last executing test programs: 9.30404182s ago: executing program 0 (id=1764): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'wp384\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f00000001c0)=0x3) r4 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}, 0xff8d}], 0x600, 0x0, 0x0) 7.709603137s ago: executing program 2 (id=1769): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4f014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0xfffffffe}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000180)=0x7) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000001fee)='R\x10rust\xe3\x9f*sgrVen:De', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)="a8", 0x1}], 0x1}, 0x4040001) recvmsg$unix(r3, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x1) recvmsg$unix(r3, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x74, 0xb, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x1f}}}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x16}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x3}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x20008008}, 0x4800) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x2, 0x7, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x10000}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 6.760214524s ago: executing program 3 (id=1772): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x4e22, 0x0, @mcast2}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0xfe}, 0x2}}, 0x0, 0x0, 0x4, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542c90bc21470e441225642855b5f2faed4a18d67efd5f2fdf98328de94410300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e23, 0x3, @loopback, 0x2}}, 0x0, 0x0, 0x1f, 0x0, "7c873eb0bf1265b9078a4c0301f7b9cc8644e953d839116ef5ba50526bb9deb02f583135a4e16fc10aca34d7b8f225748bce05090f9d8408c3e19eb58d1c1f7d38406a15840417cc1b0aa76c26d22f09"}, 0xd8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x3, 0x800}]}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000003c0), 0x8) sendmmsg$inet6(r1, &(0x7f0000001000)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000100)="90", 0x1}], 0x1}}], 0x1, 0x20008050) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x8c000003, 0x0, {[0x3]}}, 0x0, 0x8, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r2, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, 0x0, 0x10b8}, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x7}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000300)={r3, 0xcf}, &(0x7f0000000340)=0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) set_mempolicy(0x8006, &(0x7f0000000040)=0x5, 0x48) r4 = memfd_create(&(0x7f0000000180)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\n%\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x19P\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x94\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcM\x00\x8c\x849)\xf8oHA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xf4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaa`\xa9\xa1\x02^\xbfk\xfe\x18\x13(\x06\xdd\x81\x89,e\xd4\xb2-#\xd2\xc2i\xfd\x87h\xee\x03\xcc\x90Z\x92\xff0=P\xe3\x133q2\xa3A\xd9\x985\xa5\xc9', 0x0) io_setup(0x0, &(0x7f0000000040)) fallocate(r4, 0x0, 0x400000000000000, 0x7) 6.446923077s ago: executing program 2 (id=1773): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000017c0)=@newqdisc={0x64, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x6761016298249acb}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x12, r2}, 0x10) socket$key(0xf, 0x3, 0x2) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0xfffffffe, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x300, 0xb400, 0x2, 0xfeffff7f00000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 5.871267183s ago: executing program 2 (id=1774): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_emit_ethernet(0x76, &(0x7f0000000140)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x40, 0x3a, 0xff, @remote, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x9, 0x6, 'EAC', 0x8000, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, [@hopopts={0x89}], "98efd03a7e60b623"}}}}}}}, 0x0) r0 = eventfd2(0x8, 0x0) write$eventfd(r0, &(0x7f0000000140)=0xfffffffffffffffc, 0x8) read(r0, &(0x7f0000000180)=""/78, 0xfffffeab) 5.57659395s ago: executing program 4 (id=1777): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r5, 0x0, &(0x7f0000eee000/0x1000)=nil, 0x1000, 0x8000000000000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r7, r5, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x101041) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRES64=r1, @ANYRES32=r8, @ANYRESDEC=0x0, @ANYBLOB="2c67725275705f69643d46a213f57a89a31799f878ae59669353d76a9727ce24f72714fd5182f424c67a1db94d65a73c2b319ca73010fdb85693e49eb275", @ANYRESDEC=0x0, @ANYBLOB="00ed80bcac1bb312db75"]) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r9, 0xc0405602, &(0x7f0000000040)={0x30, 0x1, 0x1, "1c13ebdaf2f20d57185fd75a206d58e85b2197edb1479b0400", 0x35315258}) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000000c0)) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000180)={@private=0xa010101, @private=0xa010102, 0x0, 0x2, [@loopback, @rand_addr=0x64010101]}, 0x18) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000000a80)={{r10}, "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"}) 5.252108719s ago: executing program 0 (id=1778): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() ptrace$peek(0xffffffffffffffff, r0, &(0x7f00000000c0)) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd, 0x3, {}, 0x7fff, 0x8, 0x1, {0x0, r6}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_MKDIRAT={0x25, 0x62, 0x0, r2, 0x0, &(0x7f0000000100)='./file0\x00', 0x1, 0x0, 0x1, {0x0, r6}}) io_uring_enter(0xffffffffffffffff, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') fallocate(r7, 0x10, 0x200000000000000, 0x2) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(r9, &(0x7f0000001740)={0x2020}, 0x2020) 5.060209152s ago: executing program 1 (id=1779): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x1000000, 0x2b}, @in6=@private0, {0x300, 0xb400, 0x2, 0xfeffff7f00000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 5.002188426s ago: executing program 2 (id=1780): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x200000001003, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x7, 0x3}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x2000c850, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(r0, &(0x7f0000000a40), 0x0) r4 = dup3(r2, r3, 0x0) mmap(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x2, 0x12, r3, 0xc054a000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/206, 0xce, 0x0, 0x0}, &(0x7f0000001380)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000400)=0x40) 4.607300239s ago: executing program 0 (id=1781): r0 = socket(0x18, 0x80801, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000012c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000440)=""/228, 0xe4}, {&(0x7f0000000180)=""/91, 0x5b}, {&(0x7f0000000540)=""/159, 0x9f}, {&(0x7f0000000200)=""/61, 0x3d}, {&(0x7f0000000600)=""/177, 0xb1}], 0x5, &(0x7f00000006c0)=""/16, 0x10}, 0x5}, {{&(0x7f0000000700)=@phonet, 0x80, &(0x7f0000000a80)=[{&(0x7f00000013c0)=""/28, 0x1c}, {&(0x7f00000007c0)=""/251, 0xfb}, {&(0x7f00000008c0)=""/78, 0x4e}, {&(0x7f0000000940)=""/189, 0xbd}, {&(0x7f0000000a40)=""/6, 0x6}], 0x5}, 0xfff}, {{&(0x7f0000000b00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000b80)=""/232, 0xe8}], 0x1, &(0x7f0000000cc0)=""/131, 0x83}, 0x3f7e}, {{&(0x7f0000000d80)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000e00)=""/22, 0x16}, {&(0x7f0000000e40)=""/37, 0x25}, {&(0x7f0000000e80)=""/156, 0x9c}, {&(0x7f0000000f40)=""/81, 0x51}, {&(0x7f0000000fc0)=""/243, 0xf3}, {&(0x7f00000010c0)=""/231, 0xe7}], 0x6, &(0x7f0000001240)=""/128, 0x80}, 0x6}], 0x4, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6080, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') unshare(0x22020600) move_mount(r3, 0x0, r3, &(0x7f0000000080)='./mnt\x00', 0x214) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000080)={0x1000, 0x8ba, 0x4, {0x4, @win={{0x3, 0x69f20258, 0x8, 0x8003}, 0x6, 0x1, &(0x7f00000002c0)={{0x0, 0x8001, 0x859, 0x1}}, 0x8, 0x0, 0xc4}}, 0x40004}) r4 = shmat(0x0, &(0x7f0000ff7000/0x3000)=nil, 0x400c) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000008, 0x110, 0xffffffffffffffff, 0x75bd3000) shmdt(r4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f00000000c0)={0x1c, 0x5, 0xd}) r6 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0xc0882) pipe(&(0x7f00000019c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r7, r6, 0x0, 0xff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009d02"]) socket$inet6(0xa, 0x3, 0x2f) connect$inet6(r0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044941, &(0x7f0000003d00)) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) userfaultfd(0x80001) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000a00)={0x2, 'lo\x00', 0x2}, 0x18) 4.488349756s ago: executing program 1 (id=1782): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000440)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) write$6lowpan_enable(r1, 0x0, 0x0) 4.155852955s ago: executing program 4 (id=1783): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$inet(0x2, 0x5, 0x0) shutdown(0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x105000) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000140)=0x8) r5 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000140)={0x0, 0x6, 0x4, {0xb, @pix={0x0, 0xfffffffd}}}) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@hci={0x1f, 0x1, 0x31}, 0x80, &(0x7f0000000180)=[{&(0x7f0000001300)="b8b28225ea772f0daee8c7", 0xb}, {&(0x7f0000000100)="3c6f88fb", 0x4}], 0x2}, 0x20000814) 3.86762068s ago: executing program 4 (id=1784): r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000e00)='blkio.bfq.time\x00', 0x275a, 0x0) mknod$loop(&(0x7f0000000040)='./bus\x00', 0x208c, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000000000000000feff00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 3.540300139s ago: executing program 4 (id=1785): syz_emit_ethernet(0xfdef, &(0x7f0000000fc0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a60f510000fc020000000000000000000000000000fe8000000000000000000000000000aa84000000"], 0x0) 3.499929488s ago: executing program 3 (id=1786): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) r1 = syz_open_dev$vim2m(&(0x7f0000000200), 0x8000000000ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x9, 0x2, 0x4}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x8, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'BRTI'}, 0x0, 0x1, {}, 0xc93}) sendmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x500, 0x80000, @dev, 0x0, 0x1}, 0x80, 0x0}, 0x5b4}], 0x1, 0x850) r2 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r3 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r2, r3}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-384-generic\x00'}}) keyctl$update(0x2, r3, &(0x7f0000000100)="94a990f9f9c22045793e8bda55ec04daad209d30b003d829c882c5383f544ff95dbb856f0b02b1bd37e0d08641b53f49742c46c899812ca087f71aa1a4de7632c7b13145e2e567a4ba2c87f9b618d9eb06418ccad87f0be083c55efe11e46b7e1d67672b90ddb029b68cb393cdb0bb36ba43a1cbce78c9789fc92541f5617d2837092bfed149e51bfbeda4fde6059ecf85c7d442879461526ade7e6b1b86df6a2d", 0xa1) 3.422382872s ago: executing program 1 (id=1787): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000008c0)="3bcbdb0fcfa026557d2ea2b0fa34b7b3ddf4e60fe678186210e935989ea66d7c81fcd371943f18f118107da91cf43c5479ca82428e90b96b3635a98e39939ef5109511d949224164c044f18fb4d64db5c0404f01b99fba50263ee03e82a28fcd751660b0cab68a62a8b6eac29946c988fc747092d35e935ad8442feece96b4ee481cf95a8feb6ec3d6e5cff03f59eb97136d7cb400c1d0ed4ed9b83090abb113aa4e9260", 0xa4}, {&(0x7f0000000000)="742f311ac0f14c14d8a5e88c95eabd83a225186431237ba56d1054bcfd53f0ab68", 0x21}], 0x2}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000000f00)="52348bf9812fc081678b5760a4c4967393fd8939aaf12a894c5424df616c4eea14fbac2dad114a75c405d89fafa5715b56abba4bbceca456d8225e3f6eb57a03287e74c7bd74e40e3fda3150f92d181e7c82cb2f8ea0416fc4c0f111161cdb9a52911925644e25f871d02f403c83214f830f93b30b874e75cab53f1ed7871f21c0d654a47fab0637868517d7e8d9915e99b4dc2dcafdcb2ef2a012ec95418a544c32181fb969e01318e00a12fd1b2a0eb57bcf7de086e320f2d4be4e1453010be849e4d7dba41558329699aacd3d1c7d97b9bf74caf8b7946647309d209558b1965ef7ea4576ec0e289b73c2089310271d0a67d88a312f4cb0194c4f28ec3c2fe269311d0cec1fe0efef17d376d183b08e392b6cb58e930e1f959dd4528ec95350fc86e5297e6d59af036b132df17833881238ba8692842a8da4d5b4a37c94915331143d9128a197495433c2f550b4455a9ae03b937305e192e861ca3a60f9b3a14288e3daeb6936593485388a4aaab39b3843ee2960d9c8728eafb904333e7b78a270480e8dd89bc4cf0b791013cff43bf314e11a44d5f9c4fdad8a2fcdb04f76de29a50a0428148f4bc3eff1e84d25ea95dabddfba6162860a3c3389ee366450b6bcf1409f920caf1be5702af0402e2cef4896d9544a26ebfab694d7a47eca55bd2f62e7d7eb1f6061f7e441df5ab31344f02179764822036ef706133ea1a6380e042f074b2b0ddcc578cb8a668a846b9d5792f8d434f8ec7b562594587c49e8", 0x221}], 0x1}}], 0x2, 0x4) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r4, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0308004d"], 0xffdd) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000007fc0)={0x2020}, 0x2020) 3.200299788s ago: executing program 4 (id=1788): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'wp384\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f00000001c0)=0x3) r4 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}, 0xff8d}], 0x600, 0x0, 0x0) 2.600235949s ago: executing program 2 (id=1789): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) r0 = socket$inet(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5, 0x0, 0x700}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000) 2.513947097s ago: executing program 3 (id=1790): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c020000190001000000000001000000fe880000000000000000000000000101ac1414bb00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c00000000007d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003300000000000000ffffffff0000000000000000000000000000000000000000000000000000000044000000fe8000000000000000000000000000bb000000003c00000000000000fe8000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000000006c00000000000000ac1414420000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa00000000330000000000000000000000000000000000000000000000000000000000000000000000000000000000000020010000000000000000000000000002000000006c000000"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2.43605057s ago: executing program 2 (id=1791): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$binfmt_register(0xffffff9c, &(0x7f0000000240), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000280)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x80000000, 0x3a, '#$\xd8.}', 0x3a, '^,.', 0x3a, './file0', 0x3a, [0x4f, 0x50, 0x46, 0x4f]}, 0x33) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000e80)='/sys/kernel/profiling', 0x22042, 0x0) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r7 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005240000000d240f0100000000000000000009058103200000000009058202080000000009050302"], 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) get_mempolicy(&(0x7f00000000c0), 0x0, 0x8, &(0x7f0000ffd000/0x3000)=nil, 0x3) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r6, 0x4008ae48, 0x0) r8 = socket$inet6(0xa, 0x3, 0x75) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast2, @in6=@mcast2, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2f}, {0x0, 0x0, 0x0, 0x5, 0xc6}, {0x4, 0x1}, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in=@multicast1, 0x0, 0x3, 0x0, 0x0, 0x40, 0xb}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@mcast1, 0x4e24, 0x0, 0x0, 0x7, 0x2, 0x0, 0x20, 0x73}, {0x10000, 0xeca, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x7789, 0x10000}, {0x0, 0x0, 0x1}}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x0, @in=@private=0xa0100fc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0xe4) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110019bde521023398a71d7d80102030109022400010509401909047b07022d51d5980905eb0220000202050905e6", @ANYBLOB="fe"], 0x0) close(r8) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x5, 0x0) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r9, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) 2.42196858s ago: executing program 1 (id=1792): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x74, 0xb, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x1f}}}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x16}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x3}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x20008008}, 0x4800) (fail_nth: 3) 2.238911673s ago: executing program 3 (id=1793): openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004140)="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", 0x2000, 0x0) fsetxattr$security_capability(r0, &(0x7f00000001c0), &(0x7f0000000200)=@v3={0x3000000, [{0x10, 0x10000}, {0x7fff, 0x3}]}, 0x18, 0x2) r1 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x410180) dup3(0xffffffffffffffff, r1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r2, 0x40045431, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000040)) syz_open_pts(r2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x8083, 0x0) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f0000000000)={0x6, 0x7, 0x10021da0, 0x0, 0xff, "42f42749a2ed195a14c84953dc7e8e5aec7776", 0xfffffffe, 0x1c67c}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x18, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x20002, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x7, 0x1, 0xb, 0x2, 0xa, 0x300}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.95613461s ago: executing program 1 (id=1794): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r2 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "2697312e4e898ca7", "35e23ca3a988def7dfbd438c536346cd", "11398f4a", "50cc97386065eda9"}, 0x28) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000300)={0x0, 0x3c9a, 0x0, 0x0, 0x363}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="7000000010000100"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000500012800e0001006970366772657461700000003c000280140007002001000000000000000000000000000014000600fe80"], 0x70}}, 0x0) recvfrom(r2, &(0x7f0000000380)=""/181, 0xb5, 0x40010001, &(0x7f0000000440)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) clock_nanosleep(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r8 = mq_open(&(0x7f0000000000)=')+\x00', 0x40, 0x15, &(0x7f0000000080)={0x2, 0xfffffffffffffff7, 0xf633, 0x6}) mq_timedsend(r8, &(0x7f00000000c0)="95efe493cfad4681aae58b430c4536a597a6bdff81170675e2ec18fc3330f989f6c1bc52770d551bbbb9e5b89416b9c4e72449a6764eefe7e3", 0x39, 0x0, &(0x7f0000000100)) 1.262394203s ago: executing program 0 (id=1795): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0xa00, 0xb) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x2, 0x8841) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000140)={r0, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a010000000000000000030000002000", "280991800000598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac000000003b020000000000000002000000000000000000000000000097ff", "90be8b1c5512406c7f000000155cc30cf11d0bc000", [0x4, 0x7]}}) 1.155291952s ago: executing program 3 (id=1796): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x300, 0xb400, 0x2, 0xfeffff7f00000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) (fail_nth: 8) 920.158671ms ago: executing program 1 (id=1797): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000440)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) write$6lowpan_enable(r1, 0x0, 0x0) 918.132751ms ago: executing program 0 (id=1798): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80203, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) eventfd2(0x10, 0x1) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0100000000000000850000000000000065f30f0148b8"], 0x85}) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000000, 0x4010, r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x3, 0x0, 0x0, 0x0, {0xa, 0x4e23, 0x3, @private1, 0x7}}}, 0x3a) read$FUSE(r6, &(0x7f00000001c0)={0x2020}, 0x2020) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0xa, &(0x7f0000000180)=0x2001, 0xfffffffffffffcc0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r8, 0x29, 0x3b, 0x0, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x800, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r9, @ANYBLOB="83550500010000001c0012800b00010067656e65766500000c00028005000c00"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 226.449473ms ago: executing program 4 (id=1799): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x200000001003, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x7, 0x3}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x2000c850, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(r0, &(0x7f0000000a40), 0x0) r4 = dup3(r2, r3, 0x0) mmap(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x2, 0x12, r3, 0xc054a000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/206, 0xce, 0x0, 0x0}, &(0x7f0000001380)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000400)=0x40) 216.623533ms ago: executing program 0 (id=1800): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000002c0)={0x0, 0x4298}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa006}, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r4, 0x6, 0x24, &(0x7f0000000c00), &(0x7f0000002000)=0x2) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000024c0)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x3}, @mpls={[], @ipv4=@gre={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x11, 0x0, 0x21, 0x0, @dev, @broadcast, {[@lsrr={0x83, 0x3, 0x74}]}}, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "50726483718ba3e6d08f7571cc59e627d3ed353e879da15784c220746fc2eba11f56fe932b544f53b43a34b265bd5d44fd38791b56b3b8767c382bc52ee2b8fcbbd661f151afd5315d5f502920c297a3916d7ea039eb558ebb06336662367e15363058de9b806035d5c980832248d1fc96c6b2fb2a4dffa91026dd0228974f70bea2a8e3fe0c9aae345d6e19f2"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "ac10ef31176d1af88e863d588661a0756365388ef6f2d7b69fb82dc9e7de475e5aad52fa5b61fb1730a4f8ba342b81d86460c5cc35df8bdc3e55e1e92140c9ed10cfd396d4fb331e1901da8dfd47cd7431fd6cb967f7d84f0ba6de4a73b26c286edc3684534e70f60b30b7aefec9309c13a29b35e134d47c3579870d43bcc2babd71412ade39c68b036b5e7a6e90c25efe7a5b3ff3fae0fe7459e71cb431cb8f6a45a9a21d938cbd1de67fde856f05154095c3d86b9f4bac02987d8a06aae5f8d3da56748f1f6b1e9de4d1afaea08c70a943b080bf77494e5dcc17fe38bb0a0b36a008f7805cfdbe5a89e2e12e013b6ff42e3f9e825f3d604768f87273edad56c12c8a5eacd9b63ea6fa1ecf16139cb19c579c4f0a125a755439e6dc9c1637c0d23c1c281af2982cca306b2d3dbaede299bfe4f2ebd822abfabafef3f159049cc24f01a412fafe3d43841a6a4dbed78566e34544a074d4c01cedbb22527e955e8f93ef5a927fdec293a3c78693cae45de7481fdf0f65a43b50d26904594676b7af375752c99e2ba3e00286ab9d438af7b8834c0e71d245c0428ecc5a59f29ab0bca9b1913b9bb5373a94e1daae374d0ed7e7ffd0a1188c83e61e8ee28625483a96a246b9e1cdc8da085de61834a15afd5e7726d711c5ecc008914b9b9f35603330113e548e4509516bac6bc1150b2ace667a540ec84d22c0d0200056918fa3ac596cddd501f7b34f3b97c12c3c10e4b0c67ef01059c2feed93f9169498278daabd27d8537882a87b2edd4b2e6789b90d065ba7a064b2b4ecc1622c8662b3145844c12491ee85dd2acbe057479db9d24e500d9f1af37745f39e7fc7d4e513fa839556155db1ba6d62465a464184f2f4f9c4c822e64c6a357d7bc06caf64db283f0a3a427b400b7dd4df488c9e30db1fdb1774038d32557b69f9c1eba7ec66309bc68c19200aa5f05ec21c1cc9a12667cbae2863198913eac1de18df558c1b5fbceb0e6b521e120e98b39ecc8cabb6c25cdc31d827eeb549fe548f6b29d4f65b176ea0a20411d750f02c660cba2c62935fad8c51324f6f437daa53c81ff2e19b94140f1d72a2540b3fa74ffe85c696a4e4411d4449744ca4b5e8b921c7d62208b88a1df38030c4e09cd264a9c534259737ed6ea798cbc2d0054845dc84e97295efad0f5228fc61710e75a4445a889e230887845fa7f02be62593c352cb344a0f947bdb6c4cf3aab5ecedbd4fdde781c496db32a51f700b2fc19b2c36e257bbb2c735e0f03cd9e49700aee6edaa6952bdc2feef2d2e5463b6778fde3c7ef73477e22a181816883192beee132b3866c4ec977e0cd0b995de650c4c7d3e6e483685f75f9d82f69868d67e64a59e7320707847040bed7bb8c24d5e6a1da326d3226e71933484a2c619592a00db3b086d5fee139abaae14d65698937ef8c066acc7134f085e1e8ccd04a67e128c2d775740f0727c14dfbf8a2ed7f25d353285ab0fd03a8788d725163d27ac13ced25669301f672fb1f404451d85e92e1d0049fa9558c8492cc336ddd5133cb1b307f2901341fb6a021e1b751f22412e76fad6ea2b4a7d756559619fa47b22bc55ef8fdc19fbd6136becc60ff19748e60452e704752c82beb4861ea118875e9fe75a9e6c10c8b922dd8054ef8dd15963db6d505e7eab028322801bb4328d8257e726d937ca83c8efca320c8ecd24313eb5e8114c604781ed936a82740340ac6692bfc3613d2f49bf8284cf60cee6513fd154034e49af838146872e8735962da7f7bbd301f2fd85e597c1b6f8418352ebec83286f9dfab4a0b4dbb8b9c7b55aaf9ac1628d1493c1786c78a8a0b8c58596f1e1ba92b7fcdb80e867fdd299c78b902ac2de3c6d6bad6c5fb0c5db603b7c3c7ff8a64dc4488e07d2b506db960db1503ad72dab8ef405549a5f12a62052be8f7ad3fad32ba8560a8874c06f815ec9912dfcc16d8e0f8c9ab9afceae435a63dcdd1dc6b1e4d186f306ec1c8af08e69ad8fc9860c9bad1af0654c51e0711ecfa47c6b4411010076c975057db6609b47fda736f6ef81863387e3c971479a572145aab35a24475ffea35c1626b644ba12ef8d92cf9310f722b493b2da8ea4c5dcd99d75167e1404642aafbf5db3f8ce95382d7bbd550c0bae73af75dc913ead260ce475b30879d4279efeae49e88b0071661725e9ec5b3579c1716d70971fd301d8ee090a98120bf35ffa62101077362a2a3564022b0bff01e76e641fc01ff731a834509600aadeffe2f00276de348a3c57778865063bd8e348b6e68b5c74298ba911a184f5bfdefd6473272c174c9e644abdf22b3ac39e246ae947ffef4773bcfec3b2a8d03dc8971471dfc50cd5ef6d32ae3486f7d14b0137e80a313910d9bc87aed8c41c6563f646b39c2a26f4add083ab6efb5753fc6b78e7907b9cd8a2cabdf87e202239fffc99e0446915c3bc147635398f73201d7369902225184d8da01641759645bf92b5d73ab153f2150264c3333ce12747ce2642aa04aeeb85513170a67dd93b010e8fd0f3cb290e1fc0040d32bdad7d8b41c4f2d10a3c170dbc3e264e29714a34dd220c2bf3e273d7cb3a9397b16a47c85cca75e4cac2def7c976fb7f38b24bdb8f80486e9cec55574d9f2864085289fd2fc497a3a7fab762877629db9ff70201f07897246f9f5211ced9266b732e9988805669dc1bc8e4ddd235562c7785e2379f1f0dd1e71a98b6d204e6c1a1ee163ceb35f6c436bb2547522bed2a55814a3f5f53d3eceee6c847c12af75fdc8452116ab891a5c6424a79b33c4b56a5412700a907f3eca800fcfba133f8bab9ebae32c699b548aff3ac702699f293fceb7445a7107956adad16a6b73a2fe0c88232f2d9831b238b92c511e4a6e02f784ee328bd979c4728ba0f86cc4ed9a69c6d5bc23496729a6512c4664006afc08de2f4dd89e52108f7c081d11facccb91ebc82415691b6bf05818638b3a4d809ae307f4b2d867a34417dbaad8c01a3773d8ebe56890230bd4a2e2a027d59839e1710cb5d25cec245ed8f86b7d4ed8e4ec48c53387ab1ea059406bf2612a6c730750b41a47bdf51cbec2c3f1b07fd6aba2ea390e138868d71f0a73990e87b383757a199f53bcd25f93b15efaf84a9a3758f5cbc2223a809ba784a5af2d36a3b99e3d143310ecf2bb9d2dd8fe9defdfa3d82e005c52514f13beb97476fb7a0f7ab62892977c9da0b950dbbc89bdd58472619f3bdbf46def88488e7bdf0633ee908a4e4e795e92037b74db18672e168514e2ad0a2df94357f2dc2c593b251894657c6bea65abfcd76b7037bd5817ab73be94f00031150f375442e0f0d0e7236ed4150637c14f62ecb6713f897889d77d814ead5774d726f307fe32c020cdefda72151798fcde65af6fbe6594eeb078a8c414b949c0c2217a0cc82049c43f6fb3cb7c00fc0305b86dddde708dd8a61a63e799abdd49d6ff1c41b8ecb230891037ca36d7a7e1f6280f52a5d45ff872f11df408ae09fc9b9d371ccf4f2777626ad84426d925dac9bbacc785acb5c29cbf9d6aec77d5ac48778ab4682b7bb611f342a72c26417a5e432e5d956844e19739e61999a78c615acc09f415032031ac6cb839da764331d131acbe66b502e7f1a5b9dc68df7f5524e7bc6fdfa982b39af2cbff69052d04be78821282dbfc034e64943004375f16cf4741526aaafebfc1a6d4a38d4c345aa22c94922f145b6c449a216b6c382565598125156fad8097c2e7ea65063cdfe34e50fb75939f3b3cf5ab8a3448ead3cc36358f45b0eaabf8ff2b64a1923407226f24420978d03d6bcefc2b45a74425017c11146e25f6d41912f39afecaa19090123ea2605994978b00a347aba322cd10822933e3f5988477ce1b2aff651553ec4977b185e5c7aaa4c64b4fb49cfc0cad75e85c0617e19f26fd0932a4bba0821d5a4d9449773c2d3c25e8aee59155346502b72a4d6818f143695acd5b83a336d02e2d1b9da5740e287c4694012f9648656c51cd44431c54301ea55f48197d1280421793598db89820937aa6a41d69618f55fd9c40dc0742e77d4ddf4a68a6cecba47ff0a22e2734bc9556193642b92838c891b4ed109af35190332aabb9aab184076cfc99f08814bebe47fccd12005ad926a643c791ecda50458a1106a033408fb90da10f8d6e42b3a462e9f9a1a2752c21967884ea79a1148f3dd0304bef05747458c7859dbf7f6df08074e9ac221677b70546909329c5557adb255cc33c1f9b762188e2498a7744f066df3fb8bee6261db37489b63f9bda047a06cbc588ff1255e3b63a86a5ca353160e0dc4088ea691c768f5d36397cb64c6db2d5bd39473a9d1209d021b8017434874ed5f99d9fc27d5549eaecdcfb7093549acaea45610221192942e108def0efbc004bbfef195af7dcdc0b75097eba13d621c2ca5ee3bfd2845b21a910e8ea21536768e1e5081997ae7415a55e58e1294d8ff3bc95faf96a65501b922382f4f75a0f938b290fd66bb3ccdc33734bafa18a3765d23f151951b8c8c6939de018c4e9ca253dff4a1fc70a601bba8c2e146a79166745e5fd1748c638a7a945e5f5aea0a93c7861446ef5996e37231e573245dae58b168c0564c8b27ada3fde66bb00f51f7e47970855d1057739ccf583666055187173bfd1454a5fbcfd59f39b6ad63fbfbe0fea9a6b336a41ec316acedd38cc6fab7de1190c97bed6e8f1cdb47d59941955f87a59d953c0f60f68a63fcf8f6f76b3eb5d79d94a2eeb3fb28781b1bbd31937c6f6e2d6fa7d2f4134702fdc0a2250bbec420c73a89c1643379235a492c2cbb3280ec3e676fcc1b33aaa645234eebefb1c28c52646a33c1989a386d537cd5ebf89f50b575b37b9a337f653919a569229009"}, {}, {}, {0x8, 0x6558, 0x0, "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"}}}}}, 0xfce) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x20000045, &(0x7f00000002c0)={0xa, 0x2, 0x395, @empty}, 0x1c) 0s ago: executing program 3 (id=1801): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000004740)=[{{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000380)="b674fac5cbf92eb6e529f84bf6ceafdeecb2fce84ec22c1a4520709eb2c0bd7da92ca9d38df602a885068292e19706d542c4a872bf71ee31d93b8581b7251e14758c630e146c161e30eda8fcf5d89d943f7133e35aa71d9738c7f6adebd8a45b085ec9337642eac8515b8179ecedb3a854e7c468a964128b8c0b9dc08b805ba21de0c7be47c324ff0ba01d1b14b89f01e0ff808836f15bbe3703b6cd318effffec88", 0xa2}, {&(0x7f0000000440)="f0db0c2551082478c30edc9a4c13c68502eb2dcbfb74593fd4ef1a0255183b31995933effd8d62b69b9c62753d0fa9bab017677ebc9bcea144a61a43ec98c46d677a30dd7e402144b0f95c57b49745cfc71a8c07d7a06acc86e54f193fafd50ec610d833ef3f664ff642b45181ac49a862baecbbc53d4a4a2dc7b690fbddc497013dceeff940df86c6c69a9076c2ec7d03544c1fad7056d4e736942d77f629b6fd1c1ffd3e496235d30ad19c6ed76793494095436de6dabe63d4872b51c818d6d81e96b9ec19f394de08322c4171453aa626129999e8283d92582d83493efbdaf10eb744e17495668fd4354b89998c077284f8dc87122f", 0xf7}], 0x2, 0x0, 0x0, 0x20000000}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="cb8bb222c5", 0x5}, {&(0x7f0000000540)="39726fc230924fd40f3575771a44961dead7ee204aaa32f3a3c4a63f280dfff2b7aa1d610601f36b64fdeb9ec7f0667702dd0c5b10522f877fe022acf57e8f303339a29c2a1aef9d66ba87b76372d9556478bcee055634fda1065f56b3c14f3d8374e2a9413b9e6b2d308a7fb3224093036c52bae51ba796802eb2e3bcd4d1368be4ce76c8276ec026da7aa543f924f3bae1a192ab7f174cd888a89e7f65e11032e70b0d4111d552837f6bbd8075c0459633a360c10025bf3cb9dca86d42c139283a17da", 0xc4}, {&(0x7f0000000640)="b72a8bccb4525cb15fd515ff3c3c4fab191b2bc9bf43679af22cbbfe6dc822e8f3ca632cbb85a349c2af97adf81d90b5e6848308070db8316e81a64df8eeed3ed5fc78778bc621fc668e6ce9b1adf9e4aa568922632bc2997ee153815333d6373e916350", 0x64}, {&(0x7f00000006c0)="2ae0b975f2e186060c94897f11a33dc9d065f78b13feb7ce8a323d4c12b0abf56a18a369319277363f40a68a324bc53f0d26692bfebfd932222f71fb453445cec4a455bea67b03742a9bf990e6261c15977da2ad2603d14d9963314fd0f78ad617bdcf505236f1f904ed01471f2a9e9f51d98affb068ad3786efed42542e84cf7f21bf07f6d21d1945c492eacf62ff34c742f1e0db061baebbebfc8603097024d3bc17ecd11818d1e15df80911927aeded2822c2920290886f598a7200b1f6d79511e85571fb89e71f273c", 0xcb}, {&(0x7f00000007c0)="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", 0xff}, {&(0x7f00000008c0)="e8c7f9f463b30d5e3aa3a6a8ea1975879cd7eb3d77ecf75f720fdca908afae9cce0cbc4e747f177b3cd1b5baa460b145592452d710e2de83d9aea95c3d091b564b719dbb4af69449dde57cdee24f834693c64c263e9bf51b656717aec0fdefc7a8983aa5424b574199d1ce367c35f9a11a481174c4d95b097161d8987f2e0f28da3e4a7fab7e1fa149b8294540d7396c257af04154a6b3888c690eaa896d78e6e784266eadc006e03412655505a8bae032aab4280464b390213df6d9d3c4c1aa9e5fe04f07c7e8e212a6233b80ded7b47762c13d1cb5ac39", 0xd8}], 0x6, 0x0, 0x0, 0x80}}, {{&(0x7f0000000a40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002e40)=[{&(0x7f0000000ac0)="96f6ff2aaff31c54934574934f579c4df3dd776ba7bb2b03750897c18a3661954f96f9a7cfefc781cc5223cc8d750aea4d3cc98eb7c643929bb34a6f96e0b379d38159e5f98e668c50f9d934dac74d1f4d9e6e7be6e5daa06b4ddc6320a90e34e1b16834c70fb6d3deb4711a1215dda9a6c3fe2edd771e784ec93e32c7591a9c92d349df31b7ca59d0fe6c88c1dc8c102f47dff21cb7049c99ed8704df9f4c3b87550b971b78f10d693abafbdff4253ca850209fc06ea6ba26951c3222fee01fa78f7a3fcd82d8b185da36f203d42da95c7485bdbde18a2a2bbfe09759f92663211ea29cb72b9871d30fa706be5fa9c224982fc6", 0xf4}, {&(0x7f0000000bc0)="98ad8cc8f063328b590823b71919820c9d6de3d469ca88af1b0e9d41f69c9b706d342ab01c1c4eda3ac5e992c9b39571ebe5aa308c0e223e52685c9990498027d53d51c419eaf7f88f2b150878d352886555dff0641e00a091bb2ee1facb5d28a714e20111a6891bd9bd2e45793e3c235c484095be973128250cc97861282bc2c332185817c3fd2e5230429be96c546316d7c1d91bdbcf09c93961e0062da536e2d40ccf2243663c3d56886b31ca2c9ae31f729b30601da96891d2c7a852666e8657462036dac244a9823c166cc6fe099cd58bfd34e1e3fcd0e65027b4e40fcd2ff21fac04297f0a264b", 0xea}, {&(0x7f0000000cc0)="3282bae6349c20b830d927358cfc5ced1b63aab8121dc7d14cfe36e32e4a1220082a889d2139f6d69bec9f0340f0a7dd88c643127da1f539bfcf306afc4048f61fa10023fe5668a7f6f0129be464487318ba5d5acdf75054c88f011606e0bf5acd6635d30e94cfc8f52d7d8face97f814d1bbe96207b567c4dc4f53788ba5890ede8b1bcec8876516943d60fb73599ed346a3f9865e0", 0x96}, {&(0x7f0000000d80)="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", 0x1000}, {&(0x7f0000001d80)="a7b4b718d00b645c3f0adc88e9070d6db5d1c81669377a265d373b91ea5d624a0376adcf8632036c5a76fb9b18024f1e97c93c76c9cfe613ddd0e1e01466539cad7cd926d802fc4c131bd7c86a34c0cb31c846dfc9c41c46fae5a39d236247c1b1146184f8e1aadc12b0045f44f325f122ca159a1a7f037b70fdd0ad865b", 0x7e}, {&(0x7f0000001e00)="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", 0x1000}, {&(0x7f0000002e00)="c76f6b0d87cb5e7269dae3b68d12e8d77bb819c3af66da95df70fef7c26261b7a3", 0x21}], 0x7, &(0x7f0000002f80)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40, 0x4004804}}, {{&(0x7f0000004200)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000046c0)=[{&(0x7f0000004280)="764e0ff1b46d1b5009ca09c050dba9eee90b3dcb10c0272839a9a28e113b87a546302dcf62dccf53296f211ec5954ad638aee81aa833d5594708d3f6137b0b9c69598f3b5fe27b05bfc90a4b47480d57abb3d4af1d0f89047e6c530e6a724f8f4f2d93d019d8145756480f65bad7774d44b0e19995c4c2641ea972fc9178879ac1526b9db22ead76a46e4dfed6b5ff804eaf4479931ec671856449fad31cf408364d0541864b9a0804a45dd7", 0xac}, {&(0x7f0000004340)="3c9d074e285eebb829f8ddcac2175a402195149d06db484a19bfa049a8d9bea3b7f3aabe10151262485486948844ac1fd325a2a02acef5e2cf1b37b15eaca68372e4420e134711d8c20a67cbfc9f36af9de4d429ef65b538be2276b991ec2e6fcb671df1dade32df8c1be66b6fe86bf75df5cb33ba73", 0x76}, {&(0x7f00000043c0)="3fa55103e94b0797ec6dafb2a94a7424447887b4788721f1ba177438160e155ca3e44adaa6cab1262e79e121f4d9bb6cfb835b6804d40ee10af35338f93d5cd8bb5a7c5b731f4c3fa683bd49666ac3014497e3d455e2d34b27bf018a5464f355ffd376cc64fad86110c02a5fae91ee09154c86e70c78b41e1884ed2f9b3bf1ce976c512665fd5bf5b335105e6bfd4c2ecfa9e3125f3eb3a941c23326ca74338f14ba59f5d98c38ce3d5c61f496b7855a41186294c025af5bc27f46b6fd17c1b0091b988b1ce5b5066a42ac6e1db82bbfb114b67d776e18235d208c04861f327eeb5b3043e7ee7ed47a2867cff88061eeb57f9a0d4505e4763c", 0xf9}, {&(0x7f00000044c0)="65b1f0d641715f284184fc04433075d5bdaa19245e106147b47760bdc4bd38b6a7ac759d96a15415c24770c587d909379aac26dc47d0604dc2097628743e6b968f0f29c5360444ab43aec2f8ec47bf63f8206595815de88e97fbc59270d4531f2536beed7166b6a96a9fb90cfa0fdaa9be29bd3b5dd3ca89476f9742bba0fc8a422996add21f98ce3019cf5fd2ec330b3e253f703aea7abc99b48daa23460529378055a276df0f9dead68bf759235bc8eb8dd852", 0xb4}, {&(0x7f0000004580)="eb6d6026fa20a9fa1322442d2ac98e173949bfa5fe0b06f8dad5c388461453166ca810edec53708432b9b7c12f630eebdaeeedabb62bac49eaf03e482b5bb51d489e271014e8172f43174299218ffe2873cce9bdd821fa544fc7c7fa455cd5faa3d4615822a6e35a43ca9f79345c0f6e0eee37e945ffd2d17fc77f6e8004629ef44b71e45499b0c96fecd36b495301614c7c31d5de45661849c86f9b44aba1742c163b0bb8c4200232bd4c19a43bd361d2d99e93b2ff1f", 0xb7}, {&(0x7f0000004640)="995a0266f91a2e308b9073236e48f0b8d486611fa8ad7054f995c5bc9cc2f063fe9692302d889ca33ffbd95325252d489afefacbb646eedce5f3332ee08f6c94fa819a3a5ab36580be22b3b75aadb02cdee2d826af531be646c237bb4a08a8a4114d43774f7624b1fe", 0x69}], 0x6, 0x0, 0x0, 0x20000040}}], 0x4, 0x48008) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f907, 0x0, '\x00', @p_u8=0x0}}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000200)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x1802, 0x0) syz_io_uring_setup(0x34, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000004a00)={{@local, 0xfff}, @hyper, 0x4, 0x7f, 0x3, 0xa, 0x76, 0xa, 0xec0}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_usb_connect$uac1(0x4, 0x93, &(0x7f0000000000)=ANY=[], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000041c0)=[{{0x0, 0x0, &(0x7f00000048c0)=[{&(0x7f0000002ec0)=""/103, 0x67}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000003fc0)=""/252, 0xfc}, {&(0x7f0000002f40)=""/29, 0x1d}, {&(0x7f00000040c0)=""/141, 0x8d}, {&(0x7f0000004180)=""/7, 0x7}, {&(0x7f0000004840)=""/102, 0x66}], 0x7, &(0x7f0000004940)=""/158, 0x9e}, 0x5}], 0x1, 0x40010242, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) kernel console output (not intermixed with test programs): 0 R11: 0000000000000246 R12: 0000000000000001 [ 493.765395][T11025] R13: 0000000000000000 R14: 00007f3d6ffb5fa0 R15: 00007f3d700dfa28 [ 493.765426][T11025] [ 493.979875][ C1] vkms_vblank_simulate: vblank timer overrun [ 494.353726][T11036] binfmt_misc: register: failed to install interpreter file ./file0 [ 494.525240][T11022] ip6gre1: entered promiscuous mode [ 494.649163][ T5935] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 494.731108][T11047] binder: 11046:11047 ioctl 4040ae9e 200000000340 returned -22 [ 494.827101][ T5935] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 494.849196][ T5935] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 494.963547][ T5935] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 494.993244][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 495.208938][ T5935] usb 4-1: SerialNumber: syz [ 495.376843][ T5935] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 495.454086][ T5935] usb-storage 4-1:1.0: USB Mass Storage device detected [ 495.483414][ T5935] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 495.516803][ T5935] scsi host1: usb-storage 4-1:1.0 [ 495.801856][T11059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.819277][ T9] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 495.819563][T11059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.024078][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 496.036073][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.068457][ T9] usb 2-1: config 0 descriptor?? [ 496.089419][T11068] fuse: Bad value for 'fd' [ 496.106147][T11069] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 496.129471][ T9] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 496.157657][T11070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.169407][T11070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.465534][ T9] usb 2-1: USB disconnect, device number 69 [ 498.363866][ T9] usb 4-1: USB disconnect, device number 70 [ 498.476892][T11081] loop2: detected capacity change from 0 to 7 [ 498.502147][T11081] buffer_io_error: 28 callbacks suppressed [ 498.502161][T11081] Buffer I/O error on dev loop2, logical block 0, async page read [ 498.549269][T11081] Buffer I/O error on dev loop2, logical block 0, async page read [ 498.571535][T11081] Buffer I/O error on dev loop2, logical block 0, async page read [ 498.609254][T11081] Buffer I/O error on dev loop2, logical block 0, async page read [ 498.649573][T11081] Buffer I/O error on dev loop2, logical block 0, async page read [ 498.719065][T11081] Buffer I/O error on dev loop2, logical block 0, async page read [ 498.727099][T11081] Buffer I/O error on dev loop2, logical block 0, async page read [ 498.790117][T11081] ldm_validate_partition_table(): Disk read failed. [ 498.805655][T11081] Buffer I/O error on dev loop2, logical block 0, async page read [ 498.825118][T11081] Buffer I/O error on dev loop2, logical block 0, async page read [ 498.830682][T11096] ip6tnl2: entered promiscuous mode [ 498.859016][T11096] ip6tnl2: entered allmulticast mode [ 498.920255][T11096] team0: Device ip6tnl2 is up. Set it down before adding it as a team port [ 498.936528][T11081] Buffer I/O error on dev loop2, logical block 0, async page read [ 498.945323][T11081] Dev loop2: unable to read RDB block 0 [ 498.955604][T11081] loop2: unable to read partition table [ 498.962624][T11081] loop2: partition table beyond EOD, truncated [ 498.978649][T11081] loop_reread_partitions: partition scan of loop2 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 498.978649][T11081] ) failed (rc=-5) [ 498.992352][ T10] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 499.149691][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 499.157072][ T10] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 499.166498][ T10] usb 1-1: config 0 has no interface number 0 [ 499.187451][ T10] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 499.210198][ T10] usb 1-1: New USB device found, idVendor=15a4, idProduct=9016, bcdDevice=3f.7b [ 499.224357][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.233070][ T10] usb 1-1: Product: syz [ 499.237403][ T10] usb 1-1: Manufacturer: syz [ 499.263467][ T10] usb 1-1: SerialNumber: syz [ 499.314389][ T9] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 499.357956][ T10] usb 1-1: config 0 descriptor?? [ 499.366049][T11102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.434740][T11102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.491382][ T9] usb 2-1: config 0 has no interfaces? [ 499.500314][ T9] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 499.520712][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.531447][ T9] usb 2-1: Product: syz [ 499.535711][ T9] usb 2-1: Manufacturer: syz [ 499.555751][ T9] usb 2-1: SerialNumber: syz [ 499.566467][ T9] usb 2-1: config 0 descriptor?? [ 499.929918][T11108] FAULT_INJECTION: forcing a failure. [ 499.929918][T11108] name failslab, interval 1, probability 0, space 0, times 0 [ 499.964308][T11108] CPU: 1 UID: 0 PID: 11108 Comm: syz.2.1365 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 499.964337][T11108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 499.964349][T11108] Call Trace: [ 499.964357][T11108] [ 499.964367][T11108] dump_stack_lvl+0x189/0x250 [ 499.964396][T11108] ? __pfx____ratelimit+0x10/0x10 [ 499.964424][T11108] ? __pfx_dump_stack_lvl+0x10/0x10 [ 499.964448][T11108] ? __pfx__printk+0x10/0x10 [ 499.964480][T11108] ? __pfx___might_resched+0x10/0x10 [ 499.964504][T11108] ? fs_reclaim_acquire+0x7d/0x100 [ 499.964529][T11108] should_fail_ex+0x414/0x560 [ 499.964556][T11108] should_failslab+0xa8/0x100 [ 499.964597][T11108] __kmalloc_noprof+0xcb/0x4f0 [ 499.964623][T11108] ? kfree+0x4d/0x440 [ 499.964644][T11108] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 499.964676][T11108] tomoyo_realpath_from_path+0xe3/0x5d0 [ 499.964703][T11108] ? tomoyo_domain+0xd9/0x130 [ 499.964734][T11108] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 499.964754][T11108] tomoyo_path_number_perm+0x1e8/0x5a0 [ 499.964777][T11108] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 499.964816][T11108] ? __lock_acquire+0xab9/0xd20 [ 499.964859][T11108] ? __fget_files+0x2a/0x420 [ 499.964881][T11108] ? __fget_files+0x2a/0x420 [ 499.964897][T11108] ? __fget_files+0x3a0/0x420 [ 499.964914][T11108] ? __fget_files+0x2a/0x420 [ 499.964936][T11108] security_file_ioctl+0xcb/0x2d0 [ 499.964969][T11108] __se_sys_ioctl+0x47/0x170 [ 499.964998][T11108] do_syscall_64+0xfa/0x3b0 [ 499.965020][T11108] ? lockdep_hardirqs_on+0x9c/0x150 [ 499.965040][T11108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.965059][T11108] ? clear_bhb_loop+0x60/0xb0 [ 499.965085][T11108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.965105][T11108] RIP: 0033:0x7fdda9b8e9a9 [ 499.965122][T11108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.965139][T11108] RSP: 002b:00007fddaa957038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 499.965161][T11108] RAX: ffffffffffffffda RBX: 00007fdda9db5fa0 RCX: 00007fdda9b8e9a9 [ 499.965176][T11108] RDX: 0000200000000400 RSI: 00000000c2604110 RDI: 0000000000000003 [ 499.965190][T11108] RBP: 00007fddaa957090 R08: 0000000000000000 R09: 0000000000000000 [ 499.965202][T11108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.965213][T11108] R13: 0000000000000000 R14: 00007fdda9db5fa0 R15: 00007fdda9edfa28 [ 499.965244][T11108] [ 499.966498][T11108] ERROR: Out of memory at tomoyo_realpath_from_path. [ 501.134399][T11120] ip6tnl1: entered promiscuous mode [ 501.164538][T11120] ip6tnl1: entered allmulticast mode [ 501.174952][T11120] team0: Device ip6tnl1 is of different type [ 501.286008][T11122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1367'. [ 501.758598][ T1209] usb 1-1: USB disconnect, device number 53 [ 502.243550][T11132] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 502.529521][ T1209] usb 2-1: USB disconnect, device number 70 [ 502.648474][T11139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1373'. [ 502.856252][ T5935] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 503.029361][ T5935] usb 4-1: device descriptor read/64, error -71 [ 503.109193][ T30] audit: type=1326 audit(1753461524.563:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11142 comm="syz.0.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc90758e9a9 code=0x7ffc0000 [ 503.190213][ T30] audit: type=1326 audit(1753461524.563:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11142 comm="syz.0.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc90758e9a9 code=0x7ffc0000 [ 503.214477][ T30] audit: type=1326 audit(1753461524.563:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11142 comm="syz.0.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc90758e9a9 code=0x7ffc0000 [ 503.236827][ C1] vkms_vblank_simulate: vblank timer overrun [ 503.281648][ T30] audit: type=1326 audit(1753461524.563:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11142 comm="syz.0.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fc90758e9a9 code=0x7ffc0000 [ 503.304125][ C1] vkms_vblank_simulate: vblank timer overrun [ 503.311051][ T5935] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 503.332670][ T30] audit: type=1326 audit(1753461524.573:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11142 comm="syz.0.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc90758e9a9 code=0x7ffc0000 [ 503.355418][ C1] vkms_vblank_simulate: vblank timer overrun [ 503.365861][ T30] audit: type=1326 audit(1753461524.593:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11142 comm="syz.0.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc90758e9a9 code=0x7ffc0000 [ 503.388164][ C1] vkms_vblank_simulate: vblank timer overrun [ 503.410196][ T30] audit: type=1326 audit(1753461524.593:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11142 comm="syz.0.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc90758e9a9 code=0x7ffc0000 [ 503.449135][ T5935] usb 4-1: device descriptor read/64, error -71 [ 503.513516][ T30] audit: type=1326 audit(1753461524.613:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11142 comm="syz.0.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc90758e5ab code=0x7ffc0000 [ 503.549414][ T30] audit: type=1326 audit(1753461524.613:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11142 comm="syz.0.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc90758e5ab code=0x7ffc0000 [ 503.571807][ C1] vkms_vblank_simulate: vblank timer overrun [ 503.583086][ T5935] usb usb4-port1: attempt power cycle [ 503.593573][ T30] audit: type=1326 audit(1753461524.613:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11142 comm="syz.0.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc90758e5ab code=0x7ffc0000 [ 503.814043][T11161] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 503.958001][ T5935] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 504.081327][ T5935] usb 4-1: device descriptor read/8, error -71 [ 504.389260][ T5935] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 504.420432][ T5935] usb 4-1: device descriptor read/8, error -71 [ 504.468958][ T976] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 504.626847][T11166] blktrace: Concurrent blktraces are not allowed on sg0 [ 504.772207][ T976] usb 2-1: config 0 has an invalid interface number: 44 but max is 1 [ 504.793340][ T976] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 504.831938][ T976] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 504.861454][ T976] usb 2-1: config 0 has no interface number 0 [ 504.869365][ T5935] usb usb4-port1: unable to enumerate USB device [ 504.971642][ T976] usb 2-1: config 0 interface 44 has no altsetting 0 [ 505.016680][ T976] usb 2-1: New USB device found, idVendor=1b3d, idProduct=01ab, bcdDevice=85.24 [ 505.102166][ T976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.228998][ T976] usb 2-1: Product: syz [ 505.244258][ T976] usb 2-1: Manufacturer: syz [ 505.254405][ T976] usb 2-1: SerialNumber: syz [ 505.322150][ T976] usb 2-1: config 0 descriptor?? [ 506.567765][T11184] ip6tnl2: entered promiscuous mode [ 506.851680][ C1] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 506.861061][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.867728][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.907442][T11184] ip6tnl2: entered allmulticast mode [ 506.987107][T11184] team0: Device ip6tnl2 is up. Set it down before adding it as a team port [ 507.340766][ T976] ftdi_sio 2-1:0.44: FTDI USB Serial Device converter detected [ 507.454217][ T976] ftdi_sio ttyUSB0: unknown device type: 0x8524 [ 507.510848][ T976] usb 2-1: USB disconnect, device number 71 [ 507.539309][T11196] sctp: [Deprecated]: syz.1.1388 (pid 11196) Use of struct sctp_assoc_value in delayed_ack socket option. [ 507.539309][T11196] Use struct sctp_sack_info instead [ 507.577381][ T976] ftdi_sio 2-1:0.44: device disconnected [ 507.613050][T11197] team0: left promiscuous mode [ 507.670947][T11197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1388'. [ 507.840083][T11197] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 508.302764][T11214] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 508.713037][T11227] binder: 11226:11227 ioctl c0306201 0 returned -14 [ 508.725829][T11227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1398'. [ 508.765593][T11228] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1396'. [ 508.864970][T11228] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 509.230954][T11235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.364421][T11235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.638959][ T5935] usb 3-1: new low-speed USB device number 62 using dummy_hcd [ 509.655071][T11242] loop6: detected capacity change from 0 to 7 [ 509.671901][T11242] Dev loop6: unable to read RDB block 7 [ 509.684328][T11242] loop6: AHDI p3 [ 509.690395][T11242] loop6: partition table partially beyond EOD, truncated [ 509.789094][ T5935] usb 3-1: device descriptor read/64, error -71 [ 510.050976][ T5935] usb 3-1: new low-speed USB device number 63 using dummy_hcd [ 510.196715][T11251] loop6: detected capacity change from 0 to 7 [ 510.209122][ T5935] usb 3-1: device descriptor read/64, error -71 [ 510.223853][ T6343] Dev loop6: unable to read RDB block 7 [ 510.235883][ T6343] loop6: unable to read partition table [ 510.247207][ T6343] loop6: partition table beyond EOD, truncated [ 510.270839][T11251] Dev loop6: unable to read RDB block 7 [ 510.289986][T11251] loop6: unable to read partition table [ 510.296102][T11251] loop6: partition table beyond EOD, truncated [ 510.304997][T11251] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 510.326127][ T5935] usb usb3-port1: attempt power cycle [ 510.483292][T11261] FAULT_INJECTION: forcing a failure. [ 510.483292][T11261] name failslab, interval 1, probability 0, space 0, times 0 [ 510.497889][T11261] CPU: 1 UID: 0 PID: 11261 Comm: syz.3.1412 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 510.497919][T11261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 510.497932][T11261] Call Trace: [ 510.497940][T11261] [ 510.497948][T11261] dump_stack_lvl+0x189/0x250 [ 510.497978][T11261] ? __pfx____ratelimit+0x10/0x10 [ 510.498001][T11261] ? __pfx_dump_stack_lvl+0x10/0x10 [ 510.498026][T11261] ? __pfx__printk+0x10/0x10 [ 510.498060][T11261] ? __pfx___might_resched+0x10/0x10 [ 510.498083][T11261] ? fs_reclaim_acquire+0x7d/0x100 [ 510.498108][T11261] should_fail_ex+0x414/0x560 [ 510.498134][T11261] should_failslab+0xa8/0x100 [ 510.498167][T11261] __kmalloc_noprof+0xcb/0x4f0 [ 510.498194][T11261] ? snd_pcm_hw_refine+0x967/0x1640 [ 510.498231][T11261] snd_pcm_hw_refine+0x967/0x1640 [ 510.498279][T11261] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 510.498314][T11261] ? __lock_acquire+0xab9/0xd20 [ 510.498346][T11261] ? __might_fault+0xb0/0x130 [ 510.498407][T11261] ? __pfx_snd_pcm_ioctl+0x10/0x10 [ 510.498429][T11261] ? _copy_from_user+0x94/0xb0 [ 510.498458][T11261] ? __pfx_snd_pcm_ioctl+0x10/0x10 [ 510.498484][T11261] snd_pcm_hw_refine_user+0x40/0xe0 [ 510.498513][T11261] snd_pcm_ioctl+0x8b/0xb0 [ 510.498536][T11261] __se_sys_ioctl+0xfc/0x170 [ 510.498564][T11261] do_syscall_64+0xfa/0x3b0 [ 510.498586][T11261] ? lockdep_hardirqs_on+0x9c/0x150 [ 510.498607][T11261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.498627][T11261] ? clear_bhb_loop+0x60/0xb0 [ 510.498652][T11261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.498671][T11261] RIP: 0033:0x7fa39538e9a9 [ 510.498690][T11261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 510.498707][T11261] RSP: 002b:00007fa3962a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 510.498728][T11261] RAX: ffffffffffffffda RBX: 00007fa3955b5fa0 RCX: 00007fa39538e9a9 [ 510.498743][T11261] RDX: 0000200000000400 RSI: 00000000c2604110 RDI: 0000000000000003 [ 510.498757][T11261] RBP: 00007fa3962a6090 R08: 0000000000000000 R09: 0000000000000000 [ 510.498769][T11261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.498781][T11261] R13: 0000000000000000 R14: 00007fa3955b5fa0 R15: 00007fa3956dfa28 [ 510.498813][T11261] [ 510.729577][ C1] vkms_vblank_simulate: vblank timer overrun [ 510.879089][ T976] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 510.886854][ T10] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 510.919030][ T5935] usb 3-1: new low-speed USB device number 64 using dummy_hcd [ 510.949650][ T5935] usb 3-1: device descriptor read/8, error -71 [ 511.075460][ T976] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 511.087223][ T976] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 511.099423][ T10] usb 1-1: config 0 has no interfaces? [ 511.120390][T11267] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1413'. [ 511.129738][T11267] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 511.145454][ T976] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 511.156819][ T976] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 511.175727][ T976] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 511.199369][ T5935] usb 3-1: new low-speed USB device number 65 using dummy_hcd [ 511.221995][ T976] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 511.236933][ T10] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 511.246208][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.255467][ T5935] usb 3-1: device descriptor read/8, error -71 [ 511.271357][ T976] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 511.284285][ T10] usb 1-1: Product: syz [ 511.288534][ T10] usb 1-1: Manufacturer: syz [ 511.297156][ T976] usb 2-1: Product: syz [ 511.306374][ T976] usb 2-1: Manufacturer: syz [ 511.316016][ T10] usb 1-1: SerialNumber: syz [ 511.349614][ T10] usb 1-1: config 0 descriptor?? [ 511.356080][ T976] cdc_wdm 2-1:1.0: skipping garbage [ 511.367726][ T976] cdc_wdm 2-1:1.0: skipping garbage [ 511.374943][ T5935] usb usb3-port1: unable to enumerate USB device [ 511.387109][ T976] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 511.404782][ T976] cdc_wdm 2-1:1.0: Unknown control protocol [ 512.194390][T11273] loop6: detected capacity change from 0 to 7 [ 512.212402][T11273] Dev loop6: unable to read RDB block 7 [ 512.218647][T11273] loop6: AHDI p3 [ 512.228078][T11273] loop6: partition table partially beyond EOD, truncated [ 512.277751][T11275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.299672][T11275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.333689][T11275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.365901][T11275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.944662][T11286] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 513.326236][ T976] usb 1-1: USB disconnect, device number 54 [ 513.762196][ T5935] usb 2-1: USB disconnect, device number 72 [ 514.329145][ T5935] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 514.491700][ T5935] usb 2-1: Using ep0 maxpacket: 16 [ 515.605120][T11308] ip6tnl1: entered promiscuous mode [ 515.618713][T11308] ip6tnl1: entered allmulticast mode [ 515.649265][ C0] af_packet: tpacket_rcv: packet too big, clamped from 88 to 4294967272. macoff=96 [ 515.682764][T11308] team0: Device ip6tnl1 is of different type [ 515.830751][T11319] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1424'. [ 515.847190][T11319] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 515.884103][T11324] ip6tnl1: entered promiscuous mode [ 515.934083][T11324] ip6tnl1: entered allmulticast mode [ 516.001815][T11324] team0: Device ip6tnl1 is of different type [ 516.649064][ T5915] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 517.114814][ T5935] usb 2-1: unable to get BOS descriptor or descriptor too short [ 517.160282][ T5935] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 517.168122][ T5935] usb 2-1: can't read configurations, error -71 [ 517.254504][ T5915] usb 1-1: config 0 has no interfaces? [ 517.350549][ T5915] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 517.377597][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.392997][ T5915] usb 1-1: Product: syz [ 517.397562][ T5915] usb 1-1: Manufacturer: syz [ 517.407703][ T5915] usb 1-1: SerialNumber: syz [ 517.410352][ T976] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 517.451838][ T5915] usb 1-1: config 0 descriptor?? [ 517.595502][T11343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.620991][ T976] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 517.632666][ T976] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 517.681839][T11343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.699077][ T976] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 517.741997][ T976] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 517.809058][ T976] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 517.867930][ T976] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 517.880964][ T976] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 517.893802][ T976] usb 4-1: Product: syz [ 517.898336][ T976] usb 4-1: Manufacturer: syz [ 517.934779][ T976] cdc_wdm 4-1:1.0: skipping garbage [ 517.942363][ T976] cdc_wdm 4-1:1.0: skipping garbage [ 517.954444][ T976] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 518.036726][ T976] cdc_wdm 4-1:1.0: Unknown control protocol [ 518.162993][ T976] usb 4-1: USB disconnect, device number 75 [ 518.274979][ T5915] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 518.434483][ T5915] usb 3-1: config index 0 descriptor too short (expected 31, got 27) [ 518.442925][ T5915] usb 3-1: config 1 interface 0 has no altsetting 0 [ 518.469311][ T5915] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 518.484530][ T5915] usb 3-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 518.536648][ T5915] usb 3-1: Product: syz [ 518.549239][ T5915] usb 3-1: Manufacturer: syz [ 518.559288][ T5915] usb 3-1: SerialNumber: syz [ 518.774666][T11363] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 519.286183][T11367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.309645][T11367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.468086][ T5915] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 66 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 519.581132][T11371] ip6tnl2: entered promiscuous mode [ 519.668947][T11371] ip6tnl2: entered allmulticast mode [ 519.696756][T11371] team0: Device ip6tnl2 is up. Set it down before adding it as a team port [ 519.745274][ T5915] usb 1-1: USB disconnect, device number 55 [ 520.110968][T11378] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1441'. [ 520.152632][T11378] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 520.739450][ T10] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 520.897562][ T10] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 520.898051][ T24] usb 3-1: USB disconnect, device number 66 [ 520.908225][ T10] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 520.925977][ T976] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 520.955689][ T24] usblp0: removed [ 520.981742][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 521.056157][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 521.100104][ T976] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 521.109475][ T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.130091][ T976] usb 1-1: Product: syz [ 521.135965][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 521.178428][ T976] usb 1-1: Manufacturer: syz [ 521.188326][ T976] usb 1-1: SerialNumber: syz [ 521.282320][T11410] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 521.310127][ T10] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 521.330844][ T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 521.349601][ T976] usb 1-1: config 0 descriptor?? [ 521.356206][ T10] usb 4-1: Product: syz [ 521.364454][ T976] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 521.375600][ T10] usb 4-1: Manufacturer: syz [ 521.425623][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 521.431496][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 521.451881][ T10] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 521.486524][ T10] cdc_wdm 4-1:1.0: Unknown control protocol [ 521.989066][ T5915] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 522.151758][ T5915] usb 3-1: Using ep0 maxpacket: 16 [ 522.248704][ T5915] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 522.267348][ T5915] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 522.293493][ T5915] usb 3-1: config 0 has no interface number 0 [ 522.344756][ T5915] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 522.354454][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.363538][ T5915] usb 3-1: Product: syz [ 522.371925][ T976] gspca_sunplus: reg_r err -71 [ 522.378981][ T976] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 522.382088][ T5915] usb 3-1: Manufacturer: syz [ 522.397523][ T5915] usb 3-1: SerialNumber: syz [ 522.445737][ T5915] usb 3-1: config 0 descriptor?? [ 522.477838][ T976] usb 1-1: USB disconnect, device number 56 [ 522.836769][ T5915] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 522.846993][ T5915] usb 3-1: No valid video chain found. [ 523.538501][ T24] usb 4-1: USB disconnect, device number 76 [ 525.477000][ T5938] usb 3-1: USB disconnect, device number 67 [ 525.574271][T11464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.613724][T11464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.759242][T11469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 525.898040][T11474] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 526.129343][ T5915] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 526.309054][ T5915] usb 4-1: Using ep0 maxpacket: 32 [ 526.326503][ T5915] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 526.335306][ T5915] usb 4-1: config 0 has no interface number 0 [ 526.352537][ T5915] usb 4-1: config 0 interface 12 has no altsetting 0 [ 526.371735][ T5915] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 526.413493][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.439931][ T5915] usb 4-1: Product: syz [ 526.484342][ T5915] usb 4-1: Manufacturer: syz [ 526.547147][ T5915] usb 4-1: SerialNumber: syz [ 526.595264][ T5915] usb 4-1: config 0 descriptor?? [ 526.603996][T11494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.679779][T11494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.327434][T11476] netlink: 'syz.3.1474': attribute type 5 has an invalid length. [ 527.348446][ T5915] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 527.394770][ T5915] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 527.444063][ T5915] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 527.609471][ T5915] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 527.701950][ T5915] usb 4-1: USB disconnect, device number 77 [ 527.881843][ T5938] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 528.059125][ T5938] usb 1-1: Using ep0 maxpacket: 8 [ 528.076697][ T5938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 528.089811][T11507] loop6: detected capacity change from 0 to 7 [ 528.101418][T11507] Dev loop6: unable to read RDB block 7 [ 528.111454][T11507] loop6: unable to read partition table [ 528.131857][T11507] loop6: partition table beyond EOD, truncated [ 528.134179][ T5938] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 528.158581][T11507] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 528.159854][T11509] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 528.208736][ T5938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.254571][ T5938] usb 1-1: config 0 descriptor?? [ 528.511077][ T5938] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 529.609344][ T5915] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 529.781997][ T5915] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 529.793855][ T5915] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 529.894500][ T5915] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 529.950561][ T5915] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 530.008467][ T5915] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 530.035376][ T5915] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 530.046511][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 530.061148][ T5915] usb 3-1: Product: syz [ 530.065720][ T5915] usb 3-1: Manufacturer: syz [ 530.084962][ T5915] cdc_wdm 3-1:1.0: skipping garbage [ 530.094554][ T5915] cdc_wdm 3-1:1.0: skipping garbage [ 530.113435][ T5915] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 530.122079][ T5915] cdc_wdm 3-1:1.0: Unknown control protocol [ 530.233550][T11536] binfmt_misc: register: failed to install interpreter file ./file0 [ 530.395461][ T976] usb 3-1: USB disconnect, device number 68 [ 530.417340][T11536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.436867][T11536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.525423][T11536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.536612][T11536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.913832][ T5915] usb 1-1: USB disconnect, device number 57 [ 531.379804][ T976] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 531.422418][T11551] loop6: detected capacity change from 0 to 7 [ 531.603277][T11551] Dev loop6: unable to read RDB block 7 [ 531.618929][ T976] usb 3-1: Using ep0 maxpacket: 8 [ 531.626971][ T976] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 531.643714][ T976] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 531.655797][ T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.664470][ T976] usb 3-1: Product: syz [ 531.671669][T11551] loop6: unable to read partition table [ 531.677648][T11551] loop6: partition table beyond EOD, truncated [ 531.685171][ T976] usb 3-1: Manufacturer: syz [ 531.691255][ T976] usb 3-1: SerialNumber: syz [ 531.696291][T11551] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 531.731497][ T976] usb 3-1: config 0 descriptor?? [ 531.797201][ T976] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 532.529155][ T10] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 532.694001][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 532.736815][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 532.829836][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 533.009219][ T10] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 533.304982][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.353762][ T10] usb 1-1: Product: syz [ 533.358391][ T10] usb 1-1: Manufacturer: syz [ 533.374185][ T10] usb 1-1: SerialNumber: syz [ 533.397605][ T10] usb 1-1: config 0 descriptor?? [ 533.428051][T11555] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 533.438179][T11555] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 533.491348][ T10] usb 1-1: ucan: probing device on interface #0 [ 534.092915][T11571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.136914][ T10] ucan 1-1:0.0 can0: registered device [ 534.140800][T11572] binfmt_misc: register: failed to install interpreter file ./file0 [ 534.160684][T11571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.305808][ T10] ucan 1-1:0.0 can0: firmware string: Á [ 534.455044][ T9] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 534.512947][T11555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.522070][T11555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.682183][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 534.694007][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 534.706960][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 534.716959][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 534.742641][ T9] usb 2-1: SerialNumber: syz [ 534.835124][ T9] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 534.906293][ T9] usb-storage 2-1:1.0: USB Mass Storage device detected [ 534.971074][ T9] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 535.017156][ T9] scsi host1: usb-storage 2-1:1.0 [ 535.149070][ T10] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 535.310675][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 535.323686][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 535.339622][ T10] usb 4-1: config 8 has an invalid interface number: 64 but max is 0 [ 535.349039][ T10] usb 4-1: config 8 has no interface number 0 [ 535.356454][ T10] usb 4-1: config 8 interface 64 altsetting 2 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 535.371038][ T10] usb 4-1: config 8 interface 64 has no altsetting 0 [ 535.384772][ T10] usb 4-1: string descriptor 0 read error: -22 [ 535.397988][ T10] usb 4-1: New USB device found, idVendor=19d2, idProduct=64c6, bcdDevice= e.34 [ 535.416565][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.472297][ T10] cdc_ether 4-1:8.64: invalid descriptor buffer length [ 535.480001][ T10] usb 4-1: bad CDC descriptors [ 535.500286][T11589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.510549][T11589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.645217][ T10] usb 1-1: USB disconnect, device number 58 [ 535.943802][T11599] tipc: Enabled bearer , priority 10 [ 536.139302][ T976] gspca_zc3xx: reg_r err -110 [ 536.144642][ T976] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 536.443176][ T976] usb 3-1: USB disconnect, device number 69 [ 536.790295][T11599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1510'. [ 537.062144][T11613] binfmt_misc: register: failed to install interpreter file ./file0 [ 537.095464][T11613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.108513][T11613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.158713][T11613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.182108][T11613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.442236][T11617] program syz.2.1514 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 538.501067][ T24] usb 4-1: USB disconnect, device number 78 [ 540.169011][ T24] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 540.366577][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 540.524184][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 540.655156][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 540.745938][ T24] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 540.765995][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.786503][ T24] usb 3-1: Product: syz [ 540.812787][ T24] usb 3-1: Manufacturer: syz [ 540.825969][ T5915] usb 2-1: USB disconnect, device number 75 [ 540.860463][ T24] usb 3-1: SerialNumber: syz [ 540.907429][ T24] usb 3-1: config 0 descriptor?? [ 540.978386][T11636] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 541.037435][T11636] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 541.074069][ T24] usb 3-1: ucan: probing device on interface #0 [ 541.279307][ T5915] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 541.508927][ T1209] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 541.821569][ T5915] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 541.853767][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.888916][ T5915] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 541.904388][ T5915] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 541.914604][ T5915] usb 2-1: Manufacturer: syz [ 541.928240][ T5915] usb 2-1: config 0 descriptor?? [ 541.958983][ T1209] usb 1-1: Using ep0 maxpacket: 16 [ 541.970796][ T1209] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 541.997570][ T24] ucan 3-1:0.0 can0: registered device [ 542.016821][ T1209] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 542.056816][ T1209] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 542.079436][ T1209] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.087607][ T1209] usb 1-1: Product: syz [ 542.094842][ T1209] usb 1-1: Manufacturer: syz [ 542.108020][ T1209] usb 1-1: SerialNumber: syz [ 542.115236][ T5915] rc_core: IR keymap rc-hauppauge not found [ 542.129155][ T5915] Registered IR keymap rc-empty [ 542.141154][ T1209] usb 1-1: config 0 descriptor?? [ 542.151586][ T5915] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 542.169622][ T1209] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 542.190814][ T24] ucan 3-1:0.0 can0: firmware string: Á [ 542.204805][ T5915] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input37 [ 542.224717][ T1209] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 542.259870][ C1] igorplugusb 2-1:0.0: Error: urb status = -32 [ 542.407655][T11636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.469702][T11636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.775532][ T1209] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 542.782921][ T1209] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 543.417717][ T5938] usb 2-1: USB disconnect, device number 76 [ 543.419531][ T1209] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 543.439909][ T1209] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 543.466183][ T1209] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 543.476621][ T1209] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 543.659890][ T5915] usb 3-1: USB disconnect, device number 70 [ 544.019004][ T5938] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 544.209286][ T5915] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 544.268397][ T5938] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 544.289008][ T5938] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 544.409099][ T5938] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 544.418447][ T5938] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 544.464977][ T5915] usb 3-1: Using ep0 maxpacket: 32 [ 544.498729][ T5938] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 544.514665][ T5915] usb 3-1: config 0 interface 0 altsetting 181 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 544.572818][ T5938] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 544.586889][ T5915] usb 3-1: config 0 interface 0 altsetting 181 endpoint 0x3 has invalid wMaxPacketSize 0 [ 544.618429][ T5915] usb 3-1: config 0 interface 0 altsetting 181 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 544.649407][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 544.710421][ T5915] usb 3-1: config 0 interface 0 has no altsetting 0 [ 544.712263][ T5938] usb 2-1: Product: syz [ 544.758261][ T5938] usb 2-1: Manufacturer: syz [ 544.769455][ T1209] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 544.778784][ T5915] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 544.811061][ T1209] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 544.827529][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.828704][ T5938] cdc_wdm 2-1:1.0: skipping garbage [ 544.869775][ T5915] usb 3-1: Product: syz [ 544.874152][ T5915] usb 3-1: Manufacturer: syz [ 544.889037][ T5938] cdc_wdm 2-1:1.0: skipping garbage [ 544.900814][ T5915] usb 3-1: SerialNumber: syz [ 544.920646][ T5915] usb 3-1: config 0 descriptor?? [ 545.041079][ T5915] usb 3-1: no audio or video endpoints found [ 545.060765][ T5938] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 545.066765][ T5938] cdc_wdm 2-1:1.0: Unknown control protocol [ 545.169981][T11692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.180416][ T5938] usb 2-1: USB disconnect, device number 77 [ 545.205130][T11692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.672956][ T976] usb 1-1: USB disconnect, device number 59 [ 545.845429][ T5938] usb 3-1: USB disconnect, device number 71 [ 546.269345][ T5938] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 546.396690][T11731] openvswitch: netlink: VXLAN extension 0 has unexpected len 1 expected 0 [ 546.536494][ T5938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.570551][ T5938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.609086][ T5938] usb 3-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 546.666374][ T5938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.707357][ T5938] usb 3-1: config 0 descriptor?? [ 547.117260][T11740] FAULT_INJECTION: forcing a failure. [ 547.117260][T11740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.141780][T11740] CPU: 1 UID: 0 PID: 11740 Comm: syz.4.1544 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 547.141812][T11740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 547.141823][T11740] Call Trace: [ 547.141831][T11740] [ 547.141840][T11740] dump_stack_lvl+0x189/0x250 [ 547.141868][T11740] ? __pfx____ratelimit+0x10/0x10 [ 547.141891][T11740] ? __pfx_dump_stack_lvl+0x10/0x10 [ 547.141914][T11740] ? __pfx__printk+0x10/0x10 [ 547.141947][T11740] ? __might_fault+0xb0/0x130 [ 547.141986][T11740] should_fail_ex+0x414/0x560 [ 547.142013][T11740] _copy_to_iter+0x1db/0x16f0 [ 547.142041][T11740] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 547.142080][T11740] ? __pfx__copy_to_iter+0x10/0x10 [ 547.142115][T11740] ? _raw_spin_unlock_irq+0x23/0x50 [ 547.142135][T11740] ? lockdep_hardirqs_on+0x9c/0x150 [ 547.142160][T11740] eventfd_read+0x45a/0x710 [ 547.142191][T11740] ? __pfx_eventfd_read+0x10/0x10 [ 547.142218][T11740] ? common_file_perm+0x199/0x200 [ 547.142244][T11740] ? bpf_lsm_file_permission+0x9/0x20 [ 547.142267][T11740] ? security_file_permission+0x75/0x290 [ 547.142305][T11740] vfs_read+0x4d0/0x980 [ 547.142342][T11740] ? __pfx_vfs_read+0x10/0x10 [ 547.142379][T11740] ? __fget_files+0x2a/0x420 [ 547.142408][T11740] ksys_read+0x145/0x250 [ 547.142452][T11740] ? __pfx_ksys_read+0x10/0x10 [ 547.142476][T11740] ? rcu_is_watching+0x15/0xb0 [ 547.142505][T11740] ? do_syscall_64+0xbe/0x3b0 [ 547.142533][T11740] do_syscall_64+0xfa/0x3b0 [ 547.142555][T11740] ? lockdep_hardirqs_on+0x9c/0x150 [ 547.142577][T11740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.142598][T11740] ? clear_bhb_loop+0x60/0xb0 [ 547.142623][T11740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.142643][T11740] RIP: 0033:0x7f3d6fd8e9a9 [ 547.142661][T11740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.142679][T11740] RSP: 002b:00007f3d70c6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 547.142701][T11740] RAX: ffffffffffffffda RBX: 00007f3d6ffb5fa0 RCX: 00007f3d6fd8e9a9 [ 547.142716][T11740] RDX: 00000000fffffeab RSI: 0000200000000180 RDI: 0000000000000003 [ 547.142730][T11740] RBP: 00007f3d70c6d090 R08: 0000000000000000 R09: 0000000000000000 [ 547.142742][T11740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.142754][T11740] R13: 0000000000000000 R14: 00007f3d6ffb5fa0 R15: 00007f3d700dfa28 [ 547.142785][T11740] [ 547.153718][ T5938] hid_mf 0003:0079:1846.0013: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.2-1/input0 [ 547.269100][ T1209] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 547.563689][ T5938] hid_mf 0003:0079:1846.0013: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 547.657307][ T5938] usb 3-1: USB disconnect, device number 72 [ 547.758352][ T1209] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 547.776606][ T1209] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 547.815298][ T1209] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 547.837213][ T1209] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 547.851163][ T1209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.860784][ T1209] usb 2-1: Product: syz [ 547.865084][ T1209] usb 2-1: Manufacturer: syz [ 547.866184][T11749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.870573][ T1209] usb 2-1: SerialNumber: syz [ 547.895199][ T1209] usb 2-1: config 0 descriptor?? [ 547.907718][T11738] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 547.908755][T11749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.919267][T11738] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 547.940430][ T1209] usb 2-1: ucan: probing device on interface #0 [ 547.998384][T11751] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1547'. [ 548.008309][T11751] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 548.214648][T11757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 548.387807][T11757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 548.430887][T11757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 548.509176][ T5938] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 548.555517][ T1209] ucan 2-1:0.0 can0: registered device [ 548.697180][ T5938] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 548.706283][ T5938] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 548.717229][ T5938] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 548.748751][ T1209] ucan 2-1:0.0 can0: firmware string: Á [ 548.814238][ T5938] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 548.824107][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.838298][ T5938] usb 4-1: Product: syz [ 548.846052][ T5938] usb 4-1: Manufacturer: syz [ 548.858706][ T5938] usb 4-1: SerialNumber: syz [ 548.958438][T11738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.018130][T11738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.696135][T11780] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 550.053048][T11787] netlink: 1328 bytes leftover after parsing attributes in process `syz.0.1558'. [ 550.461527][ T10] usb 2-1: USB disconnect, device number 78 [ 551.715751][ T5938] usb 4-1: 0:2 : does not exist [ 551.746281][ T5938] usb 4-1: USB disconnect, device number 79 [ 552.001446][ T6343] udevd[6343]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 552.336215][T11813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 552.361557][T11813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 552.517628][T11820] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 552.979086][ T976] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 553.359314][ T976] usb 2-1: config 0 has no interfaces? [ 553.407971][ T976] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 553.429613][ T976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.448666][T11836] bond0: entered promiscuous mode [ 553.512926][ T976] usb 2-1: Product: syz [ 553.587803][ T976] usb 2-1: Manufacturer: syz [ 553.608979][ T976] usb 2-1: SerialNumber: syz [ 553.643676][ T976] usb 2-1: config 0 descriptor?? [ 553.988292][ T976] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 554.224722][ T976] usb 3-1: Using ep0 maxpacket: 8 [ 554.258137][ T976] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 554.286612][ T976] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 554.346569][ T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.503955][ T976] usb 3-1: Product: syz [ 554.508993][ T976] usb 3-1: Manufacturer: syz [ 554.567696][ T976] usb 3-1: SerialNumber: syz [ 554.636679][ T976] usb 3-1: config 0 descriptor?? [ 554.668335][ T976] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 554.687864][ T976] usb 3-1: selecting invalid altsetting 1 [ 554.887177][T11843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.900040][T11843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.913069][ T976] gspca_stk014: init reg: 0xc9 [ 554.918648][ T976] stk014 3-1:0.0: probe with driver stk014 failed with error -5 [ 555.121608][T11843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.165295][T11843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.628529][T11866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.679585][T11866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.243085][ T5935] usb 2-1: USB disconnect, device number 79 [ 556.849408][ T5935] usb 3-1: USB disconnect, device number 73 [ 556.858105][T11893] binfmt_misc: register: failed to install interpreter file ./file0 [ 557.203190][ T1209] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 557.211138][ T5935] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 557.423234][ T5935] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 557.432335][ T5935] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 557.443846][ T5935] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 557.453609][ T5935] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 557.465813][ T5935] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 557.472158][ T5938] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 557.480994][ T5935] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 557.495680][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 557.506144][ T5935] usb 3-1: Product: syz [ 557.511114][ T5935] usb 3-1: Manufacturer: syz [ 557.591805][ T1209] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 557.618929][ T1209] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 557.723117][ T5935] cdc_wdm 3-1:1.0: skipping garbage [ 557.755383][ T1209] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 557.785778][ T5935] cdc_wdm 3-1:1.0: skipping garbage [ 557.796706][ T1209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 557.829303][ T5938] usb 2-1: Using ep0 maxpacket: 16 [ 557.861069][ T5935] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 557.883059][ T1209] usb 4-1: SerialNumber: syz [ 557.892499][ T5935] cdc_wdm 3-1:1.0: Unknown control protocol [ 557.926738][ T1209] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 557.956685][ T5935] usb 3-1: USB disconnect, device number 74 [ 557.978955][ T5938] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 557.987757][ T5938] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 558.019795][ T1209] usb-storage 4-1:1.0: USB Mass Storage device detected [ 558.034887][ T5938] usb 2-1: config 0 has no interface number 0 [ 558.066253][ T1209] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 558.157281][ T5938] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 558.178039][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.191700][ T5938] usb 2-1: Product: syz [ 558.198935][ T5938] usb 2-1: Manufacturer: syz [ 558.204627][ T5938] usb 2-1: SerialNumber: syz [ 558.213809][ T5938] usb 2-1: config 0 descriptor?? [ 558.233316][ T5938] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 558.248971][ T5938] usb 2-1: No valid video chain found. [ 558.264307][ T1209] scsi host1: usb-storage 4-1:1.0 [ 558.491879][T11907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.521304][T11907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.193010][ T5938] usb 2-1: USB disconnect, device number 80 [ 561.100818][T11929] FAULT_INJECTION: forcing a failure. [ 561.100818][T11929] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 561.124615][T11929] CPU: 0 UID: 0 PID: 11929 Comm: syz.2.1596 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 561.124647][T11929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 561.124660][T11929] Call Trace: [ 561.124673][T11929] [ 561.124682][T11929] dump_stack_lvl+0x189/0x250 [ 561.124705][T11929] ? __pfx____ratelimit+0x10/0x10 [ 561.124723][T11929] ? __pfx_dump_stack_lvl+0x10/0x10 [ 561.124741][T11929] ? __pfx__printk+0x10/0x10 [ 561.124771][T11929] should_fail_ex+0x414/0x560 [ 561.124794][T11929] _copy_to_user+0x31/0xb0 [ 561.124821][T11929] simple_read_from_buffer+0xe1/0x170 [ 561.124848][T11929] proc_fail_nth_read+0x1df/0x250 [ 561.124877][T11929] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 561.124895][T11929] ? rw_verify_area+0x258/0x650 [ 561.124914][T11929] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 561.124930][T11929] vfs_read+0x1fd/0x980 [ 561.124955][T11929] ? __pfx___mutex_lock+0x10/0x10 [ 561.124974][T11929] ? __pfx_vfs_read+0x10/0x10 [ 561.125007][T11929] ? __fget_files+0x2a/0x420 [ 561.125024][T11929] ? __fget_files+0x3a0/0x420 [ 561.125036][T11929] ? __fget_files+0x2a/0x420 [ 561.125055][T11929] ksys_read+0x145/0x250 [ 561.125076][T11929] ? __pfx_ksys_read+0x10/0x10 [ 561.125100][T11929] ? do_syscall_64+0xbe/0x3b0 [ 561.125121][T11929] do_syscall_64+0xfa/0x3b0 [ 561.125141][T11929] ? lockdep_hardirqs_on+0x9c/0x150 [ 561.125163][T11929] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.125185][T11929] ? clear_bhb_loop+0x60/0xb0 [ 561.125210][T11929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.125230][T11929] RIP: 0033:0x7fdda9b8d3bc [ 561.125250][T11929] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 561.125264][T11929] RSP: 002b:00007fddaa957030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 561.125280][T11929] RAX: ffffffffffffffda RBX: 00007fdda9db5fa0 RCX: 00007fdda9b8d3bc [ 561.125290][T11929] RDX: 000000000000000f RSI: 00007fddaa9570a0 RDI: 0000000000000004 [ 561.125299][T11929] RBP: 00007fddaa957090 R08: 0000000000000000 R09: 0000000000000000 [ 561.125308][T11929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.125317][T11929] R13: 0000000000000000 R14: 00007fdda9db5fa0 R15: 00007fdda9edfa28 [ 561.125339][T11929] [ 561.529261][ T10] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 561.689001][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 561.715697][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 561.739661][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.763230][ T10] usb 2-1: Product: syz [ 561.816889][ T10] usb 2-1: Manufacturer: syz [ 561.843555][ T10] usb 2-1: SerialNumber: syz [ 561.921692][ T10] usb 2-1: config 0 descriptor?? [ 561.970503][ T5935] usb 4-1: USB disconnect, device number 80 [ 562.135511][ T10] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 562.719153][ T5935] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 562.779438][ T10] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 562.941432][ T5935] usb 3-1: Using ep0 maxpacket: 16 [ 562.968232][ T5935] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 562.989253][ T5935] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 563.014686][ T10] usb 2-1: USB disconnect, device number 81 [ 563.041076][ T5935] usb 3-1: config 0 has no interface number 0 [ 563.082697][ T5935] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 563.092194][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.110041][ T5935] usb 3-1: Product: syz [ 563.114297][ T5935] usb 3-1: Manufacturer: syz [ 563.149009][ T5935] usb 3-1: SerialNumber: syz [ 563.180749][ T5935] usb 3-1: config 0 descriptor?? [ 563.203349][ T5935] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 563.211056][ T5935] usb 3-1: No valid video chain found. [ 565.997229][ T10] usb 3-1: USB disconnect, device number 75 [ 566.651431][T11999] binfmt_misc: register: failed to install interpreter file ./file0 [ 567.039032][ T976] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 567.121445][T12009] binfmt_misc: register: failed to install interpreter file ./file0 [ 567.342257][ T976] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 567.356490][ T976] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 567.369958][ T976] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 567.385557][ T976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 567.396804][ T976] usb 2-1: SerialNumber: syz [ 567.419845][ T976] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 567.435484][ T976] usb-storage 2-1:1.0: USB Mass Storage device detected [ 567.543147][ T976] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 567.678957][ T5935] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 567.708006][ T976] scsi host1: usb-storage 2-1:1.0 [ 567.826250][ T5938] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 567.914169][ T5935] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 567.987239][ T5935] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 568.086281][ T5938] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 568.102595][ T5938] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 568.150558][ T5935] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 568.205475][T12018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.215654][T12018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.252428][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 568.264594][ T5938] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 568.276389][ T5938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 568.294844][ T5938] usb 3-1: SerialNumber: syz [ 568.302922][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.309393][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.355048][ T5938] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 568.453357][ T5938] usb-storage 3-1:1.0: USB Mass Storage device detected [ 568.478664][ T5935] usb 4-1: SerialNumber: syz [ 568.507696][ T5938] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 568.601450][ T5935] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 568.616079][ T5935] usb-storage 4-1:1.0: USB Mass Storage device detected [ 568.953642][ T5938] scsi host2: usb-storage 3-1:1.0 [ 569.121750][ T5935] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 569.250283][T12026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.260206][T12026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.566571][ T5935] scsi host3: usb-storage 4-1:1.0 [ 569.592314][T12016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.652586][T12016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.270815][ T5935] usb 2-1: USB disconnect, device number 82 [ 572.069031][ T5935] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 572.268939][ T5935] usb 2-1: Using ep0 maxpacket: 16 [ 572.287755][ T5935] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 572.313036][ T5935] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 572.349001][ T5935] usb 2-1: config 0 has no interface number 0 [ 572.436944][ T5935] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 572.472804][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.481511][ T5935] usb 2-1: Product: syz [ 572.486102][ T5935] usb 2-1: Manufacturer: syz [ 572.496247][ T5935] usb 2-1: SerialNumber: syz [ 572.519815][ T5935] usb 2-1: config 0 descriptor?? [ 572.550560][ T5935] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 572.644133][ T5935] usb 2-1: No valid video chain found. [ 572.995535][ T1209] usb 4-1: USB disconnect, device number 81 [ 573.100959][ T5938] usb 3-1: USB disconnect, device number 76 [ 573.109312][ T976] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 573.360104][ T976] usb 1-1: Using ep0 maxpacket: 16 [ 573.466500][ T976] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 573.477886][ T5938] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 573.513808][ T976] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 573.631253][ T976] usb 1-1: config 0 has no interface number 0 [ 573.763247][ T976] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 573.802579][ T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.832166][ T976] usb 1-1: Product: syz [ 573.843772][ T5938] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 573.853770][ T976] usb 1-1: Manufacturer: syz [ 573.863251][ T5938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.878952][ T976] usb 1-1: SerialNumber: syz [ 573.904994][ T976] usb 1-1: config 0 descriptor?? [ 573.945490][ T5938] usb 3-1: config 0 descriptor?? [ 573.961604][ T976] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 573.982149][ T5938] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 574.017558][ T976] usb 1-1: No valid video chain found. [ 574.141514][ T976] usb 2-1: USB disconnect, device number 83 [ 574.316938][T12069] binfmt_misc: register: failed to install interpreter file ./file0 [ 574.332354][T12069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.342002][T12069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.365081][T12069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.374513][T12069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.916344][ T5938] usb 3-1: USB disconnect, device number 77 [ 576.559238][ T5938] usb 1-1: USB disconnect, device number 60 [ 577.169798][ T1209] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 577.349438][ T1209] usb 1-1: Using ep0 maxpacket: 16 [ 577.363472][ T1209] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.376901][ T1209] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.397244][ T1209] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 577.426898][ T1209] usb 1-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 577.446490][ T1209] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.475180][ T1209] usb 1-1: config 0 descriptor?? [ 577.519934][T12103] binfmt_misc: register: failed to install interpreter file ./file0 [ 577.799201][ T24] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 577.893660][T12082] sctp: [Deprecated]: syz.0.1633 (pid 12082) Use of struct sctp_assoc_value in delayed_ack socket option. [ 577.893660][T12082] Use struct sctp_sack_info instead [ 577.993769][ T1209] hid-u2fzero 0003:10C4:8ACF.0014: unknown main item tag 0x3 [ 578.022049][ T1209] hid-u2fzero 0003:10C4:8ACF.0014: unknown main item tag 0x0 [ 578.136388][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 578.156528][ T1209] hid-u2fzero 0003:10C4:8ACF.0014: item fetching failed at offset 2/5 [ 578.173108][T12107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.240918][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 578.249828][T12107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.268551][ T1209] hid-u2fzero 0003:10C4:8ACF.0014: probe with driver hid-u2fzero failed with error -22 [ 578.324208][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 578.443639][ T1209] usb 1-1: USB disconnect, device number 61 [ 578.457084][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 578.505287][ T24] usb 4-1: SerialNumber: syz [ 578.544686][ T24] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 578.628492][ T24] usb-storage 4-1:1.0: USB Mass Storage device detected [ 578.702414][ T24] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 578.762108][ T24] scsi host1: usb-storage 4-1:1.0 [ 579.059774][T12122] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 579.194740][T12123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.217961][T12123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.460817][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 581.460840][ T30] audit: type=1326 audit(1753461602.903:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12137 comm="syz.2.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda9b8e9a9 code=0x7ffc0000 [ 581.511862][ T30] audit: type=1326 audit(1753461602.903:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12137 comm="syz.2.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda9b8e9a9 code=0x7ffc0000 [ 581.540900][ T30] audit: type=1326 audit(1753461602.923:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12137 comm="syz.2.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fdda9b8e9a9 code=0x7ffc0000 [ 581.563350][ C1] vkms_vblank_simulate: vblank timer overrun [ 581.594651][T12142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1646'. [ 581.609420][T12142] fuse: Bad value for 'fd' [ 581.627420][ T30] audit: type=1326 audit(1753461602.923:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12137 comm="syz.2.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda9b8e9a9 code=0x7ffc0000 [ 581.650319][ C1] vkms_vblank_simulate: vblank timer overrun [ 581.660617][ T30] audit: type=1326 audit(1753461602.923:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12137 comm="syz.2.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda9b8e9a9 code=0x7ffc0000 [ 581.749006][ T30] audit: type=1326 audit(1753461602.953:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12137 comm="syz.2.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fdda9b8e9a9 code=0x7ffc0000 [ 581.810089][ T30] audit: type=1326 audit(1753461603.053:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12137 comm="syz.2.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda9b8e9a9 code=0x7ffc0000 [ 582.028017][ T30] audit: type=1326 audit(1753461603.053:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12137 comm="syz.2.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda9b8e9a9 code=0x7ffc0000 [ 582.208686][ T30] audit: type=1326 audit(1753461603.083:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12145 comm="syz.2.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdda9bc1265 code=0x7ffc0000 [ 582.231061][ C1] vkms_vblank_simulate: vblank timer overrun [ 582.239453][ T1209] usb 4-1: USB disconnect, device number 82 [ 582.258257][ T30] audit: type=1326 audit(1753461603.143:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12137 comm="syz.2.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fdda9b8e9a9 code=0x7ffc0000 [ 582.280572][ C1] vkms_vblank_simulate: vblank timer overrun [ 582.641739][ T976] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 582.720772][T12166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.729840][T12166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.811125][ T976] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 582.826371][ T976] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1023 [ 582.837477][ T976] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 582.855856][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 582.874307][ T976] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 582.925110][ T976] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 582.969869][ T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.024689][ T976] usb 1-1: Product: syz [ 583.080104][ T976] usb 1-1: Manufacturer: syz [ 583.193186][ T976] usb 1-1: SerialNumber: syz [ 583.212943][ T976] usb 1-1: config 0 descriptor?? [ 583.412941][T12159] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 583.435505][ T976] usb 1-1: ucan: probing device on interface #0 [ 583.454103][ T976] usb 1-1: ucan: invalid endpoint configuration [ 583.483628][ T976] usb 1-1: ucan: probe failed; try to update the device firmware [ 584.430706][ T24] usb 1-1: USB disconnect, device number 62 [ 584.598963][ T976] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 584.778982][ T976] usb 2-1: Using ep0 maxpacket: 16 [ 584.830760][ T976] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 584.857252][ T976] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.923182][ T976] usb 2-1: config 0 has no interface number 0 [ 585.089241][ T976] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 585.102697][ T976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.119128][ T976] usb 2-1: Product: syz [ 585.128589][ T976] usb 2-1: Manufacturer: syz [ 585.147569][ T976] usb 2-1: SerialNumber: syz [ 585.210308][ T976] usb 2-1: config 0 descriptor?? [ 585.260201][ T976] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 585.289190][ T976] usb 2-1: No valid video chain found. [ 585.783450][T12194] FAULT_INJECTION: forcing a failure. [ 585.783450][T12194] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 585.802300][T12194] CPU: 1 UID: 0 PID: 12194 Comm: syz.2.1657 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 585.802323][T12194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 585.802334][T12194] Call Trace: [ 585.802340][T12194] [ 585.802347][T12194] dump_stack_lvl+0x189/0x250 [ 585.802369][T12194] ? __pfx____ratelimit+0x10/0x10 [ 585.802386][T12194] ? __pfx_dump_stack_lvl+0x10/0x10 [ 585.802404][T12194] ? __pfx__printk+0x10/0x10 [ 585.802424][T12194] ? __might_fault+0xb0/0x130 [ 585.802454][T12194] should_fail_ex+0x414/0x560 [ 585.802474][T12194] _copy_from_iter+0x1db/0x16f0 [ 585.802502][T12194] ? __pfx__copy_from_iter+0x10/0x10 [ 585.802531][T12194] ? rcu_is_watching+0x15/0xb0 [ 585.802549][T12194] ? trace_kmalloc+0x1f/0xd0 [ 585.802568][T12194] ? kernfs_fop_write_iter+0x158/0x4f0 [ 585.802590][T12194] kernfs_fop_write_iter+0x19f/0x4f0 [ 585.802615][T12194] vfs_write+0x54b/0xa90 [ 585.802639][T12194] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 585.802658][T12194] ? __pfx_vfs_write+0x10/0x10 [ 585.802685][T12194] ? __fget_files+0x2a/0x420 [ 585.802705][T12194] ksys_write+0x145/0x250 [ 585.802726][T12194] ? __pfx_ksys_write+0x10/0x10 [ 585.802744][T12194] ? rcu_is_watching+0x15/0xb0 [ 585.802764][T12194] ? do_syscall_64+0xbe/0x3b0 [ 585.802785][T12194] do_syscall_64+0xfa/0x3b0 [ 585.802802][T12194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.802816][T12194] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 585.802831][T12194] ? clear_bhb_loop+0x60/0xb0 [ 585.802848][T12194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.802862][T12194] RIP: 0033:0x7fdda9b8e9a9 [ 585.802876][T12194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 585.802889][T12194] RSP: 002b:00007fddaa957038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 585.802905][T12194] RAX: ffffffffffffffda RBX: 00007fdda9db5fa0 RCX: 00007fdda9b8e9a9 [ 585.802916][T12194] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000003 [ 585.802926][T12194] RBP: 00007fddaa957090 R08: 0000000000000000 R09: 0000000000000000 [ 585.802935][T12194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 585.802946][T12194] R13: 0000000000000000 R14: 00007fdda9db5fa0 R15: 00007fdda9edfa28 [ 585.802969][T12194] [ 586.038615][ C1] vkms_vblank_simulate: vblank timer overrun [ 586.108930][ T976] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 586.358193][T12196] FAULT_INJECTION: forcing a failure. [ 586.358193][T12196] name failslab, interval 1, probability 0, space 0, times 0 [ 586.371622][T12196] CPU: 1 UID: 0 PID: 12196 Comm: syz.2.1658 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 586.371649][T12196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 586.371661][T12196] Call Trace: [ 586.371669][T12196] [ 586.371678][T12196] dump_stack_lvl+0x189/0x250 [ 586.371705][T12196] ? __pfx____ratelimit+0x10/0x10 [ 586.371727][T12196] ? __pfx_dump_stack_lvl+0x10/0x10 [ 586.371750][T12196] ? __pfx__printk+0x10/0x10 [ 586.371779][T12196] ? __lock_acquire+0xab9/0xd20 [ 586.371810][T12196] should_fail_ex+0x414/0x560 [ 586.371837][T12196] should_failslab+0xa8/0x100 [ 586.371868][T12196] kmem_cache_alloc_noprof+0x73/0x3c0 [ 586.371893][T12196] ? __inet_hash_connect+0xdcc/0x2310 [ 586.371927][T12196] __inet_hash_connect+0xdcc/0x2310 [ 586.371959][T12196] ? __pfx___inet6_check_established+0x10/0x10 [ 586.371998][T12196] ? __inet_hash_connect+0x4fa/0x2310 [ 586.372035][T12196] ? __pfx___inet_hash_connect+0x10/0x10 [ 586.372062][T12196] ? sk_setup_caps+0x850/0xac0 [ 586.372088][T12196] ? inet6_hash_connect+0xd8/0x170 [ 586.372117][T12196] tcp_v6_connect+0xf2e/0x1880 [ 586.372155][T12196] ? stack_depot_save_flags+0x40/0x900 [ 586.372180][T12196] ? __pfx_tcp_v6_connect+0x10/0x10 [ 586.372196][T12196] ? tcp_sendmsg_fastopen+0x1de/0x5e0 [ 586.372214][T12196] ? __sock_sendmsg+0xe5/0x270 [ 586.372230][T12196] ? __sys_sendto+0x3bd/0x520 [ 586.372269][T12196] __inet_stream_connect+0x2ab/0xe80 [ 586.372297][T12196] ? __pfx___inet_stream_connect+0x10/0x10 [ 586.372313][T12196] ? tcp_sendmsg_fastopen+0x1de/0x5e0 [ 586.372333][T12196] ? __kasan_kmalloc+0x93/0xb0 [ 586.372355][T12196] ? tcp_sendmsg_fastopen+0x1de/0x5e0 [ 586.372376][T12196] tcp_sendmsg_fastopen+0x3a7/0x5e0 [ 586.372400][T12196] tcp_sendmsg_locked+0x4dc7/0x5650 [ 586.372421][T12196] ? tcp_sendmsg_locked+0x531/0x5650 [ 586.372441][T12196] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 586.372572][T12196] ? __lock_acquire+0xab9/0xd20 [ 586.372606][T12196] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 586.372623][T12196] ? __local_bh_enable_ip+0x12d/0x1c0 [ 586.372650][T12196] ? __local_bh_enable_ip+0x12d/0x1c0 [ 586.372676][T12196] tcp_sendmsg+0x2f/0x50 [ 586.372696][T12196] __sock_sendmsg+0xe5/0x270 [ 586.372717][T12196] __sys_sendto+0x3bd/0x520 [ 586.372740][T12196] ? __pfx___sys_sendto+0x10/0x10 [ 586.372759][T12196] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 586.372787][T12196] ? __fget_files+0x3a0/0x420 [ 586.372808][T12196] ? ksys_write+0x22a/0x250 [ 586.372830][T12196] ? __pfx_ksys_write+0x10/0x10 [ 586.372854][T12196] __x64_sys_sendto+0xde/0x100 [ 586.372878][T12196] do_syscall_64+0xfa/0x3b0 [ 586.372894][T12196] ? lockdep_hardirqs_on+0x9c/0x150 [ 586.372909][T12196] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.372923][T12196] ? clear_bhb_loop+0x60/0xb0 [ 586.372941][T12196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.372956][T12196] RIP: 0033:0x7fdda9b8e9a9 [ 586.372971][T12196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 586.372984][T12196] RSP: 002b:00007fddaa957038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 586.373000][T12196] RAX: ffffffffffffffda RBX: 00007fdda9db5fa0 RCX: 00007fdda9b8e9a9 [ 586.373011][T12196] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 586.373020][T12196] RBP: 00007fddaa957090 R08: 00002000000002c0 R09: 000000000000001c [ 586.373029][T12196] R10: 0000000020000045 R11: 0000000000000246 R12: 0000000000000001 [ 586.373038][T12196] R13: 0000000000000000 R14: 00007fdda9db5fa0 R15: 00007fdda9edfa28 [ 586.373060][T12196] [ 586.732409][ C1] vkms_vblank_simulate: vblank timer overrun [ 586.852513][ T976] usb 4-1: config 0 has no interfaces? [ 587.202173][ T976] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 587.229126][ T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.253439][ T5938] usb 2-1: USB disconnect, device number 84 [ 587.312385][ T976] usb 4-1: Product: syz [ 587.316633][ T976] usb 4-1: Manufacturer: syz [ 587.344859][ T976] usb 4-1: SerialNumber: syz [ 587.360062][ T976] usb 4-1: config 0 descriptor?? [ 587.470677][T12211] FAULT_INJECTION: forcing a failure. [ 587.470677][T12211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 587.517423][T12212] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 587.608985][ T10] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 587.619550][T12211] CPU: 0 UID: 0 PID: 12211 Comm: syz.1.1664 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 587.619581][T12211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 587.619594][T12211] Call Trace: [ 587.619602][T12211] [ 587.619611][T12211] dump_stack_lvl+0x189/0x250 [ 587.619641][T12211] ? __pfx____ratelimit+0x10/0x10 [ 587.619663][T12211] ? __pfx_dump_stack_lvl+0x10/0x10 [ 587.619687][T12211] ? __pfx__printk+0x10/0x10 [ 587.619714][T12211] ? __might_fault+0xb0/0x130 [ 587.619755][T12211] should_fail_ex+0x414/0x560 [ 587.619782][T12211] _copy_from_user+0x2d/0xb0 [ 587.619813][T12211] ___sys_sendmsg+0x158/0x2a0 [ 587.619836][T12211] ? __pfx____sys_sendmsg+0x10/0x10 [ 587.619895][T12211] ? __fget_files+0x2a/0x420 [ 587.619912][T12211] ? __fget_files+0x3a0/0x420 [ 587.619942][T12211] __x64_sys_sendmsg+0x19b/0x260 [ 587.619965][T12211] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 587.619995][T12211] ? __pfx_ksys_write+0x10/0x10 [ 587.620020][T12211] ? rcu_is_watching+0x15/0xb0 [ 587.620050][T12211] ? do_syscall_64+0xbe/0x3b0 [ 587.620077][T12211] do_syscall_64+0xfa/0x3b0 [ 587.620099][T12211] ? lockdep_hardirqs_on+0x9c/0x150 [ 587.620121][T12211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.620138][T12211] ? clear_bhb_loop+0x60/0xb0 [ 587.620157][T12211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.620175][T12211] RIP: 0033:0x7fb04458e9a9 [ 587.620194][T12211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 587.620211][T12211] RSP: 002b:00007fb04540e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 587.620232][T12211] RAX: ffffffffffffffda RBX: 00007fb0447b5fa0 RCX: 00007fb04458e9a9 [ 587.620246][T12211] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 587.620259][T12211] RBP: 00007fb04540e090 R08: 0000000000000000 R09: 0000000000000000 [ 587.620271][T12211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.620282][T12211] R13: 0000000000000000 R14: 00007fb0447b5fa0 R15: 00007fb0448dfa28 [ 587.620314][T12211] [ 588.101492][ T10] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 588.321218][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.329028][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 588.329063][ T30] audit: type=1326 audit(1753461609.743:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12189 comm="syz.3.1656" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa39538e9a9 code=0x0 [ 588.533501][ T10] usb 1-1: config 0 descriptor?? [ 588.642113][ T10] cp210x 1-1:0.0: cp210x converter detected [ 588.822930][T12206] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 589.115473][ T10] usb 1-1: cp210x converter now attached to ttyUSB0 [ 589.178380][ T10] usb 1-1: USB disconnect, device number 63 [ 589.218087][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 589.238519][ T10] cp210x 1-1:0.0: device disconnected [ 590.067226][ T24] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 590.280526][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 590.291096][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 590.346700][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 590.407321][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 590.494636][ T9] usb 4-1: USB disconnect, device number 83 [ 590.623050][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 590.903635][T12260] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 590.945556][ T24] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 591.013440][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.055243][ T24] usb 2-1: Product: syz [ 591.101724][ T24] usb 2-1: Manufacturer: syz [ 591.213468][ T24] usb 2-1: SerialNumber: syz [ 591.249288][ T5935] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 591.285334][ T24] usb 2-1: config 0 descriptor?? [ 591.315587][ T24] xbox_remote_probe: endpoint_in message size==0? [ 591.519031][ T5935] usb 1-1: Using ep0 maxpacket: 16 [ 591.556825][ T24] usb 2-1: USB disconnect, device number 85 [ 591.566849][ T5935] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 591.575733][ T5935] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 591.682969][ T5935] usb 1-1: config 0 has no interface number 0 [ 591.724032][ T5935] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 591.733219][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.748892][ T5935] usb 1-1: Product: syz [ 591.759026][ T5935] usb 1-1: Manufacturer: syz [ 591.768868][ T5935] usb 1-1: SerialNumber: syz [ 591.785400][ T5935] usb 1-1: config 0 descriptor?? [ 591.803456][ T5935] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 591.835076][ T5935] usb 1-1: No valid video chain found. [ 592.009063][ T5935] usb 1-1: USB disconnect, device number 64 [ 592.259032][ T10] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 592.453548][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 592.469088][ T10] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 592.523862][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 592.524489][T12269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.574887][T12269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.634126][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 592.659704][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 592.680738][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 592.734758][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 592.746836][ T10] usb 3-1: Product: syz [ 592.752433][ T10] usb 3-1: Manufacturer: syz [ 592.795191][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 592.800575][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 592.807768][ T10] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 592.816158][ T10] cdc_wdm 3-1:1.0: Unknown control protocol [ 593.129452][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 593.136167][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 593.149024][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 593.155767][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 593.169141][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 593.175830][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 593.188650][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 593.195351][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 593.202059][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 593.209508][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 593.215936][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 593.222660][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 593.229970][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 593.236698][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 593.243328][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 593.250005][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 593.256616][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 593.263297][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 593.269719][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 593.276394][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 593.284002][ T24] usb 3-1: USB disconnect, device number 78 [ 593.290718][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 593.471487][T12287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.501168][T12287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.644504][T12285] binfmt_misc: register: failed to install interpreter file ./file0 [ 593.689089][T12287] kvm: kvm [12286]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x85 [ 593.701205][T12287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.714185][T12287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.947585][ T10] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 594.127933][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 594.245342][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 594.416984][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 594.447184][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 594.475743][ T10] usb 2-1: SerialNumber: syz [ 594.500290][ T10] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 594.515389][ T10] usb-storage 2-1:1.0: USB Mass Storage device detected [ 594.545280][ T10] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 594.576086][ T10] scsi host1: usb-storage 2-1:1.0 [ 594.778956][ T9] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 594.844267][T12306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1688'. [ 594.856451][T12306] fuse: Bad value for 'fd' [ 595.025259][ T9] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 595.045181][ T9] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 595.056419][ T9] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 595.076850][ T9] usb 3-1: Manufacturer: syz [ 595.092036][ T9] usb 3-1: SerialNumber: syz [ 595.279030][T12308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.469710][T12308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.732243][T12312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.895284][T12312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.861402][ T9] usbhid 3-1:36.0: couldn't find an input interrupt endpoint [ 597.905096][ T9] usb 3-1: USB disconnect, device number 79 [ 598.118305][T12326] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 598.565634][T12335] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 599.118132][ T9] usb 2-1: USB disconnect, device number 86 [ 599.868986][ T9] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 600.023707][ T9] usb 2-1: config 0 has an invalid interface number: 33 but max is 0 [ 600.057108][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 600.110381][ T9] usb 2-1: config 0 has no interface number 0 [ 600.147230][ T9] usb 2-1: config 0 interface 33 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 600.191029][ T9] usb 2-1: config 0 interface 33 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 600.263265][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=68.64 [ 600.295833][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.313828][ T9] usb 2-1: Product: syz [ 600.318613][ T9] usb 2-1: Manufacturer: syz [ 600.325097][ T9] usb 2-1: SerialNumber: syz [ 600.336504][ T9] usb 2-1: config 0 descriptor?? [ 600.344686][T12346] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 600.374570][ T9] hdpvr 2-1:0.33: Could not find bulk-in endpoint [ 600.396375][ T9] hdpvr 2-1:0.33: probe with driver hdpvr failed with error -12 [ 600.480790][T12352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.540110][T12352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.679038][ T9] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 600.838899][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 600.846229][ T9] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 600.857951][ T9] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 600.876262][ T9] usb 4-1: config 0 has no interface number 0 [ 600.888544][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 600.902170][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.917289][ T9] usb 4-1: Product: syz [ 600.926282][ T9] usb 4-1: Manufacturer: syz [ 600.932703][ T9] usb 4-1: SerialNumber: syz [ 600.947993][ T9] usb 4-1: config 0 descriptor?? [ 600.965368][ T9] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 600.976311][ T9] usb 4-1: No valid video chain found. [ 601.160874][ T5935] usb 4-1: USB disconnect, device number 84 [ 602.739268][ T976] usb 2-1: USB disconnect, device number 87 [ 603.130126][T12377] FAULT_INJECTION: forcing a failure. [ 603.130126][T12377] name failslab, interval 1, probability 0, space 0, times 0 [ 603.200715][T12377] CPU: 1 UID: 0 PID: 12377 Comm: syz.2.1707 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 603.200738][T12377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 603.200747][T12377] Call Trace: [ 603.200754][T12377] [ 603.200760][T12377] dump_stack_lvl+0x189/0x250 [ 603.200783][T12377] ? __pfx____ratelimit+0x10/0x10 [ 603.200800][T12377] ? __pfx_dump_stack_lvl+0x10/0x10 [ 603.200818][T12377] ? __pfx__printk+0x10/0x10 [ 603.200843][T12377] ? __pfx___might_resched+0x10/0x10 [ 603.200860][T12377] ? fs_reclaim_acquire+0x7d/0x100 [ 603.200878][T12377] should_fail_ex+0x414/0x560 [ 603.200898][T12377] should_failslab+0xa8/0x100 [ 603.200922][T12377] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 603.200942][T12377] ? __d_alloc+0x31/0x6f0 [ 603.200962][T12377] __d_alloc+0x31/0x6f0 [ 603.200983][T12377] d_alloc_parallel+0xe0/0x14e0 [ 603.201005][T12377] ? lockdep_unlock+0x89/0x120 [ 603.201018][T12377] ? validate_chain+0x897/0x2140 [ 603.201045][T12377] ? __pfx_d_alloc_parallel+0x10/0x10 [ 603.201067][T12377] ? __raw_spin_lock_init+0x45/0x100 [ 603.201089][T12377] ? __init_waitqueue_head+0xa9/0x150 [ 603.201114][T12377] __lookup_slow+0x116/0x3d0 [ 603.201133][T12377] ? __pfx___lookup_slow+0x10/0x10 [ 603.201163][T12377] ? down_read+0x1ad/0x2e0 [ 603.201184][T12377] lookup_slow+0x53/0x70 [ 603.201201][T12377] walk_component+0x2d2/0x400 [ 603.201215][T12377] ? path_lookupat+0x156/0x430 [ 603.201233][T12377] path_lookupat+0x163/0x430 [ 603.201255][T12377] filename_lookup+0x212/0x570 [ 603.201275][T12377] ? __pfx_filename_lookup+0x10/0x10 [ 603.201310][T12377] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 603.201329][T12377] ? getname_kernel+0x146/0x2f0 [ 603.201347][T12377] ? getname_kernel+0x20e/0x2f0 [ 603.201363][T12377] kern_path+0x35/0x50 [ 603.201384][T12377] lookup_bdev+0xc0/0x280 [ 603.201403][T12377] ? rcu_is_watching+0x15/0xb0 [ 603.201423][T12377] ? __pfx_lookup_bdev+0x10/0x10 [ 603.201440][T12377] ? kstrndup+0xbf/0x160 [ 603.201463][T12377] resume_store+0x169/0x460 [ 603.201483][T12377] ? sysfs_file_kobj+0x1a/0x230 [ 603.201506][T12377] ? __pfx_resume_store+0x10/0x10 [ 603.201527][T12377] ? sysfs_file_kobj+0x1a/0x230 [ 603.201547][T12377] ? sysfs_file_kobj+0x1a/0x230 [ 603.201566][T12377] ? sysfs_file_kobj+0x1a/0x230 [ 603.201587][T12377] ? sysfs_file_kobj+0x1e4/0x230 [ 603.201608][T12377] ? sysfs_kf_write+0x166/0x260 [ 603.201632][T12377] ? __pfx_sysfs_kf_write+0x10/0x10 [ 603.201652][T12377] kernfs_fop_write_iter+0x375/0x4f0 [ 603.201677][T12377] vfs_write+0x54b/0xa90 [ 603.201701][T12377] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 603.201721][T12377] ? __pfx_vfs_write+0x10/0x10 [ 603.201753][T12377] ? __fget_files+0x2a/0x420 [ 603.201774][T12377] ksys_write+0x145/0x250 [ 603.201795][T12377] ? __pfx_ksys_write+0x10/0x10 [ 603.201813][T12377] ? rcu_is_watching+0x15/0xb0 [ 603.201834][T12377] ? do_syscall_64+0xbe/0x3b0 [ 603.201854][T12377] do_syscall_64+0xfa/0x3b0 [ 603.201870][T12377] ? lockdep_hardirqs_on+0x9c/0x150 [ 603.201886][T12377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.201901][T12377] ? clear_bhb_loop+0x60/0xb0 [ 603.201919][T12377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.201933][T12377] RIP: 0033:0x7fdda9b8e9a9 [ 603.201947][T12377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 603.201959][T12377] RSP: 002b:00007fddaa957038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 603.201974][T12377] RAX: ffffffffffffffda RBX: 00007fdda9db5fa0 RCX: 00007fdda9b8e9a9 [ 603.201986][T12377] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000003 [ 603.201995][T12377] RBP: 00007fddaa957090 R08: 0000000000000000 R09: 0000000000000000 [ 603.202004][T12377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 603.202012][T12377] R13: 0000000000000000 R14: 00007fdda9db5fa0 R15: 00007fdda9edfa28 [ 603.202035][T12377] [ 603.591727][ C1] vkms_vblank_simulate: vblank timer overrun [ 604.105629][T12397] binfmt_misc: register: failed to install interpreter file ./file0 [ 604.264470][T12404] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 604.488947][ T9] usb 3-1: new full-speed USB device number 80 using dummy_hcd [ 604.694540][ T976] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 604.829460][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 604.955195][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 605.044162][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 605.085641][ T976] usb 2-1: config 0 has no interfaces? [ 605.116184][ T976] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 605.132416][ T976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.140902][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 605.185723][ T976] usb 2-1: Product: syz [ 605.191225][ T9] usb 3-1: SerialNumber: syz [ 605.205820][ T1209] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 605.294248][ T976] usb 2-1: Manufacturer: syz [ 605.326467][ T976] usb 2-1: SerialNumber: syz [ 605.344589][ T9] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 605.461560][ T1209] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.488253][ T1209] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 605.538779][ T1209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.605478][ T1209] usb 4-1: config 0 descriptor?? [ 605.627445][ T976] usb 2-1: config 0 descriptor?? [ 605.639390][ T9] usb-storage 3-1:1.0: USB Mass Storage device detected [ 605.822114][ T9] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 605.887476][ T1209] usbhid 4-1:0.0: can't add hid device: -71 [ 606.058106][ T9] scsi host1: usb-storage 3-1:1.0 [ 606.085680][ T1209] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 606.142435][ T1209] usb 4-1: USB disconnect, device number 85 [ 606.185220][T12419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.196932][T12419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.837625][ T1209] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 607.049879][ T1209] usb 4-1: Using ep0 maxpacket: 32 [ 607.059259][ T1209] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 607.098221][ T1209] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 607.135402][ T1209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.173489][ T1209] usb 4-1: config 0 descriptor?? [ 607.240690][ T1209] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 607.358710][ T1209] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 607.674383][T12427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.723141][T12427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.840918][ T1209] usb 4-1: USB disconnect, device number 86 [ 607.849463][ T1209] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 607.962941][ T5935] usb 2-1: USB disconnect, device number 88 [ 608.249099][ T44] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 608.422528][ T44] usb 1-1: Using ep0 maxpacket: 8 [ 608.461625][ T44] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 608.498902][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.530523][ T44] usb 1-1: Product: syz [ 608.534784][ T44] usb 1-1: Manufacturer: syz [ 608.578178][ T44] usb 1-1: SerialNumber: syz [ 608.607267][ T44] usb 1-1: config 0 descriptor?? [ 608.627635][ T44] gspca_main: sq930x-2.14.0 probing 2770:930c [ 608.794000][T12452] binfmt_misc: register: failed to install interpreter file ./file0 [ 609.078962][ T5935] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 609.220438][ T9] usb 3-1: USB disconnect, device number 80 [ 609.243672][ T5935] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 609.276621][ T5935] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 609.366625][ T5935] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 609.376708][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 609.384903][ T5935] usb 2-1: SerialNumber: syz [ 609.398025][ T5935] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 609.408565][ T5935] usb-storage 2-1:1.0: USB Mass Storage device detected [ 609.419303][ T5935] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 609.541073][ T5935] scsi host2: usb-storage 2-1:1.0 [ 609.679021][ T44] gspca_sq930x: reg_w 0105 0f00 failed -71 [ 610.049259][T12462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.058263][T12462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.714023][ T44] gspca_sq930x: Sensor ov9630 not yet treated [ 610.748420][ T44] sq930x 1-1:0.0: probe with driver sq930x failed with error -22 [ 610.783246][ T44] usb 1-1: USB disconnect, device number 65 [ 611.207010][T12470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 611.266066][T12470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 611.783554][T12479] netlink: 'syz.3.1734': attribute type 2 has an invalid length. [ 611.795821][T12479] netlink: 'syz.3.1734': attribute type 8 has an invalid length. [ 611.805374][T12479] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1734'. [ 611.836565][T12482] FAULT_INJECTION: forcing a failure. [ 611.836565][T12482] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 611.850628][T12482] CPU: 0 UID: 0 PID: 12482 Comm: syz.4.1737 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 611.850658][T12482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 611.850672][T12482] Call Trace: [ 611.850680][T12482] [ 611.850689][T12482] dump_stack_lvl+0x189/0x250 [ 611.850729][T12482] ? __pfx____ratelimit+0x10/0x10 [ 611.850752][T12482] ? __pfx_dump_stack_lvl+0x10/0x10 [ 611.850776][T12482] ? __pfx__printk+0x10/0x10 [ 611.850818][T12482] should_fail_ex+0x414/0x560 [ 611.850846][T12482] _copy_from_user+0x2d/0xb0 [ 611.850876][T12482] __copy_msghdr+0x3c5/0x5b0 [ 611.850913][T12482] ___sys_sendmsg+0x1a5/0x2a0 [ 611.850935][T12482] ? __pfx____sys_sendmsg+0x10/0x10 [ 611.850993][T12482] ? __fget_files+0x2a/0x420 [ 611.851012][T12482] ? __fget_files+0x3a0/0x420 [ 611.851041][T12482] __sys_sendmmsg+0x227/0x430 [ 611.851067][T12482] ? __pfx___sys_sendmmsg+0x10/0x10 [ 611.851084][T12482] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 611.851137][T12482] ? ksys_write+0x22a/0x250 [ 611.851175][T12482] ? __pfx_ksys_write+0x10/0x10 [ 611.851207][T12482] __x64_sys_sendmmsg+0xa0/0xc0 [ 611.851228][T12482] do_syscall_64+0xfa/0x3b0 [ 611.851254][T12482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.851272][T12482] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 611.851292][T12482] ? clear_bhb_loop+0x60/0xb0 [ 611.851317][T12482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.851337][T12482] RIP: 0033:0x7f3d6fd8e9a9 [ 611.851355][T12482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 611.851373][T12482] RSP: 002b:00007f3d70c6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 611.851395][T12482] RAX: ffffffffffffffda RBX: 00007f3d6ffb5fa0 RCX: 00007f3d6fd8e9a9 [ 611.851410][T12482] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: 0000000000000003 [ 611.851423][T12482] RBP: 00007f3d70c6d090 R08: 0000000000000000 R09: 0000000000000000 [ 611.851436][T12482] R10: 0000000000000850 R11: 0000000000000246 R12: 0000000000000001 [ 611.851448][T12482] R13: 0000000000000000 R14: 00007f3d6ffb5fa0 R15: 00007f3d700dfa28 [ 611.851480][T12482] [ 612.437224][T12494] binfmt_misc: register: failed to install interpreter file ./file0 [ 612.618281][T12498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.684457][ T1209] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 612.694187][ T1209] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 612.698668][T12498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.703556][ T4134] wlan1: authenticated [ 612.740655][ T976] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 612.748482][ T4134] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 612.788737][ T4134] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 612.789556][T12501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.811822][ T4134] wlan1: associated [ 612.905327][ T976] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 612.917846][ T976] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 612.933586][ T976] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 612.943710][ T976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 612.952198][ T976] usb 1-1: SerialNumber: syz [ 612.975086][ T976] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 613.017469][ T976] usb-storage 1-1:1.0: USB Mass Storage device detected [ 613.064962][ T9] usb 2-1: USB disconnect, device number 89 [ 613.194565][ T976] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 613.221145][ T976] scsi host1: usb-storage 1-1:1.0 [ 613.582026][T12514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.687033][T12514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.037860][T12527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.000222][T12529] kAFS: unable to lookup cell 'Þ({^ú@' [ 616.145617][ T44] usb 1-1: USB disconnect, device number 66 [ 616.485041][T12539] binfmt_misc: register: failed to install interpreter file ./file0 [ 616.512444][ T976] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 616.753612][ T976] usb 4-1: Using ep0 maxpacket: 8 [ 616.755061][ T5935] usb 3-1: new full-speed USB device number 81 using dummy_hcd [ 616.789152][ T976] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 616.813676][ T976] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 616.835839][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.858029][T12549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.870755][T12549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.896900][ T976] usb 4-1: config 0 descriptor?? [ 616.917065][ T976] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 617.022667][ T5935] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 617.034541][ T5935] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 617.090776][ T5935] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 617.100895][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 617.117623][ T5935] usb 3-1: SerialNumber: syz [ 617.159914][ T5935] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 617.300047][ T5935] usb-storage 3-1:1.0: USB Mass Storage device detected [ 617.405737][ T5935] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 617.434185][T12562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.449307][T12562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.458500][ T5935] scsi host1: usb-storage 3-1:1.0 [ 617.850968][T12567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.862891][T12567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.773888][T12575] usb usb8: usbfs: process 12575 (syz.4.1760) did not claim interface 0 before use [ 619.691186][ T976] usb 4-1: USB disconnect, device number 87 [ 620.949265][ T976] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 621.134632][ T976] usb 2-1: config 0 has no interfaces? [ 621.163689][ T976] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 621.245560][ T976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.265936][T12598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1768'. [ 621.297415][T12598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1768'. [ 621.348997][ T976] usb 2-1: Product: syz [ 621.401271][ T976] usb 2-1: Manufacturer: syz [ 621.405958][ T976] usb 2-1: SerialNumber: syz [ 621.520123][ T976] usb 2-1: config 0 descriptor?? [ 621.560513][T12600] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614) [ 621.610348][ T9] usb 3-1: USB disconnect, device number 81 [ 622.636467][ T30] audit: type=1326 audit(1753461644.093:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12611 comm="syz.3.1772" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa39538e9a9 code=0x0 [ 622.999501][ T5937] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 623.000154][T12615] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 623.188977][ T5937] usb 4-1: Using ep0 maxpacket: 32 [ 623.220688][ T5937] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 623.240359][ T5937] usb 4-1: config 0 has no interface number 0 [ 623.269202][ T5937] usb 4-1: config 0 interface 12 has no altsetting 0 [ 623.292624][ T5937] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 623.316808][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.335300][ T5937] usb 4-1: Product: syz [ 623.398086][ T5937] usb 4-1: Manufacturer: syz [ 623.435277][ T5937] usb 4-1: SerialNumber: syz [ 623.447560][ T5935] usb 2-1: USB disconnect, device number 90 [ 623.523228][ T5937] usb 4-1: config 0 descriptor?? [ 623.942105][ T30] audit: type=1326 audit(1753461645.393:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12611 comm="syz.3.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39538e9a9 code=0x7ffc0000 [ 623.982396][ T30] audit: type=1326 audit(1753461645.393:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12611 comm="syz.3.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39538e9a9 code=0x7ffc0000 [ 624.047882][T12629] fuse: Bad value for 'fd' [ 624.089075][ T30] audit: type=1326 audit(1753461645.393:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12611 comm="syz.3.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa39532ab89 code=0x7ffc0000 [ 624.111527][ C1] vkms_vblank_simulate: vblank timer overrun [ 624.141246][ T30] audit: type=1326 audit(1753461645.393:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12611 comm="syz.3.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39538e9a9 code=0x7ffc0000 [ 624.163653][ C1] vkms_vblank_simulate: vblank timer overrun [ 624.215540][ T30] audit: type=1326 audit(1753461645.393:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12611 comm="syz.3.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa39532ab89 code=0x7ffc0000 [ 624.238436][ T30] audit: type=1326 audit(1753461645.393:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12611 comm="syz.3.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa39532ab89 code=0x7ffc0000 [ 624.260733][ C1] vkms_vblank_simulate: vblank timer overrun [ 624.267771][ T30] audit: type=1326 audit(1753461645.393:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12611 comm="syz.3.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7fa39538e9a9 code=0x7ffc0000 [ 624.292526][ T30] audit: type=1326 audit(1753461645.393:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12611 comm="syz.3.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa39532ab89 code=0x7ffc0000 [ 624.315297][ T30] audit: type=1326 audit(1753461645.393:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12611 comm="syz.3.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39538e9a9 code=0x7ffc0000 [ 625.073897][ T9] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 625.223306][ T9] usb 1-1: config 0 has no interfaces? [ 625.234394][ T9] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 625.312639][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.343831][ T9] usb 1-1: Product: syz [ 625.367355][T12649] loop6: detected capacity change from 0 to 7 [ 625.386107][T12649] Dev loop6: unable to read RDB block 7 [ 625.392149][T12649] loop6: AHDI p3 [ 625.395974][T12649] loop6: partition table partially beyond EOD, truncated [ 625.412538][ T9] usb 1-1: Manufacturer: syz [ 625.429024][ T9] usb 1-1: SerialNumber: syz [ 625.601723][ T5937] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 625.634247][ T9] usb 1-1: config 0 descriptor?? [ 625.675298][ T5937] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 625.729353][ T5937] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 625.737084][ T5937] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 625.818990][ T5937] usb 4-1: USB disconnect, device number 88 [ 627.009733][T12674] binfmt_misc: register: failed to install interpreter file ./file0 [ 627.124831][T12678] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1794'. [ 627.289076][ T9] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 627.453844][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 627.499859][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 627.566228][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 627.588469][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 627.648425][ T9] usb 3-1: SerialNumber: syz [ 627.757696][ T9] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 627.772087][ T9] usb-storage 3-1:1.0: USB Mass Storage device detected [ 627.801543][ T9] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 627.812788][ T5937] usb 1-1: USB disconnect, device number 67 [ 627.842022][ T9] scsi host1: usb-storage 3-1:1.0 [ 628.325610][T12692] FAULT_INJECTION: forcing a failure. [ 628.325610][T12692] name failslab, interval 1, probability 0, space 0, times 0 [ 628.338903][T12692] CPU: 0 UID: 0 PID: 12692 Comm: syz.3.1796 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 628.338929][T12692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 628.338943][T12692] Call Trace: [ 628.338951][T12692] [ 628.338960][T12692] dump_stack_lvl+0x189/0x250 [ 628.338991][T12692] ? __pfx____ratelimit+0x10/0x10 [ 628.339013][T12692] ? __pfx_dump_stack_lvl+0x10/0x10 [ 628.339036][T12692] ? __pfx__printk+0x10/0x10 [ 628.339066][T12692] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 628.339102][T12692] should_fail_ex+0x414/0x560 [ 628.339128][T12692] should_failslab+0xa8/0x100 [ 628.339160][T12692] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 628.339189][T12692] ? __alloc_skb+0x112/0x2d0 [ 628.339223][T12692] __alloc_skb+0x112/0x2d0 [ 628.339253][T12692] xfrm_send_state_notify+0x111/0x18b0 [ 628.339287][T12692] ? km_state_notify+0x25/0x1f0 [ 628.339313][T12692] ? __pfx_xfrm_send_state_notify+0x10/0x10 [ 628.339336][T12692] ? km_state_notify+0x25/0x1f0 [ 628.339368][T12692] ? debug_object_activate+0x2e2/0x420 [ 628.339400][T12692] ? km_state_notify+0x25/0x1f0 [ 628.339427][T12692] ? km_state_notify+0x25/0x1f0 [ 628.339454][T12692] ? __pfx_xfrm_send_state_notify+0x10/0x10 [ 628.339482][T12692] km_state_notify+0x110/0x1f0 [ 628.339514][T12692] xfrm_state_check_expire+0x3e1/0x440 [ 628.339545][T12692] ? __pfx_xfrm_state_check_expire+0x10/0x10 [ 628.339571][T12692] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 628.339597][T12692] xfrm_state_update+0xa18/0x1270 [ 628.339619][T12692] ? xfrm_set_type_offload+0x181/0x430 [ 628.339640][T12692] xfrm_add_sa+0x35b2/0x4070 [ 628.339669][T12692] ? __pfx_xfrm_add_sa+0x10/0x10 [ 628.339689][T12692] ? apparmor_capable+0x137/0x1b0 [ 628.339715][T12692] ? __nla_parse+0x40/0x60 [ 628.339745][T12692] xfrm_user_rcv_msg+0x7a0/0xab0 [ 628.339776][T12692] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 628.339826][T12692] ? __mutex_trylock_common+0x153/0x260 [ 628.339848][T12692] ? __pfx___mutex_trylock_common+0x10/0x10 [ 628.339871][T12692] ? rcu_is_watching+0x15/0xb0 [ 628.339889][T12692] ? trace_contention_end+0x39/0x120 [ 628.339913][T12692] netlink_rcv_skb+0x208/0x470 [ 628.339936][T12692] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 628.339958][T12692] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 628.339997][T12692] ? netlink_deliver_tap+0x2e/0x1b0 [ 628.340018][T12692] ? netlink_deliver_tap+0x2e/0x1b0 [ 628.340041][T12692] xfrm_netlink_rcv+0x79/0x90 [ 628.340062][T12692] netlink_unicast+0x75c/0x8e0 [ 628.340089][T12692] netlink_sendmsg+0x805/0xb30 [ 628.340125][T12692] ? __pfx_netlink_sendmsg+0x10/0x10 [ 628.340149][T12692] ? aa_sock_msg_perm+0x94/0x160 [ 628.340167][T12692] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 628.340183][T12692] ? __pfx_netlink_sendmsg+0x10/0x10 [ 628.340205][T12692] __sock_sendmsg+0x219/0x270 [ 628.340226][T12692] ____sys_sendmsg+0x505/0x830 [ 628.340244][T12692] ? __pfx_____sys_sendmsg+0x10/0x10 [ 628.340265][T12692] ? import_iovec+0x74/0xa0 [ 628.340289][T12692] ___sys_sendmsg+0x21f/0x2a0 [ 628.340305][T12692] ? __pfx____sys_sendmsg+0x10/0x10 [ 628.340347][T12692] ? __fget_files+0x2a/0x420 [ 628.340360][T12692] ? __fget_files+0x3a0/0x420 [ 628.340381][T12692] __x64_sys_sendmsg+0x19b/0x260 [ 628.340397][T12692] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 628.340418][T12692] ? __pfx_ksys_write+0x10/0x10 [ 628.340436][T12692] ? rcu_is_watching+0x15/0xb0 [ 628.340458][T12692] ? do_syscall_64+0xbe/0x3b0 [ 628.340555][T12692] do_syscall_64+0xfa/0x3b0 [ 628.340580][T12692] ? lockdep_hardirqs_on+0x9c/0x150 [ 628.340607][T12692] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.340626][T12692] ? clear_bhb_loop+0x60/0xb0 [ 628.340647][T12692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.340666][T12692] RIP: 0033:0x7fa39538e9a9 [ 628.340685][T12692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 628.340701][T12692] RSP: 002b:00007fa3962a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 628.340722][T12692] RAX: ffffffffffffffda RBX: 00007fa3955b5fa0 RCX: 00007fa39538e9a9 [ 628.340736][T12692] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 628.340748][T12692] RBP: 00007fa3962a6090 R08: 0000000000000000 R09: 0000000000000000 [ 628.340760][T12692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 628.340771][T12692] R13: 0000000000000000 R14: 00007fa3955b5fa0 R15: 00007fa3956dfa28 [ 628.340803][T12692] [ 628.356116][T12693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 628.882702][T12693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 629.092892][ T1084] ------------[ cut here ]------------ [ 629.098547][ T1084] WARNING: CPU: 1 PID: 1084 at net/mac80211/mlme.c:4310 ieee80211_mgd_probe_ap_send+0x52c/0x600 [ 629.109538][ T1084] Modules linked in: [ 629.113793][ T1084] CPU: 1 UID: 0 PID: 1084 Comm: kworker/u8:5 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 629.126033][ T1084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 629.136365][ T1084] Workqueue: events_unbound cfg80211_wiphy_work [ 629.142766][ T1084] RIP: 0010:ieee80211_mgd_probe_ap_send+0x52c/0x600 [ 629.149450][ T1084] Code: c4 f6 90 0f 0b 90 eb b5 e8 a1 54 c4 f6 90 0f 0b 90 e9 bd fb ff ff e8 93 54 c4 f6 90 0f 0b 90 e9 37 ff ff ff e8 85 54 c4 f6 90 <0f> 0b 90 e9 93 fc ff ff 48 c7 c1 30 0f a2 8f 80 e1 07 80 c1 03 38 [ 629.169740][ T1084] RSP: 0018:ffffc90003f4f9e0 EFLAGS: 00010293 [ 629.176045][ T1084] RAX: ffffffff8afbd25b RBX: 0000000000000001 RCX: ffff88802677bc00 [ 629.184121][ T1084] RDX: 0000000000000000 RSI: ffffffff8db845d7 RDI: ffff88802677bc00 [ 629.192201][ T1084] RBP: dffffc0000000000 R08: ffff88802677bc00 R09: 000000000000000c [ 629.200271][ T1084] R10: 000000000000000c R11: 0000000000000000 R12: 1ffff1100fa5bb8e [ 629.208279][ T1084] R13: ffff88807d2dcd80 R14: ffff88807d2dea22 R15: ffff88807d2ddc70 [ 629.216344][ T1084] FS: 0000000000000000(0000) GS:ffff888125d23000(0000) knlGS:0000000000000000 [ 629.225343][ T1084] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 629.232016][ T1084] CR2: 000020000020a030 CR3: 000000002f7ca000 CR4: 00000000003526f0 [ 629.240061][ T1084] Call Trace: [ 629.243388][ T1084] [ 629.246351][ T1084] cfg80211_wiphy_work+0x2df/0x460 [ 629.251609][ T1084] ? process_scheduled_works+0x9ef/0x17b0 [ 629.257515][ T1084] process_scheduled_works+0xae1/0x17b0 [ 629.263352][ T1084] ? __pfx_process_scheduled_works+0x10/0x10 [ 629.269736][ T1084] worker_thread+0x8a0/0xda0 [ 629.274543][ T1084] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 629.281180][ T1084] ? __kthread_parkme+0x7b/0x200 [ 629.286189][ T1084] kthread+0x711/0x8a0 [ 629.290365][ T1084] ? __pfx_worker_thread+0x10/0x10 [ 629.295546][ T1084] ? __pfx_kthread+0x10/0x10 [ 629.300237][ T1084] ? _raw_spin_unlock_irq+0x23/0x50 [ 629.305480][ T1084] ? lockdep_hardirqs_on+0x9c/0x150 [ 629.310871][ T1084] ? __pfx_kthread+0x10/0x10 [ 629.315543][ T1084] ret_from_fork+0x3fc/0x770 [ 629.320324][ T1084] ? __pfx_ret_from_fork+0x10/0x10 [ 629.325533][ T1084] ? __switch_to_asm+0x39/0x70 [ 629.330463][ T1084] ? __switch_to_asm+0x33/0x70 [ 629.335306][ T1084] ? __pfx_kthread+0x10/0x10 [ 629.340045][ T1084] ret_from_fork_asm+0x1a/0x30 [ 629.344917][ T1084] [ 629.348021][ T1084] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 629.355319][ T1084] CPU: 1 UID: 0 PID: 1084 Comm: kworker/u8:5 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 629.367518][ T1084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 629.377615][ T1084] Workqueue: events_unbound cfg80211_wiphy_work [ 629.383943][ T1084] Call Trace: [ 629.387236][ T1084] [ 629.390181][ T1084] dump_stack_lvl+0x99/0x250 [ 629.394800][ T1084] ? __asan_memcpy+0x40/0x70 [ 629.399499][ T1084] ? __pfx_dump_stack_lvl+0x10/0x10 [ 629.404725][ T1084] ? __pfx__printk+0x10/0x10 [ 629.409345][ T1084] panic+0x2db/0x790 [ 629.413261][ T1084] ? __pfx_panic+0x10/0x10 [ 629.417694][ T1084] ? show_trace_log_lvl+0x4fb/0x550 [ 629.422924][ T1084] ? ret_from_fork_asm+0x1a/0x30 [ 629.427885][ T1084] __warn+0x31b/0x4b0 [ 629.431884][ T1084] ? ieee80211_mgd_probe_ap_send+0x52c/0x600 [ 629.437889][ T1084] ? ieee80211_mgd_probe_ap_send+0x52c/0x600 [ 629.443987][ T1084] report_bug+0x2be/0x4f0 [ 629.448422][ T1084] ? ieee80211_mgd_probe_ap_send+0x52c/0x600 [ 629.454428][ T1084] ? ieee80211_mgd_probe_ap_send+0x52c/0x600 [ 629.460433][ T1084] ? ieee80211_mgd_probe_ap_send+0x52e/0x600 [ 629.466436][ T1084] handle_bug+0x84/0x160 [ 629.470711][ T1084] exc_invalid_op+0x1a/0x50 [ 629.475238][ T1084] asm_exc_invalid_op+0x1a/0x20 [ 629.480135][ T1084] RIP: 0010:ieee80211_mgd_probe_ap_send+0x52c/0x600 [ 629.486771][ T1084] Code: c4 f6 90 0f 0b 90 eb b5 e8 a1 54 c4 f6 90 0f 0b 90 e9 bd fb ff ff e8 93 54 c4 f6 90 0f 0b 90 e9 37 ff ff ff e8 85 54 c4 f6 90 <0f> 0b 90 e9 93 fc ff ff 48 c7 c1 30 0f a2 8f 80 e1 07 80 c1 03 38 [ 629.506427][ T1084] RSP: 0018:ffffc90003f4f9e0 EFLAGS: 00010293 [ 629.512593][ T1084] RAX: ffffffff8afbd25b RBX: 0000000000000001 RCX: ffff88802677bc00 [ 629.520634][ T1084] RDX: 0000000000000000 RSI: ffffffff8db845d7 RDI: ffff88802677bc00 [ 629.528642][ T1084] RBP: dffffc0000000000 R08: ffff88802677bc00 R09: 000000000000000c [ 629.536816][ T1084] R10: 000000000000000c R11: 0000000000000000 R12: 1ffff1100fa5bb8e [ 629.544829][ T1084] R13: ffff88807d2dcd80 R14: ffff88807d2dea22 R15: ffff88807d2ddc70 [ 629.552853][ T1084] ? ieee80211_mgd_probe_ap_send+0x52b/0x600 [ 629.559001][ T1084] cfg80211_wiphy_work+0x2df/0x460 [ 629.564141][ T1084] ? process_scheduled_works+0x9ef/0x17b0 [ 629.569898][ T1084] process_scheduled_works+0xae1/0x17b0 [ 629.575492][ T1084] ? __pfx_process_scheduled_works+0x10/0x10 [ 629.581508][ T1084] worker_thread+0x8a0/0xda0 [ 629.586123][ T1084] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 629.592479][ T1084] ? __kthread_parkme+0x7b/0x200 [ 629.597448][ T1084] kthread+0x711/0x8a0 [ 629.601558][ T1084] ? __pfx_worker_thread+0x10/0x10 [ 629.606700][ T1084] ? __pfx_kthread+0x10/0x10 [ 629.611401][ T1084] ? _raw_spin_unlock_irq+0x23/0x50 [ 629.616634][ T1084] ? lockdep_hardirqs_on+0x9c/0x150 [ 629.621852][ T1084] ? __pfx_kthread+0x10/0x10 [ 629.626470][ T1084] ret_from_fork+0x3fc/0x770 [ 629.631089][ T1084] ? __pfx_ret_from_fork+0x10/0x10 [ 629.636233][ T1084] ? __switch_to_asm+0x39/0x70 [ 629.641020][ T1084] ? __switch_to_asm+0x33/0x70 [ 629.645808][ T1084] ? __pfx_kthread+0x10/0x10 [ 629.650450][ T1084] ret_from_fork_asm+0x1a/0x30 [ 629.655249][ T1084] [ 629.658628][ T1084] Kernel Offset: disabled [ 629.662993][ T1084] Rebooting in 86400 seconds..