usb 5-1: can't set config #0, error -71 [ 411.008705][ T9479] sctp: [Deprecated]: syz.0.962 (pid 9479) Use of int in max_burst socket option. [ 411.008705][ T9479] Use struct sctp_assoc_value instead [ 411.043351][ T6057] usb 5-1: USB disconnect, device number 71 [ 411.051851][ T24] usb 2-1: USB disconnect, device number 77 [ 411.340562][ T5898] udevd[5898]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 411.393289][ T9497] delete_channel: no stack [ 411.400267][ T9497] delete_channel: no stack [ 411.974443][ T24] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 412.202542][ T24] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 412.213180][ T24] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 412.232015][ T24] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 412.311691][ T24] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 412.371717][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.836452][ T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 412.864015][ T24] usb 4-1: invalid MIDI out EP 0 [ 412.881354][ T6057] usb 1-1: USB disconnect, device number 85 [ 412.893723][ T6057] usblp0: removed [ 413.103104][ T24] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 413.205036][ T24] usb 4-1: USB disconnect, device number 107 [ 413.448014][ T9513] delete_channel: no stack [ 413.736618][ T5940] udevd[5940]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 413.967029][ T9526] delete_channel: no stack [ 414.104531][ T5903] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 414.310054][ T24] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 414.325706][ T5903] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 414.440739][ T5903] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 414.492922][ T5903] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 414.504565][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 414.524240][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.569391][ T9536] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 414.598786][ T5903] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 414.652968][ T24] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 414.727440][ T24] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 414.934332][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 414.979954][ T5903] usb 2-1: USB disconnect, device number 78 [ 415.122818][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 415.253812][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 415.339525][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 415.384925][ T24] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 415.408997][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.460108][ T24] usb 1-1: config 0 descriptor?? [ 415.883160][ T24] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 86 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 415.894391][ T975] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 415.962961][ T9549] input: syz1 as /devices/virtual/input/input48 [ 416.118193][ T9530] sctp: [Deprecated]: syz.0.977 (pid 9530) Use of int in max_burst socket option. [ 416.118193][ T9530] Use struct sctp_assoc_value instead [ 416.144576][ T9549] fuse: Bad value for 'user_id' [ 416.149715][ T9549] fuse: Bad value for 'user_id' [ 416.173071][ T24] usb 1-1: USB disconnect, device number 86 [ 416.206858][ T975] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 416.265548][ T24] usblp0: removed [ 416.271575][ T975] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 416.419443][ T975] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 416.432060][ T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.471075][ T9544] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 417.027855][ T975] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 417.368714][ T9557] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 417.433149][ T9559] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 418.004413][ T975] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 418.258697][ T975] usb 4-1: Using ep0 maxpacket: 8 [ 418.290024][ T975] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 418.313642][ T975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.340114][ T975] usb 4-1: Product: syz [ 418.350111][ T975] usb 4-1: Manufacturer: syz [ 418.368034][ T975] usb 4-1: SerialNumber: syz [ 418.385304][ T975] usb 4-1: config 0 descriptor?? [ 418.398537][ T975] gspca_main: se401-2.14.0 probing 047d:5003 [ 418.444483][ T24] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 418.484855][ T30] audit: type=1326 audit(1744834180.105:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9571 comm="syz.4.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2e98e169 code=0x7ffc0000 [ 418.601386][ T30] audit: type=1326 audit(1744834180.105:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9571 comm="syz.4.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f4e2e98e169 code=0x7ffc0000 [ 418.644083][ T5902] usb 3-1: USB disconnect, device number 82 [ 418.681564][ T24] usb 2-1: config 0 has no interfaces? [ 418.684640][ T10] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 418.716165][ T30] audit: type=1326 audit(1744834180.105:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9571 comm="syz.4.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2e98e169 code=0x7ffc0000 [ 418.778270][ T30] audit: type=1326 audit(1744834180.105:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9571 comm="syz.4.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f4e2e98e169 code=0x7ffc0000 [ 418.798654][ T975] gspca_se401: Too many frame sizes [ 418.800486][ C1] vkms_vblank_simulate: vblank timer overrun [ 418.801982][ T30] audit: type=1326 audit(1744834180.105:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9571 comm="syz.4.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2e98e169 code=0x7ffc0000 [ 418.833915][ C1] vkms_vblank_simulate: vblank timer overrun [ 418.896276][ T10] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 418.917918][ T24] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 418.927193][ T10] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 418.947866][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 418.961311][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.982749][ T9572] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 418.996139][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.007313][ T5902] usb 4-1: USB disconnect, device number 108 [ 419.049274][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 419.060898][ T24] usb 2-1: Product: syz [ 419.185228][ T24] usb 2-1: Manufacturer: syz [ 419.210715][ T30] audit: type=1326 audit(1744834180.105:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9571 comm="syz.4.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4e2e98e169 code=0x7ffc0000 [ 419.233454][ T24] usb 2-1: SerialNumber: syz [ 419.271149][ T24] usb 2-1: config 0 descriptor?? [ 419.284552][ T30] audit: type=1326 audit(1744834180.105:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9571 comm="syz.4.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2e98e169 code=0x7ffc0000 [ 419.308027][ T30] audit: type=1326 audit(1744834180.105:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9571 comm="syz.4.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4e2e98e169 code=0x7ffc0000 [ 419.332005][ T30] audit: type=1326 audit(1744834180.145:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9571 comm="syz.4.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2e98e169 code=0x7ffc0000 [ 419.387414][ T30] audit: type=1326 audit(1744834180.145:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9571 comm="syz.4.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4e2e98e169 code=0x7ffc0000 [ 419.445069][ T9582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.555131][ T9582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.974830][ T9585] tipc: Started in network mode [ 420.014668][ T9585] tipc: Node identity 0ac9f372c1f1, cluster identity 4711 [ 420.048962][ T9585] tipc: Enabled bearer , priority 0 [ 420.085511][ T9569] netlink: 44 bytes leftover after parsing attributes in process `syz.1.987'. [ 420.107600][ T9589] syzkaller0: MTU too low for tipc bearer [ 420.113383][ T9589] tipc: Disabling bearer [ 420.116743][ T5844] usb 1-1: USB disconnect, device number 87 [ 422.193262][ T9607] netlink: 80 bytes leftover after parsing attributes in process `syz.4.999'. [ 422.743891][ T9618] geneve2: entered promiscuous mode [ 422.767156][ T9618] geneve2: entered allmulticast mode [ 422.898513][ T10] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 423.104442][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 423.218465][ T5902] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 423.238423][ T10] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 423.363448][ T10] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 423.393191][ T5901] usb 2-1: USB disconnect, device number 79 [ 423.419573][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 423.439829][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 423.450288][ T5902] usb 4-1: Using ep0 maxpacket: 32 [ 423.511257][ T5902] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 423.523798][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 423.563901][ T5902] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 423.577981][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 423.600327][ T5902] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 423.634668][ T10] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 423.649965][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 423.666237][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.688314][ T5902] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 423.723938][ T10] usb 3-1: config 0 descriptor?? [ 423.735989][ T5902] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 423.792756][ T5902] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 423.810993][ T9632] FAULT_INJECTION: forcing a failure. [ 423.810993][ T9632] name failslab, interval 1, probability 0, space 0, times 0 [ 423.832121][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.856306][ T9632] CPU: 1 UID: 0 PID: 9632 Comm: syz.4.1005 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 423.856334][ T9632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 423.856346][ T9632] Call Trace: [ 423.856353][ T9632] [ 423.856361][ T9632] dump_stack_lvl+0x241/0x360 [ 423.856399][ T9632] ? __pfx_dump_stack_lvl+0x10/0x10 [ 423.856428][ T9632] ? __pfx__printk+0x10/0x10 [ 423.856456][ T9632] ? __pfx___might_resched+0x10/0x10 [ 423.856484][ T9632] should_fail_ex+0x424/0x570 [ 423.856502][ T9632] should_failslab+0xac/0x100 [ 423.856522][ T9632] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 423.856547][ T9632] ? __alloc_skb+0x1c2/0x480 [ 423.856571][ T9632] __alloc_skb+0x1c2/0x480 [ 423.856593][ T9632] ? __pfx___alloc_skb+0x10/0x10 [ 423.856609][ T9632] ? __pfx_tc_new_tfilter+0x10/0x10 [ 423.856633][ T9632] ? netlink_ack_tlv_len+0x6e/0x200 [ 423.856654][ T9632] netlink_ack+0x147/0xa70 [ 423.856671][ T9632] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 423.856702][ T9632] ? ref_tracker_free+0x63e/0x7e0 [ 423.856730][ T9632] netlink_rcv_skb+0x296/0x480 [ 423.856757][ T9632] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 423.856785][ T9632] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 423.856816][ T9632] ? netlink_deliver_tap+0x2e/0x1b0 [ 423.856837][ T9632] ? netlink_deliver_tap+0x2e/0x1b0 [ 423.856869][ T9632] netlink_unicast+0x7f8/0x9a0 [ 423.856902][ T9632] ? __pfx_netlink_unicast+0x10/0x10 [ 423.856927][ T9632] ? skb_put+0x114/0x1f0 [ 423.856946][ T9632] netlink_sendmsg+0x8c3/0xcd0 [ 423.856974][ T9632] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.857002][ T9632] ? aa_sock_msg_perm+0x91/0x160 [ 423.857035][ T9632] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.857059][ T9632] __sock_sendmsg+0x221/0x270 [ 423.857087][ T9632] ____sys_sendmsg+0x523/0x860 [ 423.857107][ T9632] ? __pfx_____sys_sendmsg+0x10/0x10 [ 423.857133][ T9632] __sys_sendmmsg+0x3a0/0x7b0 [ 423.857174][ T9632] ? __pfx___sys_sendmmsg+0x10/0x10 [ 423.857227][ T9632] ? rcu_read_lock_any_held+0xbb/0x160 [ 423.857249][ T9632] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 423.857269][ T9632] ? vfs_write+0xb29/0xd10 [ 423.857294][ T9632] ? ksys_write+0x24e/0x2d0 [ 423.857320][ T9632] ? __mutex_unlock_slowpath+0x229/0x800 [ 423.857371][ T9632] ? ksys_write+0x275/0x2d0 [ 423.857400][ T9632] __x64_sys_sendmmsg+0xa0/0xb0 [ 423.857416][ T9632] do_syscall_64+0xf3/0x230 [ 423.857433][ T9632] ? clear_bhb_loop+0x45/0xa0 [ 423.857456][ T9632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.857476][ T9632] RIP: 0033:0x7f4e2e98e169 [ 423.857492][ T9632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.857507][ T9632] RSP: 002b:00007f4e2f759038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 423.857527][ T9632] RAX: ffffffffffffffda RBX: 00007f4e2ebb5fa0 RCX: 00007f4e2e98e169 [ 423.857540][ T9632] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 423.857549][ T9632] RBP: 00007f4e2f759090 R08: 0000000000000000 R09: 0000000000000000 [ 423.857557][ T9632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 423.857565][ T9632] R13: 0000000000000000 R14: 00007f4e2ebb5fa0 R15: 00007f4e2ecdfa28 [ 423.857585][ T9632] [ 424.185583][ T5902] usb 4-1: config 0 descriptor?? [ 424.233838][ T5844] IPVS: starting estimator thread 0... [ 424.277688][ T10] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 83 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 424.400630][ T9606] sctp: [Deprecated]: syz.2.998 (pid 9606) Use of int in max_burst socket option. [ 424.400630][ T9606] Use struct sctp_assoc_value instead [ 424.474498][ T9636] IPVS: using max 28 ests per chain, 67200 per kthread [ 424.514608][ T5902] usblp 4-1:0.0: usblp1: USB Bidirectional printer dev 109 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 424.642014][ T10] usb 3-1: USB disconnect, device number 83 [ 424.843387][ T10] usblp0: removed [ 424.854570][ T5844] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 424.979980][ T9621] sctp: [Deprecated]: syz.3.1000 (pid 9621) Use of int in max_burst socket option. [ 424.979980][ T9621] Use struct sctp_assoc_value instead [ 425.098819][ T5844] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 425.230082][ T5844] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 425.246223][ T5844] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 425.258412][ T5844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.276668][ T9641] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 425.289812][ T5844] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 425.773121][ T24] usb 5-1: USB disconnect, device number 72 [ 426.069041][ T9656] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1012'. [ 426.433232][ T24] usb 4-1: USB disconnect, device number 109 [ 426.480955][ T24] usblp1: removed [ 426.524413][ T5844] usb 2-1: new low-speed USB device number 80 using dummy_hcd [ 426.694645][ T5844] usb 2-1: device descriptor read/64, error -71 [ 426.948277][ T5844] usb 2-1: new low-speed USB device number 81 using dummy_hcd [ 427.134503][ T5844] usb 2-1: device descriptor read/64, error -71 [ 427.253046][ T5844] usb usb2-port1: attempt power cycle [ 427.704384][ T5844] usb 2-1: new low-speed USB device number 82 using dummy_hcd [ 427.725212][ T5844] usb 2-1: device descriptor read/8, error -71 [ 428.194482][ T5844] usb 2-1: new low-speed USB device number 83 using dummy_hcd [ 428.235160][ T5844] usb 2-1: device descriptor read/8, error -71 [ 428.345060][ T5844] usb usb2-port1: unable to enumerate USB device [ 428.544364][ T10] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 428.780176][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 428.796947][ T10] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 428.824431][ T10] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 428.833175][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 428.856087][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 428.904337][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 428.971351][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 429.068141][ T10] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 429.101322][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.149905][ T10] usb 5-1: config 0 descriptor?? [ 429.554926][ T10] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 73 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 429.632853][ T9686] sctp: [Deprecated]: syz.4.1019 (pid 9686) Use of int in max_burst socket option. [ 429.632853][ T9686] Use struct sctp_assoc_value instead [ 429.714368][ T5901] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 429.884397][ T5901] usb 4-1: Using ep0 maxpacket: 32 [ 430.065119][ T5901] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 430.073547][ T5901] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 430.323877][ T5901] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 430.335784][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 430.347409][ T5901] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 430.357465][ T5901] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 430.371030][ T5901] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 430.380856][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.437222][ T5901] usb 4-1: config 0 descriptor?? [ 430.904946][ T5901] usblp 4-1:0.0: usblp1: USB Bidirectional printer dev 110 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 431.122604][ T5901] usb 4-1: USB disconnect, device number 110 [ 431.246895][ T5901] usblp1: removed [ 431.394414][ T52] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 431.426109][ T10] usb 5-1: USB disconnect, device number 73 [ 431.440089][ T10] usblp0: removed [ 431.524561][ T52] usb 3-1: device descriptor read/64, error -71 [ 431.774491][ T52] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 431.814424][ T10] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 431.914737][ T52] usb 3-1: device descriptor read/64, error -71 [ 431.999393][ T10] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 432.026998][ T10] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 432.061814][ T52] usb usb3-port1: attempt power cycle [ 432.137736][ T10] usb 5-1: config 220 interface 0 has no altsetting 0 [ 432.190911][ T10] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 432.227539][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.238520][ T10] usb 5-1: Product: syz [ 432.243135][ T10] usb 5-1: Manufacturer: syz [ 432.244497][ T9723] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1030'. [ 432.248118][ T10] usb 5-1: SerialNumber: syz [ 432.304781][ T9723] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 432.405821][ T52] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 432.450399][ T52] usb 3-1: device descriptor read/8, error -71 [ 432.473519][ T10] usb 5-1: Found UVC 0.00 device syz (8086:0b07) [ 432.490700][ T10] usb 5-1: No valid video chain found. [ 432.560883][ T5901] hid-generic 0000:0004:0000.000B: unknown main item tag 0x0 [ 432.571817][ T6057] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 432.590916][ T5901] hid-generic 0000:0004:0000.000B: unknown main item tag 0x0 [ 432.605102][ T10] usb 5-1: USB disconnect, device number 74 [ 432.625657][ T5901] hid-generic 0000:0004:0000.000B: unknown main item tag 0x0 [ 432.686718][ T5901] hid-generic 0000:0004:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 432.714458][ T52] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 432.757729][ T52] usb 3-1: device descriptor read/8, error -71 [ 432.788058][ T6057] usb 2-1: Using ep0 maxpacket: 16 [ 432.852692][ T6057] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.880221][ T6057] usb 2-1: config 0 interface 0 has no altsetting 0 [ 432.900123][ T6057] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 432.945595][ T52] usb usb3-port1: unable to enumerate USB device [ 432.954479][ T6057] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.000120][ T6057] usb 2-1: config 0 descriptor?? [ 433.122251][ T9729] tipc: Started in network mode [ 433.137521][ T9729] tipc: Node identity 1, cluster identity 8 [ 433.149545][ T9729] tipc: Node number set to 1 [ 433.270356][ T9706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.282824][ T9706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.707667][ T9734] vivid-007: ================= START STATUS ================= [ 433.734924][ T9734] vivid-007: Enable Output Cropping: true [ 433.811621][ T9734] vivid-007: Enable Output Composing: true [ 433.848952][ T9734] vivid-007: Enable Output Scaler: true [ 433.862313][ T9734] vivid-007: Tx RGB Quantization Range: Automatic [ 433.965703][ T9734] vivid-007: Transmit Mode: HDMI [ 433.971757][ T9734] vivid-007: Hotplug Present: 0x00000000 [ 433.977907][ T9734] vivid-007: RxSense Present: 0x00000000 [ 433.984089][ T9734] vivid-007: EDID Present: 0x00000000 [ 433.989941][ T9734] vivid-007: ================== END STATUS ================== [ 435.324495][ T5844] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 435.544370][ T10] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 435.644586][ T52] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 435.703921][ T5901] usb 2-1: USB disconnect, device number 84 [ 435.717328][ T5844] usb 3-1: Using ep0 maxpacket: 16 [ 435.737412][ T5844] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 435.768092][ T5844] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 435.781123][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.794599][ T5844] usb 3-1: Product: syz [ 435.798799][ T5844] usb 3-1: Manufacturer: syz [ 435.804206][ T5844] usb 3-1: SerialNumber: syz [ 435.808904][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 435.815886][ T10] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 435.828588][ T10] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 435.844944][ T5844] usb 3-1: config 0 descriptor?? [ 435.858224][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 435.924465][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 435.936031][ T52] usb 4-1: Using ep0 maxpacket: 32 [ 435.950109][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 435.968523][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 436.011481][ T52] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 436.038872][ T52] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 436.056113][ T52] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 436.067912][ T10] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 436.083334][ T52] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 436.194597][ T52] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 436.206574][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.218868][ T52] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 436.241090][ T10] usb 1-1: config 0 descriptor?? [ 436.276005][ T52] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 436.406542][ T5901] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 436.564666][ T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.607975][ T10] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 88 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 436.744845][ T52] usb 4-1: config 0 descriptor?? [ 436.768081][ T9748] sctp: [Deprecated]: syz.0.1038 (pid 9748) Use of int in max_burst socket option. [ 436.768081][ T9748] Use struct sctp_assoc_value instead [ 437.033077][ T52] usblp 4-1:0.0: usblp1: USB Bidirectional printer dev 111 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 437.181278][ T52] usb 4-1: USB disconnect, device number 111 [ 437.187900][ T52] usblp1: removed [ 437.196672][ T9755] sctp: [Deprecated]: syz.3.1040 (pid 9755) Use of int in max_burst socket option. [ 437.196672][ T9755] Use struct sctp_assoc_value instead [ 437.240032][ T5901] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 437.240073][ T5901] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 437.240118][ T5901] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 437.240143][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.261098][ T9768] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 437.267076][ T5901] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 437.669958][ T5901] usb 5-1: USB disconnect, device number 75 [ 437.846640][ T5844] usb 1-1: USB disconnect, device number 88 [ 437.856385][ T5844] usblp0: removed [ 437.983231][ T52] usb 3-1: USB disconnect, device number 88 [ 438.585241][ T52] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 438.672486][ T9796] program syz.1.1048 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 438.691630][ T9797] program syz.1.1048 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 438.807498][ T52] usb 3-1: Using ep0 maxpacket: 16 [ 438.825407][ T52] usb 3-1: unable to get BOS descriptor or descriptor too short [ 438.847557][ T52] usb 3-1: config 1 interface 0 has no altsetting 0 [ 438.860359][ T52] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 438.870484][ T52] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.893309][ T52] usb 3-1: Product: syz [ 438.906873][ T52] usb 3-1: Manufacturer: syz [ 438.922679][ T52] usb 3-1: SerialNumber: syz [ 440.019088][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.025629][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.313706][ T52] usbhid 3-1:1.0: can't add hid device: -71 [ 441.429969][ T52] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 441.462724][ T52] usb 3-1: USB disconnect, device number 89 [ 441.621244][ T9819] x_tables: ip_tables: udp match: only valid for protocol 17 [ 441.896102][ T52] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 442.199416][ T52] usb 3-1: Using ep0 maxpacket: 8 [ 442.215967][ T52] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 442.427540][ T52] usb 3-1: config 1 has no interface number 1 [ 442.486028][ T52] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 442.578322][ T52] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 442.591778][ T52] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.620485][ T52] usb 3-1: Product: Ъ [ 442.628435][ T52] usb 3-1: Manufacturer: Г [ 442.642523][ T52] usb 3-1: SerialNumber: 绚ᦤ돤錴ꪌ㲵曈ᅆ㿺湊滋⚮ퟟ粝딸蕑뻆Ǩ㚾嶜㖭㟯뛟ᨪ鎙濙쬠璯䟬鈲擡쵹訉ﴊ덃鮯욘ၮ殥侽癌띚楄韴ڢ紜靱囈ჿ뿃鬅췠힟鯋ꄥ㎽৖顥ބ巼ጙ죣埈贚岎륎惋襄띝龠欱迭㸵녲ꯤ軒㗔莘獓高鴠ⶂ鴀⸽핲ᑊ䣐䣕穸㮘솋퉮첿ᾴ莌嬛 [ 442.678789][ T6057] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 442.764377][ T5902] usb 2-1: new low-speed USB device number 85 using dummy_hcd [ 442.815797][ T9834] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1057'. [ 442.834404][ T9834] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1057'. [ 442.864454][ T6057] usb 1-1: Using ep0 maxpacket: 32 [ 442.883194][ T6057] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 442.894312][ T6057] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 442.923440][ T6057] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 442.956128][ T5902] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 442.986711][ T6057] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 443.015485][ T5902] usb 2-1: config 0 has no interface number 0 [ 443.027115][ T6057] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 443.070260][ T5902] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 443.074322][ T6057] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 443.162393][ T6057] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 443.206229][ T6057] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.214698][ T5902] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 443.252685][ T5902] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 443.254796][ T6057] usb 1-1: config 0 descriptor?? [ 443.278092][ T5902] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 443.369586][ T5902] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 443.432087][ T5902] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 443.467349][ T9844] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 443.508791][ T5902] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 443.541153][ T9844] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 443.541869][ T6057] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 89 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 443.548518][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.590875][ T5902] usb 2-1: config 0 descriptor?? [ 443.608351][ T9832] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 443.620199][ T5902] ldusb 2-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 443.764540][ T10] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 443.799236][ T9823] sctp: [Deprecated]: syz.0.1055 (pid 9823) Use of int in max_burst socket option. [ 443.799236][ T9823] Use struct sctp_assoc_value instead [ 443.926978][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 443.951760][ T10] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 443.969721][ T10] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 443.980717][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 444.139587][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 444.172662][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 444.200555][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 444.242419][ T10] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 444.265905][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.303138][ T10] usb 5-1: config 0 descriptor?? [ 444.524863][ T10] usblp 5-1:0.0: usblp2: USB Bidirectional printer dev 76 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 444.757082][ T10] usb 5-1: USB disconnect, device number 76 [ 444.764733][ T52] usb 3-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 444.768994][ T10] usblp2: removed [ 444.838451][ T9839] sctp: [Deprecated]: syz.4.1059 (pid 9839) Use of int in max_burst socket option. [ 444.838451][ T9839] Use struct sctp_assoc_value instead [ 444.853080][ T52] usb 3-1: failed to enable PITCH for EP 0x82 [ 444.967607][ T52] usb 3-1: USB disconnect, device number 90 [ 444.977501][ T9857] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 444.984146][ T9857] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 445.045570][ T9857] vhci_hcd vhci_hcd.0: Device attached [ 445.175401][ T9860] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(15) [ 445.182075][ T9860] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 445.224427][ T6057] vhci_hcd: vhci_device speed not set [ 445.251889][ T9860] vhci_hcd vhci_hcd.0: Device attached [ 445.262047][ T10] usb 2-1: USB disconnect, device number 85 [ 445.268614][ T9861] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(18) [ 445.275240][ T9861] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 445.294360][ T6057] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 445.313224][ T10] ldusb 2-1:0.55: LD USB Device #1 now disconnected [ 445.353361][ T5940] udevd[5940]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 445.382922][ T5902] usb 1-1: USB disconnect, device number 89 [ 445.405539][ T9861] vhci_hcd vhci_hcd.0: Device attached [ 445.441264][ T9857] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(14) [ 445.447904][ T9857] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 445.478418][ T5902] usblp0: removed [ 445.495353][ T9857] vhci_hcd vhci_hcd.0: Device attached [ 445.555888][ T9857] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(20) [ 445.562563][ T9857] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 445.590955][ T9860] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 445.631289][ T9857] vhci_hcd vhci_hcd.0: Device attached [ 445.671231][ T9877] FAULT_INJECTION: forcing a failure. [ 445.671231][ T9877] name failslab, interval 1, probability 0, space 0, times 0 [ 445.685527][ T9860] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 445.714080][ T9877] CPU: 1 UID: 0 PID: 9877 Comm: syz.1.1066 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 445.714103][ T9877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 445.714113][ T9877] Call Trace: [ 445.714119][ T9877] [ 445.714125][ T9877] dump_stack_lvl+0x241/0x360 [ 445.714153][ T9877] ? __pfx_dump_stack_lvl+0x10/0x10 [ 445.714175][ T9877] ? __pfx__printk+0x10/0x10 [ 445.714199][ T9877] ? __pfx___might_resched+0x10/0x10 [ 445.714222][ T9877] should_fail_ex+0x424/0x570 [ 445.714246][ T9877] should_failslab+0xac/0x100 [ 445.714276][ T9877] __kmalloc_cache_noprof+0x73/0x370 [ 445.714313][ T9877] ? register_netdevice+0x59a/0x1b80 [ 445.714341][ T9877] register_netdevice+0x59a/0x1b80 [ 445.714366][ T9877] ? __kasan_kmalloc+0x9d/0xb0 [ 445.714385][ T9877] ? __kmalloc_cache_noprof+0x236/0x370 [ 445.714404][ T9877] ? macvlan_changelink_sources+0x100c/0x1760 [ 445.714423][ T9877] ? __pfx_register_netdevice+0x10/0x10 [ 445.714441][ T9877] ? macvlan_changelink_sources+0x13c5/0x1760 [ 445.714468][ T9877] macvlan_common_newlink+0x1228/0x19b0 [ 445.714486][ T9877] ? __pfx_validate_linkmsg+0x10/0x10 [ 445.714512][ T9877] ? __pfx_macvlan_common_newlink+0x10/0x10 [ 445.714529][ T9877] ? rtnl_create_link+0xb36/0xea0 [ 445.714554][ T9877] ? __pfx_macvlan_newlink+0x10/0x10 [ 445.714575][ T9877] rtnl_newlink_create+0x39b/0xcb0 [ 445.714590][ T9877] ? __mutex_lock+0xbe3/0x10c0 [ 445.714616][ T9877] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 445.714633][ T9877] ? __pfx___mutex_lock+0x10/0x10 [ 445.714658][ T9877] ? ns_capable+0x8a/0xf0 [ 445.714680][ T9877] rtnl_newlink+0x18b0/0x1fe0 [ 445.714713][ T9877] ? stack_depot_save_flags+0x44/0x940 [ 445.714751][ T9877] ? __pfx_rtnl_newlink+0x10/0x10 [ 445.714776][ T9877] ? __netlink_deliver_tap+0x561/0x7f0 [ 445.714796][ T9877] ? netlink_deliver_tap+0x19d/0x1b0 [ 445.714816][ T9877] ? netlink_unicast+0x7c6/0x9a0 [ 445.714833][ T9877] ? netlink_sendmsg+0x8c3/0xcd0 [ 445.714852][ T9877] ? __sock_sendmsg+0x221/0x270 [ 445.714870][ T9877] ? ____sys_sendmsg+0x523/0x860 [ 445.714884][ T9877] ? __sys_sendmsg+0x271/0x360 [ 445.714898][ T9877] ? do_syscall_64+0xf3/0x230 [ 445.714915][ T9877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.714956][ T9877] ? kasan_quarantine_put+0xdc/0x230 [ 445.714970][ T9877] ? lockdep_hardirqs_on+0x9d/0x150 [ 445.714990][ T9877] ? nlmon_xmit+0xaf/0x100 [ 445.715018][ T9877] ? __local_bh_enable_ip+0x168/0x200 [ 445.715032][ T9877] ? lockdep_hardirqs_on+0x9d/0x150 [ 445.715055][ T9877] ? aa_get_newest_label+0x101/0x6f0 [ 445.715080][ T9877] ? __lock_acquire+0xad5/0xd80 [ 445.715111][ T9877] ? __pfx_rtnl_newlink+0x10/0x10 [ 445.715133][ T9877] rtnetlink_rcv_msg+0x80f/0xd70 [ 445.715152][ T9877] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 445.715176][ T9877] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 445.715203][ T9877] ? ref_tracker_free+0x63e/0x7e0 [ 445.715224][ T9877] netlink_rcv_skb+0x208/0x480 [ 445.715247][ T9877] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 445.715270][ T9877] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 445.715310][ T9877] ? netlink_deliver_tap+0x2e/0x1b0 [ 445.715333][ T9877] ? netlink_deliver_tap+0x2e/0x1b0 [ 445.715361][ T9877] netlink_unicast+0x7f8/0x9a0 [ 445.715391][ T9877] ? __pfx_netlink_unicast+0x10/0x10 [ 445.715412][ T9877] ? skb_put+0x114/0x1f0 [ 445.715430][ T9877] netlink_sendmsg+0x8c3/0xcd0 [ 445.715461][ T9877] ? __pfx_netlink_sendmsg+0x10/0x10 [ 445.715485][ T9877] ? aa_sock_msg_perm+0x91/0x160 [ 445.715510][ T9877] ? __pfx_netlink_sendmsg+0x10/0x10 [ 445.715530][ T9877] __sock_sendmsg+0x221/0x270 [ 445.715557][ T9877] ____sys_sendmsg+0x523/0x860 [ 445.715580][ T9877] ? __pfx_____sys_sendmsg+0x10/0x10 [ 445.715594][ T9877] ? __fget_files+0x2a/0x420 [ 445.715611][ T9877] ? __fget_files+0x2a/0x420 [ 445.715631][ T9877] __sys_sendmsg+0x271/0x360 [ 445.715650][ T9877] ? __pfx___sys_sendmsg+0x10/0x10 [ 445.715705][ T9877] ? do_syscall_64+0xb6/0x230 [ 445.715726][ T9877] do_syscall_64+0xf3/0x230 [ 445.715744][ T9877] ? clear_bhb_loop+0x45/0xa0 [ 445.715761][ T9877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.715776][ T9877] RIP: 0033:0x7f142a18e169 [ 445.715789][ T9877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.715801][ T9877] RSP: 002b:00007f142afbc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 445.715817][ T9877] RAX: ffffffffffffffda RBX: 00007f142a3b5fa0 RCX: 00007f142a18e169 [ 445.715828][ T9877] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 445.715838][ T9877] RBP: 00007f142afbc090 R08: 0000000000000000 R09: 0000000000000000 [ 445.715847][ T9877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 445.715861][ T9877] R13: 0000000000000000 R14: 00007f142a3b5fa0 R15: 00007f142a4dfa28 [ 445.715883][ T9877] [ 446.262989][ T9857] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 446.286322][ T9857] vhci_hcd vhci_hcd.0: port 0 already used [ 446.304296][ T9882] openvswitch: netlink: Message has 3 unknown bytes. [ 446.318119][ T9872] vhci_hcd: connection closed [ 446.319422][ T9870] vhci_hcd: connection closed [ 446.319551][ T9866] vhci_hcd: connection closed [ 446.329011][ T9858] vhci_hcd: connection reset by peer [ 446.344832][ T1907] vhci_hcd: stop threads [ 446.354099][ T9862] vhci_hcd: connection closed [ 446.355886][ T1907] vhci_hcd: release socket [ 446.488360][ T9882] openvswitch: netlink: Actions may not be safe on all matching packets [ 446.494848][ T5844] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 446.605734][ T1907] vhci_hcd: disconnect device [ 446.615214][ T1907] vhci_hcd: stop threads [ 446.623240][ T1907] vhci_hcd: release socket [ 446.640628][ T1907] vhci_hcd: disconnect device [ 446.653313][ T1907] vhci_hcd: stop threads [ 446.671560][ T1907] vhci_hcd: release socket [ 446.686389][ T1907] vhci_hcd: disconnect device [ 446.691892][ T1907] vhci_hcd: stop threads [ 446.699884][ T1907] vhci_hcd: release socket [ 446.704570][ T1907] vhci_hcd: disconnect device [ 446.711634][ T1907] vhci_hcd: stop threads [ 446.716995][ T1907] vhci_hcd: release socket [ 446.721577][ T1907] vhci_hcd: disconnect device [ 446.814559][ T5844] usb 4-1: Using ep0 maxpacket: 16 [ 446.832724][ T5844] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 446.850593][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.875729][ T5844] usb 4-1: Product: syz [ 446.879963][ T5844] usb 4-1: Manufacturer: syz [ 446.929030][ T5902] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 446.950283][ T5844] usb 4-1: SerialNumber: syz [ 446.973618][ T5844] r8152-cfgselector 4-1: Unknown version 0x0000 [ 446.983239][ T5844] r8152-cfgselector 4-1: config 0 descriptor?? [ 447.094488][ T5902] usb 5-1: Using ep0 maxpacket: 16 [ 447.145971][ T5902] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 447.155323][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.163563][ T5902] usb 5-1: Product: syz [ 447.170528][ T5902] usb 5-1: Manufacturer: syz [ 447.178355][ T5902] usb 5-1: SerialNumber: syz [ 447.193756][ T5902] r8152-cfgselector 5-1: Unknown version 0x0000 [ 447.208435][ T5902] r8152-cfgselector 5-1: config 0 descriptor?? [ 447.266617][ T975] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 447.484427][ T975] usb 1-1: Using ep0 maxpacket: 16 [ 447.500851][ T975] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 447.500912][ T975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.500936][ T975] usb 1-1: Product: syz [ 447.500953][ T975] usb 1-1: Manufacturer: syz [ 447.500971][ T975] usb 1-1: SerialNumber: syz [ 447.565578][ T975] r8152-cfgselector 1-1: Unknown version 0x0000 [ 447.565639][ T975] r8152-cfgselector 1-1: config 0 descriptor?? [ 447.626705][ T5903] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 447.781565][ T5903] usb 3-1: config 0 has no interfaces? [ 447.798504][ T5903] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 447.855808][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.867683][ T5903] usb 3-1: Product: syz [ 447.872042][ T5903] usb 3-1: Manufacturer: syz [ 447.879036][ T5903] usb 3-1: SerialNumber: syz [ 447.896410][ T5903] usb 3-1: config 0 descriptor?? [ 448.254513][ T975] r8152-cfgselector 4-1: USB disconnect, device number 112 [ 448.416939][ T24] r8152-cfgselector 5-1: USB disconnect, device number 77 [ 448.491164][ T5902] r8152-cfgselector 1-1: USB disconnect, device number 90 [ 448.997625][ T5902] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 449.253883][ T5902] usb 2-1: config 0 has no interfaces? [ 449.268668][ T5902] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 449.326754][ T52] usb 4-1: new low-speed USB device number 113 using dummy_hcd [ 449.344320][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.352678][ T5902] usb 2-1: Product: syz [ 449.361734][ T5902] usb 2-1: Manufacturer: syz [ 449.369265][ T5902] usb 2-1: SerialNumber: syz [ 449.410615][ T5902] usb 2-1: config 0 descriptor?? [ 449.474387][ T24] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 449.482186][ T5901] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 449.505954][ T52] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 449.514188][ T52] usb 4-1: config 0 has no interface number 0 [ 449.521011][ T52] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 449.532693][ T52] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 449.544481][ T52] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 449.558056][ T52] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 449.569974][ T52] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 449.580705][ T52] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 449.596022][ T52] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 449.605955][ T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.664442][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 449.680225][ T5901] usb 1-1: unable to get BOS descriptor or descriptor too short [ 449.689452][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 449.738136][ T5901] usb 1-1: not running at top speed; connect to a high speed hub [ 449.749887][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 449.763254][ T5901] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 449.775173][ T5901] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 449.816734][ T52] usb 4-1: config 0 descriptor?? [ 449.821855][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 449.864835][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.873443][ T9909] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 449.884830][ T5901] usb 1-1: config 4 has no interface number 0 [ 449.889713][ T9914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.900306][ T24] usb 5-1: Product: syz [ 449.911883][ T24] usb 5-1: Manufacturer: syz [ 449.917463][ T52] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 449.917896][ T9914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.933799][ T5901] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 449.952626][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.962251][ T24] usb 5-1: SerialNumber: syz [ 449.983649][ T5901] usb 1-1: Product: syz [ 449.996588][ T24] usb 5-1: config 0 descriptor?? [ 450.008588][ T5901] usb 1-1: Manufacturer: syz [ 450.030204][ T5901] usb 1-1: SerialNumber: syz [ 450.045247][ T24] em28xx 5-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 450.120306][ T9909] ldusb 4-1:0.55: Couldn't submit interrupt_in_urb -90 [ 450.285079][ T5901] usb 1-1: Found UVC 0.02 device syz (04f2:b746) [ 450.291643][ T5901] usb 1-1: No streaming interface found for terminal 6. [ 450.314145][ T5901] usb 1-1: USB disconnect, device number 91 [ 450.414685][ T6057] vhci_hcd: vhci_device speed not set [ 451.179087][ T5901] usb 3-1: USB disconnect, device number 91 [ 451.353745][ T9929] FAULT_INJECTION: forcing a failure. [ 451.353745][ T9929] name failslab, interval 1, probability 0, space 0, times 0 [ 451.368231][ T9929] CPU: 1 UID: 0 PID: 9929 Comm: syz.0.1080 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 451.368261][ T9929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 451.368275][ T9929] Call Trace: [ 451.368284][ T9929] [ 451.368293][ T9929] dump_stack_lvl+0x241/0x360 [ 451.368332][ T9929] ? __pfx_dump_stack_lvl+0x10/0x10 [ 451.368362][ T9929] ? __pfx__printk+0x10/0x10 [ 451.368391][ T9929] ? __lock_acquire+0xad5/0xd80 [ 451.368424][ T9929] should_fail_ex+0x424/0x570 [ 451.368451][ T9929] should_failslab+0xac/0x100 [ 451.368481][ T9929] kmem_cache_alloc_noprof+0x78/0x390 [ 451.368509][ T9929] ? skb_clone+0x20c/0x390 [ 451.368538][ T9929] skb_clone+0x20c/0x390 [ 451.368566][ T9929] __netlink_deliver_tap+0x3c4/0x7f0 [ 451.368609][ T9929] ? netlink_deliver_tap+0x2e/0x1b0 [ 451.368638][ T9929] netlink_deliver_tap+0x19d/0x1b0 [ 451.368669][ T9929] netlink_unicast+0x7c6/0x9a0 [ 451.368706][ T9929] ? __pfx_netlink_unicast+0x10/0x10 [ 451.368736][ T9929] ? skb_put+0x114/0x1f0 [ 451.368780][ T9929] netlink_sendmsg+0x8c3/0xcd0 [ 451.368844][ T9929] ? __pfx_netlink_sendmsg+0x10/0x10 [ 451.368882][ T9929] ? aa_sock_msg_perm+0x91/0x160 [ 451.368917][ T9929] ? __pfx_netlink_sendmsg+0x10/0x10 [ 451.368947][ T9929] __sock_sendmsg+0x221/0x270 [ 451.368981][ T9929] ____sys_sendmsg+0x523/0x860 [ 451.369015][ T9929] ? __pfx_____sys_sendmsg+0x10/0x10 [ 451.369044][ T9929] ? __fget_files+0x2a/0x420 [ 451.369068][ T9929] ? __fget_files+0x2a/0x420 [ 451.369098][ T9929] __sys_sendmsg+0x271/0x360 [ 451.369128][ T9929] ? __pfx___sys_sendmsg+0x10/0x10 [ 451.369211][ T9929] ? do_syscall_64+0xb6/0x230 [ 451.369243][ T9929] do_syscall_64+0xf3/0x230 [ 451.369271][ T9929] ? clear_bhb_loop+0x45/0xa0 [ 451.369298][ T9929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.369320][ T9929] RIP: 0033:0x7facf138e169 [ 451.369339][ T9929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.369359][ T9929] RSP: 002b:00007facf22da038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 451.369381][ T9929] RAX: ffffffffffffffda RBX: 00007facf15b5fa0 RCX: 00007facf138e169 [ 451.369398][ T9929] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 451.369413][ T9929] RBP: 00007facf22da090 R08: 0000000000000000 R09: 0000000000000000 [ 451.369426][ T9929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.369439][ T9929] R13: 0000000000000000 R14: 00007facf15b5fa0 R15: 00007facf16dfa28 [ 451.369471][ T9929] [ 451.720074][ T9929] bond0: entered promiscuous mode [ 451.725305][ T9929] bond_slave_0: entered promiscuous mode [ 451.754910][ T9929] bond_slave_1: entered promiscuous mode [ 451.762125][ T9929] batadv0: entered promiscuous mode [ 451.768923][ T9929] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 451.847757][ T9929] bond0: left promiscuous mode [ 451.860542][ T975] usb 2-1: USB disconnect, device number 86 [ 451.898678][ T9929] bond_slave_0: left promiscuous mode [ 451.951081][ T9929] bond_slave_1: left promiscuous mode [ 451.987015][ T5902] usb 4-1: USB disconnect, device number 113 [ 452.026544][ T5901] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 452.036812][ T9929] batadv0: left promiscuous mode [ 452.102808][ T5902] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 452.304696][ T5901] usb 3-1: Using ep0 maxpacket: 32 [ 452.314400][ T5903] usb 5-1: USB disconnect, device number 78 [ 452.380212][ T5901] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 452.420211][ T5901] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 452.550484][ T5901] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 452.573237][ T9943] batadv0: entered promiscuous mode [ 452.579061][ T9941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1084'. [ 452.605507][ T9943] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 452.620910][ T9943] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 452.634129][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 452.651911][ T9943] batadv0: left promiscuous mode [ 452.678548][ T5901] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 452.716245][ T5901] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 452.826713][ T5901] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 452.875128][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.896211][ T9950] 8021q: VLANs not supported on ipvlan0 [ 452.963287][ T9947] xt_CT: No such helper "snmp" [ 453.005846][ T5901] usb 3-1: config 0 descriptor?? [ 453.225097][ T5901] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 92 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 453.262481][ T6057] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 453.433559][ T5901] usb 3-1: USB disconnect, device number 92 [ 453.451037][ T5901] usblp0: removed [ 453.464473][ T5902] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 453.484392][ T6057] usb 1-1: Using ep0 maxpacket: 16 [ 453.542094][ T9930] sctp: [Deprecated]: syz.2.1079 (pid 9930) Use of int in max_burst socket option. [ 453.542094][ T9930] Use struct sctp_assoc_value instead [ 453.568734][ T6057] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 453.584579][ T6057] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 453.597086][ T6057] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.606903][ T6057] usb 1-1: Product: syz [ 453.622602][ T6057] usb 1-1: Manufacturer: syz [ 453.634738][ T6057] usb 1-1: SerialNumber: syz [ 453.644153][ T6057] usb 1-1: config 0 descriptor?? [ 453.716274][ T6057] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 453.830522][ T5902] usb 5-1: Using ep0 maxpacket: 32 [ 453.853957][ T5902] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 453.863449][ T6057] usb 1-1: USB disconnect, device number 92 [ 453.870513][ T53] usb 1-1: Failed to submit usb control message: -71 [ 453.913686][ T53] usb 1-1: unable to send the bmi data to the device: -71 [ 453.918763][ T5902] usb 5-1: config 0 has no interface number 0 [ 453.932795][ T53] usb 1-1: unable to get target info from device [ 453.968432][ T53] usb 1-1: could not get target info (-71) [ 453.987082][ T53] usb 1-1: could not probe fw (-71) [ 454.130749][ T5902] usb 5-1: config 0 interface 12 has no altsetting 0 [ 454.141255][ T5902] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 454.150952][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.159942][ T5902] usb 5-1: Product: syz [ 454.173541][ T5902] usb 5-1: Manufacturer: syz [ 454.179122][ T5902] usb 5-1: SerialNumber: syz [ 454.212677][ T5902] usb 5-1: config 0 descriptor?? [ 454.995285][ T6057] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 455.158197][ T6057] usb 1-1: config index 0 descriptor too short (expected 20498, got 18) [ 455.173166][ T6057] usb 1-1: config 190 has too many interfaces: 57, using maximum allowed: 32 [ 455.188665][ T6057] usb 1-1: config 190 has an invalid descriptor of length 29, skipping remainder of the config [ 455.235404][ T9957] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1089'. [ 455.253407][ T6057] usb 1-1: config 190 has 0 interfaces, different from the descriptor's value: 57 [ 455.283396][ T6057] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 455.286579][ T9981] FAULT_INJECTION: forcing a failure. [ 455.286579][ T9981] name failslab, interval 1, probability 0, space 0, times 0 [ 455.306259][ T9981] CPU: 0 UID: 0 PID: 9981 Comm: syz.2.1095 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 455.306289][ T9981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 455.306308][ T9981] Call Trace: [ 455.306317][ T9981] [ 455.306326][ T9981] dump_stack_lvl+0x241/0x360 [ 455.306364][ T9981] ? __pfx_dump_stack_lvl+0x10/0x10 [ 455.306395][ T9981] ? __pfx__printk+0x10/0x10 [ 455.306429][ T9981] ? __pfx___might_resched+0x10/0x10 [ 455.306461][ T9981] should_fail_ex+0x424/0x570 [ 455.306489][ T9981] should_failslab+0xac/0x100 [ 455.306528][ T9981] __kmalloc_noprof+0xdf/0x4d0 [ 455.306563][ T9981] ? n_hdlc_alloc_buf+0x8e/0x250 [ 455.306595][ T9981] n_hdlc_alloc_buf+0x8e/0x250 [ 455.306631][ T9981] n_hdlc_tty_open+0x283/0x480 [ 455.306663][ T9981] tty_ldisc_open+0xa6/0x100 [ 455.306691][ T9981] tty_set_ldisc+0x389/0x560 [ 455.306728][ T9981] tty_ioctl+0xbd4/0xdc0 [ 455.306754][ T9981] ? __pfx_tty_ioctl+0x10/0x10 [ 455.306782][ T9981] __se_sys_ioctl+0xf1/0x160 [ 455.306809][ T9981] do_syscall_64+0xf3/0x230 [ 455.306837][ T9981] ? clear_bhb_loop+0x45/0xa0 [ 455.306862][ T9981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.306883][ T9981] RIP: 0033:0x7f93db18e169 [ 455.306901][ T9981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 455.306919][ T9981] RSP: 002b:00007f93dbf14038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 455.306942][ T9981] RAX: ffffffffffffffda RBX: 00007f93db3b5fa0 RCX: 00007f93db18e169 [ 455.306957][ T9981] RDX: 0000200000000040 RSI: 0000000000005423 RDI: 0000000000000003 [ 455.306970][ T9981] RBP: 00007f93dbf14090 R08: 0000000000000000 R09: 0000000000000000 [ 455.306983][ T9981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 455.306996][ T9981] R13: 0000000000000000 R14: 00007f93db3b5fa0 R15: 00007f93db4dfa28 [ 455.307035][ T9981] [ 455.312313][ T6057] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.391288][ T9986] FAULT_INJECTION: forcing a failure. [ 455.391288][ T9986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 455.391354][ T9986] CPU: 0 UID: 0 PID: 9986 Comm: syz.2.1097 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 455.391382][ T9986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 455.391397][ T9986] Call Trace: [ 455.391406][ T9986] [ 455.391416][ T9986] dump_stack_lvl+0x241/0x360 [ 455.391458][ T9986] ? __pfx_dump_stack_lvl+0x10/0x10 [ 455.391495][ T9986] ? __pfx__printk+0x10/0x10 [ 455.391539][ T9986] should_fail_ex+0x424/0x570 [ 455.391568][ T9986] _copy_from_user+0x2d/0xb0 [ 455.391602][ T9986] do_tcp_setsockopt+0x414/0x2670 [ 455.391641][ T9986] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 455.391674][ T9986] ? vfs_write+0xb29/0xd10 [ 455.391702][ T9986] ? __pfx_aa_sk_perm+0x10/0x10 [ 455.391735][ T9986] ? kmem_cache_free+0x197/0x410 [ 455.391767][ T9986] ? do_sys_openat2+0x165/0x1d0 [ 455.391806][ T9986] ? aa_sock_opt_perm+0x79/0x120 [ 455.391836][ T9986] ? tcp_setsockopt+0x3e/0xf0 [ 455.391869][ T9986] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 455.391900][ T9986] do_sock_setsockopt+0x3b1/0x710 [ 455.391930][ T9986] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 455.391960][ T9986] ? ksys_write+0x266/0x2d0 [ 455.392013][ T9986] __x64_sys_setsockopt+0x1ee/0x280 [ 455.392044][ T9986] do_syscall_64+0xf3/0x230 [ 455.392074][ T9986] ? clear_bhb_loop+0x45/0xa0 [ 455.392107][ T9986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.392130][ T9986] RIP: 0033:0x7f93db18e169 [ 455.392149][ T9986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 455.392167][ T9986] RSP: 002b:00007f93dbf14038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 455.392191][ T9986] RAX: ffffffffffffffda RBX: 00007f93db3b5fa0 RCX: 00007f93db18e169 [ 455.392209][ T9986] RDX: 000000000000002e RSI: 0000000000000006 RDI: 0000000000000003 [ 455.392222][ T9986] RBP: 00007f93dbf14090 R08: 0000000000000004 R09: 0000000000000000 [ 455.392237][ T9986] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 455.392251][ T9986] R13: 0000000000000000 R14: 00007f93db3b5fa0 R15: 00007f93db4dfa28 [ 455.392284][ T9986] [ 455.536218][ T9990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1098'. [ 455.960238][ T5902] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 455.969252][ T5902] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 455.985004][ T5902] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 455.992895][ T5902] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 455.994369][ T6091] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 456.020351][ T5902] usb 5-1: USB disconnect, device number 79 [ 456.032692][ T6057] usb 1-1: language id specifier not provided by device, defaulting to English [ 456.200269][ T6091] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 456.209453][ T6091] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.217609][ T6091] usb 3-1: Product: syz [ 456.221821][ T6091] usb 3-1: Manufacturer: syz [ 456.226609][ T6091] usb 3-1: SerialNumber: syz [ 456.235028][ T6091] usb 3-1: config 0 descriptor?? [ 456.248588][ T6057] usb 1-1: USB disconnect, device number 93 [ 456.316177][ T24] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 456.481864][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 456.532374][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 456.549053][ T24] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 456.560592][ T24] usb 4-1: can't read configurations, error -71 [ 457.196028][ T6091] usb 3-1: Firmware version (0.0) predates our first public release. [ 457.314064][ T6091] usb 3-1: Please update to version 0.2 or newer [ 457.796712][ T6091] usb 3-1: USB disconnect, device number 93 [ 457.834888][ T52] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 458.034364][ T52] usb 2-1: Using ep0 maxpacket: 32 [ 458.046463][ T52] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 458.117600][ T52] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 458.190250][T10025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1109'. [ 458.303438][ T52] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 458.324126][ T52] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 458.357243][ T52] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 458.387242][ T52] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 458.432664][ T52] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 458.486994][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.512902][ T52] usb 2-1: config 0 descriptor?? [ 458.624773][ T6091] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 458.728625][ T52] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 87 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 458.814513][ T6091] usb 4-1: Using ep0 maxpacket: 16 [ 458.821469][ T6091] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 458.835829][ T6091] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 458.846254][ T6091] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 458.861601][ T6091] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 458.871116][ T6091] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 458.891251][ T6091] usb 4-1: SerialNumber: syz [ 458.908063][T10023] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 458.953507][ T52] usb 2-1: USB disconnect, device number 87 [ 458.975113][ T52] usblp0: removed [ 459.016396][T10010] sctp: [Deprecated]: syz.1.1105 (pid 10010) Use of int in max_burst socket option. [ 459.016396][T10010] Use struct sctp_assoc_value instead [ 459.042912][T10046] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1118'. [ 459.088845][T10046] nvme_fabrics: unknown parameter or missing value '0' in ctrl creation request [ 459.156893][T10023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.170870][T10048] netlink: 'syz.0.1118': attribute type 3 has an invalid length. [ 459.264998][T10023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.265101][T10048] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1118'. [ 459.329619][T10050] input: syz0 as /devices/virtual/input/input49 [ 459.349102][T10023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.402584][T10023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.451775][ T6091] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 459.497136][ T6091] usb 4-1: USB disconnect, device number 116 [ 459.562660][T10054] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1122'. [ 459.599171][T10054] FAULT_INJECTION: forcing a failure. [ 459.599171][T10054] name failslab, interval 1, probability 0, space 0, times 0 [ 459.616352][T10054] CPU: 0 UID: 0 PID: 10054 Comm: syz.2.1122 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 459.616401][T10054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 459.616415][T10054] Call Trace: [ 459.616423][T10054] [ 459.616432][T10054] dump_stack_lvl+0x241/0x360 [ 459.616469][T10054] ? __pfx_dump_stack_lvl+0x10/0x10 [ 459.616515][T10054] ? __pfx__printk+0x10/0x10 [ 459.616549][T10054] ? __pfx___might_resched+0x10/0x10 [ 459.616580][T10054] should_fail_ex+0x424/0x570 [ 459.616609][T10054] should_failslab+0xac/0x100 [ 459.616642][T10054] __kmalloc_cache_noprof+0x73/0x370 [ 459.616672][T10054] ? alloc_netdev_mqs+0xc1a/0x1210 [ 459.616697][T10054] ? __xdp_rxq_info_reg+0x186/0x290 [ 459.616722][T10054] alloc_netdev_mqs+0xc1a/0x1210 [ 459.616757][T10054] rtnl_create_link+0x2f7/0xea0 [ 459.616794][T10054] rtnl_newlink_create+0x2f2/0xcb0 [ 459.616816][T10054] ? __mutex_lock+0x380/0x10c0 [ 459.616848][T10054] ? __pfx_aa_get_newest_label+0x10/0x10 [ 459.616882][T10054] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 459.616908][T10054] ? __pfx___mutex_lock+0x10/0x10 [ 459.616946][T10054] ? ns_capable+0x8a/0xf0 [ 459.616973][T10054] rtnl_newlink+0x18b0/0x1fe0 [ 459.617008][T10054] ? stack_depot_save_flags+0x44/0x940 [ 459.617048][T10054] ? __pfx_rtnl_newlink+0x10/0x10 [ 459.617076][T10054] ? __netlink_deliver_tap+0x561/0x7f0 [ 459.617107][T10054] ? netlink_deliver_tap+0x19d/0x1b0 [ 459.617135][T10054] ? netlink_unicast+0x7c6/0x9a0 [ 459.617161][T10054] ? netlink_sendmsg+0x8c3/0xcd0 [ 459.617195][T10054] ? __sock_sendmsg+0x221/0x270 [ 459.617221][T10054] ? ____sys_sendmsg+0x523/0x860 [ 459.617242][T10054] ? __sys_sendmsg+0x271/0x360 [ 459.617263][T10054] ? do_syscall_64+0xf3/0x230 [ 459.617288][T10054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.617349][T10054] ? kasan_quarantine_put+0xdc/0x230 [ 459.617380][T10054] ? lockdep_hardirqs_on+0x9d/0x150 [ 459.617422][T10054] ? nlmon_xmit+0xaf/0x100 [ 459.617463][T10054] ? __local_bh_enable_ip+0x168/0x200 [ 459.617485][T10054] ? lockdep_hardirqs_on+0x9d/0x150 [ 459.617519][T10054] ? aa_get_newest_label+0x101/0x6f0 [ 459.617558][T10054] ? __lock_acquire+0xad5/0xd80 [ 459.617603][T10054] ? __pfx_rtnl_newlink+0x10/0x10 [ 459.617636][T10054] rtnetlink_rcv_msg+0x80f/0xd70 [ 459.617664][T10054] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 459.617700][T10054] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 459.617739][T10054] ? ref_tracker_free+0x63e/0x7e0 [ 459.617772][T10054] netlink_rcv_skb+0x208/0x480 [ 459.617804][T10054] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 459.617838][T10054] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 459.617887][T10054] ? netlink_deliver_tap+0x2e/0x1b0 [ 459.617921][T10054] ? netlink_deliver_tap+0x2e/0x1b0 [ 459.617955][T10054] netlink_unicast+0x7f8/0x9a0 [ 459.617993][T10054] ? __pfx_netlink_unicast+0x10/0x10 [ 459.618022][T10054] ? skb_put+0x114/0x1f0 [ 459.618049][T10054] netlink_sendmsg+0x8c3/0xcd0 [ 459.618094][T10054] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.618131][T10054] ? aa_sock_msg_perm+0x91/0x160 [ 459.618167][T10054] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.618196][T10054] __sock_sendmsg+0x221/0x270 [ 459.618229][T10054] ____sys_sendmsg+0x523/0x860 [ 459.618261][T10054] ? __pfx_____sys_sendmsg+0x10/0x10 [ 459.618283][T10054] ? __fget_files+0x2a/0x420 [ 459.618307][T10054] ? __fget_files+0x2a/0x420 [ 459.618337][T10054] __sys_sendmsg+0x271/0x360 [ 459.618374][T10054] ? __pfx___sys_sendmsg+0x10/0x10 [ 459.618456][T10054] ? do_syscall_64+0xb6/0x230 [ 459.618488][T10054] do_syscall_64+0xf3/0x230 [ 459.618515][T10054] ? clear_bhb_loop+0x45/0xa0 [ 459.618540][T10054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.618561][T10054] RIP: 0033:0x7f93db18e169 [ 459.618580][T10054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.618598][T10054] RSP: 002b:00007f93dbf14038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.618620][T10054] RAX: ffffffffffffffda RBX: 00007f93db3b5fa0 RCX: 00007f93db18e169 [ 459.618636][T10054] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 459.618650][T10054] RBP: 00007f93dbf14090 R08: 0000000000000000 R09: 0000000000000000 [ 459.618663][T10054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 459.618675][T10054] R13: 0000000000000000 R14: 00007f93db3b5fa0 R15: 00007f93db4dfa28 [ 459.618707][T10054] [ 460.047763][ C0] vkms_vblank_simulate: vblank timer overrun [ 460.354494][ T6057] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 460.409985][T10061] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1125'. [ 460.673956][ T6057] usb 1-1: Using ep0 maxpacket: 8 [ 460.692665][ T6057] usb 1-1: config 0 has an invalid interface number: 107 but max is 0 [ 460.718883][ T6057] usb 1-1: config 0 has no interface number 0 [ 460.735947][ T6057] usb 1-1: config 0 interface 107 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 460.773875][T10070] xt_connbytes: Forcing CT accounting to be enabled [ 460.781048][T10070] --map-set only usable from mangle table [ 460.799056][ T6057] usb 1-1: New USB device found, idVendor=0e8d, idProduct=0003, bcdDevice=78.91 [ 460.810772][ T6057] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.829368][ T6057] usb 1-1: Product: syz [ 460.833582][ T6057] usb 1-1: Manufacturer: syz [ 460.854810][ T6057] usb 1-1: SerialNumber: syz [ 461.254360][ T5844] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 461.272340][ T6057] usb 1-1: config 0 descriptor?? [ 461.405177][ T5844] usb 2-1: Using ep0 maxpacket: 16 [ 461.418151][ T5844] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 461.433872][ T5844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 461.595059][ T5844] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 461.604650][ T5844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.616214][ T5844] usb 2-1: Product: syz [ 461.631356][ T5844] usb 2-1: Manufacturer: syz [ 461.691360][ T5844] usb 2-1: SerialNumber: syz [ 461.710487][T10076] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1129'. [ 461.813167][ T5844] usb 2-1: config 0 descriptor?? [ 461.822898][ T6057] option 1-1:0.107: GSM modem (1-port) converter detected [ 461.823709][ T5844] em28xx 2-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 461.910079][ T6057] usb 1-1: USB disconnect, device number 94 [ 462.045082][ T6057] option 1-1:0.107: device disconnected [ 463.281385][ T6057] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 463.925850][ T6057] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 464.001086][ T6057] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 464.037754][ T6057] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 464.257495][ T6057] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 466.928480][ T6057] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.193565][ T10] usb 2-1: USB disconnect, device number 88 [ 469.478977][ T5844] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 469.864036][ C0] sched: DL replenish lagged too much [ 474.141025][ T6057] usb 5-1: can't set config #27, error -110 [ 502.576602][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.590731][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 522.620875][ T5844] usb 1-1: device descriptor read/64, error -110 [ 563.009190][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.030967][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 650.254218][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 650.261230][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5838/1:b..l P24/1:b..l P5507/1:b..l P2/1:b..l [ 650.272598][ C0] rcu: (detected by 0, t=10502 jiffies, g=51405, q=264 ncpus=2) [ 650.280350][ C0] task:kthreadd state:R running task stack:25120 pid:2 tgid:2 ppid:0 task_flags:0x208040 flags:0x00004000 [ 650.294847][ C0] Call Trace: [ 650.298150][ C0] [ 650.301103][ C0] __schedule+0x1b88/0x5240 [ 650.305630][ C0] ? __lock_acquire+0xad5/0xd80 [ 650.310503][ C0] ? preempt_schedule_irq+0xfe/0x1c0 [ 650.315801][ C0] ? finish_task_switch+0x1e5/0x870 [ 650.321036][ C0] ? __pfx___schedule+0x10/0x10 [ 650.325927][ C0] ? preempt_schedule_irq+0xf3/0x1c0 [ 650.331225][ C0] preempt_schedule_irq+0xfe/0x1c0 [ 650.336351][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 650.342250][ C0] irqentry_exit+0x5e/0x90 [ 650.346659][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 650.352632][ C0] RIP: 0010:lock_acquire+0x167/0x2f0 [ 650.357910][ C0] Code: c7 44 24 10 00 00 00 00 9c 8f 44 24 10 f7 44 24 10 00 02 00 00 0f 85 fd 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 65 48 8b 45 00 <48> 3b 44 24 38 0f 85 72 01 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e [ 650.377510][ C0] RSP: 0018:ffffc90000077168 EFLAGS: 00000206 [ 650.383569][ C0] RAX: 3bbbd0e6e78d8000 RBX: ffffffff8ed3dfa0 RCX: 3bbbd0e6e78d8000 [ 650.391561][ C0] RDX: 0000000000000000 RSI: ffffffff8e4fde39 RDI: ffffffff8ca1b760 [ 650.399539][ C0] RBP: ffffffff9368d020 R08: 0000000000000000 R09: 0000000000000000 [ 650.407505][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 650.415466][ C0] R13: 0000000000000002 R14: 0000000000000246 R15: 0000000000000000 [ 650.423449][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 650.428566][ C0] ? kernel_clone+0x242/0x930 [ 650.433232][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 650.438334][ C0] unwind_next_frame+0xd5/0x23b0 [ 650.443265][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 650.448382][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 650.453488][ C0] ? kernel_clone+0x242/0x930 [ 650.458155][ C0] ? kernel_clone+0x242/0x930 [ 650.462823][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 650.468975][ C0] arch_stack_walk+0x11e/0x150 [ 650.473739][ C0] ? kernel_clone+0x242/0x930 [ 650.478411][ C0] stack_trace_save+0x11a/0x1d0 [ 650.483261][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 650.488630][ C0] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 650.494514][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 650.500837][ C0] save_stack+0xfc/0x1f0 [ 650.505192][ C0] ? __pfx_save_stack+0x10/0x10 [ 650.510047][ C0] ? __free_frozen_pages+0xde8/0x10a0 [ 650.515407][ C0] ? __put_partials+0x160/0x1c0 [ 650.520245][ C0] ? put_cpu_partial+0x17e/0x250 [ 650.525198][ C0] ? __slab_free+0x294/0x390 [ 650.529777][ C0] ? qlist_free_all+0x9a/0x140 [ 650.534533][ C0] ? kasan_quarantine_reduce+0x14f/0x170 [ 650.540161][ C0] ? __kasan_slab_alloc+0x23/0x80 [ 650.545178][ C0] ? __kmalloc_noprof+0x238/0x4d0 [ 650.550198][ C0] ? security_prepare_creds+0x53/0x360 [ 650.555674][ C0] ? prepare_creds+0x4b4/0x6f0 [ 650.560441][ C0] ? copy_creds+0x109/0x9c0 [ 650.564940][ C0] ? copy_process+0x9ec/0x3d10 [ 650.569708][ C0] ? kernel_clone+0x242/0x930 [ 650.574398][ C0] __reset_page_owner+0x76/0x1e0 [ 650.579331][ C0] __free_frozen_pages+0xde8/0x10a0 [ 650.584530][ C0] __put_partials+0x160/0x1c0 [ 650.589216][ C0] ? put_cpu_partial+0x14e/0x250 [ 650.594172][ C0] put_cpu_partial+0x17e/0x250 [ 650.598943][ C0] ? put_cpu_partial+0x72/0x250 [ 650.603795][ C0] __slab_free+0x294/0x390 [ 650.608214][ C0] ? __phys_addr+0xba/0x170 [ 650.612720][ C0] qlist_free_all+0x9a/0x140 [ 650.617329][ C0] kasan_quarantine_reduce+0x14f/0x170 [ 650.622790][ C0] __kasan_slab_alloc+0x23/0x80 [ 650.627640][ C0] __kmalloc_noprof+0x238/0x4d0 [ 650.632494][ C0] ? security_prepare_creds+0x53/0x360 [ 650.637957][ C0] security_prepare_creds+0x53/0x360 [ 650.643244][ C0] prepare_creds+0x4b4/0x6f0 [ 650.647839][ C0] copy_creds+0x109/0x9c0 [ 650.652175][ C0] copy_process+0x9ec/0x3d10 [ 650.656763][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 650.661962][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 650.668293][ C0] ? wake_up_new_task+0x8d3/0xda0 [ 650.673321][ C0] ? __pfx_copy_process+0x10/0x10 [ 650.678348][ C0] ? __pfx_wake_up_new_task+0x10/0x10 [ 650.683729][ C0] kernel_clone+0x242/0x930 [ 650.688233][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 650.693270][ C0] kernel_thread+0x1c2/0x250 [ 650.697858][ C0] ? __pfx_kthread+0x10/0x10 [ 650.702452][ C0] ? __pfx_kernel_thread+0x10/0x10 [ 650.707567][ C0] ? __pfx_kthread+0x10/0x10 [ 650.712163][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 650.717370][ C0] kthreadd+0x621/0x850 [ 650.721526][ C0] ? kthreadd+0x3ac/0x850 [ 650.725853][ C0] ? __pfx_kthreadd+0x10/0x10 [ 650.730544][ C0] ? __pfx_kthreadd+0x10/0x10 [ 650.735226][ C0] ? __pfx_kthreadd+0x10/0x10 [ 650.739902][ C0] ? __pfx_kthreadd+0x10/0x10 [ 650.744576][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 650.749769][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 650.754961][ C0] ? __pfx_kthreadd+0x10/0x10 [ 650.759638][ C0] ret_from_fork+0x4b/0x80 [ 650.764055][ C0] ? __pfx_kthreadd+0x10/0x10 [ 650.768726][ C0] ret_from_fork_asm+0x1a/0x30 [ 650.773493][ C0] [ 650.776524][ C0] task:dhcpcd state:R running task stack:24368 pid:5507 tgid:5507 ppid:1 task_flags:0x400140 flags:0x00000002 [ 650.790005][ C0] Call Trace: [ 650.793289][ C0] [ 650.796228][ C0] __schedule+0x1b88/0x5240 [ 650.800742][ C0] ? preempt_schedule_irq+0xfe/0x1c0 [ 650.806025][ C0] ? __pfx___schedule+0x10/0x10 [ 650.810898][ C0] ? preempt_schedule_irq+0xf3/0x1c0 [ 650.816177][ C0] preempt_schedule_irq+0xfe/0x1c0 [ 650.821303][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 650.827028][ C0] irqentry_exit+0x5e/0x90 [ 650.831439][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 650.837426][ C0] RIP: 0010:kasan_check_range+0x86/0x2a0 [ 650.843070][ C0] Code: 00 fc ff df 4f 8d 3c 31 4c 89 fd 4c 29 dd 48 83 fd 10 7f 29 48 85 ed 0f 84 3e 01 00 00 4c 89 cd 48 f7 d5 48 01 dd 41 80 3b 00 <0f> 85 d6 01 00 00 49 ff c3 48 ff c5 75 ee e9 1e 01 00 00 45 89 dc [ 650.862682][ C0] RSP: 0018:ffffc90003b66d58 EFLAGS: 00000246 [ 650.868757][ C0] RAX: ffffc90003b67101 RBX: 1ffff9200076cdda RCX: ffffffff816e0656 [ 650.876725][ C0] RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffffc90003b66ed0 [ 650.884707][ C0] RBP: fffffffffffffffe R08: ffffc90003b66edf R09: 1ffff9200076cddb [ 650.892696][ C0] R10: dffffc0000000000 R11: fffff5200076cdda R12: ffffc90003b66e80 [ 650.900671][ C0] R13: ffffc90003b68000 R14: dffffc0000000001 R15: fffff5200076cddc [ 650.908650][ C0] ? unwind_next_frame+0xb46/0x23b0 [ 650.913862][ C0] __asan_memset+0x23/0x50 [ 650.918277][ C0] ? __free_frozen_pages+0xde8/0x10a0 [ 650.923644][ C0] unwind_next_frame+0xb46/0x23b0 [ 650.928696][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 650.933805][ C0] ? __reset_page_owner+0x76/0x1e0 [ 650.938917][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 650.945074][ C0] arch_stack_walk+0x11e/0x150 [ 650.949854][ C0] ? __free_frozen_pages+0xde8/0x10a0 [ 650.955248][ C0] stack_trace_save+0x11a/0x1d0 [ 650.960096][ C0] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 650.965984][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 650.971194][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 650.976575][ C0] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 650.982463][ C0] ? __lock_acquire+0xad5/0xd80 [ 650.987326][ C0] save_stack+0xfc/0x1f0 [ 650.991565][ C0] ? __pfx_save_stack+0x10/0x10 [ 650.996417][ C0] ? page_ext_put+0x97/0xc0 [ 651.000919][ C0] __reset_page_owner+0x76/0x1e0 [ 651.005861][ C0] __free_frozen_pages+0xde8/0x10a0 [ 651.011068][ C0] __put_partials+0x160/0x1c0 [ 651.015742][ C0] put_cpu_partial+0x17e/0x250 [ 651.020501][ C0] ? put_cpu_partial+0x72/0x250 [ 651.025370][ C0] __slab_free+0x294/0x390 [ 651.029783][ C0] ? __phys_addr+0xba/0x170 [ 651.034291][ C0] qlist_free_all+0x9a/0x140 [ 651.038882][ C0] kasan_quarantine_reduce+0x14f/0x170 [ 651.044340][ C0] __kasan_slab_alloc+0x23/0x80 [ 651.049186][ C0] kmem_cache_alloc_node_noprof+0x1f2/0x3b0 [ 651.055080][ C0] ? __alloc_skb+0x1c2/0x480 [ 651.059669][ C0] __alloc_skb+0x1c2/0x480 [ 651.064087][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 651.069028][ C0] alloc_skb_with_frags+0xc3/0x830 [ 651.074136][ C0] ? __lock_acquire+0xad5/0xd80 [ 651.078982][ C0] sock_alloc_send_pskb+0x91c/0xa70 [ 651.084187][ C0] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 651.089921][ C0] ? is_bpf_text_address+0x26/0x2a0 [ 651.095128][ C0] unix_dgram_sendmsg+0x6d4/0x1ea0 [ 651.100244][ C0] ? __kernel_text_address+0xd/0x40 [ 651.105437][ C0] ? arch_stack_walk+0xff/0x150 [ 651.110300][ C0] ? aa_sk_perm+0x96f/0xac0 [ 651.114805][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 651.120358][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 651.125297][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 651.130867][ C0] __sock_sendmsg+0x221/0x270 [ 651.135546][ C0] sock_write_iter+0x2d9/0x3f0 [ 651.140313][ C0] ? __pfx_sock_write_iter+0x10/0x10 [ 651.145608][ C0] do_iter_readv_writev+0x71f/0x9d0 [ 651.150806][ C0] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 651.156529][ C0] ? bpf_lsm_file_permission+0x9/0x10 [ 651.161896][ C0] ? rw_verify_area+0x246/0x630 [ 651.166745][ C0] vfs_writev+0x38d/0xbc0 [ 651.171079][ C0] ? __seccomp_filter+0x521/0x1f20 [ 651.176202][ C0] ? __pfx_vfs_writev+0x10/0x10 [ 651.181077][ C0] do_writev+0x1b8/0x360 [ 651.185332][ C0] ? __pfx_do_writev+0x10/0x10 [ 651.190115][ C0] ? __secure_computing+0xef/0x2f0 [ 651.195230][ C0] do_syscall_64+0xf3/0x230 [ 651.199733][ C0] ? clear_bhb_loop+0x45/0xa0 [ 651.204406][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.210295][ C0] RIP: 0033:0x7f69d6bd4e03 [ 651.214702][ C0] RSP: 002b:00007ffee22f3898 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 651.223113][ C0] RAX: ffffffffffffffda RBX: 00007ffee22f3bf8 RCX: 00007f69d6bd4e03 [ 651.231089][ C0] RDX: 0000000000000005 RSI: 00007ffee22f38b0 RDI: 000000000000000a [ 651.239050][ C0] RBP: 000000000000012c R08: 000000000000000a R09: 00007ffee22f38f0 [ 651.247009][ C0] R10: 00007ffee22f38f8 R11: 0000000000000246 R12: 0000563bbea7d830 [ 651.254969][ C0] R13: 0000563ba9022f88 R14: 00000000ffffffff R15: 0000000000000001 [ 651.262938][ C0] [ 651.265950][ C0] task:kworker/1:0 state:R running task stack:19608 pid:24 tgid:24 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 651.279522][ C0] Workqueue: events_power_efficient gc_worker [ 651.285592][ C0] Call Trace: [ 651.288869][ C0] [ 651.291797][ C0] __schedule+0x1b88/0x5240 [ 651.296318][ C0] ? __pfx_wg_packet_encrypt_worker+0x10/0x10 [ 651.302394][ C0] ? preempt_schedule_notrace+0x103/0x140 [ 651.308115][ C0] ? __pfx___schedule+0x10/0x10 [ 651.312968][ C0] ? __lock_acquire+0xad5/0xd80 [ 651.317823][ C0] preempt_schedule_notrace+0x103/0x140 [ 651.323371][ C0] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 651.329466][ C0] preempt_schedule_notrace_thunk+0x16/0x30 [ 651.335360][ C0] ? gc_worker+0xc27/0x1420 [ 651.339946][ C0] rcu_is_watching+0x7e/0xb0 [ 651.344564][ C0] gc_worker+0xc38/0x1420 [ 651.348899][ C0] ? gc_worker+0x277/0x1420 [ 651.353420][ C0] ? __pfx_gc_worker+0x10/0x10 [ 651.358191][ C0] ? process_scheduled_works+0x9cb/0x18e0 [ 651.363904][ C0] process_scheduled_works+0xac3/0x18e0 [ 651.369472][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 651.375471][ C0] ? assign_work+0x367/0x3d0 [ 651.380078][ C0] worker_thread+0x870/0xd50 [ 651.384694][ C0] ? __kthread_parkme+0x1a8/0x200 [ 651.389732][ C0] ? __pfx_worker_thread+0x10/0x10 [ 651.394841][ C0] kthread+0x7b7/0x940 [ 651.398917][ C0] ? __pfx_worker_thread+0x10/0x10 [ 651.404028][ C0] ? __pfx_kthread+0x10/0x10 [ 651.408617][ C0] ? __pfx_kthread+0x10/0x10 [ 651.413203][ C0] ? __pfx_kthread+0x10/0x10 [ 651.417805][ C0] ? __pfx_kthread+0x10/0x10 [ 651.422391][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 651.427581][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 651.432772][ C0] ? __pfx_kthread+0x10/0x10 [ 651.437360][ C0] ret_from_fork+0x4b/0x80 [ 651.441765][ C0] ? __pfx_kthread+0x10/0x10 [ 651.446348][ C0] ret_from_fork_asm+0x1a/0x30 [ 651.451112][ C0] [ 651.454136][ C0] task:syz-executor state:R running task stack:23624 pid:5838 tgid:5838 ppid:5833 task_flags:0x40050c flags:0x00004004 [ 651.467608][ C0] Call Trace: [ 651.470880][ C0] [ 651.473839][ C0] __schedule+0x1b88/0x5240 [ 651.478371][ C0] ? preempt_schedule_common+0x84/0xd0 [ 651.483827][ C0] ? __pfx___schedule+0x10/0x10 [ 651.488677][ C0] ? do_raw_spin_lock+0x151/0x370 [ 651.493726][ C0] ? preempt_schedule+0xe4/0xf0 [ 651.498570][ C0] preempt_schedule_common+0x84/0xd0 [ 651.503856][ C0] preempt_schedule+0xe4/0xf0 [ 651.508544][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 651.513913][ C0] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 651.519818][ C0] preempt_schedule_thunk+0x16/0x30 [ 651.525024][ C0] _raw_spin_unlock+0x3e/0x50 [ 651.529708][ C0] unmap_page_range+0x39c5/0x44d0 [ 651.534761][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 651.540127][ C0] ? mas_next_node+0xb9f/0xe00 [ 651.544901][ C0] ? mas_next_slot+0xdc6/0xea0 [ 651.549683][ C0] ? uprobe_munmap+0x180/0x460 [ 651.554496][ C0] ? unmap_single_vma+0x1ba/0x2a0 [ 651.559526][ C0] unmap_vmas+0x3ce/0x5f0 [ 651.563859][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 651.568715][ C0] ? tlb_gather_mmu_fullmm+0x160/0x210 [ 651.574179][ C0] exit_mmap+0x2bc/0xde0 [ 651.578419][ C0] ? uprobe_clear_state+0x20e/0x290 [ 651.583707][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 651.588472][ C0] ? __pfx_exit_aio+0x10/0x10 [ 651.593158][ C0] ? uprobe_clear_state+0x271/0x290 [ 651.598357][ C0] ? mm_update_next_owner+0xa4/0x810 [ 651.603645][ C0] __mmput+0x115/0x420 [ 651.607706][ C0] exit_mm+0x221/0x310 [ 651.611810][ C0] ? __pfx_exit_mm+0x10/0x10 [ 651.616418][ C0] ? taskstats_exit+0x326/0xa60 [ 651.621261][ C0] do_exit+0x994/0x27f0 [ 651.625411][ C0] ? do_raw_spin_lock+0x151/0x370 [ 651.630433][ C0] ? __pfx_do_exit+0x10/0x10 [ 651.635019][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 651.640400][ C0] do_group_exit+0x207/0x2c0 [ 651.644984][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 651.650171][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 651.655363][ C0] get_signal+0x1696/0x1730 [ 651.659869][ C0] ? __pfx_get_signal+0x10/0x10 [ 651.664719][ C0] arch_do_signal_or_restart+0x98/0x840 [ 651.670268][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 651.676435][ C0] ? syscall_exit_to_user_mode+0xa3/0x340 [ 651.682152][ C0] syscall_exit_to_user_mode+0xce/0x340 [ 651.687693][ C0] do_syscall_64+0x100/0x230 [ 651.692281][ C0] ? clear_bhb_loop+0x45/0xa0 [ 651.696983][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.702880][ C0] RIP: 0033:0x7facf13843d7 [ 651.707291][ C0] RSP: 002b:00007fff41477a20 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 651.715701][ C0] RAX: fffffffffffffe00 RBX: 00000000000016e8 RCX: 00007facf13843d7 [ 651.723661][ C0] RDX: 0000000040000000 RSI: 00007fff41477a5c RDI: 00000000ffffffff [ 651.731621][ C0] RBP: 00007fff41477a5c R08: 0000000000000000 R09: 0000000000000000 [ 651.739585][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 651.747544][ C0] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 651.755508][ C0]