last executing test programs: 11.195632922s ago: executing program 4 (id=1013): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(0xffffffffffffffff, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}, 0x8103}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0xffffffffffffff41, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001300)=""/193, 0xb4}, {&(0x7f0000000440)=""/245, 0xf5}, {&(0x7f0000000580)=""/76, 0x4c}, {&(0x7f0000003d40)=""/4097, 0x1001}, {&(0x7f00000016c0)=""/217, 0xd9}], 0x5}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/4112, 0x1010}, {&(0x7f0000000240)=""/61, 0x4b}, {&(0x7f0000001180)=""/35, 0x23}, {&(0x7f00000011c0)=""/158, 0x9e}], 0x6}, 0xf}, {{0x0, 0x0, 0x0}, 0x6}], 0x8, 0x20, 0x0) 10.898634978s ago: executing program 4 (id=1016): unshare(0x2040400) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002280)=@newchain={0x84, 0x64, 0x20, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfffb, 0x10}, {0xfff1, 0x2}, {0xb, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x7}, @filter_kind_options=@f_flow={{0x9}, {0x4c, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xb, 0xb}}, @TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8000000, 0x10000000, 0x1ff, 0xfffffffc, 0x81, {0x81, 0x1, 0x8, 0x3ff, 0x4, 0x5}, {0x28, 0x2, 0x4, 0x4000, 0x5, 0x4}, 0x2, 0x6, 0x80000001}}]}]}}]}, 0x84}}, 0x4000) fremovexattr(r0, &(0x7f0000000000)=@known='trusted.overlay.origin\x00') 10.563157633s ago: executing program 4 (id=1018): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0x14, &(0x7f0000000140)={0x20, 0x7, 0x7, {0x7, 0xb, "79e57100d7"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0x1c, &(0x7f0000000240)={0x0, 0xc, 0x2c, "1a6ff770c15a6bb9f349b13979f4c7cfa03165910a33182686f6d164ebfecd57d7a923cedf82e9ca8747fc47"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x3}}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, 0xffffffffffffffff, 0x5a53f000) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f00001b4000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x12, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, &(0x7f00000001c0)=""/166, 0xa6, &(0x7f0000000140)={&(0x7f0000000300)={'crc32c\x00'}}) ioprio_set$uid(0x0, r2, 0x4004) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x4048aecb, &(0x7f0000000000)) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) 9.076470132s ago: executing program 2 (id=1024): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000040e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000004000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000440005"], 0xfc}}, 0x0) 8.723441202s ago: executing program 2 (id=1025): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newlink={0x48, 0x10, 0x503, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x14e15, 0x1ef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x48}}, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0xd8, 0xc0, 0xdc, 0x20, 0x6f8, 0xb000, 0x6773, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xa, 0x3, 0xc0, 0x3, [{{0x9, 0x4, 0x77, 0x7f, 0x1, 0xff, 0x70, 0xbb, 0x5, [], [{{0x9, 0x5, 0xf, 0x10, 0x8, 0x9, 0x8, 0x1a}}]}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x3d, &(0x7f0000000000)=@string={0x3d, 0x3, "93a8525d68b0c2383cfe38eee60f90f4f59bd420ea5fec0f57a524691ad2b3813229777c98db8fe29b33d15e2141f3313dd64d261a5d315316d5b2"}}]}) 7.409323873s ago: executing program 4 (id=1032): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) writev(r0, &(0x7f0000000780)=[{&(0x7f0000000300)="eb276faada8e53259b3d97161ca2ad1faffbe7db40c44ceb157825d824a5a9f7b299c77b2bc8191dd07bbcdd78b0dd6ba1f24016c11f2986515917f57aa2c95943a8b044f245d9530c74864df8977f73f77054c5e89276fa4b7cf2c3343789a55ed83610bc9a6de0c1cd5b2fcb4ac51f0f35c94429c1578deca746666b75353e742ba95f7d84728dac160e30a5f25844620959c45d703868e8a936e76f4f26edbf75adbfd388771c14d04972c5f71179facad75da4326f059b63008d0fdc5230bc6f1ea04f9c87effb84effe8ddb5fbaaae98d2c354751bfbb5656878a68a1c851d4fb96fba5e18455a4cba2ed3c45c390fb189e", 0xf4}, {&(0x7f0000000400)="11ae52a6321e6c1c32cd3b788d5e21af8a8c7d823d4e295d270751d35e70c866ca812dde779a391f210954e717e7781d8a167feac15505277b871137b498525fbe8407be46823611907257e21a995c1b2b55cda77602a9c5734d798df6bf42b439df2168c09415642ca3205f5900fd7ffdcb6e32703903cbfbba937747eec7dcf25b9e861651e51b881628a7b2c166acee8f323b3140e64a4d52fef1c6b539f9471cf831d2f15e49f169adee755be1cf585220baf099ab76c2a005f4302e8cc0237905340211a81d44f9ac618ea8", 0xce}, {&(0x7f0000000500)="a5416ebba37f3bfb96940810b1523c5952ca01b7c59c40f3dc3f07fe838182bf6906bfa84342e1d28e9331c9fc6c4618e7407c983ea279c31a11551fc4be91bcbe6f373f2005b04cfa6eb7708e11b188e68b9d2017116583511bab3e5ed5bc5c0281df95a56fadd4afb3ec053ad1e7a613a6e2fc5a9fbac78861009a7f4ac462dee465c6a8ff4b753a109d2806cbd698197f99ddbff59eb19bbc2468851367507776388462413513278b", 0xaa}, {&(0x7f0000000240)="4de89476f0465616e2fb7e94810fa20f08e4ad6e177bffc62e50bc7b573f", 0x1e}, {&(0x7f0000000880)="ecfe48a728b5d4093f8ef60243e30b8f8c06bba3462a6970d24162be72d608d1dc1bd444e4ef282350d59bd615b1ca9b6d82f0d534004dd7c72c79c2f18b4f008c4652eca8d930d8bdaf263ff4869524e0e87061fba7a91de0a2fd3504646ebcea6b69a0ed2ef8692fa1483b53045173885ae930b3428f501b738ef26ffa5233c42c20bffd461b72356cbc190f070c1500ac0cd6892bfb77cb0f6cde48e186b09478b259096afd4637ffa8aa49e8aa1c553c4bde49d0389f624ac3a0004b154d5c72b484168433c43218b1b39efb49b65662169bbde7071c1da5026e1b9430ebdde97d56eed2be82633f68", 0xeb}, {&(0x7f0000000980)="183bd7fe1460b29b5b3d5e8390cc35a7f46fc669b42c5dfe35d7bfc3145d71d8c4ed1642ccf01d2a5f997d8d0783f90326c0c96c282364da40cd9d7562c21773d487cfa78906b51df3f41e0b68121e0478a78dc82177eb85e66860de542175b3f1fcef1b788d1de8c07b2610ae1806a9c08e6bfde1a133ed06f30f4a50ebab5f463d143c8b249087da6e2ccfa63c6b81901296015f1e33c4eaac951420ef8018f8abde696d8e7ba0c5566dcb01c429c05a496f53760d8d4ec73b6aa74f74dccc620870fe7e72024cacdf19c593d9744654f1353d7dc8768872b1627d5c18c0c40aa60a", 0xe3}, {&(0x7f0000001640)="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", 0x3a9}], 0x7) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r7) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$netlink(0x10, 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(r8) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) link(&(0x7f0000001240)='./file1\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) 7.295177712s ago: executing program 2 (id=1033): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 'syz0\x00', &(0x7f0000000000)=['!\t\x00'], 0x3}) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc04c5611, &(0x7f00000001c0)=@overlay={0x2, 0x3, 0x4, 0x4, 0x756, {}, {0x2, 0xc, 0x8a, 0x0, 0xcd, 0x1, "8c9052f3"}, 0xfffffff7, 0x3, {}, 0x80000000}) socket$inet(0x2, 0x5, 0x0) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x3) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) write$qrtrtun(r4, &(0x7f00000003c0)="00009a4bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x2000000000000088}}, 0x40) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendto$inet(r2, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) 5.914449126s ago: executing program 2 (id=1040): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c01000019000100000000000000000000000000000000000000000000000000ac1414bb0000000000000000050000000000000000000000020000003c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000001000000a80c0000000000000000000000000000000000000000000000000000000000000300000000000000000000b40000000000000000000000000000000000000000ff000000000000000100000000000000840005"], 0x13c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 5.662570481s ago: executing program 2 (id=1041): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x34, r0, 0x401, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x34}}, 0x0) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f00000010c0)="9d7fcf3efc63f4a2a555ba8b4726d7ccaf8a20", 0x13}], 0x1, 0x0, 0x6b}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="180000006a000700"], 0x18}, 0x1, 0x0, 0x0, 0x4004090}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x44, &(0x7f0000000680)={[{0x1, 0x4e00, "84"}, {0x35, 0x4e00, "74c0424f18b1ce7aaf2e4c0b646ea3107789fcbbfe55b127d489d35b674b960f8fdaa7ed57eaf1114820a0137fc5802907072520be"}]}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x34, r0, 0x401, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x34}}, 0x0) (async) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f00000010c0)="9d7fcf3efc63f4a2a555ba8b4726d7ccaf8a20", 0x13}], 0x1, 0x0, 0x6b}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="180000006a000700"], 0x18}, 0x1, 0x0, 0x0, 0x4004090}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x44, &(0x7f0000000680)={[{0x1, 0x4e00, "84"}, {0x35, 0x4e00, "74c0424f18b1ce7aaf2e4c0b646ea3107789fcbbfe55b127d489d35b674b960f8fdaa7ed57eaf1114820a0137fc5802907072520be"}]}) (async) 5.090922831s ago: executing program 1 (id=1043): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000f50000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x0) 4.841094782s ago: executing program 0 (id=1044): openat2(0xffffffffffffffff, 0x0, 0x0, 0x1800) (async, rerun: 32) syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401", @ANYRES32=0x0], 0x0) (async, rerun: 32) r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, &(0x7f0000000000), &(0x7f0000000040)=0x14) 4.703471828s ago: executing program 1 (id=1045): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c000000130001c3000000000000000000000800", @ANYRES32=r2, @ANYBLOB="0000d400000000000a000100003b"], 0x2c}, 0x1, 0x0, 0xc3ffffffffffffff}, 0x0) 4.604090157s ago: executing program 1 (id=1046): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000030100000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.505073811s ago: executing program 3 (id=1047): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x68000000}, 0x0) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x9, @private1}}, 0xa0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x300}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe) 4.459359011s ago: executing program 1 (id=1048): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000280)={0x48}) fcntl$setstatus(r0, 0x4, 0x2800) userfaultfd(0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x28, 0x2, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, 0x0) r5 = creat(&(0x7f0000000200)='./file0\x00', 0x110) read$FUSE(r5, &(0x7f0000000a80)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r4, 0xc01064ac, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newtaction={0x48, 0x1e, 0x109, 0x100, 0x25dfdbff, {}, [{0x4a, 0x1, [@m_ctinfo={0x30, 0x10, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0x63, 0x8, {0x2, 0x1}}}}]}]}, 0x48}, 0x1, 0x2b1e, 0x0, 0x10}, 0x4040010) r7 = syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') write$tcp_mem(r7, &(0x7f0000000180)={0xd2, 0x20, 0x0, 0x20, 0x6}, 0x1c) connect(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x6, 0x10000001, 0x0, 0x0, 0x80000000000, 0x1, 0xfffffffffffffffe, 0x100, 0x6}, 0x0) bind$isdn(r3, &(0x7f0000000140)={0x22, 0x5, 0x2, 0x7, 0x45}, 0x6) listen(0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x9) writev(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESDEC], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close_range(r8, 0xffffffffffffffff, 0x0) 4.385691183s ago: executing program 3 (id=1049): socket$nl_generic(0x10, 0x3, 0x10) (async) syz_usb_connect(0x0, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000304fc0400"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000240012800b0001006272696467650000140002800500190006000000050018000100"], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) (async) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) (async) open_by_handle_at(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="280000004e000010cc000000000000000180e127d6fb000000822d0cfc0000000000000000000000ff7fffffffffd70e8cb3974479ee000000000636b6428b85551445fd5b3dc47e68ade701be286e7aa4613038a31f386ac23e87fadc61a6160a14a500"], 0x10000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 3.036691937s ago: executing program 3 (id=1050): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x8000, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0x1002, 0x4, 0x1db, 0x0, 0x0, 0xe0, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xbc, 0xe0}, @unspec=@STANDARD={0x24, '\x00', 0x0, 0x1ec}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @rand_addr=0x64010104, @rand_addr=0x64010101, 0x4, 0x1}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0xff000000, 0x80800000, 0x6, 0x0, {@mac=@multicast, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@mac, {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x81, 0x1, 0x1, 0xd13, 0xe106, 'pimreg1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x3}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @private=0xa010102, @broadcast}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x486) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b/\\\\o\xdc\xea\x95\x9a)\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056", 0x5, 0x1) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socket$inet6(0x10, 0x80000, 0x3) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r6 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000000)=r5, 0x4) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{0x7, 0x0, 0x83}, {0x9, 0x0, 0xb187}], 0x2, 0x201, 0x0, 0x0, 0x42, 0x5c}) (async) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r8, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @multicast2}}}], 0x20}, 0x0) (async) unshare(0x42000000) (async) syz_open_procfs(0x0, &(0x7f0000000500)='net/hci\x00') sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x7, 0x1, 0x9, 0x2, 0x4, 0x6}, {0x3, 0x2, 0xe, 0xb3b, 0x3, 0x6}, 0x9, 0x0, 0x2d}}, @TCA_TBF_PTAB={0x404, 0x3, [0xfb, 0x2, 0x101, 0x5, 0x2, 0xa28, 0x4, 0x9, 0xf, 0xffff6d77, 0xe4, 0x280, 0x107, 0x8001, 0x2, 0x0, 0x7, 0xff, 0x4, 0x401, 0x9, 0x5, 0x3, 0x1, 0xfffffff5, 0x5, 0xb8, 0x7, 0x3, 0x1, 0x157, 0x26553de0, 0x4, 0x3ff, 0x80, 0x4, 0x1, 0x5, 0x1, 0x4, 0xf, 0x1000, 0x9, 0x6, 0xfff, 0x42, 0x44, 0x9, 0x6, 0x1, 0x7f, 0x9, 0x9, 0x6, 0x40, 0xffff, 0x0, 0x3, 0x9, 0x3, 0x7, 0xd61a, 0x1, 0x4, 0x8000, 0x5400000, 0x8000, 0x6, 0x400, 0x8000, 0x401, 0x4, 0xffffffff, 0x5, 0x8000, 0x1000, 0xb5, 0x6, 0x7, 0x0, 0x800, 0x1, 0x7fff, 0x401, 0x0, 0x2, 0x6e9, 0x8, 0x6, 0x5, 0xfffffffa, 0xffffff83, 0x7f, 0x9, 0x5feecc8, 0xb, 0x1a48dadd, 0xa3b, 0xfffffffa, 0x4, 0xffff, 0xc5, 0xbfa, 0x80000001, 0x8, 0x6, 0xacc, 0x7, 0x9, 0x1, 0x8001, 0x9, 0xcd4d, 0x5, 0x0, 0x7ff, 0x5, 0x5fd, 0x8, 0x8001, 0x9, 0xfffffff7, 0x76, 0x400, 0x4, 0x5, 0x9, 0x6, 0x17, 0x6, 0x2, 0x4, 0x400000, 0x10001, 0xd17, 0x1, 0x89, 0x4, 0x4, 0x8, 0x8, 0x10000, 0x9, 0x1, 0xce3, 0x4, 0x9, 0x96, 0x4, 0x6, 0x9, 0x8001, 0xc, 0x3, 0x2, 0x8969, 0x100, 0x100, 0x101, 0x7, 0x10000, 0x0, 0xc, 0x9, 0xfffffff1, 0x1, 0x1, 0x4, 0x7, 0x34a00, 0x45, 0x800, 0x2, 0x2, 0x7, 0x3800, 0x8, 0x4, 0x4, 0xfffffffb, 0x4, 0xb, 0xc, 0x5, 0x2, 0x4, 0x2000000, 0x2, 0x2, 0x5, 0x5, 0xfffffff8, 0xda, 0x9, 0x8, 0x2, 0x1, 0x4, 0x8, 0x7, 0x36a3, 0x2, 0x5, 0xa1, 0x94, 0x4a9b, 0x9, 0x5, 0x0, 0x3, 0x3, 0x4, 0xe, 0xd, 0xfffffff2, 0x5, 0x8, 0x0, 0x200, 0x7d, 0x2, 0x4, 0x1, 0x7fff, 0x3, 0x6, 0x3ff, 0x10000, 0x10, 0x0, 0x6, 0x8, 0x6, 0x8, 0x8, 0xf, 0x81, 0x4, 0x400, 0x3, 0xc, 0x8, 0x3, 0x6, 0x2c, 0x8, 0x25, 0x0, 0xb9, 0x3, 0x330c, 0xfffffffe, 0xc, 0x3a8b, 0x9, 0x1]}]}}]}, 0x45c}}, 0x0) (async) r9 = accept$packet(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x14) getsockname$packet(r9, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) 2.469935747s ago: executing program 3 (id=1053): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89101) fchdir(r0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x199480) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000840)="a99a3b3cbb85442196aa2af301e8911320045b92583dfb155a440ecc3da28fd842dd7ac0eb1b15ecd2c094963eef8881403694bfd31ce7c75a12bb46ec39815075ddfee92dbaf27e8ced819a390f9ae8d08213e3b0e1ebb714687b89f27831dc01a878df66831e7fd034c298980b508d18bbe65960b162d5b031d149b72d47dbcb393ba09737361334364395d69a9829be86247c86147b08989a76122638a8760ced10536cc1b342908e100e", 0xac}, {&(0x7f0000000ac0)="9de62a3dfa8a0170eb22f1c7b05951355c244eb78c3215690da21d540f5b1dd6b5154568de2a998e7a32f4a819d9bbf1f97589b700d1e375265ffe7b026697d20dfb60421928cb9f6bd4b439db6181477c3e6ff4aa25af6bb253f6e24981a11f711d4723511ba887a4741e7c6811c6063f6a2d112c527dbf45abf47db8d154b3b8dd06ed7044862b9c6198302ecb29afed9f4d202355f11032cf2104aa280e5cfcf6c91fe6a619da383380cd4027e0956eb7a7878e5fdeaa01367e7f6b07fcea52d99474fc58ad2b6a1165665400120e6e6895d4c15471fa1d5d6573dc6b7af86289812ee2c8a943da1d1c2bea45", 0xee}, {&(0x7f0000000740)="28d501b9c0ea7c7d51bfb50145ed095df3f82dbab1782d04469e5d92338e3a2ca543e1bb28cb18ed9cb8d7d5f7bd", 0x2e}, {&(0x7f0000000a00)="f38d6ea62f4955556e2da31450a322efdbdb9ff9d88e061178280afcbf3e8d0e5ba26f479011f981517fc6c8b94b025b7830651e3457aa5d81ef809688ea97deb68434c75c6046de0f4247919808161fd444cf94e1f83712195429d37e7df0aba4b2e8bd3057b6f426", 0x69}], 0x4}}], 0x1, 0x4000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYRES32=r1], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='syscall\x00') pread64(r3, &(0x7f0000001240)=""/102392, 0x18ff8, 0x1000000000) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x80000000}, 0xc) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x60}) write$binfmt_misc(r4, &(0x7f0000000040), 0xe17) r5 = gettid() timer_create(0x6, &(0x7f0000000780)={0x0, 0x21, 0x2, @thr={&(0x7f000001b240)="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", &(0x7f00000007c0)="b515b22ea139a5e58b66649f4ad092f61d79ca8e1db9bae2ba88e9de772b81515f0d558ab222dc2b1d7e20a5d207fa52ece99f212ebe07c0c9defbf006a4c35a326ceb83476af09ebaf738e085597f4c4d046e1e0cf1bda763f7dd14c9637e17229f39689d393b"}}, &(0x7f0000000040)) r6 = syz_clone3(&(0x7f00000001c0)={0x2000000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r6, r6, 0xd) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000600)={'\x00', 0x9, 0x3, 0x9, 0xb, 0xfffffffffffffffb}) fcntl$getownex(r2, 0x10, &(0x7f00000001c0)={0x0, 0x0}) r8 = getpid() syz_pidfd_open(r8, 0x0) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000280)=0x0) r10 = openat$cgroup(r2, &(0x7f0000000680)='syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f00000006c0)={0x200000000, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000180), {0x4}, &(0x7f0000000500)=""/245, 0xf5, &(0x7f000001a240)=""/4096, &(0x7f0000000400)=[r5, r6, 0x0, r5, r7, r8, r9], 0x7, {r10}}, 0x58) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xc, 0x1c, "fee8a2ab78fc979fd1e00d960720e1001ea89de2b7fb000006000000000000000100000000000000fe020000000000f0000000000000000000e3ff0ebf00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 1.803378672s ago: executing program 3 (id=1054): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f00000012c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 'syz0\x00', &(0x7f0000000000)=['!\t\x00'], 0x3}) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000040)) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) r4 = socket$inet(0x2, 0x5, 0x0) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x3) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe0200108500000007000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r5, &(0x7f00000003c0)="00009a4bb35bdabb", 0x8) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x50, 0x0, &(0x7f0000000000)=0x600) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) 1.010072462s ago: executing program 1 (id=1055): r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x1004, 0x1}, 0x18, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000080000000000000000000b7fc611f00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) unshare(0x30200) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="9ca344e10000000000000000010000001811add65362d8b2dc86714379724dfd02f97149d24f9eb6c8bb6a700c88b16129092a936b5aec9d875bd542c4b4d4846dc1db5f05ec8f1925c96466", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000aa000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg(r2, &(0x7f0000000540)={&(0x7f0000000200)=@qipcrtr={0x2a, 0x3, 0xfffffffe}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000280)="0dc2e3851f084c5b0acd8c4b5f0bbe714f5fb98e6a49d4b095cda1ff4afdab3b76bc4d86dac054bf4414bf8382d39b6aeed71261bb59940e82fa1d6ca80f3954127ebc21ab238e1c41ff5019e48e111c8aec050f858f9a9f621a6d6052e9582b44e187d4531b30c9a5268dba975d810d59f85c1a80ed3f5294fdaf4560104da8b4ec9973995145bf88d70226567537cb6e2acbde0444a8954ac8f906db1806ab5dc903e366", 0xa5}, {&(0x7f0000000340)="cf99400b40f586849a20afb84764ec2c4b473f65c3de234d04e45558e2b03470ab4a417c667020d4b76bf6f13d0ddb73a1382e1b0acf85e68a0d57347f0fb3453a1729a12cd8c429bcf2300bbed3b803cb6de579b910aa970d6eb732ccbad15ae4bc10e2d0bde330ff24f2a0feed41c3739db6c58f15356577fcbea00705064fd5cd0719803cea70ce4b344f3284", 0x8e}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f0000000400)="d8d0bd968c98a4dae67f11507dc394b56b5b970928577f30b25915228387de046876cc76988ba3038e01da1b4b0ed924908060b5cd4c390fc3cf2c067b08589bfd6617baad78971454838589f549dcd492a231b0d7715694682939f6c8db9900a67f91ec33466a00594f90ba30f9500f881c9a635ea82e7d5d7a9d93060d0b1295753e2cada1e2dc7c4f077b709b525a3a071de2f432008e92a93515c79b1d014916228b824a4a92b554af6feb7da2e67261c2bc8f39ab95f34e47d7fc34bef1249a2f327c6a5ebbdd375eb311299cb1ab994c61f12cb3532d70ee4d0cc2337bc4ae9df56d59", 0xe6}], 0x4, &(0x7f00000017c0)=[{0xd0, 0x3a, 0xfffff659, "2cd1e14b7015745db3cb341e050dce51a363b863b508f9e48e2cac1d10f5dd11cb87352c5226748a0eed0e02e6b0638cc6ae6522b874391e4e4116dec9ba3cc9aab2d211847f1dcdd9d647ebd31d67ef6a4b014d5f0d2cd6aa06cf4d74cdddac8a98f17cfb0467e6dc88066b12339003bc24a700ea71779e59645941de30f10c6db1ffbe583b43e75d35593817017090a299ecb7854fb4e2d299686a86472a10db8d289cea799499dba1512f424291102541dcf46eea8a8a9101ec2fd7548495"}, {0x40, 0x29, 0x1, "de8718cd7012be0a0f73b53b5665fe43734549f97423ec27f6d4af24052f71788ac00ccc7e34de4516722489eaf6"}, {0xa8, 0x113, 0x3, "28f897b86f1f0e4273c8b90a64a49e860b1e41bfc4bf17da66b743e25ba9488c0e35197b569d7247d7980daaf40e1bd1595ee8c543fc2da05314e1b4fa4f6bc459793c2bdc5c68407b4e0d85c3999d848b899f2e0a8ca0eaf598a627689d0abc72d5d5a50712af7ac466da0d71b89309aa41fabf991d513820109369b2c1b6163ac984724f7b07d031cfd96ad3f49b6e8c1a0967"}, {0x90, 0x101, 0x5, "5372c6f3328ea84fe038b12317fedf3e645e13b1913456682c7ed20106b49825794f7ad2bd49838a311192d9631ebf85ee9cd22af90bfe8d8355c942e6c1fbee6f39a7a37ac24669fa74829ff3eadc509f3b2f72444a775f6978966db53ecd0dc7887a2c39bfa7eb404a21761c71fa86af144497e4145b55916f043057f3b6"}], 0x248}, 0x4000000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000080)={0x9008, 0x1, 0x3}, 0x18, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') 655.880556ms ago: executing program 0 (id=1056): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 607.248181ms ago: executing program 2 (id=1057): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, 0x0, 0x0, 0x40, &(0x7f00000052c0)={0x77359400}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) read$FUSE(r2, &(0x7f00000008c0)={0x2020}, 0x2020) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000005000)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}, 0xa}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000022c0)='t', 0x1}], 0x1}}, {{&(0x7f0000000940)={0xa, 0x4e21, 0x3, @remote, 0x2}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000ac0)="19", 0x1}], 0x1}}], 0x2, 0x48081) shutdown(r3, 0x1) getsockopt$bt_hci(r3, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) r4 = userfaultfd(0x80001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="91109c000000000095"], 0x0}, 0x94) syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0xb5, 0x1e, 0x48, 0x8, 0x41e, 0x3f04, 0xb153, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd8, 0x2, 0x0, 0xff, 0xdf, 0x9d, 0x5b}}]}}]}}, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r2, &(0x7f0000009780)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="10000000daffffff", @ANYRES64=0x3], 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(r4) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001300f5d103001000000023882c59b17e85c4afb745e80000000000002d1e56feb14b15f9759b6dc9e809e35729a82148c4411686ec3b14256249be1c2904812db7d506f03d4cf134dfe1e34383ca6b7cc34a2eae0d53539fab6add8d753e70bd66bf23ba3c642044c27cd5b4b1b8b56ec2270e838fd78ad25ceac18fc723794a7c20a15f9e4e7308bf605e5e014b54da", @ANYRES32=0x0, @ANYBLOB="000000000000000008000d0006000000"], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, 0x0, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x82781) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000500)={0x1, 0xff, 0x0, 'queue0\x00'}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x1, 0x8, {0x1, 0x1}, {0x74, 0x2}, @period={0x59, 0xfffa, 0x2, 0x8, 0x6, {0x4000, 0x7fff, 0x200, 0x4}, 0x6, &(0x7f00000001c0)=[0x4, 0x3, 0x1, 0x27, 0x2, 0x76b8]}}) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) 606.423154ms ago: executing program 1 (id=1058): syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="03032abd7000000000000c00000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x9) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmmsg(r7, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)='<', 0x1}], 0x1}}], 0x1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r9, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}]}]}, 0x30}}, 0x10) recvmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)=""/72, 0x41}, {&(0x7f0000001780)=""/4110, 0x100e}, {&(0x7f00000006c0)=""/35, 0x23}, {&(0x7f0000000240)=""/130, 0xfffffc87}, {&(0x7f0000000500)=""/239, 0xfffffe26}], 0x5}, 0x2122) recvmsg$kcm(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) 555.739184ms ago: executing program 4 (id=1059): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x8, 0x3, 0x350, 0xf0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x280, 0xffffffff, 0xffffffff, 0x280, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0xff000000], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@empty, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, [0xffffffff, 0x0, 0xff000000], [], 'wg1\x00', 'gre0\x00', {}, {0xff}, 0x29}, 0x7000000, 0x128, 0x190, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x1, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x400, 0x5, 0x3, 'snmp_trap\x00', 'syz0\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3b0) 415.503214ms ago: executing program 0 (id=1060): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x2400}, 0xa5, 0x4, 0x10100000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x9, 0xfd0, 0x3, 0x1, 0x1, 0x982d}}, {0x4}}]}]}, 0x58}}, 0x800) 287.368526ms ago: executing program 4 (id=1061): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000180)='dax\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100}) 50.152531ms ago: executing program 3 (id=1062): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0xfe, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x2, 0x7}}}}}]}}]}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@bridge_getlink={0x20, 0x12, 0x100, 0x70bd25, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x200, 0x80}}, 0x20}, 0x1, 0x0, 0x0, 0x2000c054}, 0x20000054) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) syz_usb_control_io(r0, 0x0, 0x0) 0s ago: executing program 0 (id=1063): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000008850000000100000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): tsetting 0 [ 231.434812][ T9] usb 5-1: config 4 interface 31 has no altsetting 0 [ 231.441780][ T10] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 231.454592][ T9] usb 5-1: New USB device found, idVendor=19d2, idProduct=1087, bcdDevice=36.ef [ 231.464449][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.473205][ T9] usb 5-1: Product: syz [ 231.478459][ T10] usb 4-1: device descriptor read/8, error -71 [ 231.485887][ T9] usb 5-1: Manufacturer: syz [ 231.492176][ T9] usb 5-1: SerialNumber: syz [ 231.510518][ T8180] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22 [ 231.522591][ T8180] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22 [ 231.587434][ T10] usb usb4-port1: unable to enumerate USB device [ 231.941143][ T9] option 5-1:4.181: GSM modem (1-port) converter detected [ 232.187563][ T9] usb 5-1: USB disconnect, device number 38 [ 232.232075][ T9] option 5-1:4.181: device disconnected [ 232.409167][ T8187] loop4: detected capacity change from 0 to 7 [ 232.417255][ T5888] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 232.468263][ T5888] loop4: p1 start 16843009 is beyond EOD, truncated [ 232.474876][ T5888] loop4: p2 start 16843009 is beyond EOD, truncated [ 232.485590][ T5888] loop4: p3 start 16843009 is beyond EOD, truncated [ 232.492577][ T5888] loop4: p4 start 16843009 is beyond EOD, truncated [ 232.499483][ T5888] loop4: p5 start 16843009 is beyond EOD, truncated [ 232.506234][ T5888] loop4: p6 start 16843009 is beyond EOD, truncated [ 232.514112][ T5888] loop4: p7 start 16843009 is beyond EOD, truncated [ 232.521014][ T5888] loop4: p8 start 16843009 is beyond EOD, truncated [ 232.527881][ T5888] loop4: p9 start 16843009 is beyond EOD, truncated [ 232.535258][ T5888] loop4: p10 start 16843009 is beyond EOD, truncated [ 232.542202][ T5888] loop4: p11 start 16843009 is beyond EOD, truncated [ 232.549210][ T5888] loop4: p12 start 16843009 is beyond EOD, truncated [ 232.565408][ T8187] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 232.573276][ T8187] loop4: p1 start 16843009 is beyond EOD, truncated [ 232.587126][ T8187] loop4: p2 start 16843009 is beyond EOD, truncated [ 232.596995][ T8187] loop4: p3 start 16843009 is beyond EOD, truncated [ 232.614334][ T8187] loop4: p4 start 16843009 is beyond EOD, truncated [ 232.627118][ T8187] loop4: p5 start 16843009 is beyond EOD, truncated [ 232.642840][ T8187] loop4: p6 start 16843009 is beyond EOD, truncated [ 232.683913][ T8187] loop4: p7 start 16843009 is beyond EOD, truncated [ 232.690905][ T8187] loop4: p8 start 16843009 is beyond EOD, truncated [ 232.710012][ T8187] loop4: p9 start 16843009 is beyond EOD, truncated [ 232.748110][ T8187] loop4: p10 start 16843009 is beyond EOD, truncated [ 232.755006][ T8187] loop4: p11 start 16843009 is beyond EOD, truncated [ 232.808858][ T8187] loop4: p12 start 16843009 is beyond EOD, truncated [ 232.934742][ T8194] netlink: 32 bytes leftover after parsing attributes in process `syz.1.551'. [ 232.964004][ T8195] binder: BINDER_SET_CONTEXT_MGR already set [ 232.970286][ T8195] binder: 8188:8195 ioctl 4018620d 200000000180 returned -16 [ 232.980945][ T8195] binder: 8188:8195 ioctl c0306201 200000000640 returned -22 [ 233.187177][ T5924] usb 5-1: new low-speed USB device number 39 using dummy_hcd [ 233.342718][ T5902] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 233.359989][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 233.392745][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.444677][ T5924] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 233.494989][ T5924] usb 5-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00 [ 233.531107][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.549781][ T5924] usb 5-1: config 0 descriptor?? [ 233.559119][ T5924] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input21 [ 233.572902][ T5902] usb 4-1: unable to get BOS descriptor or descriptor too short [ 233.584967][ T5902] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 233.620396][ T5902] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 233.664412][ T5902] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 233.676111][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.732227][ T5902] usb 4-1: Product: syz [ 233.777006][ T5184] bcm5974 5-1:0.0: could not read from device [ 233.807401][ T5902] usb 4-1: Manufacturer: syz [ 233.819178][ T5902] usb 4-1: SerialNumber: syz [ 233.861838][ T5184] bcm5974 5-1:0.0: could not read from device [ 233.874116][ T5924] usb 5-1: USB disconnect, device number 39 [ 234.167210][ T5902] usb 4-1: 0:2 : does not exist [ 234.258118][ T5902] usb 4-1: USB disconnect, device number 40 [ 234.475266][ T8208] loop8: detected capacity change from 0 to 7 [ 234.490736][ T8208] Dev loop8: unable to read RDB block 7 [ 234.524548][ T8208] loop8: unable to read partition table [ 234.540052][ T8208] loop8: partition table beyond EOD, truncated [ 234.554990][ T8208] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 234.974660][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 234.974678][ T30] audit: type=1326 audit(1750813782.067:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8210 comm="syz.4.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98c558e929 code=0x7ffc0000 [ 235.059947][ T8220] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 235.087570][ T30] audit: type=1326 audit(1750813782.067:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8210 comm="syz.4.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c558e929 code=0x7ffc0000 [ 235.120991][ T30] audit: type=1326 audit(1750813782.067:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8210 comm="syz.4.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c558e929 code=0x7ffc0000 [ 235.216992][ T5902] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 235.295520][ T8225] use of bytesused == 0 is deprecated and will be removed in the future, [ 235.304509][ T8225] use the actual size instead. [ 235.362157][ T8215] pimreg: entered allmulticast mode [ 235.446251][ T8223] pimreg: left allmulticast mode [ 235.480757][ T5902] usb 5-1: unable to get BOS descriptor or descriptor too short [ 235.546660][ T5902] usb 5-1: not running at top speed; connect to a high speed hub [ 235.575599][ T5902] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 235.628533][ T5902] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 235.668035][ T24] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 235.677486][ T5902] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 235.686592][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.851843][ T5902] usb 5-1: Product: 캢Ⲡ뿜栈ì´êŠ¬î²™é‡‘瀰✇뵨ë·î³’쒓̳䬻ã®è‹—뉰腳佒꼪ã·ã…³ã‰¥éµ¶î»éŽžë™…ꂯ뉈乄è픿ï´ç³—ě觻⭰ꘖ餀춌댗î»Ñ„â°æ†°Ç£à´•éšƒè¼è‰•èª‡à šèՃ먤ﺥ⵫穭ꗠç¿ç¶¶ä„Žê¿•èµí–ªìŽ•ç ²î‰£ä†€æˆæ³‹ç˜šÙºé±Žç¤–⼙쟲誒䛳숗쇯ê¥îŽžà¯§è‡›èµ‚ä¼ç¥¾ì¬¡ë¸§ä¢‰ë£å€†è­¹êº‘긆膀䛤剎紮쿆ᘋ嫾℺ [ 235.883406][ C1] vkms_vblank_simulate: vblank timer overrun [ 236.103055][ T5902] usb 5-1: Manufacturer: à § [ 236.119429][ T5902] usb 5-1: SerialNumber: âŸï‹¥ï†ˆæ™¡ì”㈆緷ï™è ·î©½æ˜à±ˆá¦“ç–ší²ï€ªë­ë¡¶ã¥¼â»ˆá›½æˆ¨î”¬î®‡ãŠ¢è Žè€Œæ°žêˆ¨ç¯¦è†ºîº¸ïª³Æ†äŽ£ëºµã¾œî³¾â¼³æ˜£ê›¼á¥ë„¿è‰žå½£î€³ë‚žê¨³à¾– [ 236.165780][ T8214] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 236.173692][ T8214] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 236.453096][ T30] audit: type=1326 audit(1750813783.517:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8210 comm="syz.4.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f98c558e52b code=0x7ffc0000 [ 236.526479][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.592912][ T8241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.561'. [ 236.654342][ T24] usb 3-1: config 0 has no interfaces? [ 236.665515][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 236.705299][ T30] audit: type=1326 audit(1750813783.517:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8210 comm="syz.4.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f98c558e52b code=0x7ffc0000 [ 236.812941][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.847809][ T24] usb 3-1: config 0 descriptor?? [ 236.874917][ T30] audit: type=1326 audit(1750813783.517:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8210 comm="syz.4.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f98c55c11e5 code=0x7ffc0000 [ 236.897034][ C1] vkms_vblank_simulate: vblank timer overrun [ 236.957934][ T30] audit: type=1326 audit(1750813783.717:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8210 comm="syz.4.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c558e929 code=0x7ffc0000 [ 236.980012][ C1] vkms_vblank_simulate: vblank timer overrun [ 237.015114][ T5902] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 237.094833][ T43] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 237.109950][ T5902] usb 5-1: USB disconnect, device number 40 [ 237.123042][ T8248] netlink: 'syz.0.562': attribute type 10 has an invalid length. [ 237.193443][ T30] audit: type=1326 audit(1750813783.717:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8210 comm="syz.4.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c558e929 code=0x7ffc0000 [ 237.215835][ C1] vkms_vblank_simulate: vblank timer overrun [ 237.249502][ T30] audit: type=1326 audit(1750813783.717:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8210 comm="syz.4.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f98c558e929 code=0x7ffc0000 [ 237.251073][ T8248] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 237.287770][ T30] audit: type=1326 audit(1750813783.777:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8210 comm="syz.4.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c558e929 code=0x7ffc0000 [ 237.293137][ T8248] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode [ 237.408976][ T43] usb 4-1: config 0 has no interfaces? [ 237.430355][ T8248] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 237.499057][ T43] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 237.516947][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.536531][ T43] usb 4-1: Product: syz [ 237.544606][ T43] usb 4-1: Manufacturer: syz [ 237.586956][ T43] usb 4-1: SerialNumber: syz [ 237.635995][ T43] usb 4-1: config 0 descriptor?? [ 237.852404][ T8256] loop8: detected capacity change from 0 to 7 [ 237.861962][ T8256] Dev loop8: unable to read RDB block 7 [ 237.871596][ T8256] loop8: unable to read partition table [ 237.880521][ T8256] loop8: partition table beyond EOD, truncated [ 237.886819][ T8256] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 237.937065][ T5902] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 238.152211][ T5902] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 238.169783][ T5902] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 238.236030][ T5902] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 238.259369][ T5902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.514731][ T5902] usb 1-1: usb_control_msg returned -32 [ 238.539779][ T5902] usbtmc 1-1:16.0: can't read capabilities [ 238.677544][ T8272] netlink: 36 bytes leftover after parsing attributes in process `syz.4.569'. [ 239.117133][ T8287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.125865][ T8287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.232612][ T8287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.272329][ T8287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.298421][ T8287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.339121][ T8287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.473779][ T10] usb 3-1: USB disconnect, device number 27 [ 239.669058][ T43] usb 4-1: USB disconnect, device number 41 [ 239.673413][ T8287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.691281][ T8287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.792524][ T9] usb 1-1: USB disconnect, device number 44 [ 240.196980][ T10] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 240.377042][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 240.377061][ T30] audit: type=1326 audit(1750813787.427:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8296 comm="syz.1.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f973338e929 code=0x7ffc0000 [ 240.445992][ T10] usb 4-1: device descriptor read/64, error -71 [ 240.630779][ T30] audit: type=1326 audit(1750813787.607:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8296 comm="syz.1.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f973338e929 code=0x7ffc0000 [ 240.678324][ T30] audit: type=1326 audit(1750813787.607:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8296 comm="syz.1.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f973338e929 code=0x7ffc0000 [ 240.700524][ C1] vkms_vblank_simulate: vblank timer overrun [ 240.700529][ T10] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 240.837104][ T10] usb 4-1: device descriptor read/64, error -71 [ 240.874079][ T8306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.884267][ T30] audit: type=1326 audit(1750813787.607:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8296 comm="syz.1.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f973338e929 code=0x7ffc0000 [ 240.890206][ T8306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.957760][ T10] usb usb4-port1: attempt power cycle [ 240.992302][ T30] audit: type=1326 audit(1750813787.617:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8296 comm="syz.1.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f973338e929 code=0x7ffc0000 [ 241.014454][ C1] vkms_vblank_simulate: vblank timer overrun [ 241.083236][ T30] audit: type=1326 audit(1750813787.627:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8296 comm="syz.1.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f973338e929 code=0x7ffc0000 [ 241.126064][ T30] audit: type=1326 audit(1750813787.627:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8296 comm="syz.1.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f973338e929 code=0x7ffc0000 [ 241.148287][ C1] vkms_vblank_simulate: vblank timer overrun [ 241.195023][ T30] audit: type=1326 audit(1750813787.627:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8296 comm="syz.1.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f973338e929 code=0x7ffc0000 [ 241.217228][ C1] vkms_vblank_simulate: vblank timer overrun [ 241.337562][ T10] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 241.364504][ T8313] netlink: 'syz.2.582': attribute type 322 has an invalid length. [ 241.418877][ T10] usb 4-1: device descriptor read/8, error -71 [ 242.067160][ T10] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 242.125859][ T10] usb 4-1: device descriptor read/8, error -71 [ 242.212294][ T8324] vlan2: entered promiscuous mode [ 242.220259][ T8324] team0: entered promiscuous mode [ 242.227335][ T8324] team_slave_0: entered promiscuous mode [ 242.234995][ T8324] team_slave_1: entered promiscuous mode [ 242.255845][ T10] usb usb4-port1: unable to enumerate USB device [ 243.016352][ T10] usb 5-1: new low-speed USB device number 41 using dummy_hcd [ 243.167007][ T10] usb 5-1: device descriptor read/64, error -71 [ 243.295869][ T8336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.587'. [ 243.457366][ T10] usb 5-1: new low-speed USB device number 42 using dummy_hcd [ 243.556988][ T5881] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 243.621076][ T10] usb 5-1: device descriptor read/64, error -71 [ 243.737395][ T10] usb usb5-port1: attempt power cycle [ 243.771375][ T5881] usb 3-1: Using ep0 maxpacket: 8 [ 243.957354][ T5881] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 243.972910][ T5881] usb 3-1: config 0 interface 0 has no altsetting 0 [ 243.982717][ T5881] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 243.995996][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.104754][ T5881] usb 3-1: config 0 descriptor?? [ 244.323949][ T10] usb 5-1: new low-speed USB device number 43 using dummy_hcd [ 244.433596][ T5881] usb 3-1: string descriptor 0 read error: -71 [ 244.441402][ T5881] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 244.457049][ T10] usb 5-1: device descriptor read/8, error -71 [ 244.466762][ T5881] gspca_vc032x: reg_r err -71 [ 244.524243][ T5881] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 244.557711][ T5881] usb 3-1: USB disconnect, device number 28 [ 244.737004][ T9] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 244.767015][ T10] usb 5-1: new low-speed USB device number 44 using dummy_hcd [ 244.837799][ T10] usb 5-1: device descriptor read/8, error -71 [ 244.965768][ T10] usb usb5-port1: unable to enumerate USB device [ 245.072215][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 245.196313][ T9] usb 4-1: too many configurations: 32, using maximum allowed: 8 [ 245.332143][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 245.583771][ T9] usb 4-1: can't read configurations, error -61 [ 245.756487][ T9] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 245.827073][ T5881] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 245.959848][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 245.991882][ T9] usb 4-1: too many configurations: 32, using maximum allowed: 8 [ 246.017538][ T5881] usb 3-1: Using ep0 maxpacket: 16 [ 246.020996][ T8376] netlink: 'syz.0.596': attribute type 9 has an invalid length. [ 246.026565][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 246.121319][ T5881] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.136546][ T9] usb 4-1: can't read configurations, error -61 [ 246.148037][ T5881] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 246.159260][ T9] usb usb4-port1: attempt power cycle [ 246.173865][ T5881] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 246.277587][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.285710][ T5881] usb 3-1: Product: syz [ 246.292503][ T5881] usb 3-1: Manufacturer: syz [ 246.297235][ T5881] usb 3-1: SerialNumber: syz [ 246.547664][ T9] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 246.677333][ T5915] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 246.804681][ T9] usb 4-1: device descriptor read/8, error -71 [ 246.903945][ T5915] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.002422][ T5915] usb 5-1: config 0 has no interfaces? [ 247.023664][ T5915] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 247.062367][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.080642][ T8396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.113638][ T5915] usb 5-1: config 0 descriptor?? [ 247.126124][ T8396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.389476][ T8383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.597'. [ 247.458533][ T9] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 247.537148][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 247.582622][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.600084][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.655752][ T9] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 247.725859][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.752394][ T9] usb 4-1: config 0 descriptor?? [ 248.192292][ T8406] xt_ipcomp: unknown flags 12 [ 248.272793][ T5881] usb 3-1: 0:2 : does not exist [ 248.353782][ T5881] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 248.375712][ T5881] usb 3-1: USB disconnect, device number 29 [ 248.452703][ T5888] udevd[5888]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 249.198382][ T9] letsketch 0003:6161:4D15.000B: Device info: à° [ 249.485305][ T9] usb 4-1: Max retries (5) exceeded reading string descriptor 201 [ 249.501472][ T9] letsketch 0003:6161:4D15.000B: probe with driver letsketch failed with error -71 [ 249.583447][ T43] usb 5-1: USB disconnect, device number 45 [ 249.613374][ T9] usb 4-1: USB disconnect, device number 49 [ 250.050746][ T8426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.610'. [ 250.057217][ T5881] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 250.081220][ T8426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.610'. [ 250.194333][ T8429] bridge1: entered promiscuous mode [ 250.286974][ T5881] usb 1-1: Using ep0 maxpacket: 16 [ 250.312558][ T8429] bridge2: entered promiscuous mode [ 250.313937][ T5881] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.358629][ T5881] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 250.364478][ T8429] bridge3: entered promiscuous mode [ 250.405558][ T8429] bridge4: entered promiscuous mode [ 250.419425][ T5881] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 250.447394][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.455413][ T5881] usb 1-1: Product: syz [ 250.484110][ T8437] netlink: 36 bytes leftover after parsing attributes in process `syz.2.612'. [ 250.493233][ T8437] netlink: 36 bytes leftover after parsing attributes in process `syz.2.612'. [ 250.502330][ T8437] netlink: 36 bytes leftover after parsing attributes in process `syz.2.612'. [ 250.550242][ T8429] bridge5: entered promiscuous mode [ 250.558249][ T5881] usb 1-1: Manufacturer: syz [ 250.562906][ T5881] usb 1-1: SerialNumber: syz [ 250.692204][ T8437] netlink: 36 bytes leftover after parsing attributes in process `syz.2.612'. [ 250.713055][ T8429] bridge6: entered promiscuous mode [ 250.770105][ T8437] netlink: 36 bytes leftover after parsing attributes in process `syz.2.612'. [ 250.843272][ T8437] netlink: 36 bytes leftover after parsing attributes in process `syz.2.612'. [ 250.877218][ T5881] usb 1-1: 0:2 : does not exist [ 250.885937][ T8429] bridge7: entered promiscuous mode [ 250.913561][ T5881] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 250.927713][ T8429] bridge8: entered promiscuous mode [ 250.965892][ T5881] usb 1-1: USB disconnect, device number 45 [ 251.109348][ T8429] bridge9: entered promiscuous mode [ 251.475847][ T8457] veth0: entered promiscuous mode [ 251.488939][ T8457] vlan2: entered promiscuous mode [ 252.007500][ T8437] netlink: 36 bytes leftover after parsing attributes in process `syz.2.612'. [ 252.018620][ T8437] netlink: 36 bytes leftover after parsing attributes in process `syz.2.612'. [ 252.353779][ T8478] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 254.686579][ T8502] fuse: blksize only supported for fuseblk [ 254.743949][ T8506] vlan3: entered promiscuous mode [ 254.819511][ T8510] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 254.916156][ T8511] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 255.461131][ T8533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.477712][ T43] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 255.485399][ T24] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 255.494540][ T8533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.516211][ T8533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.526309][ T8533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.539964][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.550023][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.573073][ T8534] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 255.582856][ T5902] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 255.667190][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 255.679008][ T43] usb 4-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 255.691161][ T43] usb 4-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.691386][ T24] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 255.710739][ T43] usb 4-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 255.868245][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 255.875030][ T24] usb 3-1: config 0 has no interface number 0 [ 255.881926][ T43] usb 4-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 255.891672][ T5902] usb 5-1: Using ep0 maxpacket: 16 [ 255.903675][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 255.913459][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.922043][ T5902] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 255.931477][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.940057][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.951585][ T24] usb 3-1: Product: syz [ 255.957809][ T43] usb 4-1: config 0 descriptor?? [ 255.963084][ T5902] usb 5-1: Product: syz [ 255.967823][ T24] usb 3-1: Manufacturer: syz [ 255.972560][ T5902] usb 5-1: Manufacturer: syz [ 255.977965][ T24] usb 3-1: SerialNumber: syz [ 255.986074][ T5902] usb 5-1: SerialNumber: syz [ 255.995227][ T24] usb 3-1: config 0 descriptor?? [ 256.005976][ T5902] usb 5-1: config 0 descriptor?? [ 256.020830][ T5902] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 256.274335][ T8537] netlink: 'syz.2.639': attribute type 13 has an invalid length. [ 256.282755][ T8537] __nla_validate_parse: 1 callbacks suppressed [ 256.282814][ T8537] netlink: 152 bytes leftover after parsing attributes in process `syz.2.639'. [ 256.302461][ T8537] : renamed from syz_tun (while UP) [ 256.317393][ T8537] : refused to change device tx_queue_len [ 256.323572][ T8537] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 256.420518][ T24] usb 3-1: Found UVC 0.00 device syz (046d:0823) [ 256.432432][ T5902] usb 5-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 256.443352][ T24] usb 3-1: No valid video chain found. [ 256.459172][ T43] hid-alps 0003:044E:120B.000C: item fetching failed at offset 0/3 [ 256.483617][ T24] usb 3-1: USB disconnect, device number 30 [ 256.498079][ T43] hid-alps 0003:044E:120B.000C: parse failed [ 256.529117][ T43] hid-alps 0003:044E:120B.000C: probe with driver hid-alps failed with error -22 [ 256.541948][ T8541] netlink: 36 bytes leftover after parsing attributes in process `syz.1.642'. [ 256.551239][ T8541] netlink: 36 bytes leftover after parsing attributes in process `syz.1.642'. [ 256.560354][ T8541] netlink: 36 bytes leftover after parsing attributes in process `syz.1.642'. [ 256.644996][ T8529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.757869][ T5881] usb 4-1: USB disconnect, device number 50 [ 256.758157][ T8529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.025093][ T8541] netlink: 36 bytes leftover after parsing attributes in process `syz.1.642'. [ 257.036817][ T8541] netlink: 36 bytes leftover after parsing attributes in process `syz.1.642'. [ 257.046275][ T8541] netlink: 36 bytes leftover after parsing attributes in process `syz.1.642'. [ 257.105035][ T8548] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 257.111607][ T8548] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 257.127159][ T8548] vhci_hcd vhci_hcd.0: Device attached [ 257.244956][ T8541] netlink: 36 bytes leftover after parsing attributes in process `syz.1.642'. [ 257.254130][ T8541] netlink: 36 bytes leftover after parsing attributes in process `syz.1.642'. [ 257.263434][ T8541] netlink: 36 bytes leftover after parsing attributes in process `syz.1.642'. [ 257.331116][ T5902] usb 5-1: USB disconnect, device number 46 [ 257.344527][ T5902] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 257.397021][ T24] usb 38-1: SetAddress Request (2) to port 0 [ 257.403471][ T24] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 257.464845][ T5902] visor 5-1:0.0: device disconnected [ 257.607476][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 257.608909][ T5149] Bluetooth: hci0: command 0x0406 tx timeout [ 257.615792][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 257.817064][ T43] usb 4-1: new low-speed USB device number 51 using dummy_hcd [ 257.909959][ T8549] vhci_hcd: connection reset by peer [ 257.948829][ T12] vhci_hcd: stop threads [ 257.953197][ T12] vhci_hcd: release socket [ 257.964756][ T12] vhci_hcd: disconnect device [ 257.998968][ T10] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 258.037029][ T43] usb 4-1: device descriptor read/64, error -71 [ 258.097038][ T5881] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 258.159436][ T10] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 258.169080][ T10] usb 5-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 258.178546][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.197930][ T10] usb 5-1: config 0 descriptor?? [ 258.227115][ T5881] usb 1-1: device descriptor read/64, error -71 [ 258.277093][ T43] usb 4-1: new low-speed USB device number 52 using dummy_hcd [ 258.424249][ T43] usb 4-1: device descriptor read/64, error -71 [ 258.449130][ T8563] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.458144][ T8563] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.467196][ T8563] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.475879][ T8563] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.486980][ T5881] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 258.514200][ T8563] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.523789][ T8563] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.533081][ T8563] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.542029][ T8563] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.612373][ T43] usb usb4-port1: attempt power cycle [ 258.686416][ T5881] usb 1-1: device descriptor read/64, error -71 [ 258.868742][ T5881] usb usb1-port1: attempt power cycle [ 258.977069][ T43] usb 4-1: new low-speed USB device number 53 using dummy_hcd [ 259.008726][ T43] usb 4-1: device descriptor read/8, error -71 [ 259.247169][ T5881] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 259.261042][ T43] usb 4-1: new low-speed USB device number 54 using dummy_hcd [ 259.277655][ T5881] usb 1-1: device descriptor read/8, error -71 [ 259.288514][ T43] usb 4-1: device descriptor read/8, error -71 [ 259.417294][ T43] usb usb4-port1: unable to enumerate USB device [ 259.527039][ T5881] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 259.560277][ T5881] usb 1-1: device descriptor read/8, error -71 [ 259.668187][ T5881] usb usb1-port1: unable to enumerate USB device [ 260.077101][ T43] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 260.227213][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 260.236562][ T43] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 260.246291][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.258097][ T43] usb 3-1: config 0 descriptor?? [ 260.276179][ T43] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 260.333379][ T8580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.342597][ T8580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.356741][ T8580] input: syz0 as /devices/virtual/input/input22 [ 260.425963][ T8581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.434930][ T8581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.773167][ T5881] usb 5-1: USB disconnect, device number 47 [ 261.207261][ T5881] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 261.257003][ T10] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 261.321600][ T8600] __nla_validate_parse: 2 callbacks suppressed [ 261.321620][ T8600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.661'. [ 261.339461][ T8600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.661'. [ 261.372226][ T5881] usb 5-1: not running at top speed; connect to a high speed hub [ 261.392404][ T5881] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 261.412483][ T5881] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 261.422812][ T5881] usb 5-1: config 1 has no interface number 1 [ 261.431073][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 261.436813][ T5881] usb 5-1: config 1 interface 2 has no altsetting 0 [ 261.445108][ T10] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 261.454306][ T10] usb 1-1: config 0 has no interface number 0 [ 261.466459][ T10] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 261.477525][ T10] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 261.489328][ T5881] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 261.498565][ T10] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 261.509638][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.517706][ T5881] usb 5-1: Product: syz [ 261.522059][ T5881] usb 5-1: Manufacturer: syz [ 261.526680][ T5881] usb 5-1: SerialNumber: syz [ 261.532602][ T10] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 261.547407][ T10] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 261.556978][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.599791][ T10] usb 1-1: config 0 descriptor?? [ 261.627600][ T10] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 262.567181][ T24] usb 38-1: device descriptor read/8, error -110 [ 262.985404][ T24] usb usb38-port1: attempt power cycle [ 263.599439][ T24] usb usb38-port1: unable to enumerate USB device [ 263.727291][ T43] gspca_sonixj: reg_w1 err -110 [ 263.732708][ T43] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 263.852317][ T8628] netlink: 36 bytes leftover after parsing attributes in process `syz.1.665'. [ 263.861443][ T8628] netlink: 36 bytes leftover after parsing attributes in process `syz.1.665'. [ 263.870540][ T8628] netlink: 36 bytes leftover after parsing attributes in process `syz.1.665'. [ 264.326668][ T5881] usb 5-1: 2:1 : sample bitwidth 10 in over sample bytes 1 [ 264.353569][ T8628] netlink: 36 bytes leftover after parsing attributes in process `syz.1.665'. [ 264.362735][ T8628] netlink: 36 bytes leftover after parsing attributes in process `syz.1.665'. [ 264.405144][ T5881] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 264.413192][ T8628] netlink: 36 bytes leftover after parsing attributes in process `syz.1.665'. [ 264.452759][ T5881] usb 5-1: selecting invalid altsetting 0 [ 264.534289][ T5881] usb 5-1: USB disconnect, device number 48 [ 265.024549][ T43] usb 3-1: USB disconnect, device number 31 [ 265.506537][ T8647] netlink: 165 bytes leftover after parsing attributes in process `syz.2.668'. [ 265.548254][ T8628] netlink: 36 bytes leftover after parsing attributes in process `syz.1.665'. [ 266.123377][ T43] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 266.270225][ T5902] usb 1-1: USB disconnect, device number 50 [ 266.292008][ T43] usb 5-1: config 0 has an invalid interface number: 109 but max is 0 [ 266.315485][ T43] usb 5-1: config 0 has no interface number 0 [ 266.333205][ T5902] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 266.362024][ T43] usb 5-1: config 0 interface 109 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 266.430231][ T43] usb 5-1: config 0 interface 109 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.515208][ T43] usb 5-1: New USB device found, idVendor=100d, idProduct=cb01, bcdDevice=84.d1 [ 266.531444][ T43] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 266.553340][ T43] usb 5-1: Manufacturer: syz [ 266.596409][ T43] usb 5-1: config 0 descriptor?? [ 266.654773][ T43] cxacru 5-1:0.109: cxacru_bind: interface has incorrect endpoints [ 266.777093][ T43] cxacru 5-1:0.109: usbatm_usb_probe: bind failed: -19! [ 266.838866][ T8654] __nla_validate_parse: 2 callbacks suppressed [ 266.838883][ T8654] netlink: 40 bytes leftover after parsing attributes in process `syz.4.670'. [ 266.875604][ T43] usb 5-1: USB disconnect, device number 49 [ 268.406590][ T8706] vlan2: entered promiscuous mode [ 268.720447][ T8723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.686'. [ 268.854317][ T8723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.686'. [ 269.295476][ T8741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.691'. [ 270.258658][ T8762] binder: 8760:8762 ioctl c010f508 200000000540 returned -22 [ 270.346312][ T8762] trusted_key: syz.3.697 sent an empty control message without MSG_MORE. [ 270.416996][ T5902] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 270.480390][ T8768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.527791][ T8768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.577771][ T5902] usb 1-1: Using ep0 maxpacket: 32 [ 270.593964][ T5902] usb 1-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=6d.c8 [ 270.594340][ T8768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.626491][ T5902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.663310][ T8768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.674172][ T5902] usb 1-1: config 0 descriptor?? [ 270.714658][ T5902] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 270.723308][ T5902] gspca_mr97310a: reg write [21] error -22 [ 270.735825][ T5902] mr97310a 1-1:0.0: probe with driver mr97310a failed with error -22 [ 270.793223][ T8776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.701'. [ 270.834721][ T8776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.701'. [ 271.248183][ T10] usb 1-1: USB disconnect, device number 51 [ 271.267111][ T5881] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 271.483490][ T5881] usb 4-1: config 0 has no interfaces? [ 271.499835][ T5881] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 271.531183][ T8803] veth0: entered promiscuous mode [ 271.536324][ T8803] vlan2: entered promiscuous mode [ 271.545596][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.663072][ T5881] usb 4-1: Product: syz [ 271.674884][ T5881] usb 4-1: Manufacturer: syz [ 271.684869][ T5881] usb 4-1: SerialNumber: syz [ 271.700591][ T5881] usb 4-1: config 0 descriptor?? [ 272.737383][ T5952] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 273.020189][ T5952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 273.117360][ T5952] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 273.205978][ T5952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 273.295137][ T5952] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 273.493138][ T5952] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0017, bcdDevice=2f.a3 [ 273.502309][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.512902][ T5952] usb 5-1: Product: syz [ 273.518303][ T5952] usb 5-1: Manufacturer: syz [ 273.526022][ T5952] usb 5-1: SerialNumber: syz [ 273.549396][ T5952] usb 5-1: config 0 descriptor?? [ 273.568971][ T5952] kvaser_usb 5-1:0.0: error -EMSGSIZE: Cannot get software info [ 273.617729][ T5952] kvaser_usb 5-1:0.0: probe with driver kvaser_usb failed with error -90 [ 273.793421][ T8839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.853608][ T8839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.992493][ T5841] Bluetooth: hci4: unexpected event for opcode 0x2062 [ 274.816257][ T5902] usb 4-1: USB disconnect, device number 55 [ 275.176360][ T8871] loop8: detected capacity change from 0 to 1 [ 275.222834][ T8871] Dev loop8: unable to read RDB block 1 [ 275.228741][ T8871] loop8: unable to read partition table [ 275.234736][ T8871] loop8: partition table beyond EOD, truncated [ 275.241217][ T8871] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 275.337126][ T5881] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 275.537028][ T5881] usb 4-1: Using ep0 maxpacket: 32 [ 275.569213][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.583700][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.594092][ T5881] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 275.603560][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.618086][ T5881] usb 4-1: config 0 descriptor?? [ 275.619583][ T5902] usb 5-1: USB disconnect, device number 50 [ 275.651225][ T8884] input: syz1 as /devices/virtual/input/input23 [ 276.106778][ T5881] magicmouse 0003:05AC:0265.000D: unknown main item tag 0x0 [ 276.184296][ T5881] magicmouse 0003:05AC:0265.000D: unknown main item tag 0x0 [ 276.240588][ T5881] magicmouse 0003:05AC:0265.000D: unknown main item tag 0x0 [ 276.331789][ T5881] magicmouse 0003:05AC:0265.000D: unknown main item tag 0x0 [ 276.452480][ T5881] magicmouse 0003:05AC:0265.000D: unknown main item tag 0x0 [ 276.587538][ T5881] magicmouse 0003:05AC:0265.000D: unknown main item tag 0x0 [ 276.595055][ T5881] magicmouse 0003:05AC:0265.000D: unknown main item tag 0x0 [ 276.613945][ T5881] magicmouse 0003:05AC:0265.000D: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.3-1/input0 [ 276.631268][ T8906] netlink: ct family unspecified [ 276.639404][ T8906] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.648731][ T5881] magicmouse 0003:05AC:0265.000D: magicmouse input not registered [ 276.671279][ T5881] magicmouse 0003:05AC:0265.000D: probe with driver magicmouse failed with error -12 [ 276.691799][ T5881] usb 4-1: USB disconnect, device number 56 [ 276.875568][ T8907] fido_id[8907]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 276.993296][ T8916] loop6: detected capacity change from 0 to 1 [ 277.039294][ T8916] Dev loop6: unable to read RDB block 1 [ 277.080879][ T8916] loop6: unable to read partition table [ 277.106033][ T8916] loop6: partition table beyond EOD, truncated [ 277.129308][ T8920] netlink: 12 bytes leftover after parsing attributes in process `syz.0.734'. [ 277.141523][ T8920] macvlan2: left promiscuous mode [ 277.146573][ T8920] bond0: left promiscuous mode [ 277.175563][ T8916] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 277.237168][ T8920] bridge0: port 3(macvlan2) entered disabled state [ 277.262104][ T8920] bridge_slave_1: left allmulticast mode [ 277.292523][ T8920] bridge_slave_1: left promiscuous mode [ 277.347007][ T5881] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 277.372533][ T8920] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.429865][ T8920] bridge_slave_0: left allmulticast mode [ 277.435724][ T8920] bridge_slave_0: left promiscuous mode [ 277.443430][ T8920] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.470643][ T8926] netlink: 36 bytes leftover after parsing attributes in process `syz.2.737'. [ 277.541277][ T5881] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 277.563387][ T8937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.572953][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.599290][ T5881] usb 4-1: Product: syz [ 277.599365][ T8937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.608613][ T5881] usb 4-1: Manufacturer: syz [ 277.642015][ T8937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.650628][ T43] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 277.776716][ T5881] usb 4-1: SerialNumber: syz [ 277.787875][ T8937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.827556][ T5881] usb 4-1: config 0 descriptor?? [ 277.902468][ T43] usb 5-1: config 0 has an invalid interface number: 187 but max is 0 [ 277.911035][ T43] usb 5-1: config 0 has no interface number 0 [ 277.934539][ T43] usb 5-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=22.4e [ 277.996100][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.004504][ T43] usb 5-1: Product: syz [ 278.012221][ T5841] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 278.014781][ T43] usb 5-1: Manufacturer: syz [ 278.023512][ T5841] Bluetooth: hci4: Injecting HCI hardware error event [ 278.026524][ T43] usb 5-1: SerialNumber: syz [ 278.035719][ T5841] Bluetooth: hci4: hardware error 0x00 [ 278.206326][ T43] usb 5-1: config 0 descriptor?? [ 278.256730][ T43] peak_usb 5-1:0.187 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 278.266721][ T8939] loop8: detected capacity change from 0 to 7 [ 278.275404][ T43] peak_usb 5-1:0.187: unable to read PCAN-USB serial number (err -22) [ 278.285214][ T8939] Dev loop8: unable to read RDB block 7 [ 278.298657][ T8939] loop8: unable to read partition table [ 278.305800][ T8939] loop8: partition table beyond EOD, truncated [ 278.387052][ T8939] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 278.482183][ T43] peak_usb 5-1:0.187: probe with driver peak_usb failed with error -22 [ 278.496101][ T5881] usb 4-1: f81604_read: reg: 105 failed: -EPROTO [ 278.547309][ T5881] f81604 4-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 278.583911][ T5881] f81604 4-1:0.0: probe with driver f81604 failed with error -71 [ 278.642346][ T5881] usb 4-1: USB disconnect, device number 57 [ 280.039172][ T8966] fuse: Bad value for 'fd' [ 280.050890][ T8968] program syz.0.751 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 280.087629][ T5841] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 280.168831][ T8973] loop8: detected capacity change from 0 to 7 [ 280.185443][ T8973] Dev loop8: unable to read RDB block 7 [ 280.203118][ T8973] loop8: unable to read partition table [ 280.221142][ T8973] loop8: partition table beyond EOD, truncated [ 280.228620][ T8973] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 280.577399][ T5919] usb 5-1: USB disconnect, device number 51 [ 280.647630][ T43] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 280.827194][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 280.927875][ T43] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 280.959058][ T8988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.064447][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.084487][ T8988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.107357][ T43] usb 1-1: Product: syz [ 281.115625][ T43] usb 1-1: Manufacturer: syz [ 281.154931][ T43] usb 1-1: SerialNumber: syz [ 281.218431][ T43] usb 1-1: config 0 descriptor?? [ 281.256688][ T43] gspca_main: se401-2.14.0 probing 047d:5003 [ 281.337201][ T5919] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 281.668075][ T43] gspca_se401: ExtraFeatures: 48 [ 281.679047][ T5919] usb 5-1: config 0 has no interfaces? [ 281.690143][ T5919] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 281.703625][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.712173][ T5919] usb 5-1: Product: syz [ 281.721716][ T5919] usb 5-1: Manufacturer: syz [ 281.726517][ T5919] usb 5-1: SerialNumber: syz [ 281.733713][ T5919] usb 5-1: config 0 descriptor?? [ 281.874165][ T8975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.887446][ T8975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.318353][ T5919] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 282.487854][ T5919] usb 3-1: too many configurations: 44, using maximum allowed: 8 [ 282.565211][ T5919] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 282.602039][ T5919] usb 3-1: can't read configurations, error -61 [ 282.809217][ T43] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input24 [ 282.877032][ T5919] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 283.297650][ T5919] usb 3-1: too many configurations: 44, using maximum allowed: 8 [ 283.311196][ T5919] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 283.336208][ T5919] usb 3-1: can't read configurations, error -61 [ 283.376426][ T5919] usb usb3-port1: attempt power cycle [ 283.661148][ T5924] usb 1-1: USB disconnect, device number 52 [ 283.927116][ T5919] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 283.958504][ T5919] usb 3-1: too many configurations: 44, using maximum allowed: 8 [ 283.968416][ T5919] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 283.976027][ T5919] usb 3-1: can't read configurations, error -61 [ 284.177313][ T5919] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 284.194460][ T43] usb 5-1: USB disconnect, device number 52 [ 284.221514][ T5919] usb 3-1: too many configurations: 44, using maximum allowed: 8 [ 284.421229][ T5919] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 284.431752][ T9020] netlink: 36 bytes leftover after parsing attributes in process `syz.3.765'. [ 284.440833][ T9020] netlink: 36 bytes leftover after parsing attributes in process `syz.3.765'. [ 284.449955][ T9020] netlink: 36 bytes leftover after parsing attributes in process `syz.3.765'. [ 284.478676][ T5919] usb 3-1: can't read configurations, error -61 [ 284.497927][ T5919] usb usb3-port1: unable to enumerate USB device [ 284.726064][ T9020] netlink: 36 bytes leftover after parsing attributes in process `syz.3.765'. [ 284.735496][ T9020] netlink: 36 bytes leftover after parsing attributes in process `syz.3.765'. [ 284.746155][ T9020] netlink: 36 bytes leftover after parsing attributes in process `syz.3.765'. [ 284.771290][ T9027] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 284.923470][ T9020] netlink: 36 bytes leftover after parsing attributes in process `syz.3.765'. [ 284.932849][ T9020] netlink: 36 bytes leftover after parsing attributes in process `syz.3.765'. [ 284.942416][ T9020] netlink: 36 bytes leftover after parsing attributes in process `syz.3.765'. [ 285.367398][ T9034] loop8: detected capacity change from 0 to 7 [ 285.401888][ T9034] Dev loop8: unable to read RDB block 7 [ 285.438222][ T9034] loop8: unable to read partition table [ 285.471339][ T9034] loop8: partition table beyond EOD, truncated [ 285.539961][ T9034] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 286.618827][ T5952] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 286.777045][ T5952] usb 1-1: Using ep0 maxpacket: 16 [ 286.809899][ T5952] usb 1-1: config 255 has an invalid interface number: 25 but max is 0 [ 286.854338][ T5952] usb 1-1: config 255 has no interface number 0 [ 286.927390][ T5952] usb 1-1: config 255 interface 25 has no altsetting 0 [ 286.969251][ T5952] usb 1-1: New USB device found, idVendor=07cf, idProduct=1167, bcdDevice= 1.00 [ 286.981217][ T5952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.053619][ T5952] usb 1-1: Product: syz [ 287.073616][ T5952] usb 1-1: Manufacturer: syz [ 287.107979][ T5952] usb 1-1: SerialNumber: syz [ 287.365073][ T5952] usb-storage 1-1:255.25: USB Mass Storage device detected [ 287.428373][ T5952] usb-storage 1-1:255.25: This device (07cf,1167,0100 S 05 P b9) has an unneeded SubClass entry in unusual_devs.h (kernel 6.16.0-rc3-syzkaller-00042-g78f4e737a53e) [ 287.428373][ T5952] Please send a copy of this message to and [ 287.688991][ T5952] usb 1-1: USB disconnect, device number 53 [ 287.869813][ T9068] vlan2: entered promiscuous mode [ 288.062924][ T30] audit: type=1326 audit(1750813835.157:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9070 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13478e929 code=0x7ffc0000 [ 288.106835][ T9078] loop8: detected capacity change from 0 to 7 [ 288.114225][ T30] audit: type=1326 audit(1750813835.177:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9070 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13478e929 code=0x7ffc0000 [ 288.124874][ T9078] Dev loop8: unable to read RDB block 7 [ 288.138060][ T30] audit: type=1326 audit(1750813835.177:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9070 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb13478e929 code=0x7ffc0000 [ 288.147972][ T9078] loop8: unable to read partition table [ 288.164162][ C1] vkms_vblank_simulate: vblank timer overrun [ 288.178033][ T30] audit: type=1326 audit(1750813835.177:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9070 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13478e929 code=0x7ffc0000 [ 288.193360][ T9078] loop8: partition table beyond EOD, [ 288.201647][ T30] audit: type=1326 audit(1750813835.187:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9070 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fb13478e929 code=0x7ffc0000 [ 288.229263][ C1] vkms_vblank_simulate: vblank timer overrun [ 288.236298][ T30] audit: type=1326 audit(1750813835.187:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9070 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13478e929 code=0x7ffc0000 [ 288.237466][ T9078] truncated [ 288.259011][ T5919] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 288.294461][ T30] audit: type=1326 audit(1750813835.187:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9070 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb13478e929 code=0x7ffc0000 [ 288.294506][ T30] audit: type=1326 audit(1750813835.187:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9070 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13478e929 code=0x7ffc0000 [ 288.294544][ T30] audit: type=1326 audit(1750813835.187:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9070 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb134790847 code=0x7ffc0000 [ 288.294592][ T30] audit: type=1326 audit(1750813835.187:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9070 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fb1347907bc code=0x7ffc0000 [ 288.294925][ T9078] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 288.316092][ T9077] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.316702][ T9077] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.434055][ T9084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.780'. [ 288.469993][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.470031][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.470071][ T5919] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 288.470096][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.472838][ T5919] usb 1-1: config 0 descriptor?? [ 288.673160][ T9077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.691764][ T9077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.864349][ T9077] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.876773][ T9077] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.911208][ T9077] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.911244][ T9077] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.001942][ T9089] vlan2: entered promiscuous mode [ 289.040564][ T5919] hid-steam 0003:28DE:1142.000E: unknown main item tag 0x0 [ 289.040608][ T5919] hid-steam 0003:28DE:1142.000E: unknown main item tag 0x0 [ 289.040634][ T5919] hid-steam 0003:28DE:1142.000E: unknown main item tag 0x0 [ 289.040657][ T5919] hid-steam 0003:28DE:1142.000E: unknown main item tag 0x0 [ 289.043768][ T5919] hid-steam 0003:28DE:1142.000E: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 289.637300][ T9102] __nla_validate_parse: 3 callbacks suppressed [ 289.637338][ T9102] netlink: 36 bytes leftover after parsing attributes in process `syz.2.785'. [ 289.663031][ T9102] netlink: 36 bytes leftover after parsing attributes in process `syz.2.785'. [ 289.771208][ T9102] netlink: 36 bytes leftover after parsing attributes in process `syz.2.785'. [ 289.893141][ T9116] 8021q: adding VLAN 0 to HW filter on device bond1 [ 290.116962][ T9102] netlink: 36 bytes leftover after parsing attributes in process `syz.2.785'. [ 290.165560][ T9123] veth0: entered promiscuous mode [ 290.170816][ T9102] netlink: 36 bytes leftover after parsing attributes in process `syz.2.785'. [ 290.184942][ T9123] vlan2: entered promiscuous mode [ 290.236338][ T9102] netlink: 36 bytes leftover after parsing attributes in process `syz.2.785'. [ 291.044012][ T5919] usb 1-1: USB disconnect, device number 54 [ 291.312377][ T9136] vlan2: entered promiscuous mode [ 291.894454][ T5924] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 292.107985][ T5924] usb 4-1: Using ep0 maxpacket: 8 [ 292.148073][ T5924] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 292.205169][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.245210][ T5924] usb 4-1: Product: syz [ 292.266830][ T9156] loop6: detected capacity change from 0 to 1 [ 292.283889][ T5924] usb 4-1: Manufacturer: syz [ 292.300418][ T5924] usb 4-1: SerialNumber: syz [ 292.311823][ T9156] Dev loop6: unable to read RDB block 1 [ 292.336742][ T5924] usb 4-1: config 0 descriptor?? [ 292.346459][ T9156] loop6: unable to read partition table [ 292.375799][ T5924] gspca_main: sq930x-2.14.0 probing 2770:930c [ 292.376331][ T9156] loop6: partition table beyond EOD, truncated [ 292.464550][ T9156] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 292.721666][ T9159] vlan2: entered promiscuous mode [ 293.236211][ T9171] netlink: 28 bytes leftover after parsing attributes in process `syz.2.807'. [ 293.251613][ T9168] vlan2: entered promiscuous mode [ 293.256832][ T9168] team0: entered promiscuous mode [ 293.262711][ T9168] team_slave_0: entered promiscuous mode [ 293.270152][ T9168] team_slave_1: entered promiscuous mode [ 293.337009][ T5952] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 293.457266][ T10] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 293.487089][ T5952] usb 5-1: Using ep0 maxpacket: 16 [ 293.547529][ T5915] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 293.590853][ T5952] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.607449][ T5952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 293.617928][ T5952] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 293.627446][ T5924] gspca_sq930x: reg_w 0105 0c00 failed -71 [ 293.637022][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 293.644310][ T5952] usb 5-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 293.653494][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.668108][ T5952] usb 5-1: Product: syz [ 293.672572][ T5952] usb 5-1: Manufacturer: syz [ 293.677642][ T10] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 293.687699][ T5952] usb 5-1: SerialNumber: syz [ 293.693553][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.708411][ T10] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 293.718205][ T5952] usb 5-1: config 0 descriptor?? [ 293.723527][ T10] usb 1-1: config 1 has no interface number 1 [ 293.737197][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 293.750150][ T5952] peak_usb 5-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -8 [ 293.759100][ T5952] peak_usb 5-1:0.0: unable to read PCAN-USB serial number (err -8) [ 293.767143][ T10] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 293.780407][ T5915] usb 3-1: Using ep0 maxpacket: 32 [ 293.792347][ T5915] usb 3-1: config 0 has an invalid interface number: 149 but max is 0 [ 293.801342][ T5915] usb 3-1: config 0 has no interface number 0 [ 293.808586][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 293.818004][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.826674][ T10] usb 1-1: Product: syz [ 293.832036][ T10] usb 1-1: Manufacturer: syz [ 293.836789][ T5915] usb 3-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=44.19 [ 293.846126][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=250, SerialNumber=3 [ 293.856098][ T10] usb 1-1: SerialNumber: syz [ 293.856982][ T5924] gspca_sq930x: Sensor ov9630 not yet treated [ 293.862752][ T5952] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -8 [ 293.887446][ T5924] sq930x 4-1:0.0: probe with driver sq930x failed with error -22 [ 293.888564][ T5915] usb 3-1: Product: syz [ 293.906046][ T5924] usb 4-1: USB disconnect, device number 58 [ 293.914564][ T5915] usb 3-1: Manufacturer: syz [ 293.919623][ T5915] usb 3-1: SerialNumber: syz [ 293.932890][ T5915] usb 3-1: config 0 descriptor?? [ 293.977763][ T9164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.023324][ T9164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.120651][ T9170] netlink: 132 bytes leftover after parsing attributes in process `syz.0.809'. [ 294.151107][ T9170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.175090][ T9171] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 294.180465][ T9170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.224975][ T9170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.268413][ T9170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.333713][ T10] usb 1-1: USB disconnect, device number 55 [ 294.414683][ T8531] udevd[8531]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 294.514008][ T9194] FAULT_INJECTION: forcing a failure. [ 294.514008][ T9194] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 294.528073][ T9194] CPU: 1 UID: 0 PID: 9194 Comm: syz.3.816 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 294.528102][ T9194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 294.528122][ T9194] Call Trace: [ 294.528130][ T9194] [ 294.528139][ T9194] dump_stack_lvl+0x189/0x250 [ 294.528177][ T9194] ? __pfx____ratelimit+0x10/0x10 [ 294.528207][ T9194] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.528238][ T9194] ? __pfx__printk+0x10/0x10 [ 294.528274][ T9194] should_fail_ex+0x414/0x560 [ 294.528305][ T9194] strncpy_from_user+0x36/0x290 [ 294.528334][ T9194] path_removexattrat+0xe0/0x690 [ 294.528366][ T9194] ? __pfx_path_removexattrat+0x10/0x10 [ 294.528396][ T9194] ? __pfx_vfs_write+0x10/0x10 [ 294.528457][ T9194] ? __pfx_ksys_write+0x10/0x10 [ 294.528473][ T9194] ? rcu_is_watching+0x15/0xb0 [ 294.528513][ T9194] __x64_sys_fremovexattr+0x62/0x70 [ 294.528541][ T9194] do_syscall_64+0xfa/0x3b0 [ 294.528558][ T9194] ? lockdep_hardirqs_on+0x9c/0x150 [ 294.528587][ T9194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.528607][ T9194] ? clear_bhb_loop+0x60/0xb0 [ 294.528632][ T9194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.528652][ T9194] RIP: 0033:0x7fb13478e929 [ 294.528675][ T9194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.528693][ T9194] RSP: 002b:00007fb135682038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c7 [ 294.528715][ T9194] RAX: ffffffffffffffda RBX: 00007fb1349b5fa0 RCX: 00007fb13478e929 [ 294.528730][ T9194] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 294.528744][ T9194] RBP: 00007fb135682090 R08: 0000000000000000 R09: 0000000000000000 [ 294.528756][ T9194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.528768][ T9194] R13: 0000000000000000 R14: 00007fb1349b5fa0 R15: 00007fb134adfa28 [ 294.528800][ T9194] [ 294.726295][ C1] vkms_vblank_simulate: vblank timer overrun [ 294.901692][ T5952] usb 5-1: USB disconnect, device number 53 [ 295.244353][ T9210] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 295.253439][ T9210] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 295.596973][ T5924] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 295.805311][ T5924] usb 4-1: Using ep0 maxpacket: 16 [ 296.057944][ T9223] netlink: 28 bytes leftover after parsing attributes in process `syz.4.828'. [ 296.095285][ T9223] netlink: 'syz.4.828': attribute type 7 has an invalid length. [ 296.148526][ T9223] netlink: 'syz.4.828': attribute type 8 has an invalid length. [ 296.194976][ T5924] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.217641][ T5915] peak_usb 3-1:0.149 can0: unable to request usb[type=0 value=1] err=-71 [ 296.227346][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 296.245904][ T5915] peak_usb 3-1:0.149: unable to read PCAN-Chip USB firmware info (err -71) [ 296.257544][ T9223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.828'. [ 296.295651][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 296.348570][ T9223] gretap0: entered promiscuous mode [ 296.400522][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 50939, setting to 1024 [ 296.418685][ T9223] batadv_slave_1: entered promiscuous mode [ 296.456235][ T5924] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 296.477733][ T9223] gretap0: left promiscuous mode [ 296.527876][ T9223] batadv_slave_1: left promiscuous mode [ 296.729677][ T5915] peak_usb 3-1:0.149: probe with driver peak_usb failed with error -71 [ 296.784629][ T5924] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 296.815661][ T5924] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 296.862583][ T5915] usb 3-1: USB disconnect, device number 36 [ 296.875439][ T5924] usb 4-1: Manufacturer: syz [ 296.907845][ T5924] usb 4-1: config 0 descriptor?? [ 297.168512][ T5895] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 297.384904][ T5895] usb 1-1: config 0 has no interfaces? [ 297.392728][ T5895] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 297.402159][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.428255][ T5895] usb 1-1: Product: syz [ 297.443045][ T5895] usb 1-1: Manufacturer: syz [ 297.465435][ T5895] usb 1-1: SerialNumber: syz [ 297.479701][ T9255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.839'. [ 297.491714][ T5895] usb 1-1: config 0 descriptor?? [ 297.538074][ T9255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.839'. [ 298.287668][ T5895] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 298.519307][ T5924] usb 4-1: USB disconnect, device number 59 [ 298.538716][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 298.580193][ T5895] usb 5-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 298.617771][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.691206][ T5895] usb 5-1: config 0 descriptor?? [ 298.707488][ T9268] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 298.850621][ T5915] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 299.067092][ T5915] usb 3-1: Using ep0 maxpacket: 32 [ 299.214787][ T5915] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 299.218745][ T5895] uclogic 0003:5543:0064.000F: unknown main item tag 0x0 [ 299.246387][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 299.269021][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 299.279537][ T5895] uclogic 0003:5543:0064.000F: unknown main item tag 0x0 [ 299.286630][ T5895] uclogic 0003:5543:0064.000F: unknown main item tag 0x0 [ 299.330930][ T5895] uclogic 0003:5543:0064.000F: unknown main item tag 0x0 [ 299.336022][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 299.340012][ T5895] uclogic 0003:5543:0064.000F: unknown main item tag 0x0 [ 299.366537][ T5895] uclogic 0003:5543:0064.000F: No inputs registered, leaving [ 299.379562][ T5895] uclogic 0003:5543:0064.000F: hidraw0: USB HID v1.01 Device [HID 5543:0064] on usb-dummy_hcd.4-1/input0 [ 299.404104][ T5895] usb 5-1: USB disconnect, device number 54 [ 299.411499][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 299.430526][ T9290] program syz.3.851 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 299.465846][ T5915] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 299.512362][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.543915][ T5915] usb 3-1: Product: syz [ 299.546006][ T9291] fido_id[9291]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 299.572730][ T5915] usb 3-1: Manufacturer: syz [ 299.589790][ T5915] usb 3-1: SerialNumber: syz [ 299.632356][ T5915] usb 3-1: config 0 descriptor?? [ 299.845936][ T5919] usb 1-1: USB disconnect, device number 56 [ 299.959212][ T5895] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 300.045207][ T9302] loop6: detected capacity change from 0 to 1 [ 300.072931][ T5915] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 300.087172][ T9302] Dev loop6: unable to read RDB block 1 [ 300.087247][ T5915] input input25: Device does not respond to id packet M [ 300.104645][ T9302] loop6: unable to read partition table [ 300.125028][ T9302] loop6: partition table beyond EOD, truncated [ 300.149683][ T5915] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 300.155748][ T5915] input input25: Device does not respond to id packet P [ 300.164224][ T5915] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 300.170610][ T5915] input input25: Device does not respond to id packet B [ 300.174288][ T5895] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.177998][ T5915] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 300.194574][ T5915] input input25: Device does not respond to id packet N [ 300.203536][ T5915] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 300.210241][ T5915] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 300.213964][ T9302] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 300.216669][ T5915] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 300.231950][ T5915] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 300.287256][ T5895] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.33 [ 300.296725][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.305024][ T5895] usb 4-1: Product: syz [ 300.309496][ T5895] usb 4-1: Manufacturer: syz [ 300.314179][ T5895] usb 4-1: SerialNumber: syz [ 300.325064][ T5915] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input25 [ 300.422325][ T5915] usb 3-1: USB disconnect, device number 37 [ 300.503517][ T8531] udevd[8531]: setting mode of /dev/bus/usb/003/037 to 020664 failed: No such file or directory [ 300.547426][ T8531] udevd[8531]: setting owner of /dev/bus/usb/003/037 to uid=0, gid=0 failed: No such file or directory [ 300.795147][ T9312] netlink: 28 bytes leftover after parsing attributes in process `syz.4.858'. [ 300.837122][ T9312] netlink: 'syz.4.858': attribute type 7 has an invalid length. [ 300.864422][ T9312] netlink: 'syz.4.858': attribute type 8 has an invalid length. [ 300.913661][ T9312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.858'. [ 301.021705][ T9312] gretap0: entered promiscuous mode [ 301.029190][ T9312] batadv_slave_1: entered promiscuous mode [ 301.049096][ T9312] gretap0: left promiscuous mode [ 301.069423][ T9312] batadv_slave_1: left promiscuous mode [ 301.374708][ T5895] cdc_ncm 4-1:1.0: bind() failure [ 301.413714][ T5895] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 301.434593][ T5895] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 301.474463][ T5895] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 301.525279][ T5895] usb 4-1: USB disconnect, device number 60 [ 302.064349][ T9339] loop6: detected capacity change from 0 to 1 [ 302.085994][ T9339] Dev loop6: unable to read RDB block 1 [ 302.103006][ T9339] loop6: unable to read partition table [ 302.109277][ T9343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.870'. [ 302.118690][ T9339] loop6: partition table beyond EOD, truncated [ 302.146521][ T9339] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 302.287346][ T9341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.869'. [ 302.755518][ T9356] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 303.070628][ T9361] vlan2: entered promiscuous mode [ 303.373392][ T9366] FAULT_INJECTION: forcing a failure. [ 303.373392][ T9366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 303.442319][ T9366] CPU: 1 UID: 0 PID: 9366 Comm: syz.0.876 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 303.442349][ T9366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 303.442362][ T9366] Call Trace: [ 303.442370][ T9366] [ 303.442379][ T9366] dump_stack_lvl+0x189/0x250 [ 303.442414][ T9366] ? __pfx____ratelimit+0x10/0x10 [ 303.442445][ T9366] ? __pfx_dump_stack_lvl+0x10/0x10 [ 303.442494][ T9366] ? __pfx__printk+0x10/0x10 [ 303.442515][ T9366] ? __might_fault+0xb0/0x130 [ 303.442543][ T9366] should_fail_ex+0x414/0x560 [ 303.442571][ T9366] _copy_from_user+0x2d/0xb0 [ 303.442589][ T9366] ____sys_sendmsg+0x2fe/0x830 [ 303.442635][ T9366] ? __pfx_____sys_sendmsg+0x10/0x10 [ 303.442665][ T9366] ? import_iovec+0x74/0xa0 [ 303.442685][ T9366] ___sys_sendmsg+0x21f/0x2a0 [ 303.442709][ T9366] ? __pfx____sys_sendmsg+0x10/0x10 [ 303.442782][ T9366] ? __fget_files+0x2a/0x420 [ 303.442802][ T9366] ? __fget_files+0x3a0/0x420 [ 303.442842][ T9366] __x64_sys_sendmsg+0x19b/0x260 [ 303.442866][ T9366] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 303.442896][ T9366] ? __pfx_ksys_write+0x10/0x10 [ 303.442910][ T9366] ? rcu_is_watching+0x15/0xb0 [ 303.442941][ T9366] ? do_syscall_64+0xbe/0x3b0 [ 303.442960][ T9366] do_syscall_64+0xfa/0x3b0 [ 303.442974][ T9366] ? lockdep_hardirqs_on+0x9c/0x150 [ 303.442998][ T9366] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.443015][ T9366] ? clear_bhb_loop+0x60/0xb0 [ 303.443036][ T9366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.443053][ T9366] RIP: 0033:0x7f4a8338e929 [ 303.443068][ T9366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.443083][ T9366] RSP: 002b:00007f4a84244038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 303.443102][ T9366] RAX: ffffffffffffffda RBX: 00007f4a835b5fa0 RCX: 00007f4a8338e929 [ 303.443115][ T9366] RDX: 00000000000080fe RSI: 0000200000000080 RDI: 0000000000000004 [ 303.443126][ T9366] RBP: 00007f4a84244090 R08: 0000000000000000 R09: 0000000000000000 [ 303.443137][ T9366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.443148][ T9366] R13: 0000000000000000 R14: 00007f4a835b5fa0 R15: 00007f4a836dfa28 [ 303.443175][ T9366] [ 303.668216][ C1] vkms_vblank_simulate: vblank timer overrun [ 303.815575][ T9372] xt_connbytes: Forcing CT accounting to be enabled [ 303.867496][ T9372] Cannot find set identified by id 0 to match [ 303.912898][ T9382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.881'. [ 304.427035][ T5895] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 304.660243][ T5895] usb 5-1: Using ep0 maxpacket: 16 [ 304.668643][ T5895] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 304.670050][ T9402] vlan2: entered promiscuous mode [ 304.712336][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 304.752831][ T5895] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 304.775582][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.839663][ T5895] usb 5-1: Product: syz [ 304.892742][ T9403] veth1_macvtap: left promiscuous mode [ 304.937358][ T9403] macsec0: entered promiscuous mode [ 304.989706][ T9403] veth1_macvtap: entered promiscuous mode [ 305.009782][ T5895] usb 5-1: Manufacturer: syz [ 305.035021][ T5895] usb 5-1: SerialNumber: syz [ 305.048090][ T5895] usb 5-1: config 0 descriptor?? [ 305.055911][ T9403] macsec0: left promiscuous mode [ 305.084865][ T9407] FAULT_INJECTION: forcing a failure. [ 305.084865][ T9407] name failslab, interval 1, probability 0, space 0, times 1 [ 305.101633][ T9407] CPU: 0 UID: 0 PID: 9407 Comm: syz.0.890 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 305.101677][ T9407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 305.101688][ T9407] Call Trace: [ 305.101695][ T9407] [ 305.101703][ T9407] dump_stack_lvl+0x189/0x250 [ 305.101736][ T9407] ? __pfx____ratelimit+0x10/0x10 [ 305.101764][ T9407] ? __pfx_dump_stack_lvl+0x10/0x10 [ 305.101791][ T9407] ? __pfx__printk+0x10/0x10 [ 305.101817][ T9407] ? __pfx___might_resched+0x10/0x10 [ 305.101859][ T9407] should_fail_ex+0x414/0x560 [ 305.101886][ T9407] should_failslab+0xa8/0x100 [ 305.101907][ T9407] __kmalloc_cache_noprof+0x70/0x3d0 [ 305.101924][ T9407] ? rxrpc_alloc_peer+0x7d/0x330 [ 305.101953][ T9407] rxrpc_alloc_peer+0x7d/0x330 [ 305.101981][ T9407] rxrpc_lookup_peer+0x3fe/0x860 [ 305.102012][ T9407] rxrpc_do_sendmsg+0xb0a/0x1220 [ 305.102043][ T9407] ? __pfx_rxrpc_do_sendmsg+0x10/0x10 [ 305.102058][ T9407] ? __local_bh_enable_ip+0x12d/0x1c0 [ 305.102084][ T9407] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 305.102111][ T9407] ? do_raw_spin_unlock+0x122/0x240 [ 305.102136][ T9407] ? rxrpc_sendmsg+0x4cc/0x710 [ 305.102159][ T9407] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 305.102186][ T9407] __sock_sendmsg+0x219/0x270 [ 305.102215][ T9407] ____sys_sendmsg+0x505/0x830 [ 305.102242][ T9407] ? __pfx_____sys_sendmsg+0x10/0x10 [ 305.102271][ T9407] ? import_iovec+0x74/0xa0 [ 305.102292][ T9407] ___sys_sendmsg+0x21f/0x2a0 [ 305.102315][ T9407] ? __pfx____sys_sendmsg+0x10/0x10 [ 305.102370][ T9407] ? __fget_files+0x2a/0x420 [ 305.102389][ T9407] ? __fget_files+0x3a0/0x420 [ 305.102418][ T9407] __x64_sys_sendmsg+0x19b/0x260 [ 305.102442][ T9407] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 305.102473][ T9407] ? __pfx_ksys_write+0x10/0x10 [ 305.102487][ T9407] ? rcu_is_watching+0x15/0xb0 [ 305.102519][ T9407] ? do_syscall_64+0xbe/0x3b0 [ 305.102537][ T9407] do_syscall_64+0xfa/0x3b0 [ 305.102552][ T9407] ? lockdep_hardirqs_on+0x9c/0x150 [ 305.102575][ T9407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.102593][ T9407] ? clear_bhb_loop+0x60/0xb0 [ 305.102614][ T9407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.102630][ T9407] RIP: 0033:0x7f4a8338e929 [ 305.102645][ T9407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.102660][ T9407] RSP: 002b:00007f4a84244038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 305.102679][ T9407] RAX: ffffffffffffffda RBX: 00007f4a835b5fa0 RCX: 00007f4a8338e929 [ 305.102691][ T9407] RDX: 00000000000080fe RSI: 0000200000000080 RDI: 0000000000000004 [ 305.102703][ T9407] RBP: 00007f4a84244090 R08: 0000000000000000 R09: 0000000000000000 [ 305.102713][ T9407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.102723][ T9407] R13: 0000000000000000 R14: 00007f4a835b5fa0 R15: 00007f4a836dfa28 [ 305.102751][ T9407] [ 305.268171][ T9391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.497448][ T9391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.773343][ T5895] pegasus_notetaker 5-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 305.827539][ T5895] usb 5-1: USB disconnect, device number 55 [ 305.857262][ T5919] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 305.867586][ T9417] syzkaller1: entered promiscuous mode [ 305.873067][ T9417] syzkaller1: entered allmulticast mode [ 306.060372][ T5919] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 306.114438][ T5919] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 306.164289][ T5919] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 306.197934][ T5919] usb 4-1: config 0 interface 0 has no altsetting 0 [ 306.227732][ T5919] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 306.249983][ T5919] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 306.294877][ T5919] usb 4-1: config 0 interface 0 has no altsetting 0 [ 306.308628][ T5919] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 306.317711][ T5919] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 306.370300][ T5919] usb 4-1: config 0 interface 0 has no altsetting 0 [ 306.387179][ T5881] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 306.412328][ T5919] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 306.441634][ T5919] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 306.481264][ T5919] usb 4-1: config 0 interface 0 has no altsetting 0 [ 306.490161][ T9423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.895'. [ 306.508497][ T5919] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 306.536958][ T5919] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 306.566909][ T5919] usb 4-1: config 0 interface 0 has no altsetting 0 [ 306.567048][ T5881] usb 1-1: Using ep0 maxpacket: 16 [ 306.578437][ T5919] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 306.602541][ T5881] usb 1-1: config 0 interface 0 has no altsetting 0 [ 306.612408][ T5881] usb 1-1: New USB device found, idVendor=05ac, idProduct=abdf, bcdDevice=3d.49 [ 306.627301][ T5919] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 306.638277][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.646299][ T5881] usb 1-1: Product: syz [ 306.656865][ T5881] usb 1-1: Manufacturer: syz [ 306.664708][ T5919] usb 4-1: config 0 interface 0 has no altsetting 0 [ 306.667290][ T9427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.681776][ T5881] usb 1-1: SerialNumber: syz [ 306.688302][ T5919] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 306.695256][ T9427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.705782][ T5881] usb 1-1: config 0 descriptor?? [ 306.718361][ T5919] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 306.727755][ T5881] ipheth 1-1:0.0: Unable to find endpoints [ 306.764061][ T9411] delete_channel: no stack [ 306.768675][ T5919] usb 4-1: config 0 interface 0 has no altsetting 0 [ 306.782173][ T9411] delete_channel: no stack [ 306.787625][ T5919] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 306.796544][ T5919] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 306.821659][ T9425] loop4: detected capacity change from 0 to 7 [ 306.841187][ T8531] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 306.847982][ T5919] usb 4-1: config 0 interface 0 has no altsetting 0 [ 306.850027][ T8531] loop4: p1 start 16843009 is beyond EOD, truncated [ 306.863139][ T8531] loop4: p2 start 16843009 is beyond EOD, truncated [ 306.865423][ T5919] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 306.870184][ T8531] loop4: p3 start 16843009 is beyond EOD, truncated [ 306.885864][ T8531] loop4: p4 start 16843009 is beyond EOD, truncated [ 306.886282][ T5919] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 306.898625][ T8531] loop4: p5 start 16843009 is beyond EOD, truncated [ 306.905154][ T5919] usb 4-1: Product: syz [ 306.910607][ T8531] loop4: p6 start 16843009 is beyond EOD, truncated [ 306.913152][ T5919] usb 4-1: Manufacturer: syz [ 306.919175][ T8531] loop4: p7 start 16843009 is beyond EOD, truncated [ 306.924891][ T5919] usb 4-1: SerialNumber: syz [ 306.944419][ T5919] usb 4-1: config 0 descriptor?? [ 306.957548][ T8531] loop4: p8 start 16843009 is beyond EOD, truncated [ 306.961540][ T5924] usb 1-1: USB disconnect, device number 57 [ 306.964866][ T8531] loop4: p9 start 16843009 is beyond EOD, truncated [ 306.986490][ T8531] loop4: p10 start 16843009 is beyond EOD, truncated [ 307.001525][ T5919] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 307.004135][ T8531] loop4: p11 start 16843009 is beyond EOD, [ 307.010238][ T9430] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 307.030974][ T8531] truncated [ 307.034125][ T8531] loop4: p12 start 16843009 is beyond EOD, truncated [ 307.073351][ T9425] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 307.085457][ T9425] loop4: p1 start 16843009 is beyond EOD, truncated [ 307.095917][ T9425] loop4: p2 start 16843009 is beyond EOD, truncated [ 307.102834][ T9425] loop4: p3 start 16843009 is beyond EOD, truncated [ 307.110773][ T9425] loop4: p4 start 16843009 is beyond EOD, truncated [ 307.126995][ T9425] loop4: p5 start 16843009 is beyond EOD, truncated [ 307.133654][ T9425] loop4: p6 start 16843009 is beyond EOD, truncated [ 307.141451][ T9425] loop4: p7 start 16843009 is beyond EOD, truncated [ 307.148615][ T9425] loop4: p8 start 16843009 is beyond EOD, truncated [ 307.155978][ T9425] loop4: p9 start 16843009 is beyond EOD, truncated [ 307.164392][ T9425] loop4: p10 start 16843009 is beyond EOD, truncated [ 307.172378][ T9425] loop4: p11 start 16843009 is beyond EOD, truncated [ 307.179346][ T9425] loop4: p12 start 16843009 is beyond EOD, truncated [ 307.252386][ T9413] netlink: 'syz.3.892': attribute type 4 has an invalid length. [ 307.268299][ T9413] netlink: 'syz.3.892': attribute type 2 has an invalid length. [ 307.390545][ T9436] vlan2: entered promiscuous mode [ 307.407100][ T5881] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 307.408500][ T5924] usb 4-1: USB disconnect, device number 61 [ 307.434473][ T5924] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 307.579858][ T5881] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 307.598241][ T9442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.900'. [ 307.646121][ T9442] bridge_slave_1: left allmulticast mode [ 307.660698][ T9442] bridge_slave_1: left promiscuous mode [ 307.677268][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.698763][ T5881] usb 3-1: config 0 descriptor?? [ 307.708527][ T5881] cp210x 3-1:0.0: cp210x converter detected [ 307.747298][ T9442] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.787437][ T9442] bridge_slave_0: left allmulticast mode [ 307.806834][ T9442] bridge_slave_0: left promiscuous mode [ 307.814800][ T9442] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.168794][ T9432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.188903][ T9432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.292942][ T9454] loop8: detected capacity change from 0 to 7 [ 308.301084][ T9454] Dev loop8: unable to read RDB block 7 [ 308.309562][ T9454] loop8: unable to read partition table [ 308.343816][ T5881] usb 3-1: cp210x converter now attached to ttyUSB0 [ 308.395927][ T9454] loop8: partition table beyond EOD, truncated [ 308.426076][ T5881] usb 3-1: USB disconnect, device number 38 [ 308.437160][ T9454] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 308.505360][ T9456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.907'. [ 308.536640][ T5881] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 308.554307][ T5881] cp210x 3-1:0.0: device disconnected [ 308.576569][ T9456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.907'. [ 309.127535][ T10] usb 3-1: new low-speed USB device number 39 using dummy_hcd [ 309.336959][ T10] usb 3-1: Invalid ep0 maxpacket: 16 [ 309.444386][ T5919] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 309.466987][ T10] usb 3-1: new low-speed USB device number 40 using dummy_hcd [ 309.625798][ T5919] usb 5-1: device descriptor read/64, error -71 [ 309.747047][ T10] usb 3-1: Invalid ep0 maxpacket: 16 [ 309.762048][ T10] usb usb3-port1: attempt power cycle [ 309.867059][ T5919] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 310.024478][ T5919] usb 5-1: device descriptor read/64, error -71 [ 310.252212][ T5919] usb usb5-port1: attempt power cycle [ 310.316811][ T9485] input: syz0 as /devices/virtual/input/input27 [ 310.318563][ T10] usb 3-1: new low-speed USB device number 41 using dummy_hcd [ 310.377765][ T10] usb 3-1: Invalid ep0 maxpacket: 16 [ 310.517138][ T10] usb 3-1: new low-speed USB device number 42 using dummy_hcd [ 310.557858][ T10] usb 3-1: Invalid ep0 maxpacket: 16 [ 310.563670][ T10] usb usb3-port1: unable to enumerate USB device [ 310.627092][ T5919] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 310.657764][ T5919] usb 5-1: device descriptor read/8, error -71 [ 311.367298][ T5919] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 311.400962][ T5919] usb 5-1: device descriptor read/8, error -71 [ 311.503498][ T9501] xt_l2tp: wrong L2TP version: 0 [ 311.521715][ T5919] usb usb5-port1: unable to enumerate USB device [ 311.591995][ T9500] xt_l2tp: wrong L2TP version: 0 [ 311.766320][ T9510] netlink: 28 bytes leftover after parsing attributes in process `syz.1.924'. [ 311.792522][ T9510] netlink: 'syz.1.924': attribute type 7 has an invalid length. [ 311.807041][ T9510] netlink: 'syz.1.924': attribute type 8 has an invalid length. [ 311.844712][ T9510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.924'. [ 311.885725][ T9510] gretap0: entered promiscuous mode [ 311.901982][ T9510] batadv_slave_1: entered promiscuous mode [ 311.914214][ T9512] loop6: detected capacity change from 0 to 1 [ 311.923889][ T9512] Dev loop6: unable to read RDB block 1 [ 311.929855][ T9512] loop6: unable to read partition table [ 311.935739][ T9512] loop6: partition table beyond EOD, truncated [ 311.945151][ T9512] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 311.952377][ T9510] gretap0: left promiscuous mode [ 311.974479][ T9510] batadv_slave_1: left promiscuous mode [ 312.583300][ T9528] FAULT_INJECTION: forcing a failure. [ 312.583300][ T9528] name failslab, interval 1, probability 0, space 0, times 0 [ 312.744869][ T9528] CPU: 0 UID: 0 PID: 9528 Comm: syz.2.932 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 312.744895][ T9528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 312.744905][ T9528] Call Trace: [ 312.744912][ T9528] [ 312.744919][ T9528] dump_stack_lvl+0x189/0x250 [ 312.744950][ T9528] ? __pfx____ratelimit+0x10/0x10 [ 312.744975][ T9528] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.745001][ T9528] ? __pfx__printk+0x10/0x10 [ 312.745024][ T9528] ? __pfx___might_resched+0x10/0x10 [ 312.745053][ T9528] should_fail_ex+0x414/0x560 [ 312.745078][ T9528] should_failslab+0xa8/0x100 [ 312.745098][ T9528] __kmalloc_cache_noprof+0x70/0x3d0 [ 312.745114][ T9528] ? rxrpc_alloc_data_txbuf+0x8a/0x640 [ 312.745137][ T9528] rxrpc_alloc_data_txbuf+0x8a/0x640 [ 312.745156][ T9528] ? rcu_is_watching+0x15/0xb0 [ 312.745182][ T9528] ? trace_rxrpc_tq+0x85/0x200 [ 312.745200][ T9528] rxrpc_send_data+0xf3e/0x2160 [ 312.745227][ T9528] ? rxrpc_send_data+0x31a/0x2160 [ 312.745262][ T9528] ? __pfx_rxrpc_send_data+0x10/0x10 [ 312.745278][ T9528] ? __pfx_default_wake_function+0x10/0x10 [ 312.745306][ T9528] ? rcu_is_watching+0x15/0xb0 [ 312.745335][ T9528] rxrpc_do_sendmsg+0x1098/0x1220 [ 312.745363][ T9528] ? __pfx_rxrpc_do_sendmsg+0x10/0x10 [ 312.745378][ T9528] ? __local_bh_enable_ip+0x12d/0x1c0 [ 312.745406][ T9528] ? do_raw_spin_unlock+0x122/0x240 [ 312.745431][ T9528] ? rxrpc_sendmsg+0x4cc/0x710 [ 312.745453][ T9528] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 312.745470][ T9528] __sock_sendmsg+0x219/0x270 [ 312.745498][ T9528] ____sys_sendmsg+0x505/0x830 [ 312.745524][ T9528] ? __pfx_____sys_sendmsg+0x10/0x10 [ 312.745552][ T9528] ? import_iovec+0x74/0xa0 [ 312.745576][ T9528] ___sys_sendmsg+0x21f/0x2a0 [ 312.745598][ T9528] ? __pfx____sys_sendmsg+0x10/0x10 [ 312.745650][ T9528] ? __fget_files+0x2a/0x420 [ 312.745668][ T9528] ? __fget_files+0x3a0/0x420 [ 312.745695][ T9528] __x64_sys_sendmsg+0x19b/0x260 [ 312.745718][ T9528] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 312.745747][ T9528] ? __pfx_ksys_write+0x10/0x10 [ 312.745760][ T9528] ? rcu_is_watching+0x15/0xb0 [ 312.745789][ T9528] ? do_syscall_64+0xbe/0x3b0 [ 312.745807][ T9528] do_syscall_64+0xfa/0x3b0 [ 312.745826][ T9528] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.745850][ T9528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.745866][ T9528] ? clear_bhb_loop+0x60/0xb0 [ 312.745885][ T9528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.745902][ T9528] RIP: 0033:0x7f694958e929 [ 312.745916][ T9528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.745931][ T9528] RSP: 002b:00007f694a3fc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.745949][ T9528] RAX: ffffffffffffffda RBX: 00007f69497b5fa0 RCX: 00007f694958e929 [ 312.745961][ T9528] RDX: 00000000000080fe RSI: 0000200000000080 RDI: 0000000000000004 [ 312.745971][ T9528] RBP: 00007f694a3fc090 R08: 0000000000000000 R09: 0000000000000000 [ 312.745987][ T9528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.745997][ T9528] R13: 0000000000000000 R14: 00007f69497b5fa0 R15: 00007f69498dfa28 [ 312.746022][ T9528] [ 313.137645][ T9533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.933'. [ 313.368892][ T43] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 313.527945][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 313.534556][ T43] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 313.545083][ T43] usb 5-1: config 0 has no interface number 0 [ 313.555669][ T43] usb 5-1: config 0 interface 184 has no altsetting 0 [ 313.573368][ T43] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 313.586077][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.601781][ T43] usb 5-1: Product: syz [ 313.610984][ T43] usb 5-1: Manufacturer: syz [ 313.615764][ T43] usb 5-1: SerialNumber: syz [ 313.625644][ T43] usb 5-1: config 0 descriptor?? [ 313.634377][ T43] smsc75xx v1.0.0 [ 313.816975][ T10] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 313.918695][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 313.918738][ T30] audit: type=1326 audit(1750813861.007:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9538 comm="syz.1.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973338e929 code=0x7ffc0000 [ 313.960780][ T30] audit: type=1326 audit(1750813861.017:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9538 comm="syz.1.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973338e929 code=0x7ffc0000 [ 313.985131][ T30] audit: type=1326 audit(1750813861.047:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9538 comm="syz.1.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f973338e929 code=0x7ffc0000 [ 313.986045][ T10] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 314.008070][ T30] audit: type=1326 audit(1750813861.047:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9538 comm="syz.1.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973338e929 code=0x7ffc0000 [ 314.029466][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 314.053926][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 314.063491][ T10] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 314.075203][ T10] usb 3-1: Product: syz [ 314.080362][ T10] usb 3-1: Manufacturer: syz [ 314.085043][ T10] usb 3-1: SerialNumber: syz [ 314.138746][ T10] usb 3-1: config 0 descriptor?? [ 314.150169][ T30] audit: type=1326 audit(1750813861.047:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9538 comm="syz.1.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f973338e929 code=0x7ffc0000 [ 314.190747][ T30] audit: type=1326 audit(1750813861.047:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9538 comm="syz.1.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973338e929 code=0x7ffc0000 [ 314.191763][ T10] usb 3-1: selecting invalid altsetting 0 [ 314.212953][ C1] vkms_vblank_simulate: vblank timer overrun [ 314.225050][ T30] audit: type=1326 audit(1750813861.047:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9538 comm="syz.1.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f973338e929 code=0x7ffc0000 [ 314.264108][ T30] audit: type=1326 audit(1750813861.047:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9538 comm="syz.1.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973338e929 code=0x7ffc0000 [ 314.287837][ T43] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 314.301463][ T43] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 314.311033][ T30] audit: type=1326 audit(1750813861.047:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9538 comm="syz.1.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f973338e929 code=0x7ffc0000 [ 314.352857][ T30] audit: type=1326 audit(1750813861.047:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9538 comm="syz.1.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973338e929 code=0x7ffc0000 [ 314.375300][ C1] vkms_vblank_simulate: vblank timer overrun [ 314.609969][ T9551] Cannot find add_set index 1 as target [ 314.757685][ T43] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 314.768972][ T43] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 314.798234][ T43] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 314.890566][ T43] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 314.937307][ T43] usb 5-1: USB disconnect, device number 60 [ 315.369520][ T9566] netlink: 20 bytes leftover after parsing attributes in process `syz.3.940'. [ 315.618561][ T9570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.945'. [ 315.865347][ T9570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.010859][ T9570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.181953][ T5881] usb 3-1: USB disconnect, device number 43 [ 316.286310][ T9568] syz.3.940 (9568): drop_caches: 2 [ 316.972609][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.978988][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.993836][ T9603] netlink: 28 bytes leftover after parsing attributes in process `syz.0.955'. [ 317.002973][ T9603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.955'. [ 317.347225][ T10] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 317.517321][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 317.525326][ T10] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 317.536390][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 317.546268][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 317.556185][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 317.566206][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 317.580000][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 317.592296][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.648739][ T43] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 317.830991][ T43] usb 3-1: unable to get BOS descriptor or descriptor too short [ 317.833310][ T10] usb 4-1: GET_CAPABILITIES returned 0 [ 317.845812][ T43] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 317.999888][ T43] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 318.013467][ T43] usb 3-1: config 1 interface 0 has no altsetting 1 [ 318.026339][ T43] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 318.043943][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.062326][ T43] usb 3-1: Product: syz [ 318.072246][ T43] usb 3-1: Manufacturer: syz [ 318.072362][ T10] usbtmc 4-1:16.0: can't read capabilities [ 318.110087][ T43] usb 3-1: SerialNumber: syz [ 318.166699][ T43] smsusb:smsusb_probe: board id=8, interface number 0 [ 318.175705][ T10] usb 4-1: USB disconnect, device number 62 [ 318.358720][ T9614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.405076][ T9614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.431448][ T43] smsusb:smsusb_probe: Device initialized with return code -19 [ 318.552782][ T9635] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 318.644076][ T9614] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 318.676982][ T10] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 318.859160][ T10] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 318.905707][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 319.520613][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 319.591859][ T5915] usb 3-1: USB disconnect, device number 44 [ 319.631793][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 319.677814][ T9648] netlink: 36 bytes leftover after parsing attributes in process `syz.0.970'. [ 319.687208][ T9648] netlink: 36 bytes leftover after parsing attributes in process `syz.0.970'. [ 319.696580][ T9648] netlink: 36 bytes leftover after parsing attributes in process `syz.0.970'. [ 319.712516][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.013077][ T10] usb 4-1: usb_control_msg returned -71 [ 320.020342][ T10] usbtmc 4-1:16.0: can't read capabilities [ 320.100498][ T10] usb 4-1: USB disconnect, device number 63 [ 320.247573][ T9648] netlink: 36 bytes leftover after parsing attributes in process `syz.0.970'. [ 320.257039][ T9648] netlink: 36 bytes leftover after parsing attributes in process `syz.0.970'. [ 320.266432][ T9648] netlink: 36 bytes leftover after parsing attributes in process `syz.0.970'. [ 321.075575][ T9665] loop4: detected capacity change from 0 to 7 [ 321.087220][ T9648] netlink: 36 bytes leftover after parsing attributes in process `syz.0.970'. [ 321.096371][ T9648] netlink: 36 bytes leftover after parsing attributes in process `syz.0.970'. [ 321.106015][ T9648] netlink: 36 bytes leftover after parsing attributes in process `syz.0.970'. [ 321.323387][ T8531] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 321.352062][ T8531] loop4: p1 start 16843009 is beyond EOD, truncated [ 321.369963][ T8531] loop4: p2 start 16843009 is beyond EOD, truncated [ 321.371658][ T9674] netlink: 'syz.3.978': attribute type 10 has an invalid length. [ 321.385849][ T8531] loop4: p3 start 16843009 is beyond EOD, truncated [ 321.421029][ T9680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.431481][ T9680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.449442][ T8531] loop4: p4 start 16843009 is beyond EOD, truncated [ 321.573774][ T8531] loop4: p5 start 16843009 is beyond EOD, truncated [ 321.595241][ T8531] loop4: p6 start 16843009 is beyond EOD, truncated [ 321.620487][ T8531] loop4: p7 start 16843009 is beyond EOD, truncated [ 321.677008][ T8531] loop4: p8 start 16843009 is beyond EOD, truncated [ 321.717461][ T8531] loop4: p9 start 16843009 is beyond EOD, truncated [ 321.735807][ T8531] loop4: p10 start 16843009 is beyond EOD, truncated [ 321.743806][ T8531] loop4: p11 start 16843009 is beyond EOD, truncated [ 321.750803][ T8531] loop4: p12 start 16843009 is beyond EOD, truncated [ 322.082652][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 322.082669][ T30] audit: type=1326 audit(1750813869.177:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9682 comm="syz.4.980" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f98c558e929 code=0x0 [ 322.110909][ C1] vkms_vblank_simulate: vblank timer overrun [ 322.334107][ T9695] netlink: 28 bytes leftover after parsing attributes in process `syz.1.985'. [ 322.447318][ T9695] netlink: 'syz.1.985': attribute type 7 has an invalid length. [ 322.503891][ T9703] xt_l2tp: wrong L2TP version: 0 [ 322.617144][ T9695] netlink: 'syz.1.985': attribute type 8 has an invalid length. [ 322.635538][ T9695] gretap0: entered promiscuous mode [ 322.666665][ T9695] batadv_slave_1: entered promiscuous mode [ 322.798468][ T9695] gretap0: left promiscuous mode [ 322.804215][ T9695] batadv_slave_1: left promiscuous mode [ 323.397134][ T10] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 323.589587][ T10] usb 1-1: config 6 has an invalid interface number: 108 but max is 0 [ 323.597907][ T10] usb 1-1: config 6 has no interface number 0 [ 323.614153][ T10] usb 1-1: config 6 interface 108 has no altsetting 0 [ 323.630624][ T10] usb 1-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=d2.1d [ 323.642010][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.686723][ T5915] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 323.706762][ T10] usb 1-1: Product: syz [ 323.711065][ T10] usb 1-1: Manufacturer: syz [ 323.715780][ T10] usb 1-1: SerialNumber: syz [ 323.890635][ T5915] usb 5-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 323.907314][ T5915] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 323.932822][ T5915] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 323.947535][ T9714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.962935][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.972773][ T9714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.986758][ T5915] usb 5-1: Product: syz [ 324.007537][ T5915] usb 5-1: Manufacturer: syz [ 324.014037][ T5915] usb 5-1: SerialNumber: syz [ 324.022777][ T10] mos7840 1-1:6.108: missing endpoints [ 324.031579][ T10] usb 1-1: USB disconnect, device number 58 [ 324.291840][ T9727] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 324.314289][ T5924] IPVS: starting estimator thread 0... [ 324.320922][ T9719] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 324.417499][ T9729] IPVS: using max 38 ests per chain, 91200 per kthread [ 324.568881][ T9731] loop2: detected capacity change from 0 to 7 [ 324.598692][ T9731] Dev loop2: unable to read RDB block 7 [ 324.605475][ T9731] loop2: AHDI p2 p3 [ 324.613846][ T9731] loop2: partition table partially beyond EOD, truncated [ 324.622332][ T9731] loop2: p2 size 150995456 extends beyond EOD, truncated [ 324.764640][ T8531] udevd[8531]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 324.815265][ T9733] __nla_validate_parse: 3 callbacks suppressed [ 324.815294][ T9733] netlink: 120 bytes leftover after parsing attributes in process `syz.0.996'. [ 324.959414][ T9735] netlink: 120 bytes leftover after parsing attributes in process `syz.3.997'. [ 324.986404][ T9719] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 325.611692][ T9743] netlink: 28 bytes leftover after parsing attributes in process `syz.3.999'. [ 325.624046][ T9743] netlink: 'syz.3.999': attribute type 7 has an invalid length. [ 325.635471][ T9743] netlink: 'syz.3.999': attribute type 8 has an invalid length. [ 325.644169][ T9743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.999'. [ 325.663045][ T9743] gretap0: entered promiscuous mode [ 325.671699][ T9743] batadv_slave_1: entered promiscuous mode [ 325.680031][ T9743] gretap0: left promiscuous mode [ 325.685732][ T9743] batadv_slave_1: left promiscuous mode [ 326.194538][ T9745] netlink: 'syz.3.1000': attribute type 10 has an invalid length. [ 326.277062][ T5915] cdc_ncm 5-1:1.0: bind() failure [ 326.298027][ T5915] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 326.331803][ T5915] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 326.368216][ T9748] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.381918][ T5915] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 326.434647][ T5915] usb 5-1: USB disconnect, device number 61 [ 327.130195][ T9766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1005'. [ 327.166394][ T9769] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1009'. [ 327.193922][ T9763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.205914][ T9763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.745675][ T9789] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1014'. [ 328.101524][ T9781] could not allocate digest TFM handle mcryptd(blake2s-224-generic) [ 328.433172][ T9803] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1019'. [ 328.526954][ T5915] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 328.684913][ T5915] usb 5-1: Using ep0 maxpacket: 32 [ 328.737247][ T5915] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 328.805213][ T5915] usb 5-1: config 0 has no interface number 0 [ 328.837270][ T5915] usb 5-1: config 0 interface 184 has no altsetting 0 [ 328.843983][ T9815] loop6: detected capacity change from 0 to 1 [ 328.859783][ T9815] Dev loop6: unable to read RDB block 1 [ 329.064810][ T9815] loop6: unable to read partition table [ 329.075912][ T5915] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 329.111035][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.140657][ T5915] usb 5-1: Product: syz [ 329.140817][ T9815] loop6: partition table beyond EOD, [ 329.144836][ T5915] usb 5-1: Manufacturer: syz [ 329.144855][ T5915] usb 5-1: SerialNumber: syz [ 329.171669][ T5915] usb 5-1: config 0 descriptor?? [ 329.182888][ T5915] smsc75xx v1.0.0 [ 329.214364][ T9816] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 329.227102][ T9815] truncated [ 329.232790][ T9815] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 329.837234][ T5924] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 329.976974][ T5924] usb 4-1: device descriptor read/64, error -71 [ 330.245865][ T9826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.258371][ T5924] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 330.267517][ T9826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.288134][ T5881] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 330.396989][ T5924] usb 4-1: device descriptor read/64, error -71 [ 330.420045][ T7144] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 330.437027][ T43] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 330.447144][ T5881] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 330.507469][ T5924] usb usb4-port1: attempt power cycle [ 330.606971][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 330.614128][ T43] usb 3-1: unable to get BOS descriptor or descriptor too short [ 330.623092][ T43] usb 3-1: config 10 has an invalid interface number: 119 but max is 0 [ 330.631468][ T43] usb 3-1: config 10 has no interface number 0 [ 330.637777][ T43] usb 3-1: config 10 interface 119 has no altsetting 0 [ 330.646739][ T43] usb 3-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=67.73 [ 330.656022][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.664543][ T43] usb 3-1: Product: syz [ 330.669078][ T43] usb 3-1: Manufacturer: syz [ 330.673730][ T43] usb 3-1: SerialNumber: syz [ 330.736964][ T5895] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 330.758960][ T5915] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 330.770124][ T5915] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 330.780077][ T5915] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 330.791464][ T5915] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 330.801788][ T5915] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 330.812645][ T5915] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 330.823286][ T5915] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 330.847465][ T5915] usb 5-1: USB disconnect, device number 62 [ 330.857135][ T5924] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 330.895045][ T43] usb 3-1: USB disconnect, device number 45 [ 330.901075][ T5895] usb 1-1: Using ep0 maxpacket: 32 [ 330.907711][ T5924] usb 4-1: device descriptor read/8, error -71 [ 330.918191][ T5895] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 330.926394][ T5895] usb 1-1: config 0 has no interface number 0 [ 330.938736][ T5895] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 330.953576][ T5895] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 330.964073][ T9836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.973768][ T5895] usb 1-1: config 0 interface 126 has no altsetting 0 [ 330.983254][ T5895] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 330.994393][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.001212][ T9836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.002459][ T5895] usb 1-1: Product: syz [ 331.014348][ T5895] usb 1-1: Manufacturer: syz [ 331.019431][ T5895] usb 1-1: SerialNumber: syz [ 331.031056][ T5895] usb 1-1: config 0 descriptor?? [ 331.036714][ T9834] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 331.046811][ T9834] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 331.156975][ T5924] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 331.177766][ T5924] usb 4-1: device descriptor read/8, error -71 [ 331.287806][ T5924] usb usb4-port1: unable to enumerate USB device [ 331.348724][ T9834] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1030'. [ 331.450047][ T7144] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 331.451088][ T5895] ir_usb 1-1:0.126: IR Dongle converter detected [ 331.471372][ T7144] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 331.479152][ T5895] usb 1-1: IRDA class descriptor not found, device not bound [ 331.495262][ T5895] usb 1-1: USB disconnect, device number 59 [ 331.559628][ T9842] syzkaller0: entered promiscuous mode [ 331.571724][ T9842] syzkaller0: entered allmulticast mode [ 331.773350][ T9849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.817584][ T9849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.167069][ T5881] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 332.737768][ T9864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.796616][ T9864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.977592][ T5915] usb 4-1: new low-speed USB device number 68 using dummy_hcd [ 333.183128][ T5915] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 333.207232][ T5915] usb 4-1: config 0 has no interface number 0 [ 333.247896][ T5915] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 333.277156][ T5915] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 333.288043][ T5915] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 333.306087][ T5915] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 333.317486][ T5915] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 333.335037][ T5915] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 333.358131][ T5915] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 333.373500][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.398799][ T5915] usb 4-1: config 0 descriptor?? [ 333.421801][ T9863] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 333.447867][ T5915] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 333.566940][ T5881] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 333.647435][ T9861] ldusb 4-1:0.55: Couldn't submit interrupt_in_urb -90 [ 333.697527][ T5895] usb 4-1: USB disconnect, device number 68 [ 333.781455][ T5895] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 333.814884][ T5881] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 333.898323][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.926372][ T5881] usb 3-1: Product: syz [ 333.947139][ T5881] usb 3-1: Manufacturer: syz [ 333.951782][ T5881] usb 3-1: SerialNumber: syz [ 333.986475][ T5881] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 334.086010][ T5915] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 334.347911][ T5881] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 334.457692][ T9890] netlink: 'syz.1.1048': attribute type 6 has an invalid length. [ 334.482689][ T9890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.493245][ T9890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.557987][ T5881] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 334.609937][ T5881] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 334.628842][ T5881] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 334.639289][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 334.648085][ T5881] usb 1-1: SerialNumber: syz [ 334.682711][ T5881] usb 1-1: 0:2 : does not exist [ 334.887122][ T9878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.896134][ T9878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.909032][ T9878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.962700][ T9878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.981178][ T9878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.999741][ T9878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.026656][ T9878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.054137][ T9878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.089699][ T9878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.140155][ T5915] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 335.140475][ T9878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.280237][ T5915] ath9k_htc: Failed to initialize the device [ 335.367241][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 335.377948][ T5881] usb 1-1: USB disconnect, device number 60 [ 335.434635][ T5915] usb 3-1: ath9k_htc: USB layer deinitialized [ 335.484844][ T8531] udevd[8531]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 335.967356][ T9898] loop8: detected capacity change from 0 to 7 [ 335.995512][ T8531] Dev loop8: unable to read RDB block 7 [ 336.028187][ T8531] loop8: unable to read partition table [ 336.034281][ T8531] loop8: partition table beyond EOD, truncated [ 336.052680][ T9898] Dev loop8: unable to read RDB block 7 [ 336.082170][ T9898] loop8: unable to read partition table [ 336.099440][ T9898] loop8: partition table beyond EOD, truncated [ 336.105868][ T9898] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 338.071347][ T5952] usb 3-1: USB disconnect, device number 46 [ 338.261779][ T9924] netlink: 'syz.1.1058': attribute type 29 has an invalid length. [ 338.490961][ T9930] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 338.742587][ T31] INFO: task kworker/1:2:1901 blocked for more than 143 seconds. [ 338.788252][ T31] Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 [ 338.818251][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 339.059641][ T31] task:kworker/1:2 state:D stack:19928 pid:1901 tgid:1901 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 339.125130][ T31] Workqueue: usb_hub_wq hub_event [ 339.143879][ T31] Call Trace: [ 339.148855][ T31] [ 339.157888][ T31] __schedule+0x16f5/0x4d00 [ 339.162467][ T31] ? schedule+0x165/0x360 [ 339.191838][ T31] ? __pfx___schedule+0x10/0x10 [ 339.207115][ T31] ? schedule+0x91/0x360 [ 339.229896][ T31] schedule+0x165/0x360 [ 339.252323][ T31] schedule_timeout+0x9a/0x270 [ 339.309973][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 339.324879][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 339.371750][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 339.377282][ T5895] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 339.455424][ T31] ? wait_for_completion+0x267/0x5d0 [ 339.511818][ T31] wait_for_completion+0x2bf/0x5d0 [ 339.583035][ T9944] netlink: 'syz.1.1058': attribute type 29 has an invalid length. [ 339.594701][ T9944] netlink: 'syz.1.1058': attribute type 29 has an invalid length. [ 339.830338][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 339.854888][ T31] i2c_del_adapter+0x581/0x6e0 [ 339.866981][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 339.887961][ T31] ? rcu_is_watching+0x15/0xb0 [ 339.897267][ T5895] usb 4-1: Using ep0 maxpacket: 16 [ 339.912743][ T31] ? dvb_usb_adapter_exit+0xd7/0x240 [ 339.914143][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.962597][ T5895] usb 4-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 339.971781][ T31] dvb_usb_i2c_exit+0x64/0xb0 [ 339.990928][ T31] dvb_usb_device_exit+0x1be/0x350 [ 339.996133][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.020865][ T31] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 340.044470][ T5895] usb 4-1: config 0 descriptor?? [ 340.045859][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 340.114211][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 340.136318][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 340.165724][ T31] cxusb_probe+0x603/0x700 [ 340.191413][ T31] ? __pfx_cxusb_probe+0x10/0x10 [ 340.212442][ T31] ? __pm_runtime_set_status+0x785/0xa50 [ 340.240777][ T31] usb_probe_interface+0x641/0xbc0 [ 340.254020][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 340.265990][ T31] really_probe+0x26a/0x9a0 [ 340.283114][ T31] __driver_probe_device+0x18c/0x2f0 [ 340.283376][ T9940] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1062'. [ 340.306982][ T31] driver_probe_device+0x4f/0x430 [ 340.312135][ T31] __device_attach_driver+0x2ce/0x530 [ 340.317705][ T9940] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1062'. [ 340.329855][ T9940] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1062'. [ 340.355692][ T31] bus_for_each_drv+0x251/0x2e0 [ 340.361841][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 340.372064][ T9940] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1062'. [ 340.386947][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 340.401128][ T31] __device_attach+0x2b8/0x400 [ 340.407219][ T9940] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1062'. [ 340.424276][ T31] ? __pfx___device_attach+0x10/0x10 [ 340.445331][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 340.460679][ T31] bus_probe_device+0x185/0x260 [ 340.471226][ T31] device_add+0x7b6/0xb50 [ 340.476926][ T5952] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 340.492566][ T31] usb_set_configuration+0x1a87/0x20e0 [ 340.510386][ T31] usb_generic_driver_probe+0x8d/0x150 [ 340.518363][ T31] usb_probe_device+0x1c1/0x390 [ 340.523363][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 340.542970][ T31] really_probe+0x26a/0x9a0 [ 340.547988][ T31] __driver_probe_device+0x18c/0x2f0 [ 340.559096][ T31] driver_probe_device+0x4f/0x430 [ 340.564240][ T31] __device_attach_driver+0x2ce/0x530 [ 340.582546][ T31] bus_for_each_drv+0x251/0x2e0 [ 340.591008][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 340.601122][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 340.606615][ T31] __device_attach+0x2b8/0x400 [ 340.611857][ T31] ? __pfx___device_attach+0x10/0x10 [ 340.618068][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 340.623364][ T31] bus_probe_device+0x185/0x260 [ 340.628669][ T31] device_add+0x7b6/0xb50 [ 340.633039][ T31] usb_new_device+0xa39/0x16c0 [ 340.637914][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 340.643299][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 340.648616][ T5952] usb 3-1: Using ep0 maxpacket: 8 [ 340.653819][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 340.660409][ T31] hub_event+0x2941/0x4a00 [ 340.665056][ T31] ? __pfx_hub_event+0x10/0x10 [ 340.672393][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 340.678594][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 340.684376][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 340.690826][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 340.696751][ T31] process_scheduled_works+0xae1/0x17b0 [ 340.702433][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 340.708916][ T31] worker_thread+0x8a0/0xda0 [ 340.713654][ T31] kthread+0x70e/0x8a0 [ 340.717892][ T31] ? __pfx_worker_thread+0x10/0x10 [ 340.723306][ T31] ? __pfx_kthread+0x10/0x10 [ 340.728273][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 340.733536][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 340.738846][ T31] ? __pfx_kthread+0x10/0x10 [ 340.744507][ T31] ret_from_fork+0x3fc/0x770 [ 340.749482][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1057'. [ 340.758999][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 340.764471][ T31] ? __switch_to_asm+0x39/0x70 [ 340.771137][ T31] ? __switch_to_asm+0x33/0x70 [ 340.775992][ T31] ? __pfx_kthread+0x10/0x10 [ 340.780683][ T31] ret_from_fork_asm+0x1a/0x30 [ 340.785879][ T31] [ 340.790539][ T31] [ 340.790539][ T31] Showing all locks held in the system: [ 340.829273][ T31] 1 lock held by khungtaskd/31: [ 340.834299][ T31] #0: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 340.844570][ T31] 5 locks held by kworker/u8:5/799: [ 340.850287][ T31] 5 locks held by kworker/1:2/1901: [ 340.855681][ T31] #0: ffff888144ada548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 340.879031][ T5895] usbhid 4-1:0.0: can't add hid device: -71 [ 340.884179][ T31] #1: [ 340.888802][ T5895] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 340.907505][ T5895] usb 4-1: USB disconnect, device number 69 [ 340.912027][ T31] ffffc900056e7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 340.943059][ T31] #2: ffff88802862d198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 340.952378][ T31] #3: ffff8880798a7198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 340.961715][ T31] #4: ffff88807bb05160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 340.971130][ T31] 2 locks held by getty/5589: [ 340.975842][ T31] #0: ffff88814c2ba0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 340.986002][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 340.996540][ T31] 3 locks held by kworker/1:3/5895: [ 341.001862][ T31] #0: ffff888144ada548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 341.013577][ T31] #1: ffffc900045afbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 341.025765][ T31] #2: ffff888144b45198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 341.034746][ T31] 5 locks held by kworker/0:7/5952: [ 341.040064][ T31] #0: ffff888144ada548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 341.056970][ T31] #1: ffffc900048afbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 341.069214][ T31] #2: ffff8881447b5198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 341.078387][ T31] #3: ffff888144b40510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21a3/0x4a00 [ 341.088645][ T31] #4: ffff888143f81768 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21cb/0x4a00 [ 341.099316][ T31] 1 lock held by syz.2.1057/9919: [ 341.104372][ T31] #0: ffffffff8e144978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 341.115587][ T31] [ 341.118946][ T5952] usb 3-1: unable to get BOS descriptor or descriptor too short [ 341.126406][ T31] ============================================= [ 341.126406][ T31] [ 341.140033][ T5952] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 341.145967][ T31] NMI backtrace for cpu 1 [ 341.145983][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 341.146006][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 341.146017][ T31] Call Trace: [ 341.146025][ T31] [ 341.146033][ T31] dump_stack_lvl+0x189/0x250 [ 341.146067][ T31] ? __wake_up_klogd+0xd9/0x110 [ 341.146093][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 341.146122][ T31] ? __pfx__printk+0x10/0x10 [ 341.146155][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 341.146184][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 341.146203][ T31] ? _printk+0xcf/0x120 [ 341.146229][ T31] ? __pfx__printk+0x10/0x10 [ 341.146250][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 341.146279][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 341.146303][ T31] watchdog+0xfee/0x1030 [ 341.146329][ T31] ? watchdog+0x1de/0x1030 [ 341.146363][ T31] kthread+0x70e/0x8a0 [ 341.146387][ T31] ? __pfx_watchdog+0x10/0x10 [ 341.146411][ T31] ? __pfx_kthread+0x10/0x10 [ 341.146442][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 341.146468][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 341.146493][ T31] ? __pfx_kthread+0x10/0x10 [ 341.146515][ T31] ret_from_fork+0x3fc/0x770 [ 341.146546][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 341.146578][ T31] ? __switch_to_asm+0x39/0x70 [ 341.146597][ T31] ? __switch_to_asm+0x33/0x70 [ 341.146615][ T31] ? __pfx_kthread+0x10/0x10 [ 341.146637][ T31] ret_from_fork_asm+0x1a/0x30 [ 341.146671][ T31] [ 341.146678][ T31] Sending NMI from CPU 1 to CPUs 0: [ 341.155799][ T5952] usb 3-1: can't read configurations, error -71 [ 341.163955][ C0] NMI backtrace for cpu 0 [ 341.163968][ C0] CPU: 0 UID: 0 PID: 5952 Comm: kworker/0:7 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 341.163986][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 341.163995][ C0] Workqueue: usb_hub_wq hub_event [ 341.164019][ C0] RIP: 0010:check_preemption_disabled+0x40/0x120 [ 341.164036][ C0] Code: 08 65 8b 05 46 2e 36 07 65 8b 0d 3b 2e 36 07 f7 c1 ff ff ff 7f 74 23 65 48 8b 0d 1b 2e 36 07 48 3b 4c 24 08 0f 85 cc 00 00 00 <48> 83 c4 10 5b 41 5e 41 5f 5d e9 81 c0 02 00 cc 48 c7 04 24 00 00 [ 341.164048][ C0] RSP: 0018:ffffc90000007b48 EFLAGS: 00000046 [ 341.164060][ C0] RAX: 0000000000000000 RBX: 0000000000000101 RCX: 7e888a1206643a00 [ 341.164070][ C0] RDX: ffff8880259fbc00 RSI: ffffffff8be28d20 RDI: ffffffff8be28ce0 [ 341.164081][ C0] RBP: ffffc90000007c90 R08: ffffffff8fa10bf7 R09: 1ffffffff1f4217e [ 341.164092][ C0] R10: dffffc0000000000 R11: fffffbfff1f4217f R12: 1ffff92000000f78 [ 341.164102][ C0] R13: ffffffff8e8cdaa8 R14: 0000000000000001 R15: 0000000000000000 [ 341.164112][ C0] FS: 0000000000000000(0000) GS:ffff888125c51000(0000) knlGS:0000000000000000 [ 341.164124][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 341.164133][ C0] CR2: 0000001b33d01ff8 CR3: 0000000033696000 CR4: 00000000003526f0 [ 341.164146][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 341.164155][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 341.164164][ C0] Call Trace: [ 341.164170][ C0] [ 341.164177][ C0] rcu_is_watching+0x15/0xb0 [ 341.164200][ C0] call_timer_fn+0x14c/0x5f0 [ 341.164219][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 341.164233][ C0] ? call_timer_fn+0xbe/0x5f0 [ 341.164251][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 341.164274][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 341.164290][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 341.164305][ C0] __run_timer_base+0x646/0x860 [ 341.164322][ C0] ? ktime_get+0x3e/0x1f0 [ 341.164341][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 341.164357][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 341.164380][ C0] run_timer_softirq+0xb7/0x180 [ 341.164398][ C0] handle_softirqs+0x286/0x870 [ 341.164421][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 341.164444][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 341.164467][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 341.164485][ C0] __irq_exit_rcu+0xca/0x1f0 [ 341.164506][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 341.164530][ C0] irq_exit_rcu+0x9/0x30 [ 341.164550][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 341.164570][ C0] [ 341.164575][ C0] [ 341.164581][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 341.164596][ C0] RIP: 0010:vprintk_emit+0x58f/0x7a0 [ 341.164610][ C0] Code: 85 32 01 00 00 e8 a1 62 1f 00 41 89 df 4d 85 f6 48 8b 1c 24 75 07 e8 90 62 1f 00 eb 06 e8 89 62 1f 00 fb 48 c7 c7 e0 30 13 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 b9 36 [ 341.164622][ C0] RSP: 0018:ffffc900048af220 EFLAGS: 00000287 [ 341.164634][ C0] RAX: ffffffff81a0ea97 RBX: ffffffff81a0e954 RCX: 0000000000100000 [ 341.164644][ C0] RDX: ffffc90017e1d000 RSI: 0000000000024146 RDI: ffffffff8e1330e0 [ 341.164655][ C0] RBP: ffffc900048af330 R08: ffffffff8fa10bf7 R09: 1ffffffff1f4217e [ 341.164678][ C0] R10: dffffc0000000000 R11: fffffbfff1f4217f R12: dffffc0000000000 [ 341.164689][ C0] R13: 1ffff92000915e48 R14: 0000000000000200 R15: 000000000000002d [ 341.164701][ C0] ? vprintk_emit+0x444/0x7a0 [ 341.164714][ C0] ? vprintk_emit+0x587/0x7a0 [ 341.164729][ C0] ? vprintk_emit+0x444/0x7a0 [ 341.164743][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 341.164758][ C0] ? __pfx_snprintf+0x10/0x10 [ 341.164775][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 341.164799][ C0] dev_vprintk_emit+0x337/0x3f0 [ 341.164814][ C0] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 341.164827][ C0] ? usb_get_configuration+0x4fa5/0x52c0 [ 341.164852][ C0] dev_printk_emit+0xe0/0x130 [ 341.164868][ C0] ? trace_rpm_return_int+0x83/0x200 [ 341.164886][ C0] ? __pfx_dev_printk_emit+0x10/0x10 [ 341.164899][ C0] ? rpm_resume+0xbde/0x15f0 [ 341.164916][ C0] ? __dev_printk+0x131/0x190 [ 341.164933][ C0] _dev_err+0x10a/0x160 [ 341.164949][ C0] ? __pfx__dev_err+0x10/0x10 [ 341.164967][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 341.164985][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 341.165006][ C0] usb_new_device+0x546/0x16c0 [ 341.165027][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 341.165051][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 341.165070][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 341.165088][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 341.165109][ C0] hub_event+0x2941/0x4a00 [ 341.165152][ C0] ? __pfx_hub_event+0x10/0x10 [ 341.165172][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 341.165197][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 341.165215][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 341.165235][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 341.165256][ C0] process_scheduled_works+0xae1/0x17b0 [ 341.165290][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 341.165318][ C0] worker_thread+0x8a0/0xda0 [ 341.165340][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 341.165363][ C0] ? __kthread_parkme+0x7b/0x200 [ 341.165381][ C0] kthread+0x70e/0x8a0 [ 341.165397][ C0] ? __pfx_worker_thread+0x10/0x10 [ 341.165419][ C0] ? __pfx_kthread+0x10/0x10 [ 341.165435][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 341.165453][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 341.165472][ C0] ? __pfx_kthread+0x10/0x10 [ 341.165487][ C0] ret_from_fork+0x3fc/0x770 [ 341.165507][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 341.165529][ C0] ? __switch_to_asm+0x39/0x70 [ 341.165543][ C0] ? __switch_to_asm+0x33/0x70 [ 341.165556][ C0] ? __pfx_kthread+0x10/0x10 [ 341.165572][ C0] ret_from_fork_asm+0x1a/0x30 [ 341.165593][ C0] [ 341.166077][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 341.166093][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 341.166117][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 341.166130][ T31] Call Trace: [ 341.166138][ T31] [ 341.166147][ T31] dump_stack_lvl+0x99/0x250 [ 341.166179][ T31] ? __asan_memcpy+0x40/0x70 [ 341.166207][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 341.166238][ T31] ? __pfx__printk+0x10/0x10 [ 341.166272][ T31] panic+0x2db/0x790 [ 341.166307][ T31] ? __pfx_panic+0x10/0x10 [ 341.166334][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 341.166369][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 341.166395][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 341.166434][ T31] watchdog+0x102d/0x1030 [ 341.166463][ T31] ? watchdog+0x1de/0x1030 [ 341.166497][ T31] kthread+0x70e/0x8a0 [ 341.166522][ T31] ? __pfx_watchdog+0x10/0x10 [ 341.166546][ T31] ? __pfx_kthread+0x10/0x10 [ 341.166571][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 341.166596][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 341.166622][ T31] ? __pfx_kthread+0x10/0x10 [ 341.166645][ T31] ret_from_fork+0x3fc/0x770 [ 341.166674][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 341.166707][ T31] ? __switch_to_asm+0x39/0x70 [ 341.166726][ T31] ? __switch_to_asm+0x33/0x70 [ 341.166745][ T31] ? __pfx_kthread+0x10/0x10 [ 341.166768][ T31] ret_from_fork_asm+0x1a/0x30 [ 341.166804][ T31] [ 341.176062][ T31] Kernel Offset: disabled