last executing test programs: 31.717943597s ago: executing program 1 (id=439): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000001000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000006340000001e0a05010000000000000000070000000900020073797a31000000000900010073797a30000000000800038004000080140000001000010000000000000000000084000a"], 0xb8}}, 0x0) r1 = syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000010651fbe347b322b00000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000010651fbe347b322b00000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073"], 0xec}, 0x1, 0x0, 0x0, 0x44080}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073"], 0xec}, 0x1, 0x0, 0x0, 0x44080}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x2b8, &(0x7f00000004c0)={[{0xbc, 0x4e00, "94e75a98ac9b3b396ccd6da1b3a857203268cd876ef95f0ac58899820b84e432dbe01034d5a62106c5329861d6a7147591a27a0d6b43b5afa69aa653a4107dd36f7f20459ac8b54954f1c0edcef519f8ab954dad64a5ee2aa5fa6a9a113011a50523abf2fef0134630034a20d246913d3a1e70737de63a888a02c69da7d9817446962b92cac22fd0dcc1a0dba83a1433e999a2bd45f6564a2b97be838fc25df2a64f37af330e07a4be56c41c8a5604a269210f1b7a53899580b8d604"}, {0xc4, 0x4e00, "b771b036735115aa7431794f151cfed22aa6b129d94f6fe93f834614e8735c54692036b2e2c883cef90668a45b013be09841f05488ae5beee81eab0f6247104f19222af58314e0f3b5c7dc5cad5b38e18aa754a96477a43075c662a4f4f74ec8c83e41a9c1399e6bdd049b8d26e0940ec55a8bf7385058027037b557f99180bfe7572526d8ffda1d22668fec35b04c15b5b7f2cab63cdfd23338c2cfae78ddfa75c874c9c65d0d75da59d0fed149b390cee91ebe7ed42811329cbc6ca0b5d7b942f82d9e"}, {0x43, 0x4e00, "a38a0f331d91db83c7ca18c88fdd8a49d8191900563de6f38587684c5c58934f9dec4a8454c6f4981f122c7ee9c3aa2d618bf960f413352c9e0732d6b2593df58ee2b4"}, {0xe2, 0x4e00, "ca4d50a2f08bc245f46ca400b17746d987a373b8d3601b520e6063bebef4982a0ae8acc69f5b09fac7c1a6b0cb0e4b9f7dd40c5ebee1718671129d8c932f2feb46daa1429af8fa5542975deef346b229187f257db590021615ba5a4415fd9afe845dd0631262c3be6a4ac288037bc4bbe6d83e10283427be1c73ed64713d0bc6952fc30b81def56780eb424ddd03342c1177cb58cbd2499e4c6262d71b0ba00530716220341ba731415034566d809fe26a80ddce98c3a9c92ff2537b4917f7cf55cd765ceb2ed49ba7ac2086583ab6cec4e48094459d8747af2225128e636ef2172b"}]}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000280)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0xa, 0x0, 0x408d}, @mpls={[], @ipv6=@udp={0x4, 0x6, "c80f59", 0x64, 0x11, 0x0, @local, @mcast2, {[], {0x4e24, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x1, "2737f19c7d3c3653289a9104c02dbfdc70bea0431a23b0f8063fce146e39b05c", "869bbd9cf785d23a9cebb43d614789da", {"f3f0cb8057706a65a051f8b0ad365751", "eea00bcb0bfb26a397f5a312ea0bb6b1"}}}}}}}, 0x9a) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) 31.649364656s ago: executing program 2 (id=440): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x5, 0x800007, 0x2, 0x6, 0x8, 0x8, 0x7, 0x4}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000005000000000001"], 0xfdef) 30.375591095s ago: executing program 2 (id=445): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) unshare(0x20000400) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000003c0)={'aio_iiro_16\x00', [0x4f27, 0xb, 0x0, 0xa, 0x5, 0x6, 0x8, 0x7, 0x7fff4f2e, 0x104, 0x7, 0x3ff, 0x5, 0x20001, 0x6, 0x101, 0x3, 0x80000000, 0x5, 0x40000003, 0x89, 0xcaab, 0x0, 0xffffffff, 0xb, 0xe69, 0x3c, 0xc, 0x10000006, 0x40000, 0x3]}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r4, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000000), 0x4) 28.114429741s ago: executing program 1 (id=449): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x7fff]}) socket$netlink(0x10, 0x3, 0x8000000004) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={r4}) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="40012e0000006651"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 26.547200468s ago: executing program 0 (id=454): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=ANY=[@ANYBLOB="44010000100001000000000800000000fc0100000000000000000000000000000a01010000000000000000000000000000000000200000000000202032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000100000000000000000000000000000000004000000000000000d000000000000000a0000000000000000000000000000000000000000000000000000000a000107"], 0x144}}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850", 0x4, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) dup(r3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000314230c2abd7000ffdbdf250900020073797a3100000700080041007369770014003300766972745f77696669300000000000000900020073797a31000000000800410073697700140002"], 0x60}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) 25.84416873s ago: executing program 3 (id=457): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x690, 0x1000, 0xbbba, 0x2, 0x0, 0x100, {0x0, 0x2000}, {0x5, 0x2, 0x1}, {0x7}, {0x0, 0x8}, 0x2, 0x3f0, 0x0, 0x101, 0x0, 0x2000, 0x0, 0x0, 0xff, 0x20, 0x0, 0xa, 0x0, 0x0, 0x2, 0x3}) 25.67412389s ago: executing program 3 (id=458): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x900, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x80ffffff}, {0x0, 0x8}}}, 0xb8}}, 0x0) 25.528648693s ago: executing program 0 (id=459): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000007000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b) 25.320421541s ago: executing program 3 (id=460): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x30, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x4000000, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xf8}}, 0x0) 25.052248031s ago: executing program 3 (id=461): keyctl$restrict_keyring(0xa, 0x0, 0x0, &(0x7f0000000000)='i\xacl*c\x822') r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000001000)={{0x12, 0x1, 0x0, 0x6f, 0xfd, 0x90, 0x10, 0x525, 0x2888, 0x5369, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x3, 0x3d, 0x0, 0x1a, 0x22, 0xf5}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = add_key$user(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="33be52168a7a187babae9d4ad90c11a332d8651582dbcd8003a6189926cdb83502fb28d10e5f0423caa2c22c315a39b1ddeec9c325e651e16ffa96b02a4e0b6394ec9c28d3805bc89153f5337633acbec5d5e3d13680795a1c05484fe93a84ff7da791ed34a2003d7d95e5cf5762d1081756b89bcde8a79e50859ddb2187704ebf8896bef0f1493d0aa41b82dbdfb1332930227626ecc982aa101d19bfe42b0b5903d9ab9904e7af3fc230e8c1deb5e316b028de6b4f6ce8d5bd1efa06f9391fa4984d605c683403b93257d39a22db286f", 0xd1, 0xfffffffffffffffe) keyctl$reject(0x13, r1, 0x0, 0x0, 0xfffffffffffffffa) syz_usb_connect(0x4, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x22, 0xb5, 0x2b, 0x18, 0x14b2, 0x3c2c, 0xf7b8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x0, 0xd8, [{{0x9, 0x4, 0xda, 0xc, 0x0, 0x1e, 0x9c, 0x60, 0x4}}]}}]}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) 24.865053812s ago: executing program 2 (id=462): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600, 0xffffff95]}}], 0xffc8) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r2, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffe, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) 24.73341205s ago: executing program 1 (id=463): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000380)=0x200000000) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = dup2(r0, r1) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r2, &(0x7f0000002540)={0x2020}, 0x2020) write$vhost_msg_v2(r2, &(0x7f0000000440)={0x2, 0x0, {&(0x7f00000001c0)=""/143, 0x8f, 0x0, 0x2, 0x2}}, 0x48) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000180)={0x0}) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_pidfd_open(r8, 0x0) pidfd_send_signal(r9, 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000002c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000300)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r2, 0xc02864c3, &(0x7f0000000380)={&(0x7f0000000340)=[r3, r4, r5, r6, r7, r10, r11, r12], 0x7, 0x8, 0x5}) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r13, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r13, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r13, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r13, 0x84, 0x76, &(0x7f0000000040)={r14, 0x9}, &(0x7f0000000080)=0x8) r15 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom(r15, 0x0, 0xfffffffffffffee7, 0x20, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 24.103741943s ago: executing program 0 (id=464): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000100)={0x0, 0x1, 0x60d0, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = openat$vim2m(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000005440)={0x3, 0x2, 0x0, "c165800400a27d4c2328a656f51640957f84b6a11d204715fac6704bbdc92e00"}) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRESHEX], 0x88}, 0x1, 0x0, 0x0, 0x20044800}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0xfffffffffffffda1, &(0x7f0000000000)=ANY=[]) syz_usb_control_io(r6, 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r5, 0x1, 0x70bd2b, 0x8, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x20000004) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r7 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000100000020ba124b070000000000010902240001000090a719f1329e0400020203000000092101010601220500090581030002"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000140)={0x200, r8, 'id0\x00'}) ioctl$CEC_ADAP_S_LOG_ADDRS(r9, 0xc05c6104, &(0x7f0000000240)={"4eda1c2b", 0x8, 0x2, 0x9, 0x9, 0x2, "6843fbe0ad92337bfe87a35d297573", "e25d4bba", "4a7d44ec", "3c3aa870", ["db1709ea2e82a2a4f7d23ef4", "5f91a87bbccdfd5df2cc9a2b", "9ceeaa5718a091522414cbed", "86c4ff4723b3cfc287d01324"]}) madvise(&(0x7f0000b3c000/0x3000)=nil, 0x3000, 0x2) ioctl$KDGETMODE(r8, 0x4bfb, 0x0) 24.084167865s ago: executing program 2 (id=465): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = fanotify_init(0x18, 0x1000) r2 = memfd_create(&(0x7f0000000080)='-B\xd5\x9appp\xf0\x00\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}\x00\x10\x00\x00\x00\x00\x00\x00\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x11\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x1) r3 = dup(r2) fanotify_mark(r1, 0x1, 0x8000000, r3, 0x0) ftruncate(r3, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x4000084) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, 0x0, &(0x7f0000001480)) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c000480280001800e000100627974656fa2c86bd6e9e49e110002800800024000000000080001400000000a0900010073797a30000000000900020073797a32000000001400000011000100000000000000000a00000000eec11587a7ac724879ae15cfeb10056dbd37ffaa8a1a5c7d975235490d244336266eda159c5f41ea7660d84ad6647bce43a4af8df4c36941ab6c55f034d8f8cb805b5f5d062e9161de38c9da53a3c6c2eea723985694606e9b568211a432f62371ad294288dd27afb6f94594"], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r3, 0xaec7) r6 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_open_dev$sndctrl(&(0x7f0000000040), 0x84, 0x0) write$binfmt_aout(r6, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x16f0c0, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r9, 0x3b82, &(0x7f00000001c0)={0x18, 0x0, 0x4, 0x0, &(0x7f0000000180)=[{0x6, 0x9}, {0xfffffffffffffffd, 0x81}, {0x400, 0x8}, {0x1, 0x6e5}]}) kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x2, &(0x7f00000000c0)={0x0, 0x40, 0x0, @tid=r7}, &(0x7f0000000100)) 23.561351014s ago: executing program 1 (id=466): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$SIOCSIFMTU(r2, 0x8923, &(0x7f0000000140)={'vcan0\x00', 0x4e171e32}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_CONTROLLER=0xfe}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000000)={'macvlan0\x00', 0x400}) close_range(r1, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000040)="07000000010001", 0x7) 23.017713719s ago: executing program 2 (id=467): ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x1, 0x4) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, &(0x7f00000000c0)={0x18, r2, 0x2, 0x0, &(0x7f0000000180)=[{0x5, 0x8}, {0x6, 0x81}]}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) (async) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x1, 0x4) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, &(0x7f00000000c0)={0x18, r2, 0x2, 0x0, &(0x7f0000000180)=[{0x5, 0x8}, {0x6, 0x81}]}) (async) 22.811134111s ago: executing program 0 (id=468): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) (fail_nth: 11) 22.680501576s ago: executing program 2 (id=469): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') exit(0x3) read$FUSE(r0, &(0x7f0000002e40)={0x2020}, 0x2020) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003f000701feffffff9d3b8500008100017c000004004280f4ff01800c002a0009000000000000000400028004"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0xe4ce, 0x1, 0x1, 0x0, 0x99}) getpeername(r1, 0x0, &(0x7f0000000140)) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a00)={'syz0\x00', {0x6ec9, 0x7, 0x5, 0x7f}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0xa, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xffffffff, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8020, 0x3ff, 0x3, 0xd, 0x3, 0xba52, 0x4000800, 0x2, 0x200, 0xffffffff, 0x400008, 0xe, 0x4, 0x1, 0xde, 0x8, 0x4, 0x1, 0x199f, 0x8, 0x8000002, 0x9, 0xe, 0x4, 0x6, 0x4001000, 0x7, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x8001, 0x72c, 0x1c32, 0x1, 0x8, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x7ff, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0xc, 0x0, 0x2, 0x401, 0xd, 0x3, 0x379, 0x8, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x2c2, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x6, 0x4, 0xb, 0x10, 0x5, 0xd, 0xe88, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x11, 0x1000, 0x4, 0x4, 0xf, 0x9, 0xfffffffe, 0x5, 0x80, 0x3, 0x9, 0x47, 0x2, 0x80000003, 0x4, 0x7, 0x0, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x3, 0x2, 0x1010001, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x4, 0x3, 0x88, 0x2, 0x6, 0x0, 0x50, 0x2, 0x75f, 0xb, 0x402, 0x800, 0x4, 0x5, 0x80, 0x7, 0x3fa6, 0x4, 0xffffffff, 0x7, 0x1e0, 0x4, 0x5, 0x4, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0xb, 0x1, 0x800, 0xa80a, 0x65f413f9, 0x104, 0x8, 0x8a8, 0x1000, 0x40, 0x7, 0x0, 0x4, 0x4, 0x18, 0x0, 0x6, 0x7fff, 0x2, 0xffffffff, 0x401, 0x1, 0x200, 0x7, 0x6, 0x0, 0x7, 0xe, 0x2, 0xe, 0xf, 0xfffffff9, 0x6]}, 0x45c) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000100)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000380)={0x200, 0x1, &(0x7f0000000440)=[r7], 0x0, 0x0, 0x0}) ioctl$UI_DEV_CREATE(r4, 0x5501) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x40080) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f0000000040)=0xfffffffffffffeb6) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f0000000040)={r9, 0x1}, 0x8) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2adc0}, 0x18) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP6T_SO_GET_REVISION_TARGET(r8, 0x29, 0x45, &(0x7f0000000100)={'icmp6\x00'}, &(0x7f0000000200)=0x1e) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 22.680280425s ago: executing program 1 (id=470): ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)={0x81, 0x0, 0x2}) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000044400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 22.625621416s ago: executing program 3 (id=471): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="03962bbd7000fddbdf250200000008000c00010000001400060000000000000000000000000000000a0108000200030000000800040000000000050001"], 0x64}, 0x1, 0x0, 0x0, 0x8000100}, 0x24000000) 22.401347617s ago: executing program 0 (id=472): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x300, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600010000000800090001000000050002"], 0x44}, 0x1, 0x0, 0x2f}, 0x0) 22.376675556s ago: executing program 1 (id=473): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000140)={@val={0x800e, 0x2}, @void, @eth={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}, {0x0, 0x0, 0x14, 0x0, @opaque="0000001000003852d60d0000"}}}}}}, 0x3a) 22.127903104s ago: executing program 0 (id=474): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000001000000000000000f0ffffffffffffff10"]) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='veth1\x00', 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r5 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r6, 0x2000009) sendfile(r5, r6, 0x0, 0x6) ioctl$SNDRV_TIMER_IOCTL_CREATE(r6, 0xc02054a5, &(0x7f00000000c0)={0x8000, r1, 'id1\x00'}) ftruncate(r4, 0x2000009) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_open_dev$sndctrl(&(0x7f0000000040), 0x84, 0x0) write$binfmt_aout(r1, 0x0, 0xffffffdb) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005ec95e20ca0700b86b0701020301090012000102000000090401020003000000"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 22.053011171s ago: executing program 3 (id=475): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000006540)=[{{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000180)="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", 0x1b8}], 0x1}}], 0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000120000000000000000000010ff02000000000000000000000000000189"], 0x340a) 0s ago: executing program 32 (id=474): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000001000000000000000f0ffffffffffffff10"]) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='veth1\x00', 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r5 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r6, 0x2000009) sendfile(r5, r6, 0x0, 0x6) ioctl$SNDRV_TIMER_IOCTL_CREATE(r6, 0xc02054a5, &(0x7f00000000c0)={0x8000, r1, 'id1\x00'}) ftruncate(r4, 0x2000009) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_open_dev$sndctrl(&(0x7f0000000040), 0x84, 0x0) write$binfmt_aout(r1, 0x0, 0xffffffdb) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005ec95e20ca0700b86b0701020301090012000102000000090401020003000000"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) kernel console output (not intermixed with test programs): 4][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 98.384278][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 98.396536][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.406090][ T9] usb 3-1: Product: syz [ 98.416891][ T9] usb 3-1: Manufacturer: syz [ 98.426611][ T9] usb 3-1: SerialNumber: syz [ 98.465397][ T5968] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 98.488173][ T5968] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.517632][ T5968] usb 2-1: Product: syz [ 98.527764][ T5968] usb 2-1: Manufacturer: syz [ 98.545978][ T5968] usb 2-1: SerialNumber: syz [ 98.569338][ T5968] usb 2-1: config 0 descriptor?? [ 98.582651][ T3212] rc_core: IR keymap rc-hauppauge not found [ 98.609000][ T3212] Registered IR keymap rc-empty [ 98.614750][ T3212] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 98.687962][ T3212] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 98.735532][ T3212] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 98.781688][ T3212] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 98.823593][ T3212] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 98.868459][ T3212] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 98.888349][ T3212] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 98.918646][ T3212] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 98.957965][ T3212] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 98.987907][ T3212] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 98.996928][ T9] usb 3-1: 0:2 : does not exist [ 99.027929][ T3212] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 99.047672][ T3212] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 99.079378][ T3212] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 99.090231][ T6085] sctp: [Deprecated]: syz.3.36 (pid 6085) Use of int in max_burst socket option. [ 99.090231][ T6085] Use struct sctp_assoc_value instead [ 99.127523][ T3212] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 99.152029][ T3212] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 99.177158][ T3212] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 99.224539][ T3212] usb 1-1: USB disconnect, device number 4 [ 99.400281][ T6057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.410687][ T6057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.420993][ T6057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.429821][ T6057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.507054][ T5968] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 99.511314][ T9] usb 3-1: USB disconnect, device number 3 [ 99.548051][ T5864] udevd[5864]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 99.650182][ T5968] usb 4-1: device descriptor read/64, error -71 [ 99.916701][ T5968] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 99.977848][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 100.056765][ T5968] usb 4-1: device descriptor read/64, error -71 [ 100.136787][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 100.155377][ T9] usb 1-1: config 2 has an invalid interface number: 65 but max is 0 [ 100.164611][ T9] usb 1-1: config 2 has no interface number 0 [ 100.172046][ T9] usb 1-1: config 2 interface 65 has no altsetting 0 [ 100.177411][ T5968] usb usb4-port1: attempt power cycle [ 100.182645][ T9] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice= 7.6b [ 100.194870][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.208918][ T9] usb 1-1: Product: syz [ 100.213117][ T9] usb 1-1: Manufacturer: syz [ 100.219767][ T9] usb 1-1: SerialNumber: syz [ 100.244572][ T9] (null): radio-mr800 - initialization failed [ 100.273296][ T9] radio-mr800 1-1:2.65: probe with driver radio-mr800 failed with error -22 [ 100.288592][ T9] usbhid 1-1:2.65: couldn't find an input interrupt endpoint [ 100.290986][ T6101] capability: warning: `syz.2.41' uses 32-bit capabilities (legacy support in use) [ 100.446002][ T1209] usb 1-1: USB disconnect, device number 5 [ 100.526167][ T5968] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 100.558159][ T5968] usb 4-1: device descriptor read/8, error -71 [ 100.795891][ T5968] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 100.818334][ T5968] usb 4-1: device descriptor read/8, error -71 [ 100.937215][ T5968] usb usb4-port1: unable to enumerate USB device [ 101.012376][ T5968] usb 2-1: USB disconnect, device number 3 [ 101.199967][ T6115] netlink: 40 bytes leftover after parsing attributes in process `syz.0.47'. [ 101.470995][ T6122] virt_wifi0 speed is unknown, defaulting to 1000 [ 101.478025][ T6122] virt_wifi0 speed is unknown, defaulting to 1000 [ 101.489852][ T6122] virt_wifi0 speed is unknown, defaulting to 1000 [ 101.503839][ T6122] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 101.538161][ T6122] infiniband ü: RDMA CMA: cma_listen_on_dev, error -98 [ 101.631110][ T6122] virt_wifi0 speed is unknown, defaulting to 1000 [ 101.663038][ T6122] virt_wifi0 speed is unknown, defaulting to 1000 [ 101.672654][ T6122] virt_wifi0 speed is unknown, defaulting to 1000 [ 101.682339][ T6122] virt_wifi0 speed is unknown, defaulting to 1000 [ 101.974812][ T1209] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 102.124525][ T1209] usb 3-1: Using ep0 maxpacket: 32 [ 102.132004][ T1209] usb 3-1: config 2 has an invalid interface number: 65 but max is 0 [ 102.153172][ T1209] usb 3-1: config 2 has no interface number 0 [ 102.161103][ T1209] usb 3-1: config 2 interface 65 has no altsetting 0 [ 102.195510][ T1209] usb 3-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice= 7.6b [ 102.219370][ T1209] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.245256][ T1209] usb 3-1: Product: syz [ 102.249480][ T1209] usb 3-1: Manufacturer: syz [ 102.275095][ T1209] usb 3-1: SerialNumber: syz [ 102.296906][ T1209] (null): radio-mr800 - initialization failed [ 102.303353][ T1209] radio-mr800 3-1:2.65: probe with driver radio-mr800 failed with error -22 [ 102.343619][ T1209] usbhid 3-1:2.65: couldn't find an input interrupt endpoint [ 102.434352][ T5878] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 102.500727][ T9] usb 3-1: USB disconnect, device number 4 [ 102.514387][ T3212] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 102.522527][ T6154] warning: `syz.3.62' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 102.594158][ T5878] usb 1-1: Using ep0 maxpacket: 8 [ 102.603798][ T5878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.614718][ T5878] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b25, bcdDevice= 0.00 [ 102.623790][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.648048][ T5878] usb 1-1: config 0 descriptor?? [ 102.697363][ T3212] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 102.710682][ T3212] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 102.719853][ T3212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.728146][ T3212] usb 2-1: Product: syz [ 102.732352][ T3212] usb 2-1: Manufacturer: syz [ 102.738636][ T3212] usb 2-1: SerialNumber: syz [ 102.754941][ T3212] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 102.814738][ T10] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 102.943780][ T10] usb 4-1: device descriptor read/64, error -71 [ 103.090297][ T5878] hid-corsair-void 0003:1B1C:1B25.0001: item fetching failed at offset 0/1 [ 103.096616][ T6157] loop2: detected capacity change from 0 to 7 [ 103.101266][ T5878] hid-corsair-void 0003:1B1C:1B25.0001: parse failed (reason: -22) [ 103.110479][ T6157] Dev loop2: unable to read RDB block 7 [ 103.113833][ T5878] hid-corsair-void 0003:1B1C:1B25.0001: probe with driver hid-corsair-void failed with error -22 [ 103.135506][ T6157] loop2: unable to read partition table [ 103.142693][ T6157] loop2: partition table beyond EOD, truncated [ 103.150862][ T6157] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 103.193548][ T10] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 103.271795][ T5878] usb 1-1: USB disconnect, device number 6 [ 103.353336][ T10] usb 4-1: device descriptor read/64, error -71 [ 103.363465][ T6149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.372384][ T6149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.390944][ T3212] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 103.423905][ T3212] usb 2-1: USB disconnect, device number 4 [ 103.483550][ T10] usb usb4-port1: attempt power cycle [ 103.834068][ T10] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 103.875566][ T10] usb 4-1: device descriptor read/8, error -71 [ 103.920654][ T6171] netlink: 'syz.0.69': attribute type 4 has an invalid length. [ 104.139494][ T10] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 104.185105][ T6178] ubi0: attaching mtd0 [ 104.195225][ T10] usb 4-1: device descriptor read/8, error -71 [ 104.195805][ T6178] ubi0: scanning is finished [ 104.219719][ T6178] ubi0: empty MTD device detected [ 104.312818][ T10] usb usb4-port1: unable to enumerate USB device [ 104.345702][ T6178] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 104.357597][ T6178] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 104.368544][ T6178] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 104.372362][ T5968] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 104.388633][ T6178] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 104.398189][ T6178] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 104.409777][ T6178] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 104.418689][ T6178] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1937005446 [ 104.432365][ T6178] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 104.449830][ T6185] ubi0: background thread "ubi_bgt0d" started, PID 6185 [ 104.457493][ T6181] ubi0: detaching mtd0 [ 104.469888][ T6181] ubi0: mtd0 is detached [ 104.564857][ T5968] usb 1-1: Using ep0 maxpacket: 32 [ 104.575719][ T5968] usb 1-1: config 2 has an invalid interface number: 65 but max is 0 [ 104.590515][ T5968] usb 1-1: config 2 has no interface number 0 [ 104.599291][ T5968] usb 1-1: config 2 interface 65 has no altsetting 0 [ 104.640690][ T5968] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice= 7.6b [ 104.666863][ T5968] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.826306][ T5968] usb 1-1: Product: syz [ 104.830654][ T5968] usb 1-1: Manufacturer: syz [ 104.835750][ T5968] usb 1-1: SerialNumber: syz [ 104.855836][ T5968] (null): radio-mr800 - initialization failed [ 104.862560][ T5968] radio-mr800 1-1:2.65: probe with driver radio-mr800 failed with error -22 [ 104.872322][ T5968] usbhid 1-1:2.65: couldn't find an input interrupt endpoint [ 105.073820][ T5968] usb 1-1: USB disconnect, device number 7 [ 105.307355][ T6183] kexec: Could not allocate control_code_buffer [ 105.789321][ T6212] netlink: 'syz.3.82': attribute type 10 has an invalid length. [ 105.807445][ T6212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.82'. [ 105.816502][ T6212] bridge_slave_1: left allmulticast mode [ 105.830921][ T6212] bridge_slave_1: left promiscuous mode [ 105.836774][ T6212] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.847912][ T6212] bridge_slave_0: left allmulticast mode [ 105.854518][ T6212] bridge_slave_0: left promiscuous mode [ 105.860479][ T6212] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.031183][ T3212] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 106.190588][ T3212] usb 2-1: Using ep0 maxpacket: 32 [ 106.197069][ T3212] usb 2-1: config 0 has an invalid interface number: 148 but max is 0 [ 106.205373][ T3212] usb 2-1: config 0 has no interface number 0 [ 106.216397][ T3212] usb 2-1: config 0 interface 148 has no altsetting 0 [ 106.228665][ T3212] usb 2-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=c5.61 [ 106.237812][ T3212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.248096][ T3212] usb 2-1: Product: syz [ 106.252335][ T3212] usb 2-1: Manufacturer: syz [ 106.256937][ T3212] usb 2-1: SerialNumber: syz [ 106.264943][ T3212] usb 2-1: config 0 descriptor?? [ 106.340619][ T5968] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 106.388783][ T6222] FAULT_INJECTION: forcing a failure. [ 106.388783][ T6222] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 106.403190][ T6222] CPU: 1 UID: 0 PID: 6222 Comm: syz.0.87 Not tainted syzkaller #0 PREEMPT(full) [ 106.403215][ T6222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 106.403225][ T6222] Call Trace: [ 106.403232][ T6222] [ 106.403240][ T6222] dump_stack_lvl+0x189/0x250 [ 106.403273][ T6222] ? __pfx____ratelimit+0x10/0x10 [ 106.403296][ T6222] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.403323][ T6222] ? __pfx__printk+0x10/0x10 [ 106.403364][ T6222] should_fail_ex+0x414/0x560 [ 106.403390][ T6222] _copy_to_user+0x31/0xb0 [ 106.403420][ T6222] simple_read_from_buffer+0xe1/0x170 [ 106.403446][ T6222] proc_fail_nth_read+0x1b3/0x220 [ 106.403478][ T6222] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 106.403510][ T6222] ? rw_verify_area+0x2a6/0x4d0 [ 106.403529][ T6222] ? __lock_acquire+0xab9/0xd20 [ 106.403546][ T6222] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 106.403574][ T6222] vfs_read+0x200/0xa30 [ 106.403593][ T6222] ? fdget_pos+0x247/0x320 [ 106.403622][ T6222] ? __pfx___mutex_lock+0x10/0x10 [ 106.403649][ T6222] ? __pfx_vfs_read+0x10/0x10 [ 106.403671][ T6222] ? __fget_files+0x2a/0x420 [ 106.403708][ T6222] ? __fget_files+0x3a0/0x420 [ 106.403728][ T6222] ? __fget_files+0x2a/0x420 [ 106.403762][ T6222] ksys_read+0x145/0x250 [ 106.403786][ T6222] ? __pfx_ksys_read+0x10/0x10 [ 106.403811][ T6222] ? do_syscall_64+0xbe/0xfa0 [ 106.403841][ T6222] do_syscall_64+0xfa/0xfa0 [ 106.403862][ T6222] ? lockdep_hardirqs_on+0x9c/0x150 [ 106.403886][ T6222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.403904][ T6222] ? clear_bhb_loop+0x60/0xb0 [ 106.403927][ T6222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.403944][ T6222] RIP: 0033:0x7f8bb978d5fc [ 106.403961][ T6222] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 106.403976][ T6222] RSP: 002b:00007f8bba62b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 106.403996][ T6222] RAX: ffffffffffffffda RBX: 00007f8bb99c5fa0 RCX: 00007f8bb978d5fc [ 106.404008][ T6222] RDX: 000000000000000f RSI: 00007f8bba62b0a0 RDI: 0000000000000005 [ 106.404019][ T6222] RBP: 00007f8bba62b090 R08: 0000000000000000 R09: 0000000000000000 [ 106.404030][ T6222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 106.404040][ T6222] R13: 00007f8bb99c6038 R14: 00007f8bb99c5fa0 R15: 00007ffecf693738 [ 106.404073][ T6222] [ 106.488025][ T6214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.489914][ C1] vkms_vblank_simulate: vblank timer overrun [ 106.656865][ C1] vkms_vblank_simulate: vblank timer overrun [ 106.662855][ C1] hrtimer: interrupt took 252797422 ns [ 106.670732][ T6214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.685170][ T3212] snd-usb-audio 2-1:0.148: probe with driver snd-usb-audio failed with error -71 [ 106.704446][ T3212] usb 2-1: USB disconnect, device number 5 [ 106.756844][ T6224] comedi comedi2: rti800: I/O port conflict (0x4f26,16) [ 106.764036][ C1] vkms_vblank_simulate: vblank timer overrun [ 106.797637][ T5968] usb 4-1: config 0 has no interfaces? [ 106.805084][ T5968] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 106.814215][ T5968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.825424][ T5968] usb 4-1: config 0 descriptor?? [ 107.038217][ T6218] netlink: 'syz.3.85': attribute type 10 has an invalid length. [ 107.048875][ T6218] team0: Device ipvlan1 failed to register rx_handler [ 107.064695][ T5968] usb 4-1: USB disconnect, device number 11 [ 107.171004][ T3212] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 107.319677][ T3212] usb 1-1: Using ep0 maxpacket: 32 [ 107.326289][ T3212] usb 1-1: config 2 has an invalid interface number: 65 but max is 0 [ 107.335711][ T3212] usb 1-1: config 2 has no interface number 0 [ 107.343416][ T3212] usb 1-1: config 2 interface 65 has no altsetting 0 [ 107.352652][ T3212] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice= 7.6b [ 107.362096][ T3212] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.370287][ T3212] usb 1-1: Product: syz [ 107.374489][ T3212] usb 1-1: Manufacturer: syz [ 107.379092][ T3212] usb 1-1: SerialNumber: syz [ 107.392685][ T3212] (null): radio-mr800 - initialization failed [ 107.399021][ T3212] radio-mr800 1-1:2.65: probe with driver radio-mr800 failed with error -22 [ 107.408176][ T3212] usbhid 1-1:2.65: couldn't find an input interrupt endpoint [ 107.607121][ T3212] usb 1-1: USB disconnect, device number 8 [ 107.869080][ T5968] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 108.040805][ T5968] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 108.049126][ T5968] usb 4-1: config 0 has no interface number 0 [ 108.060408][ T5968] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 108.069551][ T5968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.077553][ T5968] usb 4-1: Product: syz [ 108.081754][ T5968] usb 4-1: Manufacturer: syz [ 108.086364][ T5968] usb 4-1: SerialNumber: syz [ 108.093694][ T5968] usb 4-1: config 0 descriptor?? [ 108.198978][ T5954] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 108.300541][ T5968] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 108.311046][ T5968] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 108.321643][ T5968] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 108.330056][ T5968] usb 4-1: media controller created [ 108.352112][ T5968] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 108.366473][ T5954] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.385666][ T5954] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 108.397300][ T5954] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 108.406571][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 108.414871][ T5954] usb 2-1: SerialNumber: syz [ 108.502451][ T6230] FAULT_INJECTION: forcing a failure. [ 108.502451][ T6230] name failslab, interval 1, probability 0, space 0, times 1 [ 108.515227][ T6230] CPU: 0 UID: 0 PID: 6230 Comm: syz.3.91 Not tainted syzkaller #0 PREEMPT(full) [ 108.515251][ T6230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 108.515261][ T6230] Call Trace: [ 108.515268][ T6230] [ 108.515275][ T6230] dump_stack_lvl+0x189/0x250 [ 108.515306][ T6230] ? __pfx____ratelimit+0x10/0x10 [ 108.515323][ T6230] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.515339][ T6230] ? __pfx__printk+0x10/0x10 [ 108.515358][ T6230] ? __pfx___might_resched+0x10/0x10 [ 108.515383][ T6230] should_fail_ex+0x414/0x560 [ 108.515408][ T6230] should_failslab+0xa8/0x100 [ 108.515430][ T6230] __kmalloc_noprof+0xcb/0x7f0 [ 108.515448][ T6230] ? i2cdev_ioctl_rdwr+0xce/0x740 [ 108.515472][ T6230] i2cdev_ioctl_rdwr+0xce/0x740 [ 108.515490][ T6230] i2cdev_ioctl+0x64b/0x7f0 [ 108.515503][ T6230] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 108.515520][ T6230] ? __fget_files+0x3a0/0x420 [ 108.515540][ T6230] ? __fget_files+0x2a/0x420 [ 108.515566][ T6230] ? bpf_lsm_file_ioctl+0x9/0x20 [ 108.515592][ T6230] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 108.515611][ T6230] __se_sys_ioctl+0xfc/0x170 [ 108.515628][ T6230] do_syscall_64+0xfa/0xfa0 [ 108.515642][ T6230] ? lockdep_hardirqs_on+0x9c/0x150 [ 108.515657][ T6230] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.515667][ T6230] ? clear_bhb_loop+0x60/0xb0 [ 108.515687][ T6230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.515704][ T6230] RIP: 0033:0x7fa81cd8ebe9 [ 108.515720][ T6230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.515734][ T6230] RSP: 002b:00007fa81dbee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 108.515753][ T6230] RAX: ffffffffffffffda RBX: 00007fa81cfc5fa0 RCX: 00007fa81cd8ebe9 [ 108.515765][ T6230] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000004 [ 108.515776][ T6230] RBP: 00007fa81dbee090 R08: 0000000000000000 R09: 0000000000000000 [ 108.515783][ T6230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.515789][ T6230] R13: 00007fa81cfc6038 R14: 00007fa81cfc5fa0 R15: 00007ffe79cddf28 [ 108.515807][ T6230] [ 108.516433][ T5968] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 108.633552][ T6234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.705313][ T5968] usb 4-1: USB disconnect, device number 12 [ 108.713818][ T6234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.820144][ T5954] usb 2-1: 0:2 : does not exist [ 108.891247][ T5954] usb 2-1: USB disconnect, device number 6 [ 108.925935][ T5864] udevd[5864]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.067896][ T3212] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 109.222400][ T3212] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 109.233572][ T3212] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.246826][ T3212] usb 1-1: config 0 interface 0 has no altsetting 0 [ 109.258802][ T3212] usb 1-1: New USB device found, idVendor=12ba, idProduct=074b, bcdDevice= 0.00 [ 109.270141][ T3212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.289605][ T3212] usb 1-1: config 0 descriptor?? [ 109.303184][ T6238] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 109.411532][ T6248] Bluetooth: MGMT ver 1.23 [ 109.418012][ T6248] FAULT_INJECTION: forcing a failure. [ 109.418012][ T6248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.432050][ T6248] CPU: 1 UID: 0 PID: 6248 Comm: syz.1.99 Not tainted syzkaller #0 PREEMPT(full) [ 109.432074][ T6248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 109.432084][ T6248] Call Trace: [ 109.432091][ T6248] [ 109.432098][ T6248] dump_stack_lvl+0x189/0x250 [ 109.432124][ T6248] ? __pfx____ratelimit+0x10/0x10 [ 109.432139][ T6248] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.432155][ T6248] ? __pfx__printk+0x10/0x10 [ 109.432188][ T6248] should_fail_ex+0x414/0x560 [ 109.432214][ T6248] _copy_to_user+0x31/0xb0 [ 109.432242][ T6248] simple_read_from_buffer+0xe1/0x170 [ 109.432269][ T6248] proc_fail_nth_read+0x1b3/0x220 [ 109.432288][ T6248] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 109.432306][ T6248] ? rw_verify_area+0x2a6/0x4d0 [ 109.432317][ T6248] ? __lock_acquire+0xab9/0xd20 [ 109.432331][ T6248] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 109.432358][ T6248] vfs_read+0x200/0xa30 [ 109.432377][ T6248] ? fdget_pos+0x247/0x320 [ 109.432403][ T6248] ? __pfx___mutex_lock+0x10/0x10 [ 109.432427][ T6248] ? __pfx_vfs_read+0x10/0x10 [ 109.432440][ T6248] ? __fget_files+0x2a/0x420 [ 109.432457][ T6248] ? __fget_files+0x3a0/0x420 [ 109.432470][ T6248] ? __fget_files+0x2a/0x420 [ 109.432495][ T6248] ksys_read+0x145/0x250 [ 109.432519][ T6248] ? __pfx_ksys_read+0x10/0x10 [ 109.432543][ T6248] ? do_syscall_64+0xbe/0xfa0 [ 109.432570][ T6248] do_syscall_64+0xfa/0xfa0 [ 109.432589][ T6248] ? lockdep_hardirqs_on+0x9c/0x150 [ 109.432603][ T6248] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.432614][ T6248] ? clear_bhb_loop+0x60/0xb0 [ 109.432627][ T6248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.432637][ T6248] RIP: 0033:0x7fbb91b8d5fc [ 109.432653][ T6248] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 109.432666][ T6248] RSP: 002b:00007fbb929b2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 109.432695][ T6248] RAX: ffffffffffffffda RBX: 00007fbb91dc5fa0 RCX: 00007fbb91b8d5fc [ 109.432707][ T6248] RDX: 000000000000000f RSI: 00007fbb929b20a0 RDI: 0000000000000003 [ 109.432717][ T6248] RBP: 00007fbb929b2090 R08: 0000000000000000 R09: 0000000000000000 [ 109.432727][ T6248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.432737][ T6248] R13: 00007fbb91dc6038 R14: 00007fbb91dc5fa0 R15: 00007fff45d4c048 [ 109.432759][ T6248] [ 109.670474][ C1] vkms_vblank_simulate: vblank timer overrun [ 109.747263][ T1209] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 109.759355][ T6250] Zero length message leads to an empty skb [ 109.906800][ T3212] sony 0003:12BA:074B.0002: unknown main item tag 0x0 [ 109.931087][ T3212] sony 0003:12BA:074B.0002: item fetching failed at offset 3/5 [ 109.931265][ T1209] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 109.945633][ T3212] sony 0003:12BA:074B.0002: parse failed [ 109.948046][ T1209] usb 4-1: config 0 has no interface number 0 [ 109.962511][ T3212] sony 0003:12BA:074B.0002: probe with driver sony failed with error -22 [ 109.973195][ T1209] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 109.986974][ T1209] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.995729][ T1209] usb 4-1: Product: syz [ 110.003334][ T1209] usb 4-1: Manufacturer: syz [ 110.012822][ T1209] usb 4-1: SerialNumber: syz [ 110.042759][ T1209] usb 4-1: config 0 descriptor?? [ 110.107990][ T5931] usb 1-1: USB disconnect, device number 9 [ 110.258039][ T1209] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 110.267134][ T3212] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 110.272724][ T1209] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 110.285840][ T1209] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 110.295315][ T1209] usb 4-1: media controller created [ 110.333641][ T1209] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 110.436591][ T3212] usb 2-1: Using ep0 maxpacket: 32 [ 110.450442][ T3212] usb 2-1: config 2 has an invalid interface number: 65 but max is 0 [ 110.460630][ T1209] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 110.472572][ T3212] usb 2-1: config 2 has no interface number 0 [ 110.483556][ T3212] usb 2-1: config 2 interface 65 has no altsetting 0 [ 110.503388][ T3212] usb 2-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice= 7.6b [ 110.524004][ T3212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.544095][ T3212] usb 2-1: Product: syz [ 110.547710][ T1209] usb 4-1: USB disconnect, device number 13 [ 110.554216][ T3212] usb 2-1: Manufacturer: syz [ 110.574544][ T3212] usb 2-1: SerialNumber: syz [ 110.612680][ T3212] (null): radio-mr800 - initialization failed [ 110.631425][ T3212] radio-mr800 2-1:2.65: probe with driver radio-mr800 failed with error -22 [ 110.641083][ T3212] usbhid 2-1:2.65: couldn't find an input interrupt endpoint [ 110.804950][ T3212] usb 2-1: USB disconnect, device number 7 [ 111.302056][ T6278] comedi comedi3: comedi_config --init_data is deprecated [ 111.345757][ T5968] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 111.404685][ T6280] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 111.426636][ T6280] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 111.428328][ T6282] dlm: no local IP address has been set [ 111.447532][ T6282] dlm: cannot start dlm midcomms -107 [ 111.529892][ T5968] usb 4-1: Invalid ep0 maxpacket: 16 [ 111.702558][ T5968] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 111.872435][ T6292] netlink: 'syz.1.112': attribute type 4 has an invalid length. [ 111.875447][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.935434][ T5968] usb 4-1: Invalid ep0 maxpacket: 16 [ 111.941850][ T5968] usb usb4-port1: attempt power cycle [ 111.985142][ T5931] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 112.115021][ T5931] usb 1-1: device descriptor read/64, error -71 [ 112.294839][ T5968] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 112.315799][ T5968] usb 4-1: Invalid ep0 maxpacket: 16 [ 112.367235][ T5931] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 112.454629][ T5968] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 112.475323][ T5968] usb 4-1: Invalid ep0 maxpacket: 16 [ 112.480940][ T5968] usb usb4-port1: unable to enumerate USB device [ 112.504601][ T5931] usb 1-1: device descriptor read/64, error -71 [ 112.617101][ T5931] usb usb1-port1: attempt power cycle [ 112.924511][ T5968] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 112.974140][ T5931] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 112.994823][ T5931] usb 1-1: device descriptor read/8, error -71 [ 113.074167][ T5968] usb 2-1: Using ep0 maxpacket: 32 [ 113.080994][ T5968] usb 2-1: config 2 has an invalid interface number: 65 but max is 0 [ 113.090262][ T5968] usb 2-1: config 2 has no interface number 0 [ 113.097380][ T5968] usb 2-1: config 2 interface 65 has no altsetting 0 [ 113.106463][ T5968] usb 2-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice= 7.6b [ 113.115612][ T5968] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.123608][ T5968] usb 2-1: Product: syz [ 113.127968][ T5968] usb 2-1: Manufacturer: syz [ 113.132590][ T5968] usb 2-1: SerialNumber: syz [ 113.147662][ T5968] (null): radio-mr800 - initialization failed [ 113.154229][ T5968] radio-mr800 2-1:2.65: probe with driver radio-mr800 failed with error -22 [ 113.163199][ T5968] usbhid 2-1:2.65: couldn't find an input interrupt endpoint [ 113.233972][ T5931] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 113.254642][ T5931] usb 1-1: device descriptor read/8, error -71 [ 113.349843][ T5968] usb 2-1: USB disconnect, device number 8 [ 113.366914][ T5931] usb usb1-port1: unable to enumerate USB device [ 113.973888][ T6303] netlink: 36 bytes leftover after parsing attributes in process `syz.1.117'. [ 114.098490][ T30] audit: type=1326 audit(1757031313.283:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6305 comm="syz.1.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb91b8ebe9 code=0x7ffc0000 [ 114.154127][ T30] audit: type=1326 audit(1757031313.283:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6305 comm="syz.1.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb91b8ebe9 code=0x7ffc0000 [ 114.231207][ T30] audit: type=1326 audit(1757031313.283:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6305 comm="syz.1.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fbb91b8ebe9 code=0x7ffc0000 [ 114.255474][ T30] audit: type=1326 audit(1757031313.283:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6305 comm="syz.1.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb91b8ebe9 code=0x7ffc0000 [ 114.287753][ T30] audit: type=1326 audit(1757031313.283:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6305 comm="syz.1.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbb91b8ebe9 code=0x7ffc0000 [ 114.287802][ T30] audit: type=1326 audit(1757031313.283:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6305 comm="syz.1.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb91b8ebe9 code=0x7ffc0000 [ 114.531697][ T6324] FAULT_INJECTION: forcing a failure. [ 114.531697][ T6324] name failslab, interval 1, probability 0, space 0, times 0 [ 114.549598][ T6324] CPU: 1 UID: 0 PID: 6324 Comm: syz.1.124 Not tainted syzkaller #0 PREEMPT(full) [ 114.549623][ T6324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 114.549631][ T6324] Call Trace: [ 114.549639][ T6324] [ 114.549647][ T6324] dump_stack_lvl+0x189/0x250 [ 114.549680][ T6324] ? __pfx____ratelimit+0x10/0x10 [ 114.549704][ T6324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.549729][ T6324] ? __pfx__printk+0x10/0x10 [ 114.549762][ T6324] ? __pfx___might_resched+0x10/0x10 [ 114.549783][ T6324] ? fs_reclaim_acquire+0x7d/0x100 [ 114.549809][ T6324] should_fail_ex+0x414/0x560 [ 114.549834][ T6324] should_failslab+0xa8/0x100 [ 114.549857][ T6324] __kvmalloc_node_noprof+0x158/0x910 [ 114.549887][ T6324] ? rhashtable_init_noprof+0x4f3/0xbc0 [ 114.549910][ T6324] ? rhashtable_init_noprof+0x145/0xbc0 [ 114.549940][ T6324] rhashtable_init_noprof+0x4f3/0xbc0 [ 114.549971][ T6324] rhltable_init_noprof+0x1e/0x60 [ 114.549995][ T6324] nf_tables_newtable+0x68f/0x1890 [ 114.550035][ T6324] nfnetlink_rcv+0x1132/0x2520 [ 114.550092][ T6324] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 114.550131][ T6324] ? ref_tracker_free+0x63a/0x7d0 [ 114.550184][ T6324] ? __netlink_deliver_tap+0x807/0x850 [ 114.550209][ T6324] ? netlink_deliver_tap+0x2e/0x1b0 [ 114.550254][ T6324] netlink_unicast+0x82c/0x9e0 [ 114.550282][ T6324] ? __pfx_netlink_unicast+0x10/0x10 [ 114.550306][ T6324] ? netlink_sendmsg+0x642/0xb30 [ 114.550323][ T6324] ? skb_put+0x11b/0x210 [ 114.550347][ T6324] netlink_sendmsg+0x805/0xb30 [ 114.550376][ T6324] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.550398][ T6324] ? aa_sock_msg_perm+0xf1/0x1d0 [ 114.550420][ T6324] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 114.550439][ T6324] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.550459][ T6324] __sock_sendmsg+0x21c/0x270 [ 114.550480][ T6324] ____sys_sendmsg+0x505/0x830 [ 114.550499][ T6324] ? __pfx_____sys_sendmsg+0x10/0x10 [ 114.550521][ T6324] ? import_iovec+0x74/0xa0 [ 114.550545][ T6324] ___sys_sendmsg+0x21f/0x2a0 [ 114.550561][ T6324] ? __pfx____sys_sendmsg+0x10/0x10 [ 114.550608][ T6324] ? __fget_files+0x2a/0x420 [ 114.550625][ T6324] ? __fget_files+0x3a0/0x420 [ 114.550653][ T6324] __x64_sys_sendmsg+0x19b/0x260 [ 114.550670][ T6324] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 114.550693][ T6324] ? __pfx_ksys_write+0x10/0x10 [ 114.550713][ T6324] ? do_syscall_64+0xbe/0xfa0 [ 114.550735][ T6324] do_syscall_64+0xfa/0xfa0 [ 114.550752][ T6324] ? lockdep_hardirqs_on+0x9c/0x150 [ 114.550771][ T6324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.550784][ T6324] ? clear_bhb_loop+0x60/0xb0 [ 114.550802][ T6324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.550815][ T6324] RIP: 0033:0x7fbb91b8ebe9 [ 114.550828][ T6324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.550840][ T6324] RSP: 002b:00007fbb929b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.550856][ T6324] RAX: ffffffffffffffda RBX: 00007fbb91dc5fa0 RCX: 00007fbb91b8ebe9 [ 114.550866][ T6324] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 114.550882][ T6324] RBP: 00007fbb929b2090 R08: 0000000000000000 R09: 0000000000000000 [ 114.550890][ T6324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.550898][ T6324] R13: 00007fbb91dc6038 R14: 00007fbb91dc5fa0 R15: 00007fff45d4c048 [ 114.550925][ T6324] [ 115.032201][ T5954] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 115.184686][ T5954] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 115.192832][ T5954] usb 4-1: config 0 has no interface number 0 [ 115.201045][ T5954] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 115.210155][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.219489][ T5954] usb 4-1: Product: syz [ 115.223892][ T1209] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 115.231568][ T5954] usb 4-1: Manufacturer: syz [ 115.236282][ T5954] usb 4-1: SerialNumber: syz [ 115.243681][ T5954] usb 4-1: config 0 descriptor?? [ 115.382658][ T1209] usb 2-1: Using ep0 maxpacket: 32 [ 115.396725][ T1209] usb 2-1: config 2 has an invalid interface number: 65 but max is 0 [ 115.416797][ T1209] usb 2-1: config 2 has no interface number 0 [ 115.437905][ T1209] usb 2-1: config 2 interface 65 has no altsetting 0 [ 115.453548][ T5954] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 115.474135][ T1209] usb 2-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice= 7.6b [ 115.485997][ T1209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.495306][ T5954] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 115.507733][ T1209] usb 2-1: Product: syz [ 115.512430][ T1209] usb 2-1: Manufacturer: syz [ 115.517591][ T5954] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 115.527626][ T1209] usb 2-1: SerialNumber: syz [ 115.533538][ T5954] usb 4-1: media controller created [ 115.546785][ T1209] (null): radio-mr800 - initialization failed [ 115.561931][ T1209] radio-mr800 2-1:2.65: probe with driver radio-mr800 failed with error -22 [ 115.579089][ T5954] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 115.588620][ T1209] usbhid 2-1:2.65: couldn't find an input interrupt endpoint [ 115.748820][ T3212] usb 2-1: USB disconnect, device number 9 [ 116.058944][ T6339] netlink: 28 bytes leftover after parsing attributes in process `syz.0.129'. [ 116.691571][ T5954] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 116.697898][ T6313] usb 4-1: dvb_usb_ec168: I2C read not implemented [ 116.776588][ T5954] usb 4-1: USB disconnect, device number 18 [ 117.250303][ T1209] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 117.485441][ T1209] usb 1-1: Using ep0 maxpacket: 32 [ 117.497532][ T1209] usb 1-1: config 2 has an invalid interface number: 65 but max is 0 [ 117.521536][ T1209] usb 1-1: config 2 has no interface number 0 [ 117.527695][ T1209] usb 1-1: config 2 interface 65 has no altsetting 0 [ 117.562799][ T1209] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice= 7.6b [ 117.586610][ T1209] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.599594][ T1209] usb 1-1: Product: syz [ 117.604121][ T1209] usb 1-1: Manufacturer: syz [ 117.608805][ T1209] usb 1-1: SerialNumber: syz [ 117.626393][ T1209] (null): radio-mr800 - initialization failed [ 117.635789][ T1209] radio-mr800 1-1:2.65: probe with driver radio-mr800 failed with error -22 [ 117.645555][ T1209] usbhid 1-1:2.65: couldn't find an input interrupt endpoint [ 117.828764][ T1209] usb 1-1: USB disconnect, device number 14 [ 117.929965][ T3212] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 117.962461][ T6403] loop3: detected capacity change from 0 to 1 [ 117.974944][ T6403] Dev loop3: unable to read RDB block 1 [ 117.982439][ T6403] loop3: AHDI p1 [ 117.986157][ T6403] loop3: partition table partially beyond EOD, truncated [ 118.122442][ T3212] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 118.140668][ T3212] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 118.153475][ T6410] FAULT_INJECTION: forcing a failure. [ 118.153475][ T6410] name failslab, interval 1, probability 0, space 0, times 0 [ 118.167004][ T3212] usb 2-1: config 1 interface 0 has no altsetting 0 [ 118.174113][ T6410] CPU: 0 UID: 0 PID: 6410 Comm: syz.3.158 Not tainted syzkaller #0 PREEMPT(full) [ 118.174135][ T6410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 118.174145][ T6410] Call Trace: [ 118.174153][ T6410] [ 118.174160][ T6410] dump_stack_lvl+0x189/0x250 [ 118.174193][ T6410] ? __pfx____ratelimit+0x10/0x10 [ 118.174217][ T6410] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.174244][ T6410] ? __pfx__printk+0x10/0x10 [ 118.174277][ T6410] ? __pfx___might_resched+0x10/0x10 [ 118.174297][ T6410] ? fs_reclaim_acquire+0x7d/0x100 [ 118.174325][ T6410] should_fail_ex+0x414/0x560 [ 118.174349][ T6410] ? __pfx_ovl_alloc_inode+0x10/0x10 [ 118.174371][ T6410] should_failslab+0xa8/0x100 [ 118.174394][ T6410] ? __pfx_ovl_alloc_inode+0x10/0x10 [ 118.174414][ T6410] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 118.174433][ T6410] ? ovl_alloc_inode+0x2c/0xa0 [ 118.174461][ T6410] ? __pfx_ovl_alloc_inode+0x10/0x10 [ 118.174482][ T6410] ovl_alloc_inode+0x2c/0xa0 [ 118.174504][ T6410] ? __pfx_ovl_alloc_inode+0x10/0x10 [ 118.174524][ T6410] alloc_inode+0x6a/0x1b0 [ 118.174545][ T6410] ? __pfx_ovl_inode_test+0x10/0x10 [ 118.174569][ T6410] ? __pfx_ovl_inode_set+0x10/0x10 [ 118.174600][ T6410] iget5_locked+0x4a/0xa0 [ 118.174628][ T6410] ovl_get_inode+0x712/0x1010 [ 118.174672][ T6410] ? __pfx_ovl_get_inode+0x10/0x10 [ 118.174698][ T6410] ? do_raw_spin_unlock+0x122/0x240 [ 118.174737][ T6410] ovl_lookup+0x1893/0x1bc0 [ 118.174778][ T6410] ? d_alloc_parallel+0x14ae/0x15e0 [ 118.174815][ T6410] ? __pfx_ovl_lookup+0x10/0x10 [ 118.174836][ T6410] ? mark_lock_irq+0x31a/0x390 [ 118.174860][ T6410] ? __pfx_d_alloc_parallel+0x10/0x10 [ 118.174884][ T6410] ? __raw_spin_lock_init+0x45/0x100 [ 118.174913][ T6410] ? __init_waitqueue_head+0xa9/0x150 [ 118.174945][ T6410] __lookup_slow+0x294/0x3d0 [ 118.174966][ T6410] ? __pfx___lookup_slow+0x10/0x10 [ 118.175001][ T6410] ? down_read+0x1ad/0x2e0 [ 118.175023][ T6410] lookup_slow+0x53/0x70 [ 118.175042][ T6410] walk_component+0x2d2/0x400 [ 118.175066][ T6410] ? path_lookupat+0x156/0x430 [ 118.175095][ T6410] path_lookupat+0x163/0x430 [ 118.175130][ T6410] filename_lookup+0x212/0x570 [ 118.175153][ T6410] ? __lock_acquire+0xab9/0xd20 [ 118.175178][ T6410] ? __pfx_filename_lookup+0x10/0x10 [ 118.175233][ T6410] ? strncpy_from_user+0x150/0x290 [ 118.175265][ T6410] path_removexattrat+0x196/0x690 [ 118.175288][ T6410] ? __pfx_path_removexattrat+0x10/0x10 [ 118.175304][ T6410] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 118.175330][ T6410] ? __pfx_vfs_write+0x10/0x10 [ 118.175383][ T6410] ? __pfx_ksys_write+0x10/0x10 [ 118.175413][ T6410] __x64_sys_removexattr+0x62/0x70 [ 118.175441][ T6410] do_syscall_64+0xfa/0xfa0 [ 118.175465][ T6410] ? lockdep_hardirqs_on+0x9c/0x150 [ 118.175489][ T6410] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.175508][ T6410] ? clear_bhb_loop+0x60/0xb0 [ 118.175531][ T6410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.175548][ T6410] RIP: 0033:0x7fa81cd8ebe9 [ 118.175565][ T6410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.175579][ T6410] RSP: 002b:00007fa81dbee038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c5 [ 118.175609][ T6410] RAX: ffffffffffffffda RBX: 00007fa81cfc5fa0 RCX: 00007fa81cd8ebe9 [ 118.175621][ T6410] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 00002000000000c0 [ 118.175632][ T6410] RBP: 00007fa81dbee090 R08: 0000000000000000 R09: 0000000000000000 [ 118.175643][ T6410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.175654][ T6410] R13: 00007fa81cfc6038 R14: 00007fa81cfc5fa0 R15: 00007ffe79cddf28 [ 118.175687][ T6410] [ 118.175829][ T6410] overlayfs: failed to get inode (-12) [ 118.511508][ T6418] netlink: 'syz.0.161': attribute type 10 has an invalid length. [ 118.517971][ T3212] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 118.535751][ T6418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.161'. [ 118.550066][ T3212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.582107][ T6418] bridge_slave_1: left allmulticast mode [ 118.587772][ T6418] bridge_slave_1: left promiscuous mode [ 118.600619][ T6418] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.604321][ T3212] usb 2-1: Product: syz [ 118.612091][ T3212] usb 2-1: Manufacturer: syz [ 118.616721][ T3212] usb 2-1: SerialNumber: syz [ 118.626627][ T6418] bridge_slave_0: left allmulticast mode [ 118.630561][ T6394] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 118.650633][ T6394] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 118.658015][ T5954] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 118.669450][ T6418] bridge_slave_0: left promiscuous mode [ 118.709214][ T6418] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.833041][ T5954] usb 3-1: config 0 has an invalid interface number: 11 but max is 0 [ 118.841557][ T5954] usb 3-1: config 0 has no interface number 0 [ 118.847668][ T5954] usb 3-1: config 0 interface 11 has no altsetting 0 [ 118.854593][ T5954] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 118.863768][ T5954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.891619][ T5954] usb 3-1: config 0 descriptor?? [ 118.925820][ T5954] keyspan 3-1:0.11: Keyspan 2 port adapter converter detected [ 118.942472][ T5954] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 7 [ 118.969681][ T6394] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.012693][ T5954] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 81 [ 119.034048][ T5954] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 82 [ 119.055482][ T5954] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 1 [ 119.086093][ T5954] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 2 [ 119.109050][ T6394] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.119832][ T5954] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 85 [ 119.127818][ T5954] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 5 [ 119.144505][ T5954] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 119.157974][ T5954] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 83 [ 119.173127][ T5954] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 84 [ 119.181816][ T5954] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 3 [ 119.189925][ T5954] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 4 [ 119.197705][ T5954] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 86 [ 119.205929][ T5954] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 6 [ 119.218976][ T5954] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 119.255447][ T5954] usb 3-1: USB disconnect, device number 5 [ 119.260845][ T5931] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 119.277659][ T6394] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.307196][ T5954] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 119.326051][ T5954] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 119.345451][ T5954] keyspan 3-1:0.11: device disconnected [ 119.399112][ T6394] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.422099][ T5931] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.432500][ T5931] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 119.441931][ T5931] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 119.457785][ T5931] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 119.467004][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 119.475611][ T5931] usb 1-1: Product: syz [ 119.480408][ T5931] usb 1-1: Manufacturer: syz [ 119.485056][ T5931] usb 1-1: SerialNumber: syz [ 119.505482][ T5931] cdc_mbim 1-1:1.0: MBIM functional descriptor missing [ 119.528345][ T5931] cdc_mbim 1-1:1.0: bind() failure [ 119.559609][ T1319] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.591200][ T62] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.671044][ T1319] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.708603][ T5878] usb 1-1: USB disconnect, device number 15 [ 119.772660][ T50] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.880610][ T3212] rtl8150 2-1:1.0: couldn't reset the device [ 119.887070][ T3212] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 119.908135][ T3212] usb 2-1: USB disconnect, device number 10 [ 120.217506][ T5910] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 120.261792][ T6437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.168'. [ 120.397247][ T5910] usb 3-1: Using ep0 maxpacket: 16 [ 120.409588][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.424029][ T6441] netlink: 'syz.1.170': attribute type 10 has an invalid length. [ 120.437566][ T6441] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.445381][ T6441] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.454571][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.465565][ T5910] usb 3-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 120.475602][ T6441] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.476055][ T6444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.170'. [ 120.482875][ T6441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.492040][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.499167][ T6441] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.514031][ T6441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.518314][ T5910] usb 3-1: config 0 descriptor?? [ 120.540412][ T6441] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 120.556740][ T6444] bridge_slave_1: left allmulticast mode [ 120.563160][ T6444] bridge_slave_1: left promiscuous mode [ 120.572548][ T6444] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.583618][ T6444] bridge_slave_0: left allmulticast mode [ 120.589862][ T1209] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 120.590042][ T6444] bridge_slave_0: left promiscuous mode [ 120.603476][ T6444] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.626870][ T6444] bond0: (slave bridge0): Releasing backup interface [ 120.767064][ T1209] usb 1-1: Using ep0 maxpacket: 32 [ 120.774851][ T1209] usb 1-1: config 2 has an invalid interface number: 65 but max is 0 [ 120.783093][ T1209] usb 1-1: config 2 has no interface number 0 [ 120.789404][ T1209] usb 1-1: config 2 interface 65 has no altsetting 0 [ 120.796861][ T5955] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 120.819641][ T1209] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice= 7.6b [ 120.828877][ T1209] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.837377][ T1209] usb 1-1: Product: syz [ 120.848462][ T1209] usb 1-1: Manufacturer: syz [ 120.853136][ T1209] usb 1-1: SerialNumber: syz [ 120.869639][ T1209] (null): radio-mr800 - initialization failed [ 120.876248][ T1209] radio-mr800 1-1:2.65: probe with driver radio-mr800 failed with error -22 [ 120.886181][ T1209] usbhid 1-1:2.65: couldn't find an input interrupt endpoint [ 120.944905][ T5910] usbhid 3-1:0.0: can't add hid device: -71 [ 120.953448][ T5910] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 120.964910][ T5910] usb 3-1: USB disconnect, device number 6 [ 120.971363][ T5955] usb 4-1: Using ep0 maxpacket: 32 [ 120.981376][ T5955] usb 4-1: config 0 interface 0 has no altsetting 0 [ 120.993144][ T5955] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 121.004814][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.013176][ T5955] usb 4-1: Product: syz [ 121.017665][ T5955] usb 4-1: Manufacturer: syz [ 121.022273][ T5955] usb 4-1: SerialNumber: syz [ 121.031676][ T5955] usb 4-1: config 0 descriptor?? [ 121.070999][ T5878] usb 1-1: USB disconnect, device number 16 [ 121.240732][ T6443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.249894][ T6443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.462781][ T5955] gs_usb 4-1:0.0: Configuring for 126 interfaces [ 121.469579][ T5955] gs_usb 4-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 121.478114][ T5955] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -22 [ 121.623170][ T6453] netlink: 5128 bytes leftover after parsing attributes in process `syz.2.173'. [ 121.645467][ T6453] netlink: 5128 bytes leftover after parsing attributes in process `syz.2.173'. [ 121.664061][ T6453] netlink: 680 bytes leftover after parsing attributes in process `syz.2.173'. [ 121.680815][ T5955] usb 4-1: USB disconnect, device number 19 [ 121.901653][ T6461] ieee802154 phy0 wpan0: encryption failed: -22 [ 122.099174][ T6468] loop2: detected capacity change from 0 to 7 [ 122.111636][ T6468] Dev loop2: unable to read RDB block 7 [ 122.117742][ T6468] loop2: unable to read partition table [ 122.123755][ T6468] loop2: partition table beyond EOD, truncated [ 122.130643][ T6468] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 122.465399][ T43] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 122.505328][ T5955] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 122.631118][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 122.642508][ T43] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 122.653890][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.671692][ T43] usb 1-1: config 0 descriptor?? [ 122.677922][ T5955] usb 4-1: Using ep0 maxpacket: 32 [ 122.684029][ T6470] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 122.687715][ T5955] usb 4-1: config 2 has an invalid interface number: 65 but max is 0 [ 122.701238][ T5955] usb 4-1: config 2 has no interface number 0 [ 122.708842][ T5955] usb 4-1: config 2 interface 65 has no altsetting 0 [ 122.718458][ T5955] usb 4-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice= 7.6b [ 122.727637][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.737290][ T5955] usb 4-1: Product: syz [ 122.741518][ T5955] usb 4-1: Manufacturer: syz [ 122.746335][ T5955] usb 4-1: SerialNumber: syz [ 122.760944][ T5955] (null): radio-mr800 - initialization failed [ 122.768257][ T5955] radio-mr800 4-1:2.65: probe with driver radio-mr800 failed with error -22 [ 122.777543][ T5955] usbhid 4-1:2.65: couldn't find an input interrupt endpoint [ 122.903570][ T6480] netlink: 'syz.0.181': attribute type 64 has an invalid length. [ 122.912306][ T6480] netlink: 5 bytes leftover after parsing attributes in process `syz.0.181'. [ 122.923553][ T43] elan 0003:04F3:0755.0003: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 122.967435][ T43] usb 1-1: USB disconnect, device number 17 [ 122.988025][ T5878] usb 4-1: USB disconnect, device number 20 [ 123.018420][ T6484] process 'syz.0.185' launched './file0' with NULL argv: empty string added [ 123.140943][ T6482] fido_id[6482]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 123.547279][ T6496] netlink: 'syz.2.189': attribute type 10 has an invalid length. [ 123.574499][ T6496] macvlan0: entered promiscuous mode [ 123.579239][ T6498] loop6: detected capacity change from 0 to 63 [ 123.580066][ T6496] macvlan0: entered allmulticast mode [ 123.598221][ T5864] Buffer I/O error on dev loop6, logical block 0, async page read [ 123.604278][ T6496] veth1_vlan: entered allmulticast mode [ 123.625488][ T5864] Buffer I/O error on dev loop6, logical block 0, async page read [ 123.644867][ T5864] Buffer I/O error on dev loop6, logical block 0, async page read [ 123.653385][ T5864] Buffer I/O error on dev loop6, logical block 0, async page read [ 123.690908][ T5864] Buffer I/O error on dev loop6, logical block 0, async page read [ 124.014330][ T43] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 124.028276][ T6511] netlink: 'syz.1.196': attribute type 10 has an invalid length. [ 124.039711][ T6511] macvlan0: entered promiscuous mode [ 124.045288][ T6511] macvlan0: entered allmulticast mode [ 124.062265][ T6511] veth1_vlan: entered allmulticast mode [ 124.071663][ T6511] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 124.123952][ T3212] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 124.186900][ T43] usb 3-1: unable to get BOS descriptor or descriptor too short [ 124.203318][ T43] usb 3-1: not running at top speed; connect to a high speed hub [ 124.214104][ T43] usb 3-1: config 192 has an invalid descriptor of length 0, skipping remainder of the config [ 124.232748][ T43] usb 3-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=ad.d9 [ 124.238336][ T6513] kvm: kvm [6512]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1 [ 124.242540][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.250914][ T6513] kvm: kvm [6512]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1 [ 124.258779][ T43] usb 3-1: Product: syz [ 124.271395][ T43] usb 3-1: Manufacturer: syz [ 124.280462][ T6513] kvm: kvm [6512]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xbe702112 [ 124.294123][ T43] usb 3-1: SerialNumber: syz [ 124.297299][ T6513] kvm: kvm [6512]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x1 [ 124.312763][ T6513] kvm: kvm [6512]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x1 [ 124.337885][ T6513] kvm_intel: kvm [6512]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x1 [ 124.441759][ T6506] kexec: Could not allocate control_code_buffer [ 124.530612][ T6502] tmpfs: Bad value for 'mpol' [ 124.573658][ T5955] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 124.577951][ T6521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.598194][ T6521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.620097][ T43] s2255 3-1:192.0: Could not find bulk-in endpoint [ 124.637696][ T43] Sensoray 2255 driver load failed: 0xfffffff4 [ 124.653625][ T43] s2255 3-1:192.0: probe with driver s2255 failed with error -12 [ 124.673626][ T43] usb 3-1: USB disconnect, device number 7 [ 124.790945][ T5955] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 124.802110][ T5955] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.814662][ T5955] usb 2-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 124.825747][ T5955] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.848188][ T5955] usb 2-1: config 0 descriptor?? [ 124.866364][ T5955] usbhid 2-1:0.0: can't add hid device: -22 [ 124.872389][ T5955] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 125.076879][ T5955] usb 2-1: USB disconnect, device number 11 [ 125.096410][ T5878] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 125.267905][ T5878] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 125.278219][ T5878] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 125.289047][ T5878] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.308467][ T5878] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 125.326509][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 125.337490][ T5878] usb 4-1: Product: syz [ 125.341787][ T5878] usb 4-1: Manufacturer: syz [ 125.348124][ T5878] usb 4-1: SerialNumber: syz [ 125.579856][ T5878] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 125.722590][ T6533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.753385][ T6533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.771726][ T6527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.781249][ T6527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.804897][ T5931] usb 4-1: USB disconnect, device number 21 [ 125.826228][ T5931] usblp0: removed [ 125.950022][ T6545] loop3: detected capacity change from 0 to 1 [ 125.965509][ T6545] Dev loop3: unable to read RDB block 1 [ 125.971203][ T6545] loop3: unable to read partition table [ 125.981091][ T6545] loop3: partition table beyond EOD, truncated [ 125.987902][ T6545] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 126.211844][ T5955] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 126.315048][ T43] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 126.361660][ T5955] usb 2-1: Using ep0 maxpacket: 32 [ 126.379436][ T5955] usb 2-1: config 2 has an invalid interface number: 65 but max is 0 [ 126.406044][ T5955] usb 2-1: config 2 has no interface number 0 [ 126.417685][ T5955] usb 2-1: config 2 interface 65 has no altsetting 0 [ 126.433708][ T5955] usb 2-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice= 7.6b [ 126.456291][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.467939][ T5955] usb 2-1: Product: syz [ 126.478097][ T5955] usb 2-1: Manufacturer: syz [ 126.483544][ T5955] usb 2-1: SerialNumber: syz [ 126.495912][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 126.504407][ T43] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 126.520829][ T43] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 126.535255][ T5955] (null): radio-mr800 - initialization failed [ 126.543481][ T5955] radio-mr800 2-1:2.65: probe with driver radio-mr800 failed with error -22 [ 126.560187][ T43] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 57104, setting to 1024 [ 126.576563][ T5955] usbhid 2-1:2.65: couldn't find an input interrupt endpoint [ 126.586393][ T43] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 126.600518][ T43] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.617275][ T43] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 126.626892][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.632007][ T5931] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 126.719954][ T5955] usb 2-1: USB disconnect, device number 12 [ 126.793175][ T5931] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 126.804898][ T5931] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 126.817834][ T5931] usb 4-1: config 0 interface 0 has no altsetting 0 [ 126.824568][ T5931] usb 4-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 126.835813][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.845963][ T43] usb 3-1: GET_CAPABILITIES returned 0 [ 126.852159][ T43] usbtmc 3-1:16.0: can't read capabilities [ 126.852781][ T5931] usb 4-1: config 0 descriptor?? [ 126.864485][ T6551] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 127.050459][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 127.066249][ T6549] sctp: [Deprecated]: syz.2.211 (pid 6549) Use of struct sctp_assoc_value in delayed_ack socket option. [ 127.066249][ T6549] Use struct sctp_sack_info instead [ 127.095757][ T5955] usb 3-1: USB disconnect, device number 8 [ 127.294976][ T5931] elo 0003:04E7:0030.0004: unknown main item tag 0x0 [ 127.312068][ T5931] elo 0003:04E7:0030.0004: item fetching failed at offset 3/5 [ 127.338927][ T5931] elo 0003:04E7:0030.0004: parse failed [ 127.354763][ T5931] elo 0003:04E7:0030.0004: probe with driver elo failed with error -22 [ 127.748136][ T6571] cgroup: Unknown subsys name 'appraise' [ 127.817418][ T6576] loop2: detected capacity change from 0 to 7 [ 127.837150][ T5864] Dev loop2: unable to read RDB block 7 [ 127.856750][ T5864] loop2: unable to read partition table [ 127.866854][ T5864] loop2: partition table beyond EOD, truncated [ 127.878870][ T6576] Dev loop2: unable to read RDB block 7 [ 127.886644][ T6576] loop2: unable to read partition table [ 127.896778][ T6576] loop2: partition table beyond EOD, truncated [ 127.905943][ T6576] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 127.990728][ T5931] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 128.181666][ T5931] usb 3-1: Using ep0 maxpacket: 32 [ 128.195567][ T5931] usb 3-1: config 2 has an invalid interface number: 65 but max is 0 [ 128.208510][ T5931] usb 3-1: config 2 has no interface number 0 [ 128.216336][ T5931] usb 3-1: config 2 interface 65 has no altsetting 0 [ 128.229050][ T5931] usb 3-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice= 7.6b [ 128.246638][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.255274][ T5931] usb 3-1: Product: syz [ 128.259694][ T5931] usb 3-1: Manufacturer: syz [ 128.266616][ T5931] usb 3-1: SerialNumber: syz [ 128.290144][ T5931] (null): radio-mr800 - initialization failed [ 128.297330][ T5931] radio-mr800 3-1:2.65: probe with driver radio-mr800 failed with error -22 [ 128.307229][ T5931] usbhid 3-1:2.65: couldn't find an input interrupt endpoint [ 128.317372][ T43] IPVS: starting estimator thread 0... [ 128.380261][ T5878] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 128.434032][ T6590] IPVS: using max 25 ests per chain, 60000 per kthread [ 128.495923][ T5931] usb 3-1: USB disconnect, device number 9 [ 128.523598][ T6594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.534804][ T6594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.552327][ T5878] usb 2-1: Using ep0 maxpacket: 8 [ 128.564858][ T5878] usb 2-1: config 162 has an invalid interface number: 81 but max is 0 [ 128.578076][ T5878] usb 2-1: config 162 has no interface number 0 [ 128.584665][ T5878] usb 2-1: config 162 interface 81 altsetting 1 endpoint 0x9 has invalid wMaxPacketSize 0 [ 128.602511][ T5878] usb 2-1: config 162 interface 81 has no altsetting 0 [ 128.616520][ T5878] usb 2-1: New USB device found, idVendor=12d1, idProduct=35f3, bcdDevice=d6.3c [ 128.626643][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.634866][ T5878] usb 2-1: Product: syz [ 128.639137][ T5878] usb 2-1: Manufacturer: syz [ 128.644243][ T5878] usb 2-1: SerialNumber: syz [ 128.874373][ T5878] usb 2-1: USB disconnect, device number 13 [ 129.311079][ T3212] usb 1-1: unable to get BOS descriptor or descriptor too short [ 129.326796][ T3212] usb 1-1: unable to read config index 0 descriptor/start: -32 [ 129.344699][ T3212] usb 1-1: chopping to 0 config(s) [ 129.350504][ T3212] usb 1-1: can't read configurations, error -32 [ 129.488938][ T3212] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 129.508198][ T43] usb 4-1: USB disconnect, device number 22 [ 129.640106][ T3212] usb 1-1: device descriptor read/64, error -32 [ 129.769190][ T3212] usb usb1-port1: attempt power cycle [ 129.866165][ T5931] IPVS: starting estimator thread 0... [ 129.918756][ T1209] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 129.937701][ T6630] netlink: 'syz.1.244': attribute type 10 has an invalid length. [ 129.947810][ T6630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.244'. [ 129.958882][ T43] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 130.000746][ T6627] IPVS: using max 26 ests per chain, 62400 per kthread [ 130.054820][ T6632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.245'. [ 130.080382][ T1209] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.091566][ T1209] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.102522][ T1209] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 130.121358][ T3212] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 130.128417][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 130.136288][ T1209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.154517][ T3212] usb 1-1: device descriptor read/8, error -32 [ 130.160278][ T43] usb 4-1: config 2 has an invalid interface number: 65 but max is 0 [ 130.170861][ T43] usb 4-1: config 2 has no interface number 0 [ 130.178165][ T1209] usb 3-1: config 0 descriptor?? [ 130.183775][ T43] usb 4-1: config 2 interface 65 has no altsetting 0 [ 130.195623][ T43] usb 4-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice= 7.6b [ 130.210948][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.220888][ T43] usb 4-1: Product: syz [ 130.225115][ T43] usb 4-1: Manufacturer: syz [ 130.230334][ T43] usb 4-1: SerialNumber: syz [ 130.251665][ T43] (null): radio-mr800 - initialization failed [ 130.253372][ T6635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.259956][ T43] radio-mr800 4-1:2.65: probe with driver radio-mr800 failed with error -22 [ 130.272344][ T6635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.276546][ T43] usbhid 4-1:2.65: couldn't find an input interrupt endpoint [ 130.348264][ T5955] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 130.408290][ T3212] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 130.429023][ T3212] usb 1-1: device descriptor read/8, error -32 [ 130.450560][ T5931] usb 4-1: USB disconnect, device number 23 [ 130.521215][ T5955] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.531530][ T5955] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 130.548545][ T3212] usb usb1-port1: unable to enumerate USB device [ 130.555803][ T5955] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 130.567115][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.575234][ T5955] usb 2-1: Product: syz [ 130.579445][ T5955] usb 2-1: Manufacturer: syz [ 130.584057][ T5955] usb 2-1: SerialNumber: syz [ 130.634535][ T1209] cm6533_jd 0003:0D8C:0022.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 130.798989][ T6632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.823986][ T6632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.847143][ T6638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.247'. [ 130.864104][ T5955] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 130.886568][ T6619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.894847][ T5955] usb 2-1: USB disconnect, device number 14 [ 130.915252][ T6619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.143870][ T6645] netlink: 'syz.0.250': attribute type 10 has an invalid length. [ 131.152625][ T6645] macvlan0: entered promiscuous mode [ 131.158060][ T6645] macvlan0: entered allmulticast mode [ 131.174439][ T6645] veth1_vlan: entered allmulticast mode [ 131.184527][ T6645] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 131.337124][ T1209] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 131.397023][ T5955] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 131.488008][ T43] usb 3-1: USB disconnect, device number 10 [ 131.495404][ T1209] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 131.510033][ T1209] usb 4-1: config 2 has 1 interface, different from the descriptor's value: 4 [ 131.528227][ T1209] usb 4-1: New USB device found, idVendor=0403, idProduct=da71, bcdDevice= 6.1f [ 131.538052][ T1209] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.546254][ T1209] usb 4-1: Product: syz [ 131.552915][ T1209] usb 4-1: Manufacturer: syz [ 131.557731][ T1209] usb 4-1: SerialNumber: syz [ 131.564086][ T5955] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.577261][ T5955] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 131.599683][ T5955] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 131.609144][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.617525][ T5955] usb 2-1: Product: syz [ 131.621754][ T5955] usb 2-1: Manufacturer: syz [ 131.626375][ T5955] usb 2-1: SerialNumber: syz [ 131.799883][ T1209] usb 4-1: NDI device with a latency value of 1 [ 131.806902][ T1209] ftdi_sio 4-1:2.0: FTDI USB Serial Device converter detected [ 131.815670][ T1209] ftdi_sio ttyUSB0: unknown device type: 0x61f [ 131.831172][ T1209] usb 4-1: USB disconnect, device number 24 [ 131.843743][ T6632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.853538][ T6632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.854760][ T1209] ftdi_sio 4-1:2.0: device disconnected [ 131.905369][ T5955] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 131.957879][ T5955] usb 2-1: USB disconnect, device number 15 [ 132.247710][ T6655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.259540][ T6655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.319835][ T1209] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 132.510076][ T1209] usb 3-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 132.528112][ T1209] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.546173][ T1209] usb 3-1: Product: syz [ 132.560688][ T1209] usb 3-1: Manufacturer: syz [ 132.569202][ T1209] usb 3-1: SerialNumber: syz [ 132.593105][ T1209] usb 3-1: config 0 descriptor?? [ 132.611857][ T1209] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 132.649780][ T3212] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 132.833080][ T3212] usb 4-1: config 202 has an invalid interface number: 113 but max is 0 [ 132.842768][ T3212] usb 4-1: config 202 has no interface number 0 [ 132.860402][ T3212] usb 4-1: config 202 interface 113 has no altsetting 0 [ 132.877936][ T3212] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=7e.5f [ 132.888562][ T3212] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.897115][ T3212] usb 4-1: Product: syz [ 132.901641][ T3212] usb 4-1: Manufacturer: syz [ 132.910015][ T3212] usb 4-1: SerialNumber: syz [ 133.009421][ T1209] sonixb 3-1:0.0: Error writing register 01: -71 [ 133.036231][ T1209] sonixb 3-1:0.0: probe with driver sonixb failed with error -71 [ 133.046073][ T5931] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 133.058415][ T1209] usb 3-1: USB disconnect, device number 11 [ 133.074271][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.082550][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.142537][ T6661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.154338][ T6661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.167614][ T3212] usb 4-1: NFC: intf ffff888020f1a000 id ffffffff8ef6d6c0 [ 133.191362][ T3212] usb 4-1: USB disconnect, device number 25 [ 133.225357][ T5931] usb 2-1: Using ep0 maxpacket: 32 [ 133.236040][ T5931] usb 2-1: config 2 has an invalid interface number: 65 but max is 0 [ 133.252402][ T5931] usb 2-1: config 2 has no interface number 0 [ 133.259185][ T5931] usb 2-1: config 2 interface 65 has no altsetting 0 [ 133.272245][ T5931] usb 2-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice= 7.6b [ 133.282082][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.295931][ T5931] usb 2-1: Product: syz [ 133.300236][ T5931] usb 2-1: Manufacturer: syz [ 133.309101][ T5931] usb 2-1: SerialNumber: syz [ 133.323577][ T5931] (null): radio-mr800 - initialization failed [ 133.337232][ T5931] radio-mr800 2-1:2.65: probe with driver radio-mr800 failed with error -22 [ 133.347691][ T5931] usbhid 2-1:2.65: couldn't find an input interrupt endpoint [ 133.533278][ T3212] usb 2-1: USB disconnect, device number 16 [ 133.972105][ T6700] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 133.979714][ T1209] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 134.041307][ T6702] netlink: 36 bytes leftover after parsing attributes in process `syz.3.263'. [ 134.056725][ T6702] netlink: 16 bytes leftover after parsing attributes in process `syz.3.263'. [ 134.067062][ T6702] netlink: 36 bytes leftover after parsing attributes in process `syz.3.263'. [ 134.077285][ T6702] netlink: 36 bytes leftover after parsing attributes in process `syz.3.263'. [ 134.133949][ T1209] usb 3-1: device descriptor read/64, error -71 [ 134.403664][ T1209] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 134.544516][ T1209] usb 3-1: device descriptor read/64, error -71 [ 134.668456][ T1209] usb usb3-port1: attempt power cycle [ 134.983132][ T5954] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 135.023060][ T1209] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 135.044705][ T1209] usb 3-1: device descriptor read/8, error -71 [ 135.123435][ T5954] usb 2-1: device descriptor read/64, error -71 [ 135.304133][ T1209] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 135.322877][ T3212] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 135.333196][ T1209] usb 3-1: device descriptor read/8, error -71 [ 135.373280][ T5954] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 135.443058][ T1209] usb usb3-port1: unable to enumerate USB device [ 135.491382][ T3212] usb 4-1: Using ep0 maxpacket: 32 [ 135.500024][ T3212] usb 4-1: config 2 has an invalid interface number: 65 but max is 0 [ 135.502415][ T5954] usb 2-1: device descriptor read/64, error -71 [ 135.512998][ T3212] usb 4-1: config 2 has no interface number 0 [ 135.520869][ T3212] usb 4-1: config 2 interface 65 has no altsetting 0 [ 135.536900][ T3212] usb 4-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice= 7.6b [ 135.548409][ T3212] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.558676][ T3212] usb 4-1: Product: syz [ 135.564947][ T3212] usb 4-1: Manufacturer: syz [ 135.569778][ T3212] usb 4-1: SerialNumber: syz [ 135.589702][ T3212] (null): radio-mr800 - initialization failed [ 135.596764][ T3212] radio-mr800 4-1:2.65: probe with driver radio-mr800 failed with error -22 [ 135.607563][ T3212] usbhid 4-1:2.65: couldn't find an input interrupt endpoint [ 135.632623][ T5954] usb usb2-port1: attempt power cycle [ 135.795766][ T1209] usb 4-1: USB disconnect, device number 26 [ 135.840703][ T6737] netlink: 40 bytes leftover after parsing attributes in process `syz.0.277'. [ 135.992181][ T5954] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 136.026865][ T5954] usb 2-1: device descriptor read/8, error -71 [ 136.271674][ T5954] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 136.322082][ T5954] usb 2-1: device descriptor read/8, error -71 [ 136.407724][ T6749] siw: device registration error -23 [ 136.434197][ T5954] usb usb2-port1: unable to enumerate USB device [ 136.447910][ T6745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.492238][ T6745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.150134][ T6766] loop2: detected capacity change from 0 to 7 [ 137.164285][ T6766] Dev loop2: unable to read RDB block 7 [ 137.176702][ T6766] loop2: unable to read partition table [ 137.183185][ T6766] loop2: partition table beyond EOD, truncated [ 137.191798][ T6766] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 137.408034][ T6769] syzkaller1: entered promiscuous mode [ 137.408677][ T6768] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 137.424491][ T6768] /dev/nullb0: Can't open blockdev [ 137.431515][ T6769] syzkaller1: entered allmulticast mode [ 137.690322][ T5931] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 137.880575][ T5931] usb 4-1: Using ep0 maxpacket: 32 [ 137.888086][ T5931] usb 4-1: config 2 has an invalid interface number: 65 but max is 0 [ 137.912161][ T5931] usb 4-1: config 2 has no interface number 0 [ 137.918311][ T5931] usb 4-1: config 2 interface 65 has no altsetting 0 [ 137.937171][ T5931] usb 4-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice= 7.6b [ 137.971616][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.991146][ T5931] usb 4-1: Product: syz [ 137.998159][ T5931] usb 4-1: Manufacturer: syz [ 138.008859][ T5931] usb 4-1: SerialNumber: syz [ 138.036698][ T5931] (null): radio-mr800 - initialization failed [ 138.063008][ T5931] radio-mr800 4-1:2.65: probe with driver radio-mr800 failed with error -22 [ 138.081303][ T5931] usbhid 4-1:2.65: couldn't find an input interrupt endpoint [ 138.253897][ T1209] usb 4-1: USB disconnect, device number 27 [ 138.269235][ T5954] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 138.409217][ T5954] usb 2-1: device descriptor read/64, error -71 [ 138.671400][ T5954] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 138.811197][ T5954] usb 2-1: device descriptor read/64, error -71 [ 138.918950][ T5954] usb usb2-port1: attempt power cycle [ 139.289148][ T5954] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 139.328745][ T5954] usb 2-1: device descriptor read/8, error -71 [ 139.620215][ T5954] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 139.672771][ T5954] usb 2-1: device descriptor read/8, error -71 [ 139.741553][ T6817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.761037][ T6817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.777332][ T6819] netlink: 'syz.2.309': attribute type 10 has an invalid length. [ 139.786228][ T6819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.309'. [ 139.797882][ T6819] bridge_slave_1: left allmulticast mode [ 139.803596][ T6819] bridge_slave_1: left promiscuous mode [ 139.810676][ T5954] usb usb2-port1: unable to enumerate USB device [ 139.817242][ T6819] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.827749][ T6819] bridge_slave_0: left allmulticast mode [ 139.833518][ T6819] bridge_slave_0: left promiscuous mode [ 139.839730][ T6819] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.864397][ T6819] bond0: (slave bridge0): Releasing backup interface [ 139.937393][ T5878] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 140.087254][ T5878] usb 4-1: Using ep0 maxpacket: 32 [ 140.093997][ T5878] usb 4-1: config 2 has an invalid interface number: 65 but max is 0 [ 140.103241][ T5878] usb 4-1: config 2 has no interface number 0 [ 140.109447][ T5878] usb 4-1: config 2 interface 65 has no altsetting 0 [ 140.118426][ T5878] usb 4-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice= 7.6b [ 140.127627][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.135656][ T5878] usb 4-1: Product: syz [ 140.140559][ T5878] usb 4-1: Manufacturer: syz [ 140.145188][ T5878] usb 4-1: SerialNumber: syz [ 140.160906][ T5878] (null): radio-mr800 - initialization failed [ 140.169109][ T5878] radio-mr800 4-1:2.65: probe with driver radio-mr800 failed with error -22 [ 140.180168][ T5878] usbhid 4-1:2.65: couldn't find an input interrupt endpoint [ 140.276894][ T5931] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 140.371312][ T1209] usb 4-1: USB disconnect, device number 28 [ 140.441825][ T5931] usb 3-1: config 0 has no interfaces? [ 140.449222][ T5931] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 140.464451][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.475603][ T5931] usb 3-1: config 0 descriptor?? [ 140.571854][ T6832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.583463][ T6832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.684925][ T6823] netlink: 'syz.2.312': attribute type 10 has an invalid length. [ 140.695769][ T6823] team0: Device ipvlan1 failed to register rx_handler [ 140.709883][ T1209] usb 3-1: USB disconnect, device number 16 [ 141.181529][ T1209] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 141.304522][ T6847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.329710][ T6847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.357079][ T1209] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.367777][ T1209] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 141.382101][ T1209] usb 4-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 141.391244][ T1209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.407106][ T1209] usb 4-1: config 0 descriptor?? [ 141.445784][ T5878] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 141.598086][ T5878] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 141.609046][ T5878] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 141.623238][ T5878] usb 2-1: config 0 interface 0 has no altsetting 0 [ 141.630155][ T5878] usb 2-1: New USB device found, idVendor=12ba, idProduct=074b, bcdDevice= 0.00 [ 141.639873][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.656103][ T5878] usb 2-1: config 0 descriptor?? [ 141.661936][ T6841] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 141.820743][ T1209] hid (null): invalid report_count -160948754 [ 141.831038][ T1209] megaworld 0003:07B5:0312.0006: invalid report_count -160948754 [ 141.838911][ T1209] megaworld 0003:07B5:0312.0006: item 0 4 1 9 parsing failed [ 141.849525][ T1209] megaworld 0003:07B5:0312.0006: parse failed [ 141.855919][ T1209] megaworld 0003:07B5:0312.0006: probe with driver megaworld failed with error -22 [ 141.932131][ T6854] comedi comedi3: comedi_config --init_data is deprecated [ 142.036388][ T6834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.050250][ T6834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.063279][ T3212] usb 4-1: USB disconnect, device number 29 [ 142.099827][ T5878] sony 0003:12BA:074B.0007: unknown main item tag 0x0 [ 142.099862][ T5878] sony 0003:12BA:074B.0007: item fetching failed at offset 3/5 [ 142.112365][ T5878] sony 0003:12BA:074B.0007: parse failed [ 142.112478][ T5878] sony 0003:12BA:074B.0007: probe with driver sony failed with error -22 [ 142.296559][ T3212] usb 2-1: USB disconnect, device number 25 [ 142.618959][ T6869] netlink: 'syz.2.331': attribute type 4 has an invalid length. [ 142.624604][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 142.635793][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 142.644726][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 142.644778][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 142.744503][ T6872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.767289][ T6872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.943388][ T6880] netlink: 68 bytes leftover after parsing attributes in process `syz.1.335'. [ 143.032536][ T6883] usb usb8: usbfs: process 6883 (syz.3.337) did not claim interface 0 before use [ 143.234085][ T6888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.234901][ T6890] FAULT_INJECTION: forcing a failure. [ 143.234901][ T6890] name failslab, interval 1, probability 0, space 0, times 0 [ 143.242886][ T6888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.259905][ T6890] CPU: 1 UID: 0 PID: 6890 Comm: syz.3.340 Not tainted syzkaller #0 PREEMPT(full) [ 143.259926][ T6890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 143.259935][ T6890] Call Trace: [ 143.259942][ T6890] [ 143.259949][ T6890] dump_stack_lvl+0x189/0x250 [ 143.259979][ T6890] ? __pfx____ratelimit+0x10/0x10 [ 143.260001][ T6890] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.260024][ T6890] ? __pfx__printk+0x10/0x10 [ 143.260053][ T6890] ? __pfx___might_resched+0x10/0x10 [ 143.260078][ T6890] should_fail_ex+0x414/0x560 [ 143.260102][ T6890] should_failslab+0xa8/0x100 [ 143.260123][ T6890] __kmalloc_cache_noprof+0x6f/0x6f0 [ 143.260140][ T6890] ? nft_trans_table_add+0x56/0x430 [ 143.260165][ T6890] nft_trans_table_add+0x56/0x430 [ 143.260191][ T6890] nf_tables_newtable+0xce3/0x1890 [ 143.260228][ T6890] nfnetlink_rcv+0x1132/0x2520 [ 143.260282][ T6890] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 143.260319][ T6890] ? ref_tracker_free+0x63a/0x7d0 [ 143.260368][ T6890] ? __netlink_deliver_tap+0x807/0x850 [ 143.260390][ T6890] ? netlink_deliver_tap+0x2e/0x1b0 [ 143.260430][ T6890] netlink_unicast+0x82c/0x9e0 [ 143.260467][ T6890] ? __pfx_netlink_unicast+0x10/0x10 [ 143.260489][ T6890] ? netlink_sendmsg+0x642/0xb30 [ 143.260509][ T6890] ? skb_put+0x11b/0x210 [ 143.260536][ T6890] netlink_sendmsg+0x805/0xb30 [ 143.260569][ T6890] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.260595][ T6890] ? aa_sock_msg_perm+0xf1/0x1d0 [ 143.260620][ T6890] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 143.260640][ T6890] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.260663][ T6890] __sock_sendmsg+0x21c/0x270 [ 143.260687][ T6890] ____sys_sendmsg+0x505/0x830 [ 143.260710][ T6890] ? __pfx_____sys_sendmsg+0x10/0x10 [ 143.260735][ T6890] ? import_iovec+0x74/0xa0 [ 143.260762][ T6890] ___sys_sendmsg+0x21f/0x2a0 [ 143.260781][ T6890] ? __pfx____sys_sendmsg+0x10/0x10 [ 143.260835][ T6890] ? __fget_files+0x2a/0x420 [ 143.260855][ T6890] ? __fget_files+0x3a0/0x420 [ 143.260886][ T6890] __x64_sys_sendmsg+0x19b/0x260 [ 143.260906][ T6890] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 143.260932][ T6890] ? __pfx_ksys_write+0x10/0x10 [ 143.260955][ T6890] ? do_syscall_64+0xbe/0xfa0 [ 143.260981][ T6890] do_syscall_64+0xfa/0xfa0 [ 143.261001][ T6890] ? lockdep_hardirqs_on+0x9c/0x150 [ 143.261022][ T6890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.261038][ T6890] ? clear_bhb_loop+0x60/0xb0 [ 143.261058][ T6890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.261074][ T6890] RIP: 0033:0x7fa81cd8ebe9 [ 143.261089][ T6890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.261102][ T6890] RSP: 002b:00007fa81dbee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.261120][ T6890] RAX: ffffffffffffffda RBX: 00007fa81cfc5fa0 RCX: 00007fa81cd8ebe9 [ 143.261132][ T6890] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 143.261142][ T6890] RBP: 00007fa81dbee090 R08: 0000000000000000 R09: 0000000000000000 [ 143.261152][ T6890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 143.261161][ T6890] R13: 00007fa81cfc6038 R14: 00007fa81cfc5fa0 R15: 00007ffe79cddf28 [ 143.261191][ T6890] [ 143.728098][ T6897] netlink: 28 bytes leftover after parsing attributes in process `syz.0.343'. [ 143.743230][ T3212] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 143.903113][ T5878] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 143.911574][ T3212] usb 2-1: Using ep0 maxpacket: 8 [ 143.924861][ T3212] usb 2-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 143.962900][ T3212] usb 2-1: config 1 interface 0 has no altsetting 0 [ 143.983872][ T3212] usb 2-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.40 [ 144.003282][ T3212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.011331][ T3212] usb 2-1: Product: syz [ 144.033179][ T3212] usb 2-1: Manufacturer: syz [ 144.037833][ T3212] usb 2-1: SerialNumber: syz [ 144.083454][ T5878] usb 4-1: Using ep0 maxpacket: 16 [ 144.090544][ T5878] usb 4-1: config 166 has an invalid interface number: 177 but max is 1 [ 144.101854][ T5878] usb 4-1: config 166 has an invalid interface number: 34 but max is 1 [ 144.114238][ T5878] usb 4-1: config 166 has no interface number 0 [ 144.120544][ T5878] usb 4-1: config 166 has no interface number 1 [ 144.135393][ T5878] usb 4-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 144.147845][ T5878] usb 4-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 144.162180][ T5878] usb 4-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 144.180907][ T5878] usb 4-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 144.197519][ T5878] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 144.209495][ T5878] usb 4-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 144.224421][ T5878] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 144.242297][ T5878] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 144.257939][ T5878] usb 4-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 144.273052][ T5878] usb 4-1: config 166 interface 177 has no altsetting 0 [ 144.280709][ T5878] usb 4-1: config 166 interface 34 has no altsetting 0 [ 144.294925][ T3212] usbhid 2-1:1.0: can't add hid device: -71 [ 144.301036][ T5878] usb 4-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 144.311892][ T3212] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 144.321358][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.334531][ T5878] usb 4-1: Product: syz [ 144.339947][ T3212] usb 2-1: USB disconnect, device number 26 [ 144.350044][ T5878] usb 4-1: Manufacturer: syz [ 144.357885][ T5878] usb 4-1: SerialNumber: syz [ 144.579527][ T6893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.593298][ T6893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.606241][ T5878] ums-realtek 4-1:166.177: USB Mass Storage device detected [ 144.698888][ T5878] ums-realtek 4-1:166.34: USB Mass Storage device detected [ 144.829432][ T5878] ums-realtek 4-1:166.34: probe with driver ums-realtek failed with error -5 [ 144.857796][ T5878] usb 4-1: Found UVC 0.00 device syz (0bda:0138) [ 144.868045][ T5878] usb 4-1: No valid video chain found. [ 144.880600][ T5878] usb 4-1: USB disconnect, device number 30 [ 145.199162][ T6930] /dev/nullb0: Can't open blockdev [ 145.229565][ T6932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.356'. [ 145.461192][ T5878] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 145.482674][ T6936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.489206][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 145.499905][ T6936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.512638][ T6937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.524976][ T6937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.621402][ T5878] usb 4-1: Using ep0 maxpacket: 32 [ 145.627295][ T5878] usb 4-1: too many configurations: 33, using maximum allowed: 8 [ 145.636289][ T5878] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.648033][ T5878] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.658414][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 145.665747][ T5878] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.677958][ T10] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 145.686633][ T10] usb 3-1: config 0 has no interface number 0 [ 145.693057][ T5878] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.709419][ T5878] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.722617][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 145.734812][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.745072][ T5878] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.757363][ T10] usb 3-1: Product: syz [ 145.762637][ T10] usb 3-1: Manufacturer: syz [ 145.767858][ T5878] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.782259][ T5878] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.797088][ T10] usb 3-1: SerialNumber: syz [ 145.812507][ T5878] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 145.826071][ T10] usb 3-1: config 0 descriptor?? [ 145.842672][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.865341][ T10] smsc95xx v2.0.0 [ 145.885014][ T5878] usb 4-1: config 0 descriptor?? [ 145.913227][ T5878] hub 4-1:0.0: Invalid hub with more than one config or interface [ 145.922394][ T5878] hub 4-1:0.0: probe with driver hub failed with error -22 [ 146.090457][ T5954] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 146.149907][ T5878] usb 4-1: USB disconnect, device number 31 [ 146.260064][ T6955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.273372][ T5954] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 146.282298][ T6955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.290579][ T5954] usb 2-1: config 0 has no interface number 0 [ 146.302805][ T5954] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 146.318639][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.328386][ T6955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.339875][ T5954] usb 2-1: Product: syz [ 146.348287][ T6955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.359347][ T5954] usb 2-1: Manufacturer: syz [ 146.364215][ T5954] usb 2-1: SerialNumber: syz [ 146.384647][ T5954] usb 2-1: config 0 descriptor?? [ 146.592965][ T5954] dvb_usb_ec168 2-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 146.607833][ T5954] usb 2-1: USB disconnect, device number 27 [ 146.736983][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 146.762255][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 146.776036][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 146.807963][ T10] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 146.828291][ T10] usb 3-1: USB disconnect, device number 17 [ 147.253316][ T6975] loop3: detected capacity change from 0 to 1 [ 147.271498][ T6975] Dev loop3: unable to read RDB block 1 [ 147.297793][ T6975] loop3: AHDI p1 [ 147.315075][ T6975] loop3: partition table partially beyond EOD, truncated [ 147.535723][ T6983] FAULT_INJECTION: forcing a failure. [ 147.535723][ T6983] name failslab, interval 1, probability 0, space 0, times 0 [ 147.551792][ T6983] CPU: 1 UID: 0 PID: 6983 Comm: syz.0.372 Not tainted syzkaller #0 PREEMPT(full) [ 147.551818][ T6983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 147.551828][ T6983] Call Trace: [ 147.551835][ T6983] [ 147.551844][ T6983] dump_stack_lvl+0x189/0x250 [ 147.551875][ T6983] ? __pfx____ratelimit+0x10/0x10 [ 147.551900][ T6983] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.551927][ T6983] ? __pfx__printk+0x10/0x10 [ 147.551957][ T6983] ? __pfx___might_resched+0x10/0x10 [ 147.551980][ T6983] ? fs_reclaim_acquire+0x7d/0x100 [ 147.552015][ T6983] should_fail_ex+0x414/0x560 [ 147.552043][ T6983] should_failslab+0xa8/0x100 [ 147.552067][ T6983] kmem_cache_alloc_noprof+0x74/0x6e0 [ 147.552086][ T6983] ? security_inode_alloc+0x39/0x330 [ 147.552118][ T6983] security_inode_alloc+0x39/0x330 [ 147.552146][ T6983] inode_init_always_gfp+0x9ed/0xdc0 [ 147.552176][ T6983] ? __pfx_ovl_alloc_inode+0x10/0x10 [ 147.552199][ T6983] alloc_inode+0x82/0x1b0 [ 147.552219][ T6983] ? __pfx_ovl_inode_test+0x10/0x10 [ 147.552243][ T6983] ? __pfx_ovl_inode_set+0x10/0x10 [ 147.552266][ T6983] iget5_locked+0x4a/0xa0 [ 147.552294][ T6983] ovl_get_inode+0x712/0x1010 [ 147.552338][ T6983] ? __pfx_ovl_get_inode+0x10/0x10 [ 147.552364][ T6983] ? do_raw_spin_unlock+0x122/0x240 [ 147.552403][ T6983] ovl_lookup+0x1893/0x1bc0 [ 147.552453][ T6983] ? d_alloc_parallel+0x14ae/0x15e0 [ 147.552490][ T6983] ? __pfx_ovl_lookup+0x10/0x10 [ 147.552516][ T6983] ? __lock_acquire+0xab9/0xd20 [ 147.552537][ T6983] ? __pfx_d_alloc_parallel+0x10/0x10 [ 147.552553][ T6983] ? look_up_lock_class+0x74/0x170 [ 147.552583][ T6983] ? __raw_spin_lock_init+0x45/0x100 [ 147.552611][ T6983] ? __init_waitqueue_head+0xa9/0x150 [ 147.552643][ T6983] __lookup_slow+0x294/0x3d0 [ 147.552666][ T6983] ? __pfx___lookup_slow+0x10/0x10 [ 147.552702][ T6983] ? down_read+0x1ad/0x2e0 [ 147.552724][ T6983] lookup_slow+0x53/0x70 [ 147.552743][ T6983] walk_component+0x2d2/0x400 [ 147.552768][ T6983] ? path_lookupat+0x156/0x430 [ 147.552798][ T6983] path_lookupat+0x163/0x430 [ 147.552832][ T6983] filename_lookup+0x212/0x570 [ 147.552856][ T6983] ? __lock_acquire+0xab9/0xd20 [ 147.552882][ T6983] ? __pfx_filename_lookup+0x10/0x10 [ 147.552936][ T6983] ? strncpy_from_user+0x150/0x290 [ 147.552967][ T6983] path_removexattrat+0x196/0x690 [ 147.552991][ T6983] ? __pfx_path_removexattrat+0x10/0x10 [ 147.553008][ T6983] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 147.553034][ T6983] ? __pfx_vfs_write+0x10/0x10 [ 147.553085][ T6983] ? __pfx_ksys_write+0x10/0x10 [ 147.553116][ T6983] __x64_sys_removexattr+0x62/0x70 [ 147.553142][ T6983] do_syscall_64+0xfa/0xfa0 [ 147.553164][ T6983] ? lockdep_hardirqs_on+0x9c/0x150 [ 147.553187][ T6983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.553205][ T6983] ? clear_bhb_loop+0x60/0xb0 [ 147.553228][ T6983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.553247][ T6983] RIP: 0033:0x7f8bb978ebe9 [ 147.553266][ T6983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.553280][ T6983] RSP: 002b:00007f8bba62b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c5 [ 147.553299][ T6983] RAX: ffffffffffffffda RBX: 00007f8bb99c5fa0 RCX: 00007f8bb978ebe9 [ 147.553310][ T6983] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 00002000000000c0 [ 147.553323][ T6983] RBP: 00007f8bba62b090 R08: 0000000000000000 R09: 0000000000000000 [ 147.553335][ T6983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.553346][ T6983] R13: 00007f8bb99c6038 R14: 00007f8bb99c5fa0 R15: 00007ffecf693738 [ 147.553382][ T6983] [ 147.553455][ T6983] overlayfs: failed to get inode (-12) [ 147.628719][ T3212] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 148.005881][ T6991] netlink: 'syz.0.374': attribute type 10 has an invalid length. [ 148.019164][ T6991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.374'. [ 148.078152][ T3212] usb 3-1: Using ep0 maxpacket: 8 [ 148.085820][ T3212] usb 3-1: unable to get BOS descriptor or descriptor too short [ 148.104138][ T3212] usb 3-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid wMaxPacketSize 0 [ 148.144956][ T3212] usb 3-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 0 [ 148.161502][ T3212] usb 3-1: config 8 interface 0 has no altsetting 0 [ 148.183945][ T3212] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 148.193330][ T3212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.201734][ T3212] usb 3-1: Product: syz [ 148.207109][ T3212] usb 3-1: Manufacturer: syz [ 148.216188][ T3212] usb 3-1: SerialNumber: syz [ 148.459987][ T6979] netlink: 68 bytes leftover after parsing attributes in process `syz.2.370'. [ 148.768147][ T7006] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 148.962309][ T3212] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 149.008656][ T7010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.380'. [ 149.010499][ T3212] usb 3-1: selecting invalid altsetting 0 [ 149.045493][ T7012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.063727][ T7012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.201506][ T7012] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.251367][ T3212] snd-usb-audio 3-1:8.0: probe with driver snd-usb-audio failed with error -12 [ 149.290513][ T3212] usb 3-1: USB disconnect, device number 18 [ 149.353751][ T6014] udevd[6014]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 149.402472][ T7012] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.536923][ T43] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 149.554889][ T7012] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.687993][ T7020] netlink: 5128 bytes leftover after parsing attributes in process `syz.1.384'. [ 149.708562][ T43] usb 4-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 149.716164][ T7020] netlink: 5128 bytes leftover after parsing attributes in process `syz.1.384'. [ 149.729524][ T43] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 249, using maximum allowed: 30 [ 149.733670][ T7012] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.750839][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 249 [ 149.750892][ T43] usb 4-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 149.750916][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.776347][ T7020] netlink: 680 bytes leftover after parsing attributes in process `syz.1.384'. [ 149.800398][ T43] usb 4-1: config 0 descriptor?? [ 149.977612][ T1319] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.010114][ T1319] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.106079][ T2940] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.130830][ T2940] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.397198][ T7035] loop2: detected capacity change from 0 to 7 [ 150.405301][ T5864] Dev loop2: unable to read RDB block 7 [ 150.418438][ T5864] loop2: unable to read partition table [ 150.430063][ T5864] loop2: partition table beyond EOD, truncated [ 150.439699][ T7035] Dev loop2: unable to read RDB block 7 [ 150.449389][ T7035] loop2: unable to read partition table [ 150.458065][ T7035] loop2: partition table beyond EOD, truncated [ 150.466528][ T7035] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 150.523897][ T7039] netlink: 24 bytes leftover after parsing attributes in process `syz.1.391'. [ 150.546967][ T7037] loop8: detected capacity change from 0 to 8 [ 150.569545][ T5864] Dev loop8: unable to read RDB block 8 [ 150.575192][ T5864] loop8: unable to read partition table [ 150.581359][ T5864] loop8: partition table beyond EOD, truncated [ 150.592138][ T7037] Dev loop8: unable to read RDB block 8 [ 150.597870][ T7037] loop8: unable to read partition table [ 150.612398][ T7037] loop8: partition table beyond EOD, truncated [ 150.618996][ T7037] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà–$) failed (rc=-5) [ 150.721288][ T7043] FAULT_INJECTION: forcing a failure. [ 150.721288][ T7043] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.735925][ T7043] CPU: 1 UID: 0 PID: 7043 Comm: syz.1.393 Not tainted syzkaller #0 PREEMPT(full) [ 150.735952][ T7043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 150.735962][ T7043] Call Trace: [ 150.735976][ T7043] [ 150.735984][ T7043] dump_stack_lvl+0x189/0x250 [ 150.736018][ T7043] ? __pfx____ratelimit+0x10/0x10 [ 150.736044][ T7043] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.736072][ T7043] ? __pfx__printk+0x10/0x10 [ 150.736113][ T7043] should_fail_ex+0x414/0x560 [ 150.736140][ T7043] _copy_to_user+0x31/0xb0 [ 150.736171][ T7043] simple_read_from_buffer+0xe1/0x170 [ 150.736201][ T7043] proc_fail_nth_read+0x1b3/0x220 [ 150.736233][ T7043] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 150.736265][ T7043] ? rw_verify_area+0x2a6/0x4d0 [ 150.736284][ T7043] ? __lock_acquire+0xab9/0xd20 [ 150.736302][ T7043] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 150.736340][ T7043] vfs_read+0x200/0xa30 [ 150.736360][ T7043] ? fdget_pos+0x247/0x320 [ 150.736389][ T7043] ? __pfx___mutex_lock+0x10/0x10 [ 150.736416][ T7043] ? __pfx_vfs_read+0x10/0x10 [ 150.736439][ T7043] ? __fget_files+0x2a/0x420 [ 150.736468][ T7043] ? __fget_files+0x3a0/0x420 [ 150.736490][ T7043] ? __fget_files+0x2a/0x420 [ 150.736525][ T7043] ksys_read+0x145/0x250 [ 150.736545][ T7043] ? __fget_files+0x2a/0x420 [ 150.736569][ T7043] ? __pfx_ksys_read+0x10/0x10 [ 150.736593][ T7043] ? do_syscall_64+0xbe/0xfa0 [ 150.736624][ T7043] do_syscall_64+0xfa/0xfa0 [ 150.736647][ T7043] ? lockdep_hardirqs_on+0x9c/0x150 [ 150.736671][ T7043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.736690][ T7043] ? clear_bhb_loop+0x60/0xb0 [ 150.736714][ T7043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.736732][ T7043] RIP: 0033:0x7fbb91b8d5fc [ 150.736749][ T7043] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 150.736765][ T7043] RSP: 002b:00007fbb929b2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 150.736786][ T7043] RAX: ffffffffffffffda RBX: 00007fbb91dc5fa0 RCX: 00007fbb91b8d5fc [ 150.736799][ T7043] RDX: 000000000000000f RSI: 00007fbb929b20a0 RDI: 0000000000000003 [ 150.736811][ T7043] RBP: 00007fbb929b2090 R08: 0000000000000000 R09: 0000000000000000 [ 150.736823][ T7043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.736833][ T7043] R13: 00007fbb91dc6038 R14: 00007fbb91dc5fa0 R15: 00007fff45d4c048 [ 150.736868][ T7043] [ 150.982144][ C1] vkms_vblank_simulate: vblank timer overrun [ 151.268607][ T7054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.277789][ T7054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.344687][ T10] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 151.463083][ T7055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.479262][ T7055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.503920][ T7055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.516165][ T7055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.527611][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 151.546266][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 151.568213][ T7058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.582457][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 151.602598][ T7058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.622065][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 151.643727][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.669547][ T10] usb 2-1: Product: syz [ 151.683355][ T10] usb 2-1: Manufacturer: syz [ 151.693054][ T10] usb 2-1: SerialNumber: syz [ 151.730750][ T10] hub 2-1:1.0: bad descriptor, ignoring hub [ 151.770840][ T10] hub 2-1:1.0: probe with driver hub failed with error -5 [ 151.949321][ T10] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 151.989194][ T7064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.017479][ T7064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.203733][ T7065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.217726][ T7065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.285997][ T5931] usb 2-1: USB disconnect, device number 28 [ 152.315346][ T5931] usblp0: removed [ 152.364648][ T43] usb 4-1: string descriptor 0 read error: -71 [ 152.477571][ T7067] loop6: detected capacity change from 0 to 63 [ 152.485368][ T43] usb 4-1: USB disconnect, device number 32 [ 152.507073][ T5864] Buffer I/O error on dev loop6, logical block 0, async page read [ 152.535155][ T5864] Buffer I/O error on dev loop6, logical block 0, async page read [ 152.561110][ T5864] Buffer I/O error on dev loop6, logical block 0, async page read [ 152.621509][ T5864] Buffer I/O error on dev loop6, logical block 0, async page read [ 152.658263][ T5864] Buffer I/O error on dev loop6, logical block 0, async page read [ 152.714777][ T7069] netlink: 'syz.3.402': attribute type 10 has an invalid length. [ 152.761638][ T7069] veth1_vlan: left allmulticast mode [ 152.971674][ T7076] netlink: 'syz.1.404': attribute type 10 has an invalid length. [ 153.051630][ T7079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.404'. [ 155.378030][ T7088] netlink: 'syz.2.408': attribute type 10 has an invalid length. [ 155.432322][ T7088] veth1_vlan: left allmulticast mode [ 155.547913][ T7088] veth1_vlan: entered allmulticast mode [ 155.630560][ T7088] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 156.391296][ T5931] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 156.541346][ T7107] overlayfs: failed to resolve './file0': -2 [ 156.572291][ T7108] tmpfs: Unknown parameter 'uk_WardliíisŠœ' [ 156.584401][ T7107] tmpfs: Unknown parameter 'uk_WardliíisŠœ' [ 156.590829][ T5931] usb 3-1: Using ep0 maxpacket: 32 [ 156.605489][ T5931] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 156.622309][ T5931] usb 3-1: config 0 has no interface number 0 [ 156.634674][ T5931] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.677064][ T5931] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.707531][ T5931] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 156.733780][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.759501][ T5931] usb 3-1: config 0 descriptor?? [ 157.185983][ T5931] uclogic 0003:28BD:0094.0008: pen parameters not found [ 157.202473][ T5931] uclogic 0003:28BD:0094.0008: interface is invalid, ignoring [ 157.414584][ T7114] loop3: detected capacity change from 0 to 1 [ 157.425179][ T5864] Dev loop3: unable to read RDB block 1 [ 157.434492][ T5864] loop3: unable to read partition table [ 157.441988][ T5864] loop3: partition table beyond EOD, truncated [ 157.481581][ T7114] Dev loop3: unable to read RDB block 1 [ 157.489898][ T7114] loop3: unable to read partition table [ 157.495922][ T7114] loop3: partition table beyond EOD, truncated [ 157.506706][ T7114] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 157.816817][ T7118] Invalid ELF header type: 2 != 1 [ 158.339441][ T43] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 159.042151][ T43] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 159.083026][ T7128] ======================================================= [ 159.083026][ T7128] WARNING: The mand mount option has been deprecated and [ 159.083026][ T7128] and is ignored by this kernel. Remove the mand [ 159.083026][ T7128] option from the mount to silence this warning. [ 159.083026][ T7128] ======================================================= [ 159.183455][ T43] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 159.193683][ T10] usb 3-1: USB disconnect, device number 19 [ 159.450359][ T43] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 159.499032][ T43] usb 2-1: config 220 has no interface number 2 [ 159.642525][ T7136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.670177][ T7136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.677090][ T43] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 159.699074][ T7135] cgroup: Unknown subsys name 'appraise' [ 159.830110][ T43] usb 2-1: config 220 interface 0 has no altsetting 0 [ 159.859905][ T7140] loop2: detected capacity change from 0 to 7 [ 159.877360][ T43] usb 2-1: config 220 interface 76 has no altsetting 0 [ 159.880644][ T5864] Dev loop2: unable to read RDB block 7 [ 159.884264][ T43] usb 2-1: config 220 interface 1 has no altsetting 0 [ 159.907759][ T5864] loop2: unable to read partition table [ 159.922469][ T5864] loop2: partition table beyond EOD, truncated [ 159.992346][ T7140] Dev loop2: unable to read RDB block 7 [ 160.007353][ T7140] loop2: unable to read partition table [ 160.025460][ T7140] loop2: partition table beyond EOD, truncated [ 160.044265][ T7140] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 160.157981][ T43] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 160.188901][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.259814][ T43] usb 2-1: Product: syz [ 160.264039][ T43] usb 2-1: Manufacturer: syz [ 160.290438][ T43] usb 2-1: SerialNumber: syz [ 160.472016][ T7149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.503612][ T7149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.995549][ T7161] 9pnet_fd: Insufficient options for proto=fd [ 161.037926][ T43] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 161.073536][ T43] usb 2-1: No valid video chain found. [ 161.150533][ T43] usb 2-1: selecting invalid altsetting 0 [ 161.393734][ T5878] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 161.486471][ T43] usb 2-1: selecting invalid altsetting 0 [ 161.509903][ T43] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 161.533473][ T5878] usb 4-1: device descriptor read/64, error -71 [ 161.755153][ T43] usb 2-1: USB disconnect, device number 29 [ 161.775937][ T5878] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 162.005451][ T5878] usb 4-1: device descriptor read/64, error -71 [ 162.170015][ T5878] usb usb4-port1: attempt power cycle [ 162.532314][ T5878] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 162.564341][ T5878] usb 4-1: device descriptor read/8, error -71 [ 162.812049][ T5878] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 162.856266][ T5878] usb 4-1: device descriptor read/8, error -71 [ 162.993559][ T5878] usb usb4-port1: unable to enumerate USB device [ 163.079346][ T43] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 163.746628][ T43] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 164.245482][ T43] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 164.275398][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.489086][ T43] usb 2-1: Product: syz [ 164.514398][ T43] usb 2-1: Manufacturer: syz [ 164.519049][ T43] usb 2-1: SerialNumber: syz [ 165.041692][ T5865] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 165.065300][ T5865] Bluetooth: hci0: Injecting HCI hardware error event [ 165.076814][ T5865] Bluetooth: hci0: hardware error 0x00 [ 165.768850][ T10] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 165.786691][ T7249] netlink: 36 bytes leftover after parsing attributes in process `syz.0.448'. [ 165.921588][ T7249] netlink: 16 bytes leftover after parsing attributes in process `syz.0.448'. [ 165.976961][ T7249] netlink: 36 bytes leftover after parsing attributes in process `syz.0.448'. [ 166.022487][ T7249] netlink: 36 bytes leftover after parsing attributes in process `syz.0.448'. [ 166.038645][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 166.051539][ T10] usb 4-1: config 2 has an invalid interface number: 65 but max is 0 [ 166.094187][ T10] usb 4-1: config 2 has no interface number 0 [ 166.123947][ T10] usb 4-1: config 2 interface 65 has no altsetting 0 [ 166.162672][ T10] usb 4-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice= 7.6b [ 166.213852][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.268764][ T10] usb 4-1: Product: syz [ 166.288321][ T10] usb 4-1: Manufacturer: syz [ 166.292973][ T10] usb 4-1: SerialNumber: syz [ 166.328754][ T52] Bluetooth: hci0: unexpected event for opcode 0x200f [ 166.773154][ T7261] netlink: 40 bytes leftover after parsing attributes in process `syz.0.452'. [ 167.348632][ T7267] siw: device registration error -23 [ 167.427338][ T5865] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 167.484574][ T7270] overlay: filesystem on ./bus not supported [ 167.513615][ T7270] netlink: 28 bytes leftover after parsing attributes in process `syz.3.456'. [ 167.606325][ T7274] netlink: 60 bytes leftover after parsing attributes in process `syz.3.456'. [ 167.632398][ T7270] netlink: 60 bytes leftover after parsing attributes in process `syz.3.456'. [ 167.663117][ T7274] netlink: 60 bytes leftover after parsing attributes in process `syz.3.456'. [ 167.696893][ T7270] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 169.034072][ T43] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 169.047664][ T10] (null): radio-mr800 - initialization failed [ 169.047916][ T10] radio-mr800 4-1:2.65: probe with driver radio-mr800 failed with error -22 [ 169.048277][ T10] usbhid 4-1:2.65: couldn't find an input interrupt endpoint [ 169.103141][ T10] usb 4-1: USB disconnect, device number 37 [ 169.272865][ T43] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 169.425292][ T43] usb 2-1: USB disconnect, device number 30 [ 169.454853][ T10] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 169.628516][ T10] usb 4-1: config 0 has an invalid interface number: 3 but max is 0 [ 169.667908][ T10] usb 4-1: config 0 has no interface number 0 [ 169.702316][ T10] usb 4-1: config 0 interface 3 has no altsetting 0 [ 169.756882][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=53.69 [ 169.802045][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.833761][ T10] usb 4-1: Product: syz [ 169.849700][ T10] usb 4-1: Manufacturer: syz [ 169.869858][ T10] usb 4-1: SerialNumber: syz [ 169.884321][ T7305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.910811][ T10] usb 4-1: config 0 descriptor?? [ 169.942384][ T7305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.980806][ T7305] block nbd0: NBD_DISCONNECT [ 170.104934][ T7305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.153348][ T7305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.172751][ T10] cdc_subset 4-1:0.3: probe with driver cdc_subset failed with error -22 [ 170.245670][ T7311] 2N: renamed from vcan0 (while UP) [ 170.379540][ T5865] Bluetooth: hci3: unknown advertising packet type: 0x82 [ 170.379601][ T5865] Bluetooth: hci3: unknown advertising packet type: 0x73 [ 170.387855][ T5865] Bluetooth: hci3: Malformed LE Event: 0x02 [ 170.404016][ T5878] usb 4-1: USB disconnect, device number 38 [ 171.328288][ T7326] netlink: 28 bytes leftover after parsing attributes in process `syz.3.471'. [ 171.648531][ T7329] input: syz0 as /devices/virtual/input/input8 [ 195.729997][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.752320][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 212.505373][ T5871] Bluetooth: hci1: command 0x0406 tx timeout [ 212.531268][ T5871] Bluetooth: hci2: command 0x0406 tx timeout [ 235.679531][ T5871] Bluetooth: hci3: command 0x0405 tx timeout [ 256.049333][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.071854][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.543858][ C1] sched: DL replenish lagged too much [ 317.437413][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.460297][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 363.945238][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 363.952249][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7337/1:b..l [ 363.960533][ C1] rcu: (detected by 1, t=10503 jiffies, g=22029, q=1095327 ncpus=2) [ 363.968620][ C1] task:syz.0.474 state:R running task stack:26600 pid:7337 tgid:7336 ppid:5860 task_flags:0x40044c flags:0x00004006 [ 363.983044][ C1] Call Trace: [ 363.986345][ C1] [ 363.989305][ C1] __schedule+0x1798/0x4cc0 [ 363.993867][ C1] ? __pfx___schedule+0x10/0x10 [ 363.998748][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 364.003998][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 364.009315][ C1] preempt_schedule_irq+0xb5/0x150 [ 364.014449][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 364.020203][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 364.026037][ C1] irqentry_exit+0x6f/0x90 [ 364.030481][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 364.036479][ C1] RIP: 0010:unwind_next_frame+0x12dc/0x2390 [ 364.042395][ C1] Code: 02 b1 00 48 8b 44 24 18 48 8b 10 48 c7 c7 00 6e a8 8b 89 de e8 75 97 b3 ff e9 43 06 00 00 49 89 d5 48 89 d5 48 89 d8 48 29 e8 <48> 89 c1 48 c1 f9 02 48 c1 e8 3f 48 01 c8 48 83 e0 fe 4c 8d 3c 45 [ 364.062196][ C1] RSP: 0018:ffffc9001a82f3b8 EFLAGS: 00000216 [ 364.068298][ C1] RAX: 000000000000003c RBX: ffffffff8ff33664 RCX: ffffffff8ff3366c [ 364.076286][ C1] RDX: ffffffff8ff33628 RSI: ffffffff906d1542 RDI: ffffffff8c04fda0 [ 364.084277][ C1] RBP: ffffffff8ff33628 R08: 0000000000000022 R09: ffffffff8173fd85 [ 364.092266][ C1] R10: ffffc9001a82f4d8 R11: ffffffff81ad8360 R12: ffffffff8100012f [ 364.100255][ C1] R13: ffffffff8ff33628 R14: ffffc9001a82f488 R15: ffffffff8ff33668 [ 364.108252][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7f [ 364.114347][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 364.120524][ C1] ? unwind_next_frame+0xa5/0x2390 [ 364.125757][ C1] ? unwind_next_frame+0xd4/0x2390 [ 364.130906][ C1] ? unwind_next_frame+0xa5/0x2390 [ 364.136041][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.142133][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 364.148320][ C1] arch_stack_walk+0x11c/0x150 [ 364.153127][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.159231][ C1] stack_trace_save+0x9c/0xe0 [ 364.163957][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 364.169471][ C1] save_stack+0xf5/0x1f0 [ 364.173758][ C1] ? __pfx_save_stack+0x10/0x10 [ 364.178723][ C1] ? __free_frozen_pages+0xbc4/0xd30 [ 364.184041][ C1] ? tlb_finish_mmu+0x112/0x1d0 [ 364.188923][ C1] ? exit_mmap+0x444/0xb40 [ 364.193453][ C1] ? __mmput+0x118/0x430 [ 364.197726][ C1] ? exit_mm+0x1da/0x2c0 [ 364.201988][ C1] ? do_exit+0x648/0x2300 [ 364.206341][ C1] ? do_group_exit+0x21c/0x2d0 [ 364.211131][ C1] ? get_signal+0x1286/0x1340 [ 364.215933][ C1] ? arch_do_signal_or_restart+0x9a/0x750 [ 364.221675][ C1] ? exit_to_user_mode_loop+0x75/0x130 [ 364.227158][ C1] ? do_syscall_64+0x2bd/0xfa0 [ 364.231950][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.238049][ C1] ? page_ext_put+0x97/0xc0 [ 364.242583][ C1] __reset_page_owner+0x71/0x1f0 [ 364.247545][ C1] __free_frozen_pages+0xbc4/0xd30 [ 364.252692][ C1] tlb_finish_mmu+0x112/0x1d0 [ 364.257397][ C1] exit_mmap+0x444/0xb40 [ 364.261664][ C1] ? uprobe_clear_state+0x20f/0x290 [ 364.266899][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 364.271728][ C1] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 364.277410][ C1] ? __pfx_exit_aio+0x10/0x10 [ 364.282126][ C1] ? uprobe_clear_state+0x27c/0x290 [ 364.287356][ C1] __mmput+0x118/0x430 [ 364.291537][ C1] exit_mm+0x1da/0x2c0 [ 364.295634][ C1] ? __pfx_exit_mm+0x10/0x10 [ 364.300252][ C1] ? rcu_is_watching+0x15/0xb0 [ 364.305042][ C1] do_exit+0x648/0x2300 [ 364.309320][ C1] ? do_raw_spin_lock+0x121/0x290 [ 364.314373][ C1] ? __pfx_do_exit+0x10/0x10 [ 364.319013][ C1] do_group_exit+0x21c/0x2d0 [ 364.323627][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 364.328855][ C1] get_signal+0x1286/0x1340 [ 364.333404][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 364.338981][ C1] ? __pfx___sys_connect+0x10/0x10 [ 364.344121][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 364.350310][ C1] ? exit_to_user_mode_loop+0x40/0x130 [ 364.355800][ C1] exit_to_user_mode_loop+0x75/0x130 [ 364.361111][ C1] do_syscall_64+0x2bd/0xfa0 [ 364.365730][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 364.370962][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.377052][ C1] ? clear_bhb_loop+0x60/0xb0 [ 364.381758][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.387680][ C1] RIP: 0033:0x7f8bb978ebe9 [ 364.392113][ C1] RSP: 002b:00007f8bba62b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 364.400555][ C1] RAX: fffffffffffffe00 RBX: 00007f8bb99c5fa0 RCX: 00007f8bb978ebe9 [ 364.408637][ C1] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000006 [ 364.416719][ C1] RBP: 00007f8bb9811e19 R08: 0000000000000000 R09: 0000000000000000 [ 364.424726][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 364.432723][ C1] R13: 00007f8bb99c6038 R14: 00007f8bb99c5fa0 R15: 00007ffecf693738 [ 364.440747][ C1]