last executing test programs: 1m6.912224562s ago: executing program 1 (id=1446): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f00000024c0), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000c280)="897c6500ff3035465c7acb4e06980b05687c1480c7aafe631c0543db2bf0d6f539506e8782da06c1ca018774d72e9e5a3418ab66ee78dad68457b17ec9d47bf7d8272d607c1c0a4bd906f0cee7f8451828d2458596bdd6a459ba18ebaf61b38f5d66c27fa8a024ad7832a85e58689a4c254c94cbcf7208fce6e61d9566459789d15a6f91dd7db7c54cc3a94da956fb290a8a15f849270bc459d9d9f47801be86dd5c9d18382081a993b7bfde5c28adca4c7132fd6be743b076033b5859891703eb65fa256d6f47450b6edacbd05a9bd8b372e90cfc30f32826566dac6c48e6ef001881cbc30482f9ec469e476a101da496b8c0785eaf875d3608b0c49e9d39baaa1041f903a805f0f24aa63722fa2d87b98595fa5cfaf8b79c458de43ee39904e7cac7540a934b4108957785d58807abff186949f1b94cd21b724aff34ac45c7066dcdbd68ea7b766af9d045cd7fafeafc5c5a0c3400ef4e0c71a6fdd5b8d68a6f317644cda9d2fd2c839a82b97b3d909b54c672227bef573c9de1991d65a63017f724d1f7f1575e69db53318a7fd7065b303e751518c8eef04f642dbd4dfa349040a7b5401050ffc2b4ef62803a7c8eaba99e011dfac24d81b2b61e0b0581e53bf520f623eca17f0545c5e59ff15b527475f970f589894ae589145fa4283f7225088ccfeba1d72e9128f8c223ae1840f2edae3dbcdf7e560d5cdf4f71c9ada1931c0f8312c000101b264aaddb9fab166ba8d8903d6098eca20935ca607ea79e936798b3dfb22a7e159abb234cf21f3733dbf263a8ff116092f251659108892b2e21e1b428fd225096a5040270b2d70347013eaa1fd8e452942200283aab092c4ffc5b8b427b5d691a5a773e09da20539ff0f8214331c5d84107ae8a59aeb58efe22d7a079e446f1dfb07510377799bfdc7ee59cabcd76af0fe8a427ac8258ff33bbad5a8061f1cfdfbf375d73d676cc7916d6658ce46a0b17ad6350150f98e3512b513e25ca73f5f5df0a1fb9582ace7906c493fe1fd2889d9aac0b7c29c2b6c205537627bad64df433336a5ace32ca871e51b4dab0fbb00886a1fa81a98b74de0a26cebf65723515ebb807fc3c161ed42d1a7b6b55717613577ea437f3a2967c66ce45ff85a6a35b7cd40625fc575b107d7394e3d2db51d58347276c33e21f50b5a6b5672bf9fda63139bb75aead1fe4ee9a4064af5a5958466aa39faa6d821489fa415224c8d69d3b5922236832c2b1e4f6b8863b32f9aea83fb522a2de081d674502b48f73ce6db98d84136059b4a6676bc85ac6b7626329afa9bc7d3f9f2caa3c4d872744e0a8e02d72a75c6c545b8ec8e15b6fb0fe4185bd0d154960e6fef05ba40e5fe2968eb1301dcc52a03337179e74ba1522af93d77827845f8941c69ed8bb84567e3c63f1cc378a542f1de7007b688ff0a9c69d5861f0b85402c30a2fd391c52bafbe65f8e82135fd38361d7c0b43c982b2f3e7cb09c40c7e215114f4243d670cd576bcd93c1e959345170c75d6c3cf89cf8c2c70dc792e646e7c649d4c5f36bb016c7acd466ad58473d40dfef36394e581065a8581ab852250403cf372ac0065bf757fa3f445424ac0d82aec1938a2ea116bdfd306baa1cb06c62a4a97d66ab1b9489469cb8ba842da12e310caed02c5ef05c0be1e1e8c9c8b87d6871c94c57d164d08672b205c948086a06a545b266b7ad902a908681eb188bc51b6190b5cb9d8ca59b8c4c6e7369c00d6f6119fd5d437239e3d3c89cb81e09e560fb817590106015f08e7b09f1e1e65bfab3b8489fa058e24081978b9e25463d9945bfbca81c08885d4b6d4c62e217bd9e19460762f36c66bc948fe31cde089626fbb310e3c78a8d3f2eac21d374d9b58d887235d3a95721168e4b9475849071d60ecfe7ea5d6c4bf60da3747612ef59bb651270f326c0af31bc8c71361f851de34ccb3c8071b96f1128d7ee79b41246e566edd0272dbd3ccfe472b38e5e03d3ef83218bd498e6de8b4d92cb6f82716449ede7ba845028eccdb9137be8a622ac88ac53118fbc39637fa7a93cd3abc6f7671c7804420d66e94720acbcac916950f9baca77fef4217155ccc2cd0507339a0486f9f468eb28772986ee768c63eba671bf8c52e48a2a5dc2cc24fe925368706c2d712dd1064692b0fb2a32ddfbd4a0ffcf9c2abcedaae6e527bc1d42637aff2a275b76a7a7f010e42e1cc1d27141f6c3585a2bf58c6c5789ce61551d10118a000e3764631ec0b7f4b1a6f22a678133a30940b79dc76f863dd9f6e0d7776300898c97cef286c731c2050928c492439256e481652bff0d202db3cfdc54c9816ceea7895357bfa0362fad79afd09ed55189294d6ead7e898ac091cddbe7efcedb314bc02a18dd5bbddc42e089124758bb491fd1536aab27c5c124567bc325e7028bced5a179a011d1cb9a5ffb61d7af863e91ec8e60495561188b74d158ba1418228d44e92915a22eb1c166ef7d6179e84381ed950ffd747f13e24172942d922ca3109fb8b1e4e6264fa4a4eec75ad0d0e22579d90f45d6cd157300e38ae665eb56457202e25a8dd5877ba99725de288660badd2704345d9bad208c903ba27ea167dd45a77f77b6502b525b2973270582858183c784c324c1366fbba8d410c38bf75b41e067f6a9a017c56595161db4fc5639393fdafb1f148d3f416c1adc5fe1ab9cebe4689855c9b4bda6dcba5d5fa858a1b87d2ad23cdf54dbdf4d14aa4462da0b6f1107f4afa0091c2643508861a4d9f133ba77751941bb8fb756abf1a104205b80d47a3b4a59724d959c8b5833da4f56fb6613231f230a9378c9af741e94fd2c7213ac1d7625559b3f032f6c8df3ab441929720fe43d7c548cc661eed5b3c62b3c61f538ea3228376e2a18c6da2ad906322f64fb4865cde8e1889a8e5237fd6a39bbd6662f1dedc22fbd74e4376fa610cd710703dbd3924a38beae69783d1d5abf36122cbb87129ba719042748f060f4303a3199c5891c5040fd8cdb9761b006bf64cdcb65e5cc50a29994b8c1c34b83760ece12ed9ed7c3d2a7f8911cdf23a1afe0d7db1bf342aa0123dd5cd31339f5c8e160c4efef882602b3eccbe76fb690162b8bfb8a31910bcdf9a4a5dde76c2ac2fcd8678add7a000cfdcab398eb2171c026313eb6eb56b4b87bf8ef93f7f8a1c0bcc3775b681d4229ea561cb52281d8ba4315c3694ed08433596884d5a7ce3a8b1f82359846b7136726e2fe37bf4f7b7e2206cdcdb0705ced9f0dcaaa2ed3a78ea70d2cfeab668eb321400fc955e9aeb7bbcf86cd03f02dd443503a1480d9d9f899f53bd747a95293786798fc59fceb09e686a9328da4f929b6201841bbbefaffcf3386abdf69540e3b46a643ec10f0acf21f27c0053dc13f18485dbc898729dfbeaaa4887b58cd442d7ffa941808cd9658595be8650a815b088621278d89f0d8a4252566b923df3a3cd65c0e4af08fad385927251b31d35f75eaf25e6cf13a579aeeb0bcc0a14ca4a20a6831d532be0b2af3821792a2df95131b7fafef245aa19b214053342aa820c35858d13f84e496294529411015c41ed447b5b51dc44a45d52552a2be1abfc157f3ace7bfa32d5b931421d5a152dd66b7bf549311b08325e5a7201f793037b38990bedeca8a647c08d2478670f8fc2b4e8983ea18bcd514daeeeeb9d7a778f783c76edf01bd4beda4b77b612cd2e865c2e4f58ca7ae06147bf66ae6aee221cf9b9505dc07e6fb6cf4f82dc8c406c78e270210c11cf2531011ed678d9dfe1f49c9a69a95a9f3b0e5b624d9c2664d787ab911b75a4a38d63e9d6c353f8aaf433ff961fe5e34d84936ead0d0bc7954caf84e541f5c6f3f20c9eed21eb0316b82c0dc5182540e63a0af25565496792153d6395adc2b8d68b8bcd93dd110ff5685879db4384ec390d44b89663d43a5de3bdc0e103b7c1b355dc5f6fe3518c93628780ba03f156badea65d1d0af8433c9e8a975fdd19453da662a33fa9f0f5fa15fdb216b483fb48370a967246e0b763df8b3bc7924a6c76c4b114f803dbfa3b312e6815b4eb67be167283a9e482d9a5beac250089d069d4c386b7fda5fc228404a0f58b12ca4dc131c381b49b42b570bcfc0dd663f24afaf65a26a21f6d92f52c9f8de36cb76bacbaa0eef98ba6b7dbbc2629a03bb2b6f83fc5adaf20c217bc8d0f0d2421e01472532bcb546aeb2d483c8f95011a3ba1d2fd8086a717cb015dd53064ef4a80b6d6fdc12d9069223fdf2aa9b192a0e0bdb38436f49d9eedfef3665815633fee4344aff11162526362b70b18e1dbedbb5d8c4698860beccf667851878a25a1e766caae2861f2e23404aac859e62fdfeac06a6057554828d7035806e8ab3ee2fa6d711e5811db61231a22f4672f6a11b27641f350bcab78792362e6ebc1c054a643bbbf2746678c14dc567d1f73e37005c8ab6374c4d8d3106384a2d32c5fcf05cb9ba97cb7fa1aff11505a701bead543e555f3901ef3b693d5b9ebf49518c3509af042b7e84b1b867c22b7e08725220e4338fd074edce428212e6a3563a08e2ccd8ab71910256532904542e93d5c7deb5bf5d49beb3202d4da4f643649e55edbb91188cdcf0883a40c6ed6b8a086fb5c50dc08fee00308420121d4c7431b3cfb80f9c1e099423ac451d67b12e930d9e391d0a799c7d4b54a0d56ea0aae00c1d009e21fb5459416b464b227d66ccc1a68da59d64c1583dee54bbcd7d61ffe541fd0fb7452adba91906918966a7d58019ad1f8fdebeceeed7018837b6e4272eefeec8385abe7207fb2d7061fa6cdc478165a98971f9729b818a73edefed976d5c7c0a651c091cfd1174c020e39330a79144271fe4cbc61ea0ffa274d0d87d06dd08c1d5f8a0364d46ef7b54426bc286330c75fa257afeb2715c2ae511ff53b1189cc59ab80b1325fbdcedfdb8f36ed71f70091116e16b52188b794e637755027caac8db8554f8674b844964c710cacd7a9d6b06baf6fef76159a380e639b0d3e66080a7cf7f86baac01dbe47fe687fcef2f3bfbf6f8fba045181dee688360a11ee56e5fc73ed31c0e2924ae57f0cc93c63a30662a65c5d5f17123ae28cc5b74dd13ed81b03dc7fa61dc575668868c0df12d3553269f04ba79084d070abcdbd4745de80e90e4e3e524f27249b5c4a2f2d4c8b331b0cb6d4efe62a298daacc6eacdfe008c1f912795dbdc37098c42db860953120fda709baa6d46f52eaba781505e68561ca0f281e850532ef8e7c779883e312806e1c357bdef8d0dda005e710cfa6eb8686e8bf3bff036b3fcdc4036541d93530ce6f598442c24170b307ef05f23c93aa0ec96831b532d8120402214a940d1fa01ed649061a4a71308be189cffd729a196754fb8a75f23851189589be1b819f0612cad3dc94ccee88f4ab9ef6ac9c7daad8cf94f5ed9496c4c824e5b4f66ce32a80e7a6ef069a32f6812e656aa5f5742bd432afdf026c86e8f28212c1139dad47d7fc07e5c1a83e993daaa4a4bb5f0c9435ccab2a10f867ffe259dba7a1d9168619b1e3048860a5122e4a5d0b00372eaae861a0cc88549852fffa76e6d78739b654d67df15ea97a9a46b7c382d83191a673aa619b4a10ec05bc681379b0d6df824cb6fe158e9d89ae5dd1ef66976f67972b553db52eb6feef836dca6026293f83a61e117754a7424a3da63bd82d017f87f0603e2a9b8fc550aae611681935ae91f7ca2b5341b05a25208bd28f1a202a7f2a213b1d7411ffb557470aec00c4d13c70163f22a038a189710dd19a47e8db4a87c3fd329a63abca172a9810edad2d8e19ef85b57ea4287cfb3d740d7ea3fa9c80d06e1aa84b317f678ddb3c147ba5e0db432125f59ca4944c8e9050281ca82a3ecf67b2a5df678697a52a7297af1ecb03c586af7b91d74e881964ed95f7be12fa07e2a4e71aab8b913a13996fa33e915144bf00e49b8e7adec5b2c4b8165f54ba3155230e241ee023af77a295ab87c40f63f6092ccee05cb08a265abe8f57c9919bf45064b6c2240ba8011db223a283a4e2292d9b59df8c9a4fdc763f0631007db9976f351717db0e6b5f9c6e5f227c2efa1ae5fe0be1af0b22fc164f9f9678a01fe8b059749fe8a2972455732da1989c609d191544ef9fbb3e58da93ec4a582430523f260b776e4d747312747d18a9bae14740f5dcd35fd1072f8a4d81573b5882203be856b62d7e1d87081a9e431872c9d68864197bbc61f15dd8aeae950d34d6ce97182deebd2ad64cabd1c723baf512acfc7e94675b31369bd60e155af79b97bb734312569f736dcd5b5a78223ffaa0f7e93e1a112cb9f6a5b88fe3cf12c30024c16c6b8380fdf086c662665d3751c11617cc4dbd5b8bc7543301a23fbc90ba8d060193cdc2b68c31c734d516707b759f7db009c8f06e69b40154e1cd8ae444afb28134acdf871136b4fd78bd86d7faaaf618afb25e92d1ee37cdff0595278f9565f5eb109e181e9cacec2f22e32e9f34774ee223fdb992febcc5dbc5cceeda16cbcf1434730d859e7e03d36ff17636a7a7e66956b515894da114f3040909f90ce3cfbb2d7d46e37049c0fb124e0683d662eb427cd7b851ada229451e6e3aaee64b9964ced3036bde5d9d80eb062474f96ecfb9b65fcafc719494ac12ab7df245475f2a5e7f85ca4789833ca373e6214d39176c8f51dde87a4cfe5414a20f68bb9f34709979b99533ba3435c4aa56e525195e10ffd00f8e41aee30a909c07b973bbf733d45500b539ebe2206d438216690998d9e256db1b7ac6bef3e810785e1986985c945a2b820323a592721fcfa444934d0faf8aa439d5efca5dcd77b72d1eb91b3790d50d0a7483e354c415f81d99c133d648c1293e795b3c43f9b47e23ef982e10072ea5baafb0df675e69af1807b225afa0cec3eafbde8535d3ecaa0ea6ddbffe4465207425bb003670320324df0aeeb16b38a043f9c0e85673b36def332fd68b2b1e6edda621d0cadebbced8c7fc8f890489115b457249e8d8103676b3207a472804d33e0fe511ac56cd8dc5333b2333892f87b455940ada78fcf5075c358fce990e6f65f095eb416d876ce6f120b8b02cfa6b176ee269c942f881247c3e464cce2aa65c39137607c585aeb4b5f24f5f8e058c9c8b48003c1809da3e8aad1bee7955c3a976d43fe132e2b16f4758a0a9884e51d13b930675a4361ff366b0fed190ad7b2a00385528951e39cd44ea06d8921b9d613d7626221154cf86249a550198fe4e5b05ad3052b474291da0a0a2f701759859bc0392adf243ad5eca89e6d18e28dff99ef95743bcabe75504be8c715cd6360facf3bb06cb97c29989d4f6ff5083573cefe6ef0b39a252a2678112fa88e5b06c9a6bfc9597cc96e5a49710c4fc120fb0da4945b9d94e46de1e9989d0fc3d8d20df23d815b660c799a903f651b0d013f7fe158f1d297f7fcb6a48780ca5525f1d081ada0aafa83552318b848783306549750b6254cf676c7b934cf7fdab992717f0cdc089b34278f3fb151cadde14d0d3250e85a4b0ff2a2778a219aa40563d3ef575285484424b6d0e7cc8392342e4848c6fc8cb20fa1b450cc4c1fea19f3bbdd9e342e6c49cd7ac893b1eda2e93d1d74d20969465946b398fbc733757741ac822c4a118632cd242a439fc37512cf79b7c629504ccc1e7f2f11798955c3262b5e9695625ba74d8050e20f51d4769e1ab938f487f1bc4b55b5abcaa3ec079c2d0972b2ae9bfb7c5423b959119292ea05f1d79d35afe47e49d97c946b193bffc0a8f607f18a6845cecbbdd98cd351db2b2dce05a4848ba84a6a497b4618950130cb7e76c03d0976eb2fb41d3a42a1430063ed8e5b8c67e80fd4fc1148911958babbcbff33a6505de209b0d9320017fd736fd027a16564008ab2e1f48a6dd66c9256730e9fda0a606875d0871b2b9b0bc2ed4e1b696dbf0283c8dc72cf4338e595266f5390bc3a21f988353118f2948fc75d050ea076b73508d9ed89bade0ba305c1f4e5daf9d40d2f5e7ababed8d1b1d919c61a6d3fb149c1a9b44e38585a2fe322f83d73a3aecb44da3f0e82942d75d62ed3f91eb44f3411df014f88839e4cb1e21b9b259d4eb4adaf6b0be433d0ed4c87ec77dde5ee9d566e3dd8d928fc1875c63af26c59daba5ae267d9bd5da72b99a03e6a33cc48ed961ab484ff4a46c2d5fa597e626e00b530d7b9a9705e4e08d03f3a7f2a5a5233ad6340e3b5c89db81ca713b6d7d855c6324955f85109b204566f50178cd88abe3fcba25de905e8ea0b75ad51831761ed9b1af2470f976f05ec73bf74d137c207270cfd614170518cdc449aeeb663e114359c8124eaf2499d8cf5dc84a0872301db2e57b50bd285060ec4390d99d4ae3674ca3bb8679c1b08e566ba4f30daec8684a980055eb43cb5a1306c4b52a154682aa96637e06c869278aa2f74ef7345632c11265ef8ac97e953745302556881ba0cb590fef271c0abb193fb84d18ee3f24d9976ae816b857d6f68d1fdfe10b312c799fe014debf875d04bff8b4f387859e97c6bf13f7083c28a2045a0b5eb09c94e781a165965e8617c0efed1701ea9667aeca26d9577ea7b1242e1d91b25d6a66756cc627648a293b9f4345966bc469fafaeddc1118d0972bd5c7751a1f51e5989fd952f314ae10417c97b41e60ebfbc47e496486fa4a89fd16aea7fa1eabebd26eb2a37a3e2b351e0c9d2f67b2e5be0f921adc9b6045b045948e5103af0e5050b9c0799b513c00865deebda730de538f956ceb6164e08bd6f58655a294b4b44fc65309b30f9c00f92ef5bd5b911a3d830f72c258b19521bb8e80db02129954efb61423f518d2c5f36587303890cad9a93fa4f4bcd0e24c67db679c67ea59c1350b8442577632d5e8735833f3daf5a74bc7bd82659a81beba8c889632efe03cd24187aee856cf659e16e195464f52f2b984fc7a299e7b2aa53979a147ebed35705d5e89691666536f2febacfcef9b32d14952f958b72512869e4f6a0a34176918217888b1eb8b89322ebb6bb1dead2b4744e728479880db70e6147edaff6c3f083f18e0696bdbd78cf0bda14d9f42e5c1077ced00041aadff90470aacec0e48e2a5f2a0ed37818a173b96061e8c5bf24c0bde9e09f9e0ddb8e13306ef1d4eb8043ebadde5d7553e5212ecd4691eb426251f9d6720b8276ac543dde02399a35d974b22c1727d4b6df01957cae47443b706d43165e01d6932b136f561ce837431254cfb2a6e7d8070a2d3805aaa15b3c10ccd0cda2e9b418ce9ef380e5d08217752e12b3b892d03a9495c83d78d674612fde5a67738b2d4649ce44606ecce6bf3bd1293eca246a83643e4f1c7ba362b110e07c8479f216e3d4afc4fcb8d0820c8ab702a66d8183e83174597035e92b9b500dee08c80b927b42c3689c7c9617b4112c9e54cbfa51e989b5fd42b80c595d3edd265f138e8128cfbbb0e4f53aa0aa95a2ecda4518b2e564c42d5de7671560843d08103b9bdceac5fdeb0b1266f72f491265dd2b2b80a225a50955167da1812364ea340d82f61535401bae6f3140a8795d7c318a64cee4676627244930957b2f0b227be21b72d90027e6a5a7af3c59470c74dcdb71d1ef090a0f49c91acd604c792385c8f4e085765292822ee5eca03885fd6bfeaca9b3bbbdeac939f7846a487c5a483ed1e4fbf37c93886ea27bb35c812089b900b77c7c924147e97b6a71533610750bc84921012aa8158b213f7601d934a20bdd1f757b0a33042a683af6b9069f3900059d7f80f9fdcc9f33ece8cf7888dc9e24f1fc6ca0ecccf161c5334c60f440feb3acfc3d115011c176dfa05314c5bcf089e3c82bbe7680a3eefdcdbf3ac27265b779db4f49bade0128eda6e29bc5933ef454601db1b49628fd39ab938794fa46a33937a086ece7050d31a21524e2f0cacb307ed4412a2078636f9cc8e11c5c31cc0f9edd7be6d1e31a1513a58e25215f5a24245cb988589e6d5e5119f4f6557c697fad7d1c3a7e3bae064db4382701e33e48c5b6a52fe9141a385ef2325c6f7781134607e98bfd02c43d6deefaa861700388b40d98e941cfb2ddec209f977e8b9f93d29fdbf85e3010ce7cd622e8c75ce3df535e392052b6d65d5042d2a6e78bbfe5ee146e8b18d4bc7fb024dbba57cbe0402205593766a313950cb719d00c67bb6b3bcaa1015b89e820f11475afce655947113a7c3dcbb52427f090df994fbf076db867e0ab3f6125fb8884c1d13ff3e99fab5fa8b9f0b72cb44db4d0a48d9ec17f9733764e213c40a15ad821ec60e4a88cb2fd9dd9a4f35e6a708f4b74067f4be3f03a95261f6b191df53fa5bb5164e4a164630ad9ce39087aa950ad9e60cd2c44fa2237c49abf858c97737fd21180fd0b9542767150fbed3f39a29e6c3484d9437e15d2439f2a54b2a1ac7e63e6c436658abc3f1dd52d984f6c6901768a8cf2ec98ebf44e90e0fc0c24f8957c62e05d8eacecaf25b178fd710af609a8a1bc4d7955b5f0cb4f48a37685e6304ea5843573a1abff37b5106916c83c8f23f939a0dc43aea8d196191ed6e18dd793990d1f37d7de0bf8fac6f469843724eaab86be8a483be281b8ecf4aa29d9c571951cde8cd8c2aaf4d597ac2cb48f23fad145916920a55d655924940573b64dbd42a280cddc4810434f930183fdbbdc72db1491a4c9d44daf9b1bc2fecd855508648063040faeb125da0e68e6cd2002181118eecff0be1dd8eae726af5d451630cd65119c52abd6dded97f931202f186a18c4ba34bc2c3f6d765e2d8f445e959f26ffb55827cf3ff2cc0289f17b82c8caa5a2d3d54306a300f0ef42bbe4ea9e32c5d4b1173942745cdcfe4f5d1619eefaf8dc600afbc9171d516f7f4b35331d0b9be005132ffad5e9df59710278b842afb626a78b8b8b37fc3a894dc705b2d4e0940cb264e9dc87eaa148e6faf78125462f28a0f1d7b3c65a291b85713fa71ffc478f6601e8716c35489f4a54ed0c70bcfd5502cc91374dc3c982075c5180398bc6b195b36e79dcc4087cb990cc9d964a150e0dcc887d496bdd27c3f298736b9ad8345ba2df46021964cf43c38f9d2e94b77bee2b7bf059e0870ff9f17b9ef1320c0aa88a2fa9781e9017ab64643de9a3df9ed4b8cfd8fa080a2e494409520b795eb1517d224a05e450c4c8ae0e9fd29c0e72d3a592cce55f6dd5107f21214e1a3f9a5448384de06149f959ec0c92790f0ff229ab4971171f1c528ae6d095ec007bf5e7f55d623a68194e9ea8edc3af418075338328f24e7504341c22bef72c2963fc9c3237ba990d29c2c8aa3007395f6d96e95b40ee1b18dbad550bf39d0d98268cb74dde76d987c3169c9067495fb1b88508bbb7e94cbb7dfc15c03b1d5b163132c8a468906f02d422a8cf98d0b432b5779dd962074b72dd27439b2e94312f573435e5aa84664432c1914839cd6e172186ce93eeb1d7cb0659696d9d550eb3b185f8c6ee16e53f78233cbe709f99d2879d63d93f7d0ed133241d2f1ab1eb2c56605ca0f0e01c39ab0ba2370fe5c4e68de0561b517ff9a10023c386236398372c7176e35443e2cf5dd6cbed9f23395f231e6a54f65626cb5860a8b72122c34664119e7c47204ef4a70583a00", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x90, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/../file0/file0\x00', &(0x7f00000001c0)={0x40040, 0x32, 0x10}, 0x18) 1m5.63421148s ago: executing program 1 (id=1453): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0xd0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m5.294462385s ago: executing program 1 (id=1460): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2200b5d92cd78f4a57150200", @ANYRES16=r2, @ANYBLOB="000325bd7000ffdbdf254b0000000c009900720700002c0000000500f6000000000008009e00d0000000"], 0x30}, 0x1, 0x0, 0x0, 0x24040000}, 0xc0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00300c000000f9ff4600000040f400bec073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000a80)={0x44, &(0x7f0000000500)=ANY=[@ANYBLOB="001628000000ade6c01df2d9501baa30010000000000000023c139ca27475f7e77eb040200000051dbc0081bafa1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f00000002c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000100)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000040)={{@my=0x1}, @any, 0x0, 0x0, 0x400005}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7aa, &(0x7f0000000000)={{@my=0x1, 0x5}, @local}) r7 = socket(0x10, 0x80002, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f00000000c0)={0x4, 0x0, 0x1001, 0x97}, 0x8) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}}, 0x0) 51.756021208s ago: executing program 1 (id=1475): landlock_create_ruleset(0xfffffffffffffffe, 0x0, 0x2) ioperm(0x0, 0x40, 0xfff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioprio_set$pid(0x2, 0xffffffffffffffff, 0x6004) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='xprtrdma_decode_seg\x00', 0xffffffffffffffff, 0x0, 0x40}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x1c9, 0x12) sendmsg$nl_generic(r1, 0x0, 0x0) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) 51.322091746s ago: executing program 4 (id=1477): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x3e, 0x9, 0x0, 0x800, {0x3}, [@typed={0x4, 0x4}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, 0x20}}, 0x0) 50.782495196s ago: executing program 0 (id=1479): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) 50.735294123s ago: executing program 3 (id=1480): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x20048810) 50.243377213s ago: executing program 4 (id=1481): writev(0xffffffffffffffff, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809", 0x32}], 0x1) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r0}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={'sha1-generic\x00'}}) 49.889471383s ago: executing program 3 (id=1482): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000f80)=ANY=[@ANYBLOB="ff0f000002004e23ffffffff0020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006"], 0x38c) 49.654737603s ago: executing program 4 (id=1483): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) 49.576428315s ago: executing program 2 (id=1484): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0xffffffcd) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000080)=0x2, 0x4) 49.201808162s ago: executing program 3 (id=1485): poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$sock_linger(r4, 0x1, 0xd, 0x0, 0x0) close(r4) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)={0xfffffffffffffffd, 0x1}) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r5, 0x40046104, &(0x7f0000000240)) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x10001, @empty}, 0x1c) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x400005) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_SYNTH_ID(0xffffffffffffffff, 0xc08c5114, &(0x7f00000002c0)={"2137a025bf42227f8af02fec8f2062226c97e29a96ab7601302d62c32528", 0x800, 0x0, 0x401, 0x4, 0x4, 0x3d, 0x1, 0x0, [0x7ff, 0xfffffffe, 0x2, 0x7, 0x2, 0xf3a6, 0xd2, 0xb, 0x81, 0x9, 0xc, 0x6, 0x8, 0x6, 0x8000, 0x5, 0x6, 0x7, 0x7]}) sendmmsg(r6, &(0x7f0000002980), 0x400000000000239, 0x0) 49.055662968s ago: executing program 4 (id=1486): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f0000000140)=[{0x0}, {&(0x7f00000004c0)='v', 0x1}], 0x2, 0xa, 0x0) r2 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x800) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x74, 0x2c, 0xd27, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xd, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x30, 0x1, 0x0, 0x0, {{0x2008, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x6, 0x5, "54f8"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8}]}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000380)={"00000004", 0x3, 0x5, 0x2, 0x0, 0x0, 'c\x00', '\x00\x00\x00@', "0300", "f3fd8000", ["8b09a907edff220aac00", "c2fed600ddff9aabeab0cbc7", '\x00', "0000000b0400"]}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000000000)={r9, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) r10 = io_uring_setup(0x7c50, &(0x7f0000000080)={0x0, 0xc717, 0x800, 0x1000001, 0x2dc}) io_uring_register$IORING_REGISTER_BUFFERS(r10, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000000)=""/30, 0x1e}], 0x2) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r11, &(0x7f00000020c0)={0x2020}, 0x2020) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r2}, 0x8) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000200000000000000", @ANYRES32=r11, @ANYBLOB="40000000000000000000000000000000cdd1022e", @ANYRES32=0x0, @ANYBLOB="01000000010000000500"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x10, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x3c}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, r11, 0x19, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r13 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r13, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r13, 0x82, 0xa8, &(0x7f0000000040)=ANY=[]) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4001000410000100feffffff00000000000040000000000000ffffe0000002ac1414aad4008fad21ff8900000000ffef0000000000000001071c000000000a00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b582e57154bffa8765658aa138d36db488b615557651a1a471227d9ff90e869f7548dd7433d9ce55dd0a0ba73a7d50c03205037cbad24d0402cb216ac8add535d1a500000a024adf151d79a6e2d006ac361e1c2fe2a17930482a480a3684d283ddfef482672b1888e82a34e4d906fa15acf343bee2a77b5e764b407d8f265d8638a756404fa0990b0bf75878028026e300bf8992b8c1f78375d89760054e78eaded68208975877fd446a9bcd523e88823f6509d10f89ae1fbbac5ca3bca6adff81ade7edd1d6e705229646e3778e8e9a0b2b15bc92170b0424ae7d35e5f03e344edd77f9cda22b5c6cceab869fdddac1b67485"], 0x140}, 0x1, 0x0, 0x0, 0x2000c002}, 0x2) 48.985062883s ago: executing program 2 (id=1487): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0}, 0x1, 0x0, 0x0, 0x4000001}, 0x884) 48.582729393s ago: executing program 2 (id=1488): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x70bd27, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x0) 46.805182663s ago: executing program 0 (id=1489): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x40, r1, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b5de1522d3"}, @NL80211_ATTR_KEY_SEQ={0x5, 0xa, '}'}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}]}, 0x40}}, 0x40) 46.158987478s ago: executing program 2 (id=1490): ioctl(0xffffffffffffffff, 0x890b, &(0x7f0000000040)="7ef17527c5c0f635b818aa60aa81203703e5f2322a4f51d378be49dc5effbe6de21744ccc1db54aa40f8fd2d620cb802cf191cce324acbf1204cd327ce") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000740)={0x1, 0x0, @ioapic={0x0, 0x296a, 0xf7c, 0x3, 0x0, [{0x98, 0x27, 0x81, '\x00', 0x7f}, {0x1, 0xc, 0x81, '\x00', 0xf5}, {0xe9, 0x4, 0x8, '\x00', 0xe}, {0x6, 0x8, 0x3, '\x00', 0x8f}, {0xff, 0x80, 0xb1, '\x00', 0x7}, {0xf, 0x3, 0x28, '\x00', 0xaa}, {0x7f, 0x8, 0x1, '\x00', 0x8}, {0x1, 0x3, 0x2, '\x00', 0x67}, {0x2, 0x7, 0x91, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x80}, {0xfc, 0x8, 0x4, '\x00', 0x3}, {0x2, 0x3, 0x3, '\x00', 0x8}, {0x6, 0x6, 0x8, '\x00', 0xa6}, {0x8, 0x0, 0xa, '\x00', 0x9}, {0x4, 0x4e, 0x9}, {0x6, 0x5e, 0x5, '\x00', 0x3}, {0x5, 0x5, 0x7, '\x00', 0x5}, {0x0, 0x3, 0x3, '\x00', 0xff}, {0x5, 0x0, 0xb, '\x00', 0x3}, {0x4, 0x6, 0xb, '\x00', 0x3}, {0x7f, 0xf1, 0xb, '\x00', 0x4}, {0x7, 0x40, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x1, '\x00', 0x7}, {0x2, 0xc, 0x91, '\x00', 0x1}]}}) ioctl$KVM_SET_IRQCHIP(r1, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @pic={0x0, 0x81, 0x9, 0x5, 0x3c, 0xfd, 0x5, 0x9, 0x4, 0xfc, 0xff, 0xf9, 0x55, 0x9, 0xf7, 0x7}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040)="0db723740d6678af6874bb74fb7875012c7de0568a8315a6736b7635e00126b713064871082ef63a291542a0bbb266ec7c61a508716f1b1ea80046ef", 0xe5c) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x2180) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 45.793078713s ago: executing program 0 (id=1491): io_setup(0x8, &(0x7f0000002740)=0x0) socket$netlink(0x10, 0x3, 0x15) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$xdp(0x2c, 0x3, 0x0) io_submit(r0, 0x2, &(0x7f0000001400)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x1000, r2, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x5, 0x5, r1, &(0x7f0000001140), 0x0, 0x4}]) 45.185553447s ago: executing program 3 (id=1492): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x20048810) 45.140793063s ago: executing program 4 (id=1493): writev(0xffffffffffffffff, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809", 0x32}], 0x1) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r0}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={'sha1-generic\x00'}}) 44.781317405s ago: executing program 1 (id=1494): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB="000202"], 0x18) connect$inet6(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0xffffffffffffffff) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000100)) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 44.781105727s ago: executing program 0 (id=1495): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x2, {0x1, 0x0, 0x5}}, 0x18) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0) 44.610106399s ago: executing program 4 (id=1496): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000280)={0x2020}, 0x2020) write$apparmor_current(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB='permprofile && \r'], 0xff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r5, 0x6) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000080)=0x4) dup(r6) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000000801080000000000000500070000090600024088f8000005000300010000000900010073797e30000000001c00"], 0x78}, 0x1, 0x0, 0x0, 0x4000084}, 0x40000) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8923, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) sendfile(r8, r8, 0x0, 0x200000) 44.475980724s ago: executing program 3 (id=1497): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10681}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) 44.319869338s ago: executing program 2 (id=1498): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x28, r1, 0xa23, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x884) 43.476284685s ago: executing program 0 (id=1499): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)=':', 0x1, 0x24008844, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000002040)='westwood\x00', 0x9) shutdown(r0, 0x1) 43.468536289s ago: executing program 2 (id=1500): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000000)=@ethtool_cmd={0x4a, 0x3, 0x487, 0x9, 0x0, 0x1, 0x2, 0x7, 0x3a, 0x9, 0x80000000, 0xfffffffe, 0x97be, 0x8, 0xfa, 0x8, [0x1154, 0x7]}}) listen(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) close(r4) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)={0xfffffffffffffffd, 0x1}) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x10001, @empty}, 0x1c) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) r5 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x400005) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmmsg(r5, &(0x7f0000002980), 0x400000000000239, 0x0) 42.849776858s ago: executing program 3 (id=1501): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x30, 0x3c, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@nested={0x10, 0x136, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x8}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x20, 0x6, 0x0, 0x0, @str='\x8e\n'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 42.3232334s ago: executing program 1 (id=1502): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r0, &(0x7f0000006740)=[{{&(0x7f0000000180)=@phonet={0x23, 0x9, 0x9, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x10, 0x1, 0x24, 0x2fa0}}], 0x10}}], 0x1, 0x20020000) 25.978935191s ago: executing program 0 (id=1503): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000080)=0x2, 0x4) 0s ago: executing program 32 (id=1502): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r0, &(0x7f0000006740)=[{{&(0x7f0000000180)=@phonet={0x23, 0x9, 0x9, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x10, 0x1, 0x24, 0x2fa0}}], 0x10}}], 0x1, 0x20020000) kernel console output (not intermixed with test programs): 9][ T8144] ? __fget_files+0x2a/0x420 [ 219.162625][ T8144] __sys_sendmsg+0x271/0x360 [ 219.162649][ T8144] ? __pfx___sys_sendmsg+0x10/0x10 [ 219.162724][ T8144] ? do_syscall_64+0xb6/0x230 [ 219.162750][ T8144] do_syscall_64+0xf3/0x230 [ 219.162773][ T8144] ? clear_bhb_loop+0x45/0xa0 [ 219.162796][ T8144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.162818][ T8144] RIP: 0033:0x7fad7858d169 [ 219.162836][ T8144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.162852][ T8144] RSP: 002b:00007fad79415038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.162875][ T8144] RAX: ffffffffffffffda RBX: 00007fad787a5fa0 RCX: 00007fad7858d169 [ 219.162889][ T8144] RDX: 0000000000008000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 219.162902][ T8144] RBP: 00007fad79415090 R08: 0000000000000000 R09: 0000000000000000 [ 219.162914][ T8144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.162925][ T8144] R13: 0000000000000000 R14: 00007fad787a5fa0 R15: 00007fad788cfa28 [ 219.162955][ T8144] [ 219.393293][ C0] vkms_vblank_simulate: vblank timer overrun [ 219.588784][ T5893] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 219.646600][ T5893] usb 5-1: device descriptor read/8, error -71 [ 219.759312][ T5893] usb usb5-port1: unable to enumerate USB device [ 220.218870][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 220.288769][ T5893] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 220.370781][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 220.389243][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 220.407937][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.416413][ T9] usb 1-1: Product: syz [ 220.422553][ T9] usb 1-1: Manufacturer: syz [ 220.427286][ T9] usb 1-1: SerialNumber: syz [ 220.439390][ T9] usb 1-1: config 0 descriptor?? [ 220.449237][ T5893] usb 2-1: Using ep0 maxpacket: 16 [ 220.468342][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 220.484052][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 220.497375][ T5893] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 220.506904][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.515004][ T5893] usb 2-1: Product: syz [ 220.638757][ T5893] usb 2-1: Manufacturer: syz [ 220.655888][ T9] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 220.685509][ T5893] usb 2-1: SerialNumber: syz [ 220.800587][ T5898] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 220.811896][ T5893] usb 2-1: config 0 descriptor?? [ 220.830270][ T5893] hub 2-1:0.0: bad descriptor, ignoring hub [ 220.836245][ T5893] hub 2-1:0.0: probe with driver hub failed with error -5 [ 220.881150][ T5898] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 220.956895][ T5893] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 221.126692][ T5898] usb 3-1: USB disconnect, device number 16 [ 221.338769][ T8176] netlink: 'syz.4.638': attribute type 13 has an invalid length. [ 221.364224][ T8176] gretap0: refused to change device tx_queue_len [ 221.391227][ T8176] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 221.414702][ T5893] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 221.453591][ T5893] usb 2-1: USB disconnect, device number 25 [ 221.539666][ T8178] netlink: 'syz.2.640': attribute type 2 has an invalid length. [ 221.554973][ T8178] netlink: 12 bytes leftover after parsing attributes in process `syz.2.640'. [ 221.630385][ T6064] udevd[6064]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 221.834559][ T8182] xt_CT: No such helper "pptp" [ 222.191972][ T9] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 222.298859][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 222.434039][ T8202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.648'. [ 222.447114][ T8202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.648'. [ 222.462401][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 222.464564][ T8202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.648'. [ 222.482465][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 222.493729][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 222.507301][ T10] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 222.528864][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.547192][ T10] usb 2-1: Product: syz [ 222.555534][ T10] usb 2-1: Manufacturer: syz [ 222.562118][ T10] usb 2-1: SerialNumber: syz [ 222.599664][ T10] usb 2-1: config 0 descriptor?? [ 222.626917][ T10] hub 2-1:0.0: bad descriptor, ignoring hub [ 222.638189][ T10] hub 2-1:0.0: probe with driver hub failed with error -5 [ 222.673364][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 222.721277][ T8207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.650'. [ 222.739241][ T5899] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 222.747702][ T8207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.650'. [ 222.783411][ T10] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 222.851609][ T5962] udevd[5962]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 222.869747][ T5899] usb 3-1: device descriptor read/64, error -71 [ 222.895742][ T8209] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.643'. [ 222.906683][ T8191] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.643'. [ 222.926955][ T8209] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.643'. [ 222.974025][ T5893] usb 1-1: USB disconnect, device number 24 [ 223.069647][ T5898] usb 2-1: USB disconnect, device number 26 [ 223.120188][ T5899] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 223.268771][ T5899] usb 3-1: device descriptor read/64, error -71 [ 223.355004][ T8213] xt_CT: No such helper "pptp" [ 223.379400][ T5899] usb usb3-port1: attempt power cycle [ 223.728825][ T5899] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 223.771852][ T5899] usb 3-1: device descriptor read/8, error -71 [ 224.126918][ T5899] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 224.163387][ T8230] FAULT_INJECTION: forcing a failure. [ 224.163387][ T8230] name failslab, interval 1, probability 0, space 0, times 0 [ 224.177724][ T5899] usb 3-1: device descriptor read/8, error -71 [ 224.184050][ T8230] CPU: 0 UID: 0 PID: 8230 Comm: syz.3.658 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) [ 224.184068][ T8230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 224.184076][ T8230] Call Trace: [ 224.184081][ T8230] [ 224.184085][ T8230] dump_stack_lvl+0x241/0x360 [ 224.184108][ T8230] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.184125][ T8230] ? __pfx__printk+0x10/0x10 [ 224.184143][ T8230] ? __pfx___might_resched+0x10/0x10 [ 224.184159][ T8230] should_fail_ex+0x424/0x570 [ 224.184175][ T8230] should_failslab+0xac/0x100 [ 224.184192][ T8230] kmem_cache_alloc_noprof+0x78/0x390 [ 224.184217][ T8230] ? getname_kernel+0x59/0x2f0 [ 224.184237][ T8230] getname_kernel+0x59/0x2f0 [ 224.184261][ T8230] kern_path+0x1d/0x50 [ 224.184280][ T8230] tomoyo_realpath_nofollow+0x90/0x100 [ 224.184310][ T8230] ? __pfx_tomoyo_realpath_nofollow+0x10/0x10 [ 224.184340][ T8230] ? tomoyo_find_next_domain+0x276/0x1dd0 [ 224.184364][ T8230] tomoyo_find_next_domain+0x27e/0x1dd0 [ 224.184381][ T8230] ? __lock_acquire+0xad5/0xd80 [ 224.184395][ T8230] ? __pfx___kernel_read+0x10/0x10 [ 224.184409][ T8230] ? __pfx_tomoyo_find_next_domain+0x10/0x10 [ 224.184429][ T8230] ? tomoyo_bprm_check_security+0xee/0x180 [ 224.184441][ T8230] tomoyo_bprm_check_security+0x11a/0x180 [ 224.184455][ T8230] security_bprm_check+0x86/0x250 [ 224.184473][ T8230] bprm_execve+0x8b7/0x1390 [ 224.184497][ T8230] ? __pfx_bprm_execve+0x10/0x10 [ 224.184508][ T8230] ? copy_string_kernel+0x1d3/0x240 [ 224.184522][ T8230] ? put_arg_page+0x10f/0x240 [ 224.184534][ T8230] ? copy_string_kernel+0x200/0x240 [ 224.184550][ T8230] do_execveat_common+0x57c/0x710 [ 224.184571][ T8230] __x64_sys_execve+0x94/0xb0 [ 224.184586][ T8230] do_syscall_64+0xf3/0x230 [ 224.184600][ T8230] ? clear_bhb_loop+0x45/0xa0 [ 224.184614][ T8230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.184624][ T8230] RIP: 0033:0x7fdee6d8d169 [ 224.184636][ T8230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.184646][ T8230] RSP: 002b:00007fdee7bda038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 224.184660][ T8230] RAX: ffffffffffffffda RBX: 00007fdee6fa5fa0 RCX: 00007fdee6d8d169 [ 224.184668][ T8230] RDX: 0000200000019100 RSI: 0000000000000000 RDI: 0000200000000000 [ 224.184676][ T8230] RBP: 00007fdee7bda090 R08: 0000000000000000 R09: 0000000000000000 [ 224.184683][ T8230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 224.184690][ T8230] R13: 0000000000000000 R14: 00007fdee6fa5fa0 R15: 00007fdee70cfa28 [ 224.184708][ T8230] [ 224.452988][ T5899] usb usb3-port1: unable to enumerate USB device [ 224.963826][ T8237] netlink: 16 bytes leftover after parsing attributes in process `syz.0.657'. [ 225.184063][ T8239] dvmrp0: entered allmulticast mode [ 226.129869][ T52] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 226.313174][ T52] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 226.326786][ T52] usb 3-1: config 0 has no interface number 0 [ 226.347070][ T52] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 226.437409][ T52] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 226.469336][ T5898] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 226.499980][ T52] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 226.518589][ T52] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 226.530512][ T52] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 226.638801][ T52] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 226.652093][ T5898] usb 2-1: Using ep0 maxpacket: 16 [ 226.697120][ T5898] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.717939][ T8270] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 226.744863][ T8270] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 226.770460][ T52] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 226.917484][ T5898] usb 2-1: config 0 has no interfaces? [ 226.930967][ T52] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.976971][ T5898] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 227.040157][ T52] usb 3-1: config 0 descriptor?? [ 227.045920][ T8249] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 227.060586][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.074888][ T8249] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 227.081849][ T5898] usb 2-1: config 0 descriptor?? [ 227.138265][ T52] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 227.239618][ T8274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.672'. [ 227.433932][ T8260] ======================================================= [ 227.433932][ T8260] WARNING: The mand mount option has been deprecated and [ 227.433932][ T8260] and is ignored by this kernel. Remove the mand [ 227.433932][ T8260] option from the mount to silence this warning. [ 227.433932][ T8260] ======================================================= [ 227.468891][ C0] vkms_vblank_simulate: vblank timer overrun [ 227.505185][ T8249] program syz.2.666 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 227.532335][ T8277] netlink: 53 bytes leftover after parsing attributes in process `syz.3.673'. [ 227.635681][ T8287] netlink: 104 bytes leftover after parsing attributes in process `syz.4.674'. [ 227.667682][ T8278] dccp_invalid_packet: P.Data Offset(0) too small [ 227.939050][ T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 227.963343][ T5898] usb 3-1: USB disconnect, device number 21 [ 227.973385][ T5898] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 228.118679][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 228.136210][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 228.152358][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.177357][ T9] usb 1-1: Product: syz [ 228.186412][ T9] usb 1-1: Manufacturer: syz [ 228.199698][ T9] usb 1-1: SerialNumber: syz [ 228.238173][ T9] usb 1-1: config 0 descriptor?? [ 228.475864][ T9] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 229.068965][ T10] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 229.278839][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 229.298322][ T10] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 229.312195][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.336312][ T10] usb 5-1: config 0 descriptor?? [ 229.543757][ T121] usb 2-1: USB disconnect, device number 27 [ 229.557120][ T10] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 229.739637][ T8312] netlink: 72 bytes leftover after parsing attributes in process `syz.2.682'. [ 229.807389][ T8313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.675'. [ 229.820573][ T8313] netlink: 'syz.0.675': attribute type 20 has an invalid length. [ 229.828471][ T8313] netlink: 12 bytes leftover after parsing attributes in process `syz.0.675'. [ 230.669205][ T8325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.688'. [ 230.759242][ T5898] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 230.773723][ T9] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 230.876209][ T5893] usb 1-1: USB disconnect, device number 25 [ 230.921933][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.951371][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.962660][ T5898] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 230.976105][ T5898] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 230.985892][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.003792][ T5898] usb 4-1: config 0 descriptor?? [ 231.023792][ T52] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 231.172222][ T10] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 231.183477][ T10] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 231.188920][ T52] usb 2-1: Using ep0 maxpacket: 16 [ 231.197899][ T10] asix 5-1:0.0: probe with driver asix failed with error -71 [ 231.207819][ T52] usb 2-1: config 0 has an invalid interface number: 217 but max is 0 [ 231.220565][ T10] usb 5-1: USB disconnect, device number 26 [ 231.224047][ T52] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.238259][ T52] usb 2-1: config 0 has no interface number 0 [ 231.253163][ T52] usb 2-1: config 0 interface 217 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 231.269792][ T52] usb 2-1: New USB device found, idVendor=17e9, idProduct=0d52, bcdDevice=9b.89 [ 231.282077][ T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.290556][ T52] usb 2-1: Product: syz [ 231.294757][ T52] usb 2-1: Manufacturer: syz [ 231.302261][ T52] usb 2-1: SerialNumber: syz [ 231.309663][ T52] usb 2-1: config 0 descriptor?? [ 231.425206][ T5898] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 231.437379][ T5898] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 231.539177][ T52] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 231.547775][ T52] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 231.581140][ T52] [drm:udl_init] *ERROR* Selecting channel failed [ 231.614249][ T52] [drm] Initialized udl 0.0.1 for 2-1:0.217 on minor 2 [ 231.633657][ T52] [drm] Initialized udl on minor 2 [ 231.643314][ T52] udl 2-1:0.217: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 231.655749][ T52] udl 2-1:0.217: [drm] Cannot find any crtc or sizes [ 231.680631][ T5898] udl 2-1:0.217: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 231.707659][ T52] usb 2-1: USB disconnect, device number 28 [ 231.723342][ T5898] udl 2-1:0.217: [drm] Cannot find any crtc or sizes [ 232.142202][ T8343] xt_ipcomp: unknown flags 12 [ 232.253336][ T8347] netlink: 1 bytes leftover after parsing attributes in process `syz.0.695'. [ 233.831729][ T9] usb 4-1: USB disconnect, device number 23 [ 233.897193][ T8380] FAULT_INJECTION: forcing a failure. [ 233.897193][ T8380] name failslab, interval 1, probability 0, space 0, times 0 [ 233.940599][ T8380] CPU: 0 UID: 0 PID: 8380 Comm: syz.2.702 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) [ 233.940629][ T8380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 233.940642][ T8380] Call Trace: [ 233.940650][ T8380] [ 233.940664][ T8380] dump_stack_lvl+0x241/0x360 [ 233.940698][ T8380] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.940725][ T8380] ? __pfx__printk+0x10/0x10 [ 233.940765][ T8380] should_fail_ex+0x424/0x570 [ 233.940792][ T8380] should_failslab+0xac/0x100 [ 233.940820][ T8380] __kmalloc_cache_noprof+0x73/0x370 [ 233.940844][ T8380] ? sctp_association_new+0x8a/0x2540 [ 233.940868][ T8380] sctp_association_new+0x8a/0x2540 [ 233.940886][ T8380] ? __pfx_sctp_verify_init+0x10/0x10 [ 233.940918][ T8380] ? __ipv6_addr_type+0x23c/0x2f0 [ 233.940949][ T8380] sctp_make_temp_asoc+0x8b/0x160 [ 233.940975][ T8380] sctp_sf_do_unexpected_init+0x634/0x1380 [ 233.941013][ T8380] ? __pfx_sctp_sf_do_unexpected_init+0x10/0x10 [ 233.941038][ T8380] ? do_raw_spin_lock+0x151/0x370 [ 233.941066][ T8380] ? sctp_sf_do_5_2_1_siminit+0x25/0x50 [ 233.941088][ T8380] ? __pfx_sctp_cname+0x10/0x10 [ 233.941112][ T8380] sctp_do_sm+0x1f3/0x60e0 [ 233.941145][ T8380] ? lockdep_hardirqs_on+0x9d/0x150 [ 233.941170][ T8380] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 233.941193][ T8380] ? __pfx_sctp_do_sm+0x10/0x10 [ 233.941210][ T8380] ? __lock_acquire+0xad5/0xd80 [ 233.941274][ T8380] ? sctp_inq_pop+0xbaa/0xf60 [ 233.941301][ T8380] sctp_assoc_bh_rcv+0x3f1/0x640 [ 233.941337][ T8380] sctp_backlog_rcv+0x177/0x3f0 [ 233.941363][ T8380] ? __pfx_sctp_backlog_rcv+0x10/0x10 [ 233.941394][ T8380] __release_sock+0x243/0x350 [ 233.941426][ T8380] release_sock+0x61/0x1f0 [ 233.941456][ T8380] sctp_sendmsg+0x25a7/0x3620 [ 233.941507][ T8380] ? __pfx_sctp_sendmsg+0x10/0x10 [ 233.941538][ T8380] ? aa_sk_perm+0x96f/0xac0 [ 233.941581][ T8380] ? inet_sendmsg+0x330/0x390 [ 233.941606][ T8380] __sock_sendmsg+0x1a6/0x270 [ 233.941632][ T8380] __sys_sendto+0x365/0x4c0 [ 233.941658][ T8380] ? __pfx___sys_sendto+0x10/0x10 [ 233.941691][ T8380] ? __fget_files+0x2a/0x420 [ 233.941719][ T8380] ? ksys_write+0x275/0x2d0 [ 233.941754][ T8380] __x64_sys_sendto+0xde/0x100 [ 233.941776][ T8380] do_syscall_64+0xf3/0x230 [ 233.941798][ T8380] ? clear_bhb_loop+0x45/0xa0 [ 233.941820][ T8380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.941838][ T8380] RIP: 0033:0x7f010e98d169 [ 233.941857][ T8380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.941873][ T8380] RSP: 002b:00007f010f702038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 233.941896][ T8380] RAX: ffffffffffffffda RBX: 00007f010eba5fa0 RCX: 00007f010e98d169 [ 233.941910][ T8380] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 [ 233.941922][ T8380] RBP: 00007f010f702090 R08: 0000200000000140 R09: 000000000000001c [ 233.941934][ T8380] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 233.941946][ T8380] R13: 0000000000000000 R14: 00007f010eba5fa0 R15: 00007f010eccfa28 [ 233.941976][ T8380] [ 235.039181][ T5898] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 235.191264][ T5898] usb 3-1: config 0 has no interfaces? [ 235.206258][ T5898] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 235.232907][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.252216][ T5898] usb 3-1: Product: syz [ 235.262076][ T5898] usb 3-1: Manufacturer: syz [ 235.280271][ T5898] usb 3-1: SerialNumber: syz [ 235.315943][ T5898] usb 3-1: config 0 descriptor?? [ 235.398874][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 235.560569][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 235.578810][ T9] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 235.603517][ T9] usb 2-1: config 0 has no interface number 0 [ 235.619739][ T9] usb 2-1: config 0 interface 184 has no altsetting 0 [ 235.637244][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 235.658674][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.688122][ T9] usb 2-1: Product: syz [ 235.700301][ T9] usb 2-1: Manufacturer: syz [ 235.712360][ T9] usb 2-1: SerialNumber: syz [ 235.728553][ T9] usb 2-1: config 0 descriptor?? [ 235.746341][ T9] smsc75xx v1.0.0 [ 235.948921][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 235.949722][ T8414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.225750][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 236.237139][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 236.247729][ T9] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 236.262975][ T8414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.509175][ T5898] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 236.670243][ T5898] usb 5-1: config 0 has no interfaces? [ 236.677932][ T5898] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 236.690002][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.698059][ T5898] usb 5-1: Product: syz [ 236.704027][ T5898] usb 5-1: Manufacturer: syz [ 236.710919][ T5898] usb 5-1: SerialNumber: syz [ 236.717813][ T5898] usb 5-1: config 0 descriptor?? [ 237.063978][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802511b800: rx timeout, send abort [ 237.074325][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802511ac00: rx timeout, send abort [ 237.158800][ T5956] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 237.318748][ T5956] usb 4-1: Using ep0 maxpacket: 8 [ 237.325774][ T5956] usb 4-1: config 1 interface 0 altsetting 111 endpoint 0x81 has an invalid bInterval 247, changing to 11 [ 237.339476][ T5956] usb 4-1: config 1 interface 0 has no altsetting 0 [ 237.355134][ T5956] usb 4-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.40 [ 237.374012][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.382985][ T52] usb 2-1: USB disconnect, device number 29 [ 237.384681][ T5956] usb 4-1: Product: syz [ 237.405865][ T5956] usb 4-1: Manufacturer: syz [ 237.412613][ T5956] usb 4-1: SerialNumber: syz [ 237.573180][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802511b800: abort rx timeout. Force session deactivation [ 237.586811][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802511ac00: abort rx timeout. Force session deactivation [ 237.680940][ T5898] usb 3-1: USB disconnect, device number 22 [ 237.792739][ T8428] netlink: 53 bytes leftover after parsing attributes in process `syz.1.718'. [ 238.017672][ T8436] netlink: 312 bytes leftover after parsing attributes in process `syz.0.721'. [ 238.128797][ T5898] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 238.195486][ T5956] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input14 [ 238.236293][ T5196] bcm5974 4-1:1.0: could not read from device [ 238.267522][ T5196] bcm5974 4-1:1.0: could not read from device [ 238.287480][ T5956] usb 4-1: USB disconnect, device number 24 [ 238.296763][ T5898] usb 3-1: device descriptor read/64, error -71 [ 238.307502][ T8440] can: request_module (can-proto-5) failed. [ 238.342471][ T5196] bcm5974 4-1:1.0: could not read from device [ 238.467265][ T8449] input: syz1 as /devices/virtual/input/input15 [ 238.571511][ T5898] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 238.718773][ T5898] usb 3-1: device descriptor read/64, error -71 [ 238.830199][ T5898] usb usb3-port1: attempt power cycle [ 238.915339][ T5956] usb 5-1: USB disconnect, device number 27 [ 239.154359][ T8461] netlink: 'syz.4.729': attribute type 10 has an invalid length. [ 239.163220][ T8461] netlink: 20 bytes leftover after parsing attributes in process `syz.4.729'. [ 239.173635][ T8461] bond0: option arp_all_targets: invalid value (196616) [ 239.181619][ T5898] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 239.229518][ T5898] usb 3-1: device descriptor read/8, error -71 [ 239.353417][ T8468] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.731'. [ 239.364700][ T8468] netlink: zone id is out of range [ 239.372053][ T8468] netlink: get zone limit has 8 unknown bytes [ 239.468868][ T5898] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 239.490060][ T5898] usb 3-1: device descriptor read/8, error -71 [ 239.600413][ T5898] usb usb3-port1: unable to enumerate USB device [ 240.169967][ T8474] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(70) [ 240.176647][ T8474] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 240.190240][ T8474] vhci_hcd vhci_hcd.0: Device attached [ 240.438915][ T10] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 240.909056][ T8481] kernel profiling enabled (shift: 63) [ 240.938433][ T8476] vhci_hcd: connection reset by peer [ 240.946830][ T8481] profiling shift: 63 too large [ 240.979361][ T4410] vhci_hcd: stop threads [ 240.988926][ T4410] vhci_hcd: release socket [ 241.004693][ T4410] vhci_hcd: disconnect device [ 241.481638][ T5898] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 241.649253][ T5898] usb 3-1: Using ep0 maxpacket: 32 [ 241.667105][ T5898] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.702095][ T5898] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.725995][ T8504] netlink: 'syz.4.742': attribute type 10 has an invalid length. [ 241.765334][ T8504] veth1_vlan: entered allmulticast mode [ 241.791370][ T5898] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 241.815454][ T5898] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 241.839333][ T8504] veth1_vlan: left promiscuous mode [ 241.839935][ T5898] usb 3-1: Product: syz [ 241.856770][ T8504] team0: Device veth1_vlan failed to register rx_handler [ 241.859985][ T8507] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 241.893432][ T5898] usb 3-1: Manufacturer: syz [ 241.926306][ T5898] hub 3-1:4.0: USB hub found [ 242.109539][ T5899] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 242.270429][ T5899] usb 1-1: Using ep0 maxpacket: 16 [ 242.297502][ T5899] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 242.321946][ T5899] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.333465][ T5899] usb 1-1: config 0 has no interface number 0 [ 242.342657][ T5899] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 242.348797][ T5898] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 242.352373][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.457341][ T5899] usb 1-1: Product: syz [ 242.488408][ T5899] usb 1-1: Manufacturer: syz [ 242.513978][ T5899] usb 1-1: SerialNumber: syz [ 242.519915][ T5898] usb 3-1: USB disconnect, device number 27 [ 242.599818][ T5899] usb 1-1: config 0 descriptor?? [ 242.888948][ T5899] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 242.906086][ T5956] usb 1-1: USB disconnect, device number 26 [ 243.074633][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.126287][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.178739][ T5899] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 243.224226][ T5899] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 243.235246][ T8529] netlink: 20 bytes leftover after parsing attributes in process `syz.2.752'. [ 243.265921][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.316814][ T5899] usb 4-1: config 0 descriptor?? [ 243.611792][ T5956] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 243.613197][ T8541] Invalid logical block size (51711) [ 243.758924][ T5956] usb 5-1: device descriptor read/64, error -71 [ 244.037228][ T5899] usbhid 4-1:0.0: can't add hid device: -71 [ 244.048805][ T5956] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 244.058536][ T5899] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 244.107822][ T8556] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 244.186540][ T5899] usb 4-1: USB disconnect, device number 25 [ 244.266241][ T5956] usb 5-1: device descriptor read/64, error -71 [ 244.295820][ T8557] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 244.399395][ T5956] usb usb5-port1: attempt power cycle [ 244.580176][ T5848] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 244.610624][ T8564] FAULT_INJECTION: forcing a failure. [ 244.610624][ T8564] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.627091][ T8564] CPU: 1 UID: 0 PID: 8564 Comm: syz.2.764 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) [ 244.627119][ T8564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 244.627136][ T8564] Call Trace: [ 244.627145][ T8564] [ 244.627153][ T8564] dump_stack_lvl+0x241/0x360 [ 244.627188][ T8564] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.627213][ T8564] ? __pfx__printk+0x10/0x10 [ 244.627250][ T8564] should_fail_ex+0x424/0x570 [ 244.627283][ T8564] _copy_to_user+0x31/0xb0 [ 244.627312][ T8564] simple_read_from_buffer+0xc4/0x170 [ 244.627345][ T8564] proc_fail_nth_read+0x1ef/0x260 [ 244.627368][ T8564] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 244.627391][ T8564] ? rw_verify_area+0x246/0x630 [ 244.627412][ T8564] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 244.627433][ T8564] vfs_read+0x21f/0xb90 [ 244.627460][ T8564] ? __pfx___mutex_lock+0x10/0x10 [ 244.627485][ T8564] ? __pfx_vfs_read+0x10/0x10 [ 244.627509][ T8564] ? __fget_files+0x2a/0x420 [ 244.627529][ T8564] ? __fget_files+0x39d/0x420 [ 244.627544][ T8564] ? __fget_files+0x2a/0x420 [ 244.627571][ T8564] ksys_read+0x19d/0x2d0 [ 244.627596][ T8564] ? __pfx_ksys_read+0x10/0x10 [ 244.627624][ T8564] ? do_syscall_64+0xb6/0x230 [ 244.627650][ T8564] do_syscall_64+0xf3/0x230 [ 244.627671][ T8564] ? clear_bhb_loop+0x45/0xa0 [ 244.627693][ T8564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.627711][ T8564] RIP: 0033:0x7f010e98bb7c [ 244.627729][ T8564] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 244.627745][ T8564] RSP: 002b:00007f010f702030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 244.627767][ T8564] RAX: ffffffffffffffda RBX: 00007f010eba5fa0 RCX: 00007f010e98bb7c [ 244.627781][ T8564] RDX: 000000000000000f RSI: 00007f010f7020a0 RDI: 0000000000000044 [ 244.627793][ T8564] RBP: 00007f010f702090 R08: 0000000000000000 R09: 0000000000000000 [ 244.627812][ T8564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.627823][ T8564] R13: 0000000000000000 R14: 00007f010eba5fa0 R15: 00007f010eccfa28 [ 244.627853][ T8564] [ 244.837804][ C1] vkms_vblank_simulate: vblank timer overrun [ 244.968828][ T5899] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 244.976680][ T5956] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 244.998989][ T5848] usb 2-1: Using ep0 maxpacket: 32 [ 245.039945][ T5848] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.061314][ T5956] usb 5-1: device descriptor read/8, error -71 [ 245.083646][ T5848] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.143190][ T5848] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 245.159107][ T5848] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 245.168879][ T5848] usb 2-1: Product: syz [ 245.177910][ T5848] usb 2-1: Manufacturer: syz [ 245.198870][ T5899] usb 4-1: Using ep0 maxpacket: 32 [ 245.208499][ T5848] hub 2-1:4.0: USB hub found [ 245.218916][ T5899] usb 4-1: too many configurations: 202, using maximum allowed: 8 [ 245.245171][ T5899] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 245.259626][ T5899] usb 4-1: can't read configurations, error -61 [ 245.318729][ T5956] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 245.359521][ T5956] usb 5-1: device descriptor read/8, error -71 [ 245.418870][ T5899] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 245.479786][ T5956] usb usb5-port1: unable to enumerate USB device [ 245.538966][ T10] vhci_hcd: vhci_device speed not set [ 245.588741][ T5899] usb 4-1: Using ep0 maxpacket: 32 [ 245.597913][ T5899] usb 4-1: too many configurations: 202, using maximum allowed: 8 [ 245.609089][ T5848] hub 2-1:4.0: config failed, can't read hub descriptor (err -22) [ 245.655060][ T5899] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 245.679284][ T5899] usb 4-1: can't read configurations, error -61 [ 245.697988][ T5899] usb usb4-port1: attempt power cycle [ 245.876561][ T8576] Cannot find set identified by id 0 to match [ 245.909391][ T121] usb 2-1: USB disconnect, device number 30 [ 246.060290][ T5899] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 246.099566][ T5899] usb 4-1: Using ep0 maxpacket: 32 [ 246.105792][ T5899] usb 4-1: too many configurations: 202, using maximum allowed: 8 [ 246.117328][ T5899] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 246.131130][ T5899] usb 4-1: can't read configurations, error -61 [ 246.269200][ T5899] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 246.319634][ T5899] usb 4-1: Using ep0 maxpacket: 32 [ 246.363742][ T5899] usb 4-1: too many configurations: 202, using maximum allowed: 8 [ 246.404186][ T5899] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 246.429287][ T5899] usb 4-1: can't read configurations, error -61 [ 246.457638][ T5899] usb usb4-port1: unable to enumerate USB device [ 246.549800][ T8597] batadv_slave_1: entered promiscuous mode [ 246.561153][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 246.561170][ T30] audit: type=1326 audit(1743847904.138:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8596 comm="syz.4.775" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf0158d169 code=0x0 [ 246.734140][ T8601] block device autoloading is deprecated and will be removed. [ 247.030758][ T8608] netlink: 53 bytes leftover after parsing attributes in process `syz.2.778'. [ 247.278712][ T5956] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 247.346907][ T8596] batadv_slave_1: left promiscuous mode [ 247.431740][ T5956] usb 1-1: Using ep0 maxpacket: 16 [ 247.453617][ T5956] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 247.495975][ T5956] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.546316][ T5956] usb 1-1: config 0 descriptor?? [ 247.745777][ T8620] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 247.898819][ T5899] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 247.971177][ T5956] koneplus 0003:1E7D:2E22.000A: unknown main item tag 0x5 [ 247.995003][ T5956] koneplus 0003:1E7D:2E22.000A: hidraw0: USB HID v20.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.0-1/input0 [ 248.088936][ T5899] usb 4-1: Using ep0 maxpacket: 32 [ 248.096573][ T5899] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.111614][ T5899] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.124142][ T5899] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 248.133907][ T5899] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 248.142637][ T5899] usb 4-1: Product: syz [ 248.147055][ T5899] usb 4-1: Manufacturer: syz [ 248.165270][ T5899] hub 4-1:4.0: USB hub found [ 248.170095][ T5848] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 248.183537][ T10] usb 1-1: USB disconnect, device number 27 [ 248.338843][ T5848] usb 2-1: Using ep0 maxpacket: 16 [ 248.349632][ T5848] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 248.384904][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 248.402169][ T5848] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 248.411371][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.422563][ T5848] usb 2-1: Product: syz [ 248.426816][ T5848] usb 2-1: Manufacturer: syz [ 248.431815][ T5848] usb 2-1: SerialNumber: syz [ 248.449526][ T5848] usb 2-1: config 0 descriptor?? [ 248.494869][ T5848] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 248.507137][ T5848] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 248.552661][ T8648] FAULT_INJECTION: forcing a failure. [ 248.552661][ T8648] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.566349][ T8648] CPU: 0 UID: 0 PID: 8648 Comm: syz.4.790 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) [ 248.566367][ T8648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 248.566374][ T8648] Call Trace: [ 248.566379][ T8648] [ 248.566384][ T8648] dump_stack_lvl+0x241/0x360 [ 248.566407][ T8648] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.566423][ T8648] ? __pfx__printk+0x10/0x10 [ 248.566447][ T8648] should_fail_ex+0x424/0x570 [ 248.566466][ T8648] _copy_from_user+0x2d/0xb0 [ 248.566483][ T8648] snd_seq_write+0x323/0xac0 [ 248.566508][ T8648] ? __pfx_snd_seq_write+0x10/0x10 [ 248.566524][ T8648] ? bpf_lsm_file_permission+0x9/0x10 [ 248.566538][ T8648] ? rw_verify_area+0x246/0x630 [ 248.566550][ T8648] ? __pfx_snd_seq_write+0x10/0x10 [ 248.566566][ T8648] vfs_write+0x2bc/0xd10 [ 248.566586][ T8648] ? __pfx_vfs_write+0x10/0x10 [ 248.566599][ T8648] ? __fget_files+0x2a/0x420 [ 248.566609][ T8648] ? __fget_files+0x2a/0x420 [ 248.566620][ T8648] ? __fget_files+0x39d/0x420 [ 248.566628][ T8648] ? __fget_files+0x2a/0x420 [ 248.566644][ T8648] ksys_write+0x19d/0x2d0 [ 248.566658][ T8648] ? __pfx_ksys_write+0x10/0x10 [ 248.566674][ T8648] ? do_syscall_64+0xb6/0x230 [ 248.566690][ T8648] do_syscall_64+0xf3/0x230 [ 248.566703][ T8648] ? clear_bhb_loop+0x45/0xa0 [ 248.566717][ T8648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.566728][ T8648] RIP: 0033:0x7fcf0158d169 [ 248.566738][ T8648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.566749][ T8648] RSP: 002b:00007fcf0242e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 248.566763][ T8648] RAX: ffffffffffffffda RBX: 00007fcf017a5fa0 RCX: 00007fcf0158d169 [ 248.566772][ T8648] RDX: 000000000000ffc8 RSI: 0000200000000000 RDI: 0000000000000003 [ 248.566779][ T8648] RBP: 00007fcf0242e090 R08: 0000000000000000 R09: 0000000000000000 [ 248.566786][ T8648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 248.566793][ T8648] R13: 0000000000000000 R14: 00007fcf017a5fa0 R15: 00007fcf018cfa28 [ 248.566811][ T8648] [ 248.782669][ T5899] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 248.889336][ T5848] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 248.896057][ T5848] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 248.904908][ T5848] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 248.913936][ T5848] em28xx 2-1:0.0: No AC97 audio processor [ 248.927517][ T5848] usb 2-1: USB disconnect, device number 31 [ 248.949688][ T5848] em28xx 2-1:0.0: Disconnecting em28xx [ 248.962068][ T5848] em28xx 2-1:0.0: Freeing device [ 249.105773][ T8657] FAULT_INJECTION: forcing a failure. [ 249.105773][ T8657] name failslab, interval 1, probability 0, space 0, times 0 [ 249.127056][ T5898] usb 4-1: USB disconnect, device number 30 [ 249.141041][ T8657] CPU: 1 UID: 0 PID: 8657 Comm: syz.4.791 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) [ 249.141071][ T8657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 249.141081][ T8657] Call Trace: [ 249.141089][ T8657] [ 249.141097][ T8657] dump_stack_lvl+0x241/0x360 [ 249.141132][ T8657] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.141158][ T8657] ? __pfx__printk+0x10/0x10 [ 249.141188][ T8657] ? __pfx___might_resched+0x10/0x10 [ 249.141217][ T8657] should_fail_ex+0x424/0x570 [ 249.141242][ T8657] should_failslab+0xac/0x100 [ 249.141268][ T8657] __kmalloc_node_track_caller_noprof+0xe2/0x4d0 [ 249.141294][ T8657] ? kobject_set_name_vargs+0x61/0x120 [ 249.141323][ T8657] kvasprintf+0xe1/0x190 [ 249.141353][ T8657] ? __pfx_kvasprintf+0x10/0x10 [ 249.141388][ T8657] ? kvasprintf_const+0x51/0x170 [ 249.141415][ T8657] kobject_set_name_vargs+0x61/0x120 [ 249.141440][ T8657] dev_set_name+0xd7/0x120 [ 249.141461][ T8657] ? iommufd_test+0x16bd/0x56a0 [ 249.141482][ T8657] ? __pfx_dev_set_name+0x10/0x10 [ 249.141500][ T8657] ? __init_waitqueue_head+0xae/0x150 [ 249.141531][ T8657] ? device_initialize+0x266/0x460 [ 249.141555][ T8657] iommufd_test+0x170c/0x56a0 [ 249.141586][ T8657] ? __pfx_iommufd_test+0x10/0x10 [ 249.141618][ T8657] ? __lock_acquire+0xad5/0xd80 [ 249.141674][ T8657] iommufd_fops_ioctl+0x4fc/0x610 [ 249.141702][ T8657] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 249.141733][ T8657] ? __fget_files+0x2a/0x420 [ 249.141757][ T8657] ? __fget_files+0x2a/0x420 [ 249.141778][ T8657] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 249.141806][ T8657] __se_sys_ioctl+0xf1/0x160 [ 249.141830][ T8657] do_syscall_64+0xf3/0x230 [ 249.141853][ T8657] ? clear_bhb_loop+0x45/0xa0 [ 249.141876][ T8657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.141894][ T8657] RIP: 0033:0x7fcf0158d169 [ 249.141912][ T8657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.141928][ T8657] RSP: 002b:00007fcf0240d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 249.141951][ T8657] RAX: ffffffffffffffda RBX: 00007fcf017a6080 RCX: 00007fcf0158d169 [ 249.141970][ T8657] RDX: 0000200000000200 RSI: 0000000000003ba0 RDI: 0000000000000005 [ 249.141982][ T8657] RBP: 00007fcf0240d090 R08: 0000000000000000 R09: 0000000000000000 [ 249.141994][ T8657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.142015][ T8657] R13: 0000000000000000 R14: 00007fcf017a6080 R15: 00007fcf018cfa28 [ 249.142046][ T8657] [ 249.395742][ C1] vkms_vblank_simulate: vblank timer overrun [ 249.627097][ T8667] input: syz0 as /devices/virtual/input/input16 [ 250.839063][ T5898] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 251.010684][ T5848] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 251.019517][ T5898] usb 2-1: Using ep0 maxpacket: 16 [ 251.047857][ T5898] usb 2-1: unable to get BOS descriptor or descriptor too short [ 251.117341][ T5898] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 251.161417][ T8703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.811'. [ 251.188690][ T5848] usb 4-1: Using ep0 maxpacket: 8 [ 251.196384][ T5898] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 251.196547][ T5848] usb 4-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 251.248149][ T5898] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 251.259485][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.273467][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.274383][ T5898] usb 2-1: Product: syz [ 251.303454][ T5848] usb 4-1: config 0 descriptor?? [ 251.304778][ T5898] usb 2-1: Manufacturer: syz [ 251.321310][ T5848] usb 4-1: bad CDC descriptors [ 251.337121][ T5898] usb 2-1: SerialNumber: syz [ 251.584388][ T5898] usb 2-1: USB disconnect, device number 32 [ 251.610642][ T8710] netlink: 1 bytes leftover after parsing attributes in process `syz.4.814'. [ 251.647178][ T5848] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 251.818727][ T5848] usb 1-1: Using ep0 maxpacket: 32 [ 251.826621][ T5848] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.838434][ T5848] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.851597][ T5848] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 251.861239][ T5848] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 251.870551][ T5848] usb 1-1: Product: syz [ 251.875098][ T5848] usb 1-1: Manufacturer: syz [ 251.879947][ T121] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 251.896238][ T5848] hub 1-1:4.0: USB hub found [ 252.042594][ T121] usb 3-1: config 0 has no interfaces? [ 252.061725][ T121] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 252.071042][ T121] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.079977][ T121] usb 3-1: Product: syz [ 252.127507][ T121] usb 3-1: Manufacturer: syz [ 252.137164][ T121] usb 3-1: SerialNumber: syz [ 252.166129][ T121] usb 3-1: config 0 descriptor?? [ 252.235312][ T8719] netlink: 'syz.1.816': attribute type 7 has an invalid length. [ 252.247063][ T8719] FAULT_INJECTION: forcing a failure. [ 252.247063][ T8719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.269177][ T8719] CPU: 0 UID: 0 PID: 8719 Comm: syz.1.816 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) [ 252.269205][ T8719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 252.269232][ T8719] Call Trace: [ 252.269238][ T8719] [ 252.269243][ T8719] dump_stack_lvl+0x241/0x360 [ 252.269266][ T8719] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.269283][ T8719] ? __pfx__printk+0x10/0x10 [ 252.269306][ T8719] should_fail_ex+0x424/0x570 [ 252.269321][ T8719] _copy_to_user+0x31/0xb0 [ 252.269339][ T8719] simple_read_from_buffer+0xc4/0x170 [ 252.269359][ T8719] proc_fail_nth_read+0x1ef/0x260 [ 252.269373][ T8719] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 252.269386][ T8719] ? rw_verify_area+0x246/0x630 [ 252.269398][ T8719] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 252.269410][ T8719] vfs_read+0x21f/0xb90 [ 252.269426][ T8719] ? __pfx___mutex_lock+0x10/0x10 [ 252.269441][ T8719] ? __pfx_vfs_read+0x10/0x10 [ 252.269455][ T8719] ? __fget_files+0x2a/0x420 [ 252.269466][ T8719] ? __fget_files+0x39d/0x420 [ 252.269475][ T8719] ? __fget_files+0x2a/0x420 [ 252.269491][ T8719] ksys_read+0x19d/0x2d0 [ 252.269505][ T8719] ? __pfx_ksys_read+0x10/0x10 [ 252.269521][ T8719] ? do_syscall_64+0xb6/0x230 [ 252.269537][ T8719] do_syscall_64+0xf3/0x230 [ 252.269550][ T8719] ? clear_bhb_loop+0x45/0xa0 [ 252.269563][ T8719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.269574][ T8719] RIP: 0033:0x7fc1cc18bb7c [ 252.269586][ T8719] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 252.269596][ T8719] RSP: 002b:00007fc1cd053030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 252.269610][ T8719] RAX: ffffffffffffffda RBX: 00007fc1cc3a6080 RCX: 00007fc1cc18bb7c [ 252.269619][ T8719] RDX: 000000000000000f RSI: 00007fc1cd0530a0 RDI: 0000000000000007 [ 252.269626][ T8719] RBP: 00007fc1cd053090 R08: 0000000000000000 R09: 0000000000000000 [ 252.269633][ T8719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 252.269640][ T8719] R13: 0000000000000000 R14: 00007fc1cc3a6080 R15: 00007fc1cc4cfa28 [ 252.269657][ T8719] [ 252.518901][ T5848] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 252.839033][ T121] usb 1-1: USB disconnect, device number 28 [ 253.136136][ T10] usb 4-1: USB disconnect, device number 31 [ 253.675615][ T8748] syz.1.826 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 253.728887][ T52] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 253.763235][ T8751] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 253.784805][ T8751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.826'. [ 253.888888][ T52] usb 4-1: Using ep0 maxpacket: 8 [ 253.899396][ T52] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 253.912523][ T52] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 253.923055][ T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.940001][ T52] usb 4-1: config 0 descriptor?? [ 254.050577][ T8759] netlink: 104 bytes leftover after parsing attributes in process `syz.0.831'. [ 254.161588][ T52] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 254.264845][ T30] audit: type=1326 audit(1743847911.838:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8764 comm="syz.0.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7858d169 code=0x7ffc0000 [ 254.294400][ T30] audit: type=1326 audit(1743847911.838:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8764 comm="syz.0.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7858d169 code=0x7ffc0000 [ 254.320753][ T30] audit: type=1326 audit(1743847911.838:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8764 comm="syz.0.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad7858d169 code=0x7ffc0000 [ 254.347721][ T30] audit: type=1326 audit(1743847911.838:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8764 comm="syz.0.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7858d169 code=0x7ffc0000 [ 254.366868][ T52] usb 4-1: USB disconnect, device number 32 [ 254.369980][ C1] iowarrior 4-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 254.377800][ T30] audit: type=1326 audit(1743847911.858:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8764 comm="syz.0.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad7858d169 code=0x7ffc0000 [ 254.413854][ T30] audit: type=1326 audit(1743847911.858:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8764 comm="syz.0.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7858d169 code=0x7ffc0000 [ 254.441642][ T30] audit: type=1326 audit(1743847911.858:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8764 comm="syz.0.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad7858d169 code=0x7ffc0000 [ 254.469886][ T30] audit: type=1326 audit(1743847911.868:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8764 comm="syz.0.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7858d169 code=0x7ffc0000 [ 254.509358][ T30] audit: type=1326 audit(1743847911.868:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8764 comm="syz.0.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad7858d169 code=0x7ffc0000 [ 254.535201][ T30] audit: type=1326 audit(1743847911.868:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8764 comm="syz.0.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7858d169 code=0x7ffc0000 [ 254.859590][ T52] usb 3-1: USB disconnect, device number 28 [ 254.939108][ T10] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 255.100721][ T10] usb 1-1: config 0 has no interfaces? [ 255.118566][ T10] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 255.131081][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.141619][ T10] usb 1-1: Product: syz [ 255.145831][ T10] usb 1-1: Manufacturer: syz [ 255.155461][ T10] usb 1-1: SerialNumber: syz [ 255.164513][ T10] usb 1-1: config 0 descriptor?? [ 255.174057][ T5848] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 255.290442][ T8787] netlink: 'syz.3.842': attribute type 11 has an invalid length. [ 255.290590][ T8783] vlan0: entered promiscuous mode [ 255.361314][ T5848] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 255.390580][ T121] usb 1-1: USB disconnect, device number 29 [ 255.396754][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.441507][ T5848] usb 2-1: config 0 descriptor?? [ 255.480575][ T5848] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 255.665696][ T8794] FAULT_INJECTION: forcing a failure. [ 255.665696][ T8794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.689929][ T8794] CPU: 0 UID: 0 PID: 8794 Comm: syz.3.844 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) [ 255.689964][ T8794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 255.689976][ T8794] Call Trace: [ 255.689984][ T8794] [ 255.690000][ T8794] dump_stack_lvl+0x241/0x360 [ 255.690042][ T8794] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.690070][ T8794] ? __pfx__printk+0x10/0x10 [ 255.690108][ T8794] should_fail_ex+0x424/0x570 [ 255.690135][ T8794] _copy_to_user+0x31/0xb0 [ 255.690165][ T8794] video_usercopy+0xf30/0x1330 [ 255.690197][ T8794] ? __pfx___video_do_ioctl+0x10/0x10 [ 255.690216][ T8794] ? __pfx_video_usercopy+0x10/0x10 [ 255.690247][ T8794] ? __fget_files+0x2a/0x420 [ 255.690269][ T8794] ? __fget_files+0x2a/0x420 [ 255.690289][ T8794] v4l2_ioctl+0x189/0x1e0 [ 255.690317][ T8794] ? __pfx_v4l2_ioctl+0x10/0x10 [ 255.690346][ T8794] __se_sys_ioctl+0xf1/0x160 [ 255.690371][ T8794] do_syscall_64+0xf3/0x230 [ 255.690396][ T8794] ? clear_bhb_loop+0x45/0xa0 [ 255.690419][ T8794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.690438][ T8794] RIP: 0033:0x7fdee6d8d169 [ 255.690456][ T8794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.690473][ T8794] RSP: 002b:00007fdee7bda038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 255.690497][ T8794] RAX: ffffffffffffffda RBX: 00007fdee6fa5fa0 RCX: 00007fdee6d8d169 [ 255.690512][ T8794] RDX: 0000200000000080 RSI: 00000000c0905664 RDI: 0000000000000003 [ 255.690525][ T8794] RBP: 00007fdee7bda090 R08: 0000000000000000 R09: 0000000000000000 [ 255.690536][ T8794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.690548][ T8794] R13: 0000000000000000 R14: 00007fdee6fa5fa0 R15: 00007fdee70cfa28 [ 255.690580][ T8794] [ 255.907163][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.913654][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.922716][ T5848] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 255.987323][ T8796] netlink: 'syz.0.845': attribute type 2 has an invalid length. [ 256.308248][ T5848] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 256.519911][ T5848] usb 2-1: USB disconnect, device number 33 [ 259.768800][ T52] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 259.962035][ T52] usb 4-1: Using ep0 maxpacket: 16 [ 260.007432][ T52] usb 4-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 260.038346][ T52] usb 4-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 260.092453][ T52] usb 4-1: config 0 interface 0 has no altsetting 0 [ 260.116737][ T52] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 260.137597][ T8864] netlink: 312 bytes leftover after parsing attributes in process `syz.1.865'. [ 260.154126][ T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.194895][ T8869] FAULT_INJECTION: forcing a failure. [ 260.194895][ T8869] name failslab, interval 1, probability 0, space 0, times 0 [ 260.239752][ T8869] CPU: 1 UID: 0 PID: 8869 Comm: syz.2.859 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) [ 260.239781][ T8869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 260.239792][ T8869] Call Trace: [ 260.239799][ T8869] [ 260.239808][ T8869] dump_stack_lvl+0x241/0x360 [ 260.239842][ T8869] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.239868][ T8869] ? __pfx__printk+0x10/0x10 [ 260.239896][ T8869] ? __pfx___might_resched+0x10/0x10 [ 260.239923][ T8869] should_fail_ex+0x424/0x570 [ 260.239949][ T8869] should_failslab+0xac/0x100 [ 260.239976][ T8869] __kmalloc_cache_noprof+0x73/0x370 [ 260.239998][ T8869] ? alloc_super+0x59/0x9d0 [ 260.240022][ T8869] alloc_super+0x59/0x9d0 [ 260.240046][ T8869] sget_fc+0x34c/0xa50 [ 260.240069][ T8869] ? __pfx_set_anon_super_fc+0x10/0x10 [ 260.240087][ T8869] ? __pfx_fuse_fill_super+0x10/0x10 [ 260.240113][ T8869] get_tree_nodev+0x2a/0x140 [ 260.240138][ T8869] fuse_get_tree+0x347/0x4b0 [ 260.240168][ T8869] vfs_get_tree+0x90/0x2b0 [ 260.240194][ T8869] do_new_mount+0x2cf/0xb70 [ 260.240232][ T8869] ? __pfx_do_new_mount+0x10/0x10 [ 260.240276][ T8869] __se_sys_mount+0x38c/0x400 [ 260.240307][ T8869] ? __pfx___se_sys_mount+0x10/0x10 [ 260.240339][ T8869] ? __x64_sys_mount+0x20/0xc0 [ 260.240361][ T8869] do_syscall_64+0xf3/0x230 [ 260.240376][ T8869] ? clear_bhb_loop+0x45/0xa0 [ 260.240389][ T8869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.240399][ T8869] RIP: 0033:0x7f010e98d169 [ 260.240411][ T8869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.240422][ T8869] RSP: 002b:00007f010f702038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 260.240438][ T8869] RAX: ffffffffffffffda RBX: 00007f010eba5fa0 RCX: 00007f010e98d169 [ 260.240446][ T8869] RDX: 0000200000000000 RSI: 00002000000020c0 RDI: 0000000000000000 [ 260.240454][ T8869] RBP: 00007f010f702090 R08: 0000200000000040 R09: 0000000000000000 [ 260.240461][ T8869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 260.240468][ T8869] R13: 0000000000000000 R14: 00007f010eba5fa0 R15: 00007f010eccfa28 [ 260.240485][ T8869] [ 260.463701][ T52] usb 4-1: config 0 descriptor?? [ 261.128828][ T121] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 261.281225][ T121] usb 2-1: config 5 has an invalid interface number: 123 but max is 0 [ 261.290838][ T121] usb 2-1: config 5 has no interface number 0 [ 261.306221][ T121] usb 2-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 261.347600][ T121] usb 2-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 261.365336][ T121] usb 2-1: config 5 interface 123 altsetting 7 endpoint 0x86 has invalid wMaxPacketSize 0 [ 261.377695][ T121] usb 2-1: config 5 interface 123 has no altsetting 0 [ 261.389133][ T121] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 261.398443][ T121] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.407746][ T121] usb 2-1: Product: syz [ 261.413211][ T121] usb 2-1: Manufacturer: syz [ 261.417993][ T121] usb 2-1: SerialNumber: syz [ 261.741123][ T121] ni6501 2-1:5.123: driver 'ni6501' failed to auto-configure device. [ 261.788482][ T121] usb 2-1: USB disconnect, device number 34 [ 261.906878][ T8894] tipc: Started in network mode [ 261.929315][ T8894] tipc: Node identity 4, cluster identity 4711 [ 261.949729][ T8894] tipc: Node number set to 4 [ 262.151947][ T52] usb 4-1: string descriptor 0 read error: -71 [ 262.172945][ T52] usb 4-1: USB disconnect, device number 33 [ 262.898970][ T5898] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 263.058801][ T52] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 263.089174][ T5898] usb 1-1: Using ep0 maxpacket: 16 [ 263.097270][ T5898] usb 1-1: config 0 has an invalid interface number: 195 but max is 0 [ 263.107193][ T5898] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.136437][ T5898] usb 1-1: config 0 has no interface number 0 [ 263.156203][ T5898] usb 1-1: New USB device found, idVendor=0421, idProduct=0418, bcdDevice=95.ff [ 263.169626][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.177937][ T5898] usb 1-1: Product: syz [ 263.183349][ T5898] usb 1-1: Manufacturer: syz [ 263.188213][ T5898] usb 1-1: SerialNumber: syz [ 263.201070][ T5898] usb 1-1: config 0 descriptor?? [ 263.218928][ T52] usb 2-1: Using ep0 maxpacket: 32 [ 263.229004][ T52] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 263.239682][ T52] usb 2-1: config 0 has no interface number 0 [ 263.257463][ T52] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 263.286211][ T52] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 263.326327][ T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.576737][ T52] usb 2-1: Product: syz [ 263.588753][ T52] usb 2-1: Manufacturer: syz [ 263.595894][ T52] usb 2-1: SerialNumber: syz [ 263.616524][ T52] usb 2-1: config 0 descriptor?? [ 263.651573][ T52] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 263.700037][ T52] em28xx 2-1:0.132: Video interface 132 found: [ 263.781994][ T5898] usb 1-1: USB disconnect, device number 30 [ 264.036958][ T52] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 264.935107][ T52] em28xx 2-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 264.973050][ T52] em28xx 2-1:0.132: failed to read eeprom (err=-5) [ 264.988908][ T52] em28xx 2-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 265.017744][ T5956] IPVS: starting estimator thread 0... [ 265.068711][ T52] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 265.078431][ T52] em28xx 2-1:0.132: analog set to bulk mode. [ 265.098694][ T121] em28xx 2-1:0.132: Registering V4L2 extension [ 265.140482][ T8947] IPVS: using max 24 ests per chain, 57600 per kthread [ 265.148294][ T52] usb 2-1: USB disconnect, device number 35 [ 265.174526][ T52] em28xx 2-1:0.132: Disconnecting em28xx [ 265.219215][ T5898] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 265.394934][ T5898] usb 4-1: Using ep0 maxpacket: 16 [ 265.402628][ T5898] usb 4-1: config index 0 descriptor too short (expected 69, got 36) [ 265.416573][ T5898] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.447639][ T5898] usb 4-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 265.465950][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.484217][ T5898] usb 4-1: Product: syz [ 265.491835][ T5898] usb 4-1: Manufacturer: syz [ 265.519541][ T5898] usb 4-1: SerialNumber: syz [ 265.537736][ T121] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 265.620452][ T5898] usb 4-1: config 0 descriptor?? [ 265.625478][ T121] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 265.641177][ T121] em28xx 2-1:0.132: No AC97 audio processor [ 265.678543][ T121] usb 2-1: Decoder not found [ 265.686610][ T5898] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 265.698751][ T121] em28xx 2-1:0.132: failed to create media graph [ 265.714198][ T121] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 265.779746][ T121] em28xx 2-1:0.132: Remote control support is not available for this card. [ 265.782044][ T8963] FAULT_INJECTION: forcing a failure. [ 265.782044][ T8963] name failslab, interval 1, probability 0, space 0, times 0 [ 265.798730][ T52] em28xx 2-1:0.132: Closing input extension [ 265.847129][ T52] em28xx 2-1:0.132: Freeing device [ 265.862935][ T8963] CPU: 0 UID: 0 PID: 8963 Comm: syz.4.886 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) [ 265.862966][ T8963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 265.862977][ T8963] Call Trace: [ 265.862984][ T8963] [ 265.862993][ T8963] dump_stack_lvl+0x241/0x360 [ 265.863027][ T8963] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.863054][ T8963] ? __pfx__printk+0x10/0x10 [ 265.863078][ T8963] ? __mutex_unlock_slowpath+0x229/0x800 [ 265.863104][ T8963] ? __pfx___might_resched+0x10/0x10 [ 265.863131][ T8963] should_fail_ex+0x424/0x570 [ 265.863157][ T8963] should_failslab+0xac/0x100 [ 265.863186][ T8963] __kmalloc_cache_noprof+0x73/0x370 [ 265.863210][ T8963] ? ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 265.863242][ T8963] ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 265.863284][ T8963] genl_rcv_msg+0xb38/0xf00 [ 265.863320][ T8963] ? __pfx_genl_rcv_msg+0x10/0x10 [ 265.863338][ T8963] ? stack_trace_save+0x11a/0x1d0 [ 265.863366][ T8963] ? __pfx_stack_trace_save+0x10/0x10 [ 265.863395][ T8963] ? stack_depot_save_flags+0x44/0x940 [ 265.863411][ T8963] ? stack_trace_snprint+0x71/0xf0 [ 265.863451][ T8963] ? __lock_acquire+0xad5/0xd80 [ 265.863473][ T8963] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 265.863518][ T8963] netlink_rcv_skb+0x208/0x480 [ 265.863544][ T8963] ? __pfx_genl_rcv_msg+0x10/0x10 [ 265.863564][ T8963] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 265.863611][ T8963] ? netlink_deliver_tap+0x2e/0x1b0 [ 265.863645][ T8963] genl_rcv+0x28/0x40 [ 265.863662][ T8963] netlink_unicast+0x7f8/0x9a0 [ 265.863692][ T8963] ? __pfx_netlink_unicast+0x10/0x10 [ 265.863716][ T8963] ? skb_put+0x114/0x1f0 [ 265.863738][ T8963] netlink_sendmsg+0x8c3/0xcd0 [ 265.863776][ T8963] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.863806][ T8963] ? aa_sock_msg_perm+0x91/0x160 [ 265.863835][ T8963] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.863866][ T8963] __sock_sendmsg+0x221/0x270 [ 265.863892][ T8963] ____sys_sendmsg+0x523/0x860 [ 265.863922][ T8963] ? __pfx_____sys_sendmsg+0x10/0x10 [ 265.863937][ T8963] ? __fget_files+0x2a/0x420 [ 265.863958][ T8963] ? __fget_files+0x2a/0x420 [ 265.863984][ T8963] __sys_sendmsg+0x271/0x360 [ 265.864009][ T8963] ? __pfx___sys_sendmsg+0x10/0x10 [ 265.864089][ T8963] ? do_syscall_64+0xb6/0x230 [ 265.864115][ T8963] do_syscall_64+0xf3/0x230 [ 265.864135][ T8963] ? clear_bhb_loop+0x45/0xa0 [ 265.864157][ T8963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.864175][ T8963] RIP: 0033:0x7fcf0158d169 [ 265.864193][ T8963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.864209][ T8963] RSP: 002b:00007fcf0242e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 265.864231][ T8963] RAX: ffffffffffffffda RBX: 00007fcf017a5fa0 RCX: 00007fcf0158d169 [ 265.864245][ T8963] RDX: 000000000000c000 RSI: 0000200000000080 RDI: 0000000000000003 [ 265.864258][ T8963] RBP: 00007fcf0242e090 R08: 0000000000000000 R09: 0000000000000000 [ 265.864270][ T8963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 265.864280][ T8963] R13: 0000000000000000 R14: 00007fcf017a5fa0 R15: 00007fcf018cfa28 [ 265.864311][ T8963] [ 266.175681][ C0] vkms_vblank_simulate: vblank timer overrun [ 266.385012][ T8943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.398566][ T8943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.575042][ T5898] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 266.582551][ T5898] gspca_pac7302 4-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 266.609492][ T5898] usb 4-1: USB disconnect, device number 34 [ 266.889917][ T10] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 267.236457][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 267.259060][ T10] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 267.267729][ T10] usb 3-1: config 0 has no interface number 0 [ 267.286278][ T10] usb 3-1: config 0 interface 12 has no altsetting 0 [ 267.327772][ T10] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 267.343408][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.447629][ T10] usb 3-1: Product: syz [ 267.464075][ T10] usb 3-1: Manufacturer: syz [ 267.491378][ T10] usb 3-1: SerialNumber: syz [ 267.517908][ T10] usb 3-1: config 0 descriptor?? [ 267.968277][ T10] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 268.002377][ T10] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 268.040448][ T10] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 268.097413][ T10] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 268.177057][ T10] usb 3-1: USB disconnect, device number 29 [ 268.281385][ T8998] input: syz0 as /devices/virtual/input/input17 [ 268.384575][ T8998] kvm: user requested TSC rate below hardware speed [ 268.422515][ T9002] kvm: user requested TSC rate below hardware speed [ 268.579604][ T5956] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 268.738752][ T5956] usb 1-1: Using ep0 maxpacket: 32 [ 268.754555][ T5956] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.821419][ T5956] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.839142][ T9010] Invalid logical block size (-9) [ 268.849024][ T5956] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 268.918924][ T5956] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 268.948675][ T5898] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 268.959449][ T5956] usb 1-1: Product: syz [ 268.963834][ T5956] usb 1-1: Manufacturer: syz [ 268.974474][ T5956] hub 1-1:4.0: USB hub found [ 269.178819][ T5898] usb 3-1: Using ep0 maxpacket: 8 [ 269.225486][ T5898] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 269.247275][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.284739][ T5898] usb 3-1: Product: syz [ 269.297351][ T5898] usb 3-1: Manufacturer: syz [ 269.314613][ T5898] usb 3-1: SerialNumber: syz [ 269.340084][ T5898] usb 3-1: config 0 descriptor?? [ 269.378393][ T5956] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 269.433827][ T5898] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 269.578978][ T5956] usb 1-1: USB disconnect, device number 31 [ 270.058774][ T5956] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 270.500505][ T5956] usb 5-1: config 0 has no interfaces? [ 270.506350][ T5898] gspca_sonixj: reg_w1 err -110 [ 270.512130][ T5898] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 270.595471][ T5956] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 270.607263][ T5956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.615995][ T5956] usb 5-1: Product: syz [ 270.626392][ T5956] usb 5-1: Manufacturer: syz [ 270.648296][ T5956] usb 5-1: SerialNumber: syz [ 270.696557][ T5956] usb 5-1: config 0 descriptor?? [ 271.721214][ T9039] wg1: entered promiscuous mode [ 271.737900][ T9039] wg1: entered allmulticast mode [ 272.608806][ T5956] usb 3-1: USB disconnect, device number 30 [ 273.124680][ T9043] team0 (unregistering): Port device team_slave_0 removed [ 273.147175][ T9043] team0 (unregistering): Port device team_slave_1 removed [ 273.418526][ T52] usb 5-1: USB disconnect, device number 32 [ 274.358929][ T5956] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 274.631839][ T9094] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.639308][ T9094] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.736994][ T9094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.751670][ T9094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.904515][ T9094] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.915665][ T9094] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.945685][ T9094] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.945836][ T5956] usb 5-1: config 0 has no interfaces? [ 275.004698][ T9094] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.087119][ T9094] hsr1: left allmulticast mode [ 275.093739][ T9094] syz_tun: left allmulticast mode [ 275.099053][ T9094] batadv_slave_0: left allmulticast mode [ 275.403061][ T5956] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 275.476349][ T5956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.484500][ T5956] usb 5-1: Product: syz [ 275.575368][ T5956] usb 5-1: Manufacturer: syz [ 275.631206][ T5956] usb 5-1: SerialNumber: syz [ 275.688704][ T52] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 275.871158][ T52] usb 1-1: Using ep0 maxpacket: 32 [ 275.942821][ T52] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.966884][ T52] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.003699][ T9117] bridge0: entered allmulticast mode [ 276.009250][ T52] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 276.047503][ T5956] usb 5-1: config 0 descriptor?? [ 276.049377][ T52] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.279756][ T52] usb 1-1: config 0 descriptor?? [ 276.293533][ T52] hub 1-1:0.0: USB hub found [ 276.505121][ T52] hub 1-1:0.0: 1 port detected [ 277.538704][ T5893] hub 1-1:0.0: hub_ext_port_status failed (err = 0) [ 277.829035][ T5956] usb 1-1: USB disconnect, device number 32 [ 277.866249][ T5893] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 278.116426][ T5895] usb 5-1: USB disconnect, device number 33 [ 278.175156][ T5893] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 278.193989][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.433292][ T5893] usb 4-1: config 0 descriptor?? [ 278.570002][ T5893] gspca_main: spca508-2.14.0 probing 8086:0110 [ 278.868747][ T5893] gspca_spca508: reg_read err -71 [ 278.876166][ T5893] gspca_spca508: reg_read err -71 [ 278.882361][ T5893] gspca_spca508: reg_read err -71 [ 278.888006][ T5893] gspca_spca508: reg_read err -71 [ 278.936969][ T5893] gspca_spca508: reg_read err -71 [ 278.947959][ T5893] gspca_spca508: reg write: error -71 [ 278.953534][ T5893] spca508 4-1:0.0: probe with driver spca508 failed with error -71 [ 278.967351][ T5893] usb 4-1: USB disconnect, device number 35 [ 278.999070][ T121] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 279.441599][ T121] usb 2-1: config 0 has no interfaces? [ 279.547451][ T121] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 279.585625][ T121] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.618797][ T121] usb 2-1: Product: syz [ 279.640794][ T121] usb 2-1: Manufacturer: syz [ 279.655602][ T121] usb 2-1: SerialNumber: syz [ 279.773987][ T121] usb 2-1: config 0 descriptor?? [ 280.121829][ T9141] netlink: 'syz.1.946': attribute type 30 has an invalid length. [ 280.129819][ T9141] netlink: 24 bytes leftover after parsing attributes in process `syz.1.946'. [ 280.319045][ T5956] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 280.454081][ T9141] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 280.474825][ T5956] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 280.496692][ T9141] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 280.530213][ T5956] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 280.555950][ T5956] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 280.687931][ T5956] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 280.708117][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.723645][ T5956] usb 4-1: Product: syz [ 280.734906][ T5956] usb 4-1: Manufacturer: syz [ 280.742163][ T5956] usb 4-1: SerialNumber: syz [ 281.006344][ T5956] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 36 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 281.212239][ T121] usb 4-1: USB disconnect, device number 36 [ 281.236922][ T121] usblp0: removed [ 282.167300][ T9186] input: syz1 as /devices/virtual/input/input18 [ 282.359666][ T121] usb 2-1: USB disconnect, device number 36 [ 282.417745][ T9186] input: failed to attach handler mousedev to device input18, error: -4 [ 282.979762][ T9204] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 282.987212][ T9204] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 283.298771][ T5899] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 283.482738][ T5899] usb 5-1: config 0 has no interfaces? [ 283.488351][ T5899] usb 5-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 283.499194][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.535525][ T5899] usb 5-1: config 0 descriptor?? [ 283.764929][ T5899] usb 5-1: USB disconnect, device number 34 [ 284.374708][ T9225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.979'. [ 284.419567][ T9225] vlan2: entered promiscuous mode [ 284.424622][ T9225] gretap0: entered promiscuous mode [ 284.464425][ T9225] vlan2: left promiscuous mode [ 284.485361][ T9225] gretap0: left promiscuous mode [ 284.589442][ T10] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 284.773048][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 284.795261][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 284.838639][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 284.900164][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 284.927922][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.983839][ T10] usb 4-1: Product: syz [ 284.988070][ T10] usb 4-1: Manufacturer: syz [ 285.021524][ T10] usb 4-1: SerialNumber: syz [ 285.041618][ T10] usb 4-1: config 0 descriptor?? [ 285.072265][ T10] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 285.099181][ T10] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 285.671974][ T10] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 285.679752][ T10] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 285.888895][ T52] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 286.212043][ T9260] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 286.302477][ T10] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 286.311290][ T10] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 286.313543][ T52] usb 2-1: config 0 has no interfaces? [ 286.391113][ T52] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 286.423528][ T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.558511][ T52] usb 2-1: Product: syz [ 286.646907][ T52] usb 2-1: Manufacturer: syz [ 286.692264][ T52] usb 2-1: SerialNumber: syz [ 286.758785][ T52] usb 2-1: config 0 descriptor?? [ 286.929627][ T10] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 286.941025][ T10] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 286.960825][ T10] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 287.624295][ T10] usb 4-1: USB disconnect, device number 37 [ 289.167834][ T5899] usb 2-1: USB disconnect, device number 37 [ 289.724583][ T9295] sctp: [Deprecated]: syz.1.1000 (pid 9295) Use of int in maxseg socket option. [ 289.724583][ T9295] Use struct sctp_assoc_value instead [ 290.310701][ T9295] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 290.317322][ T9295] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 290.470733][ T9295] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 290.519907][ T9295] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 290.633872][ T9295] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 290.667727][ T9295] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 290.745596][ T9295] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 290.756463][ T9295] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 291.018915][ T10] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 291.198914][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 291.215997][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.243071][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 291.288702][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.314877][ T10] usb 3-1: Product: syz [ 291.328792][ T10] usb 3-1: Manufacturer: syz [ 291.343863][ T10] usb 3-1: SerialNumber: syz [ 291.375020][ T10] usb 3-1: config 0 descriptor?? [ 291.454177][ T10] hdpvr 3-1:0.0: Could not find bulk-in endpoint [ 291.461821][ T10] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 291.608461][ T9331] bridge1: entered allmulticast mode [ 291.854262][ T9335] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1017'. [ 292.028706][ T5151] Bluetooth: hci0: command 0x0406 tx timeout [ 292.432480][ T9345] raw_sendmsg: syz.4.1020 forgot to set AF_INET. Fix it! [ 292.508805][ T5151] Bluetooth: hci2: command 0x0406 tx timeout [ 292.669350][ T5151] Bluetooth: hci1: command 0x0406 tx timeout [ 292.762520][ T5151] Bluetooth: hci3: command 0x0406 tx timeout [ 292.976087][ T5899] usb 3-1: USB disconnect, device number 31 [ 293.317046][ T9361] xt_CT: No such helper "snmp" [ 293.485488][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 293.485509][ T30] audit: type=1326 audit(1743847951.058:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9371 comm="syz.0.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7858d169 code=0x7ffc0000 [ 293.615518][ T9378] ptrace attach of "./syz-executor exec"[5854] was attempted by "./syz-executor exec"[9378] [ 293.718507][ T30] audit: type=1326 audit(1743847951.058:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9371 comm="syz.0.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7858d169 code=0x7ffc0000 [ 293.883370][ T30] audit: type=1326 audit(1743847951.058:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9371 comm="syz.0.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fad7858d169 code=0x7ffc0000 [ 293.916210][ T52] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 294.119016][ T5151] Bluetooth: hci0: command 0x0406 tx timeout [ 294.304258][ T30] audit: type=1326 audit(1743847951.058:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9371 comm="syz.0.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7858d169 code=0x7ffc0000 [ 294.351692][ T52] usb 3-1: Using ep0 maxpacket: 16 [ 294.535677][ T52] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 294.587308][ T52] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 294.599294][ T5151] Bluetooth: hci2: command 0x0406 tx timeout [ 294.616935][ T52] usb 3-1: Product: syz [ 294.649880][ T52] usb 3-1: Manufacturer: syz [ 294.693853][ T52] usb 3-1: SerialNumber: syz [ 294.752132][ T5151] Bluetooth: hci1: command 0x0406 tx timeout [ 294.765656][ T52] usb 3-1: config 0 descriptor?? [ 294.829592][ T5151] Bluetooth: hci3: command 0x0406 tx timeout [ 296.219846][ T9418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.681441][ T10] usb 3-1: USB disconnect, device number 32 [ 297.350268][ T9429] trusted_key: syz.3.1053 sent an empty control message without MSG_MORE. [ 298.392260][ T9449] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 299.158784][ T5893] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 299.678071][ T5893] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.691188][ T5893] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 299.706194][ T5893] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 299.965570][ T5893] usb 4-1: string descriptor 0 read error: -22 [ 299.975103][ T5893] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 299.998471][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.408802][ T5895] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 300.810295][ T5895] usb 5-1: config 0 has no interfaces? [ 300.829606][ T5895] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 300.842034][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.851760][ T5895] usb 5-1: Product: syz [ 300.857286][ T5895] usb 5-1: Manufacturer: syz [ 300.877514][ T5895] usb 5-1: SerialNumber: syz [ 300.979690][ T5895] usb 5-1: config 0 descriptor?? [ 301.298738][ T5895] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 301.309252][ T52] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 301.828911][ T5895] usb 3-1: Using ep0 maxpacket: 8 [ 301.880420][ T52] usb 2-1: config 0 has no interfaces? [ 301.891242][ T5895] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 301.900989][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.911480][ T52] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 301.920696][ T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.929241][ T52] usb 2-1: Product: syz [ 301.936325][ T5895] usb 3-1: config 0 descriptor?? [ 301.963962][ T52] usb 2-1: Manufacturer: syz [ 302.082593][ T52] usb 2-1: SerialNumber: syz [ 302.305776][ T52] usb 2-1: config 0 descriptor?? [ 302.639698][ T9503] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1079'. [ 302.762349][ T30] audit: type=1400 audit(1743847960.198:175): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D393438206B420A52737346696C653A092020203233343638206B420A52737353686D656D3A092020202020202030206B420A566D446174613A092020203336383430206B420A566D53746B3A092020202020313332206B420A566D4578653A092020202031363732206B420A566D4C69623A092020202020202038206B420A566D5054453A092020202020313430206B420A566D537761703A092020202020202030206B420A48756765746C6250616765733A092020202020202030206B420A436F726544756D70696E673A09300A5448505F656E61626C65643A09310A756E7461675F6D61736B3A093078666666 pid=9493 comm="syz.1.1079" [ 302.823671][ C1] vkms_vblank_simulate: vblank timer overrun [ 302.908416][ T52] usb 5-1: USB disconnect, device number 35 [ 303.662682][ T5893] cdc_ncm 4-1:1.0: bind() failure [ 303.703031][ T5893] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 303.942302][ T5893] cdc_ncm 4-1:1.1: bind() failure [ 303.979045][ T5893] usb 4-1: USB disconnect, device number 38 [ 304.487089][ T9514] delete_channel: no stack [ 304.907127][ T5895] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 304.922893][ T5895] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 304.994818][ T5895] asix 3-1:0.0: probe with driver asix failed with error -71 [ 305.000228][ T5899] usb 2-1: USB disconnect, device number 38 [ 305.057313][ T5895] usb 3-1: USB disconnect, device number 33 [ 305.900216][ T5899] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 306.070903][ T5899] usb 2-1: config index 0 descriptor too short (expected 2084, got 36) [ 306.085193][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.115907][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.142829][ T5899] usb 2-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 306.165037][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.200425][ T5899] usb 2-1: config 0 descriptor?? [ 306.793500][ T5899] dragonrise 0003:0079:0006.000B: unknown main item tag 0x0 [ 306.813572][ T5899] dragonrise 0003:0079:0006.000B: unknown main item tag 0x0 [ 306.946469][ T5899] dragonrise 0003:0079:0006.000B: hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.1-1/input0 [ 306.987415][ T5899] dragonrise 0003:0079:0006.000B: no inputs found [ 307.036105][ T5899] dragonrise 0003:0079:0006.000B: force feedback init failed [ 307.095630][ T5899] usb 2-1: USB disconnect, device number 39 [ 307.444836][ T9564] netlink: 'syz.0.1099': attribute type 2 has an invalid length. [ 307.720773][ T9568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1105'. [ 308.125442][ T9584] loop6: detected capacity change from 0 to 524287999 [ 308.138192][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 308.147577][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 308.156462][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 308.165684][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 308.178006][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 308.187188][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 308.195298][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 308.204496][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 308.212575][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 308.221827][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 308.252988][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 308.262237][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 308.270347][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 308.279638][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 308.288037][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 308.297233][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 308.305475][ T9584] ldm_validate_partition_table(): Disk read failed. [ 308.321842][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 308.331075][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 308.339818][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 308.349042][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 308.368905][ T9584] Dev loop6: unable to read RDB block 0 [ 308.410724][ T9584] loop6: unable to read partition table [ 308.424222][ T9584] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 308.488646][ T9586] ldm_validate_partition_table(): Disk read failed. [ 308.551984][ T9586] Dev loop6: unable to read RDB block 0 [ 308.558303][ T9586] loop6: unable to read partition table [ 308.565767][ T9586] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 308.660385][ T5211] ldm_validate_partition_table(): Disk read failed. [ 308.670417][ T5211] Dev loop6: unable to read RDB block 0 [ 308.789654][ T5211] loop6: unable to read partition table [ 309.145189][ T9607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1120'. [ 309.957896][ T5151] Bluetooth: hci2: unexpected event for opcode 0x0804 [ 310.227851][ T9633] netlink: 'syz.2.1132': attribute type 10 has an invalid length. [ 310.235840][ T9633] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1132'. [ 310.256305][ T9633] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.289661][ T9633] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.299779][ T9633] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.309621][ T9633] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.386392][ T9636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1134'. [ 310.532489][ T9633] team0: Port device geneve0 added [ 312.890830][ T9686] netlink: 'syz.1.1155': attribute type 5 has an invalid length. [ 312.934980][ T9685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1156'. [ 313.572016][ T9714] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1169'. [ 313.610946][ T9714] netlink: 'syz.2.1169': attribute type 7 has an invalid length. [ 313.621410][ T9714] netlink: 'syz.2.1169': attribute type 8 has an invalid length. [ 313.675007][ T9714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1169'. [ 313.708980][ T10] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 313.720166][ T9718] program syz.4.1171 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 313.794915][ T9722] input: syz1 as /devices/virtual/input/input19 [ 313.941826][ T10] usb 4-1: config 0 has no interfaces? [ 313.954633][ T10] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 313.981156][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.052873][ T10] usb 4-1: Product: syz [ 314.065872][ T10] usb 4-1: Manufacturer: syz [ 314.077078][ T10] usb 4-1: SerialNumber: syz [ 314.118197][ T10] usb 4-1: config 0 descriptor?? [ 314.704212][ T10] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 315.220797][ T10] usb 1-1: New USB device found, idVendor=04a5, idProduct=3035, bcdDevice= d.df [ 315.348679][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.360314][ T10] usb 1-1: config 0 descriptor?? [ 315.410055][ T10] gspca_main: benq-2.14.0 probing 04a5:3035 [ 316.346569][ T5893] usb 4-1: USB disconnect, device number 39 [ 316.842554][ T5895] usb 1-1: USB disconnect, device number 33 [ 317.245949][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.252531][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.290095][ T9766] input: syz1 as /devices/virtual/input/input20 [ 317.692528][ T9785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1194'. [ 317.741377][ T9786] netlink: 'syz.3.1182': attribute type 4 has an invalid length. [ 317.758939][ T9786] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1182'. [ 318.127012][ T9790] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.068912][ T9834] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1218'. [ 321.697035][ T30] audit: type=1800 audit(1743847979.258:176): pid=9843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1222" name="bus" dev="ramfs" ino=28661 res=0 errno=0 [ 321.901226][ T9865] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1230'. [ 321.964252][ T9869] bridge2: entered allmulticast mode [ 322.299852][ T9880] input: syz1 as /devices/virtual/input/input21 [ 322.742175][ T9892] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1243'. [ 322.910724][ T5151] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 322.996276][ T30] audit: type=1326 audit(1743847980.568:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9900 comm="syz.2.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010e98d169 code=0x7ffc0000 [ 323.141948][ T30] audit: type=1326 audit(1743847980.568:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9900 comm="syz.2.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010e98d169 code=0x7ffc0000 [ 323.200688][ T5848] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 323.228905][ T30] audit: type=1326 audit(1743847980.568:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9900 comm="syz.2.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f010e98d169 code=0x7ffc0000 [ 323.282086][ T30] audit: type=1326 audit(1743847980.568:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9900 comm="syz.2.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010e98d169 code=0x7ffc0000 [ 323.316835][ T30] audit: type=1326 audit(1743847980.568:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9900 comm="syz.2.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010e98d169 code=0x7ffc0000 [ 323.339749][ T30] audit: type=1326 audit(1743847980.598:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9900 comm="syz.2.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f010e98d169 code=0x7ffc0000 [ 323.410081][ T5848] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 323.428625][ T5848] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 323.793050][ T5848] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 323.812862][ T5848] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.824940][ T30] audit: type=1326 audit(1743847980.598:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9900 comm="syz.2.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010e98d169 code=0x7ffc0000 [ 323.870511][ T5848] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 324.001654][ T5848] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 324.020848][ T30] audit: type=1326 audit(1743847980.598:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9900 comm="syz.2.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f010e98d169 code=0x7ffc0000 [ 324.043080][ T5848] usb 1-1: Product: syz [ 324.047280][ T5848] usb 1-1: Manufacturer: syz [ 324.072244][ T30] audit: type=1326 audit(1743847980.728:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9900 comm="syz.2.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f010e98d169 code=0x7ffc0000 [ 324.097164][ T5848] cdc_wdm 1-1:1.0: skipping garbage [ 324.310555][ T5848] cdc_wdm 1-1:1.0: skipping garbage [ 324.333401][ T5848] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 324.348995][ T5848] cdc_wdm 1-1:1.0: Unknown control protocol [ 324.451981][ T5848] usb 1-1: USB disconnect, device number 34 [ 324.908932][ T5848] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 325.083775][ T5848] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 325.093077][ T5848] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 325.225450][ T5848] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 325.243933][ T5848] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.265622][ T5848] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 325.282725][ T5848] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 325.307632][ T5848] usb 1-1: Product: syz [ 325.323668][ T5848] usb 1-1: Manufacturer: syz [ 325.354684][ T5848] cdc_wdm 1-1:1.0: skipping garbage [ 325.368669][ T5848] cdc_wdm 1-1:1.0: skipping garbage [ 325.389536][ T5848] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 325.408383][ T5848] cdc_wdm 1-1:1.0: Unknown control protocol [ 325.504638][ T9936] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1259'. [ 326.048320][ T9956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1266'. [ 326.185423][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 326.192178][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 326.200006][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 326.206633][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 326.212914][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 326.219521][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 326.225851][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 326.232462][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 326.238740][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 326.245354][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 326.251810][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 326.258431][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 326.264741][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 326.271369][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 326.277746][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 326.284377][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 326.290682][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 326.297290][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 326.303640][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 326.310267][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 326.317484][ T5848] usb 1-1: USB disconnect, device number 35 [ 326.323490][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 326.803611][ T9969] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1272'. [ 326.989515][ T5151] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 327.000510][ T5151] Bluetooth: hci2: Injecting HCI hardware error event [ 327.008894][ T5845] Bluetooth: hci2: hardware error 0x00 [ 327.046485][ T9980] bridge2: entered allmulticast mode [ 327.318861][ T5893] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 327.378671][ T5848] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 327.519038][ T5893] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 327.548947][ T5893] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 327.569560][ T5893] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 327.588845][ T5848] usb 1-1: Using ep0 maxpacket: 8 [ 327.605901][ T5893] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 327.631353][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.637332][ T5848] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 327.669533][ T5848] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 327.685851][ T5893] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 327.702767][ T5848] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 327.709730][ T5893] usb 3-1: invalid MIDI out EP 0 [ 327.727843][ T5848] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 327.824926][ T5848] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 327.869663][ T5848] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.034888][ T5893] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 328.050127][T10003] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1286'. [ 328.204406][ T5891] udevd[5891]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 328.240795][ T5848] usb 1-1: GET_CAPABILITIES returned 0 [ 328.257684][ T5848] usbtmc 1-1:16.0: can't read capabilities [ 328.409245][T10010] bridge3: entered allmulticast mode [ 328.452792][ T5848] usb 1-1: USB disconnect, device number 36 [ 328.541306][T10012] hsr0: entered promiscuous mode [ 328.570785][T10012] macvtap1: entered promiscuous mode [ 328.577996][T10012] macvtap1: entered allmulticast mode [ 328.602840][T10012] hsr0: entered allmulticast mode [ 328.614103][T10012] hsr_slave_0: entered allmulticast mode [ 328.625983][T10012] hsr_slave_1: entered allmulticast mode [ 328.647810][T10012] hsr0: left allmulticast mode [ 328.669247][T10012] hsr_slave_0: left allmulticast mode [ 328.674963][T10012] hsr_slave_1: left allmulticast mode [ 328.937029][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 328.946022][ T30] audit: type=1400 audit(1743847986.498:188): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D3A3830206B420A52737346696C653A092020203232353638206B420A52737353686D656D3A092020202020202030206B420A566D446174613A092020203336383430206B420A566D53746B3A092020202020313332206B420A566D4578653A092020202031363732206B420A566D4C69623A092020202020202038206B420A566D5054453A092020202020313434206B420A566D537761703A092020202020202030206B420A48756765746C6250616765733A092020202020202030206B420A436F726544756D70696E673A09300A5448505F656E61626C65643A09310A756E7461675F6D61736B3A093078666666 pid=10018 comm="syz.4.1294" [ 329.069309][ T5845] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 329.212215][T10024] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1294'. [ 329.249281][T10035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1300'. [ 329.992925][ T5895] usb 3-1: USB disconnect, device number 34 [ 330.123586][T10054] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 10054 comm: syz.1.1305) [ 330.341099][ T30] audit: type=1800 audit(1743847987.718:189): pid=10054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1305" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=29337 res=0 errno=0 [ 330.511096][T10058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1308'. [ 330.707786][T10060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1310'. [ 330.787671][ T5848] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 330.938926][ T5848] usb 3-1: Using ep0 maxpacket: 16 [ 330.947374][ T5848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.960754][ T5848] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 330.984447][ T5848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.042422][ T5848] usb 3-1: config 0 descriptor?? [ 331.508518][ T5848] hid-steam 0003:28DE:1102.000C: unknown main item tag 0x0 [ 331.535940][ T5848] hid-steam 0003:28DE:1102.000C: unknown main item tag 0x0 [ 331.563878][ T30] audit: type=1326 audit(1743847989.128:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10070 comm="syz.0.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7858d169 code=0x7ffc0000 [ 331.600224][ T5848] hid-steam 0003:28DE:1102.000C: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 331.653486][ T30] audit: type=1326 audit(1743847989.128:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10070 comm="syz.0.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7858d169 code=0x7ffc0000 [ 331.697874][ T30] audit: type=1326 audit(1743847989.138:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10070 comm="syz.0.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fad7858d169 code=0x7ffc0000 [ 331.721275][ T5848] hid-steam 0003:28DE:1102.000C: Steam Controller 'XXXXXXXXXX' connected [ 331.753267][ T5848] input: Steam Controller as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28DE:1102.000C/input/input22 [ 331.788025][ T30] audit: type=1326 audit(1743847989.138:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10070 comm="syz.0.1315" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad7858d169 code=0x0 [ 331.791684][T10076] bridge4: entered allmulticast mode [ 331.846641][ T30] audit: type=1326 audit(1743847989.138:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10070 comm="syz.0.1315" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad7858d169 code=0x0 [ 331.899883][ T5848] hid-steam 0003:28DE:1102.000D: unknown main item tag 0x0 [ 331.907879][ T5848] hid-steam 0003:28DE:1102.000D: unknown main item tag 0x0 [ 331.956193][ T5848] hid-steam 0003:28DE:1102.000D: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 332.009816][ T5848] usb 3-1: USB disconnect, device number 35 [ 332.096639][ T6085] udevd[6085]: setting mode of /dev/hidraw0 to 020600 failed: No such file or directory [ 332.138844][ T6085] udevd[6085]: setting owner of /dev/hidraw0 to uid=0, gid=0 failed: No such file or directory [ 332.226425][ T5848] hid-steam 0003:28DE:1102.000C: Steam Controller 'XXXXXXXXXX' disconnected [ 333.116119][T10112] bridge2: entered allmulticast mode [ 334.411722][T10136] bridge3: entered allmulticast mode [ 334.733601][T10146] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1349'. [ 335.193966][T10154] macvtap1: entered promiscuous mode [ 335.226874][T10154] hsr0: entered promiscuous mode [ 335.244367][T10154] macvtap1: entered allmulticast mode [ 335.268702][T10154] hsr0: entered allmulticast mode [ 335.305780][T10154] hsr_slave_0: entered allmulticast mode [ 335.339197][T10154] hsr_slave_1: entered allmulticast mode [ 335.489697][T10154] hsr0: left allmulticast mode [ 335.494626][T10154] hsr_slave_0: left allmulticast mode [ 335.530667][T10154] hsr_slave_1: left allmulticast mode [ 335.536275][T10154] hsr0: left promiscuous mode [ 336.320497][ T30] audit: type=1326 audit(1743847993.898:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10170 comm="syz.2.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010e98d169 code=0x7ffc0000 [ 336.388477][T10173] bridge4: entered allmulticast mode [ 336.458192][ T30] audit: type=1326 audit(1743847993.898:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10170 comm="syz.2.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010e98d169 code=0x7ffc0000 [ 336.498672][ T30] audit: type=1326 audit(1743847993.938:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10170 comm="syz.2.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f010e98d169 code=0x7ffc0000 [ 336.524366][ T30] audit: type=1326 audit(1743847993.938:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10170 comm="syz.2.1362" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f010e98d169 code=0x0 [ 336.696710][ T30] audit: type=1326 audit(1743847993.938:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10170 comm="syz.2.1362" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f010e98d169 code=0x0 [ 336.718595][ C1] vkms_vblank_simulate: vblank timer overrun [ 337.927324][T10199] bridge5: entered allmulticast mode [ 338.199127][ T5895] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 338.432566][ T5895] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.445755][ T5895] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 338.457838][ T5895] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 338.590756][ T5895] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 338.608371][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.622922][ T5895] usb 1-1: Product: syz [ 338.627388][ T5895] usb 1-1: Manufacturer: 䬛죂됕ҟ栊㎊併⯼鄪옿⥭럜쇠ⵜ [ 338.642877][ T5895] usb 1-1: SerialNumber: syz [ 338.844611][ T52] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 339.092349][ T52] usb 4-1: config 0 has no interfaces? [ 339.111510][ T52] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 339.121122][ T52] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.132195][ T52] usb 4-1: Product: syz [ 339.136868][ T52] usb 4-1: Manufacturer: syz [ 339.141990][ T52] usb 4-1: SerialNumber: syz [ 339.194555][ T52] usb 4-1: config 0 descriptor?? [ 339.431057][T10217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.442199][T10217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.879505][T10232] bridge2: entered allmulticast mode [ 340.721614][ T5895] cdc_ncm 1-1:1.0: bind() failure [ 340.773555][ T5895] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 340.809336][ T5895] cdc_ncm 1-1:1.1: bind() failure [ 340.885452][ T5895] usb 1-1: USB disconnect, device number 37 [ 341.369024][ T5899] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 341.410155][T10265] loop8: detected capacity change from 0 to 7 [ 341.455411][T10265] Dev loop8: unable to read RDB block 7 [ 341.495319][T10265] loop8: unable to read partition table [ 341.518012][T10265] loop8: partition table beyond EOD, truncated [ 341.535426][ T5899] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 341.558696][ T5899] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 341.558757][T10265] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 341.558757][T10265] ) failed (rc=-5) [ 341.618604][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 341.702802][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 341.745184][ T5899] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 341.768765][ T5956] usb 4-1: USB disconnect, device number 40 [ 341.826389][ T5899] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 341.846868][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.875464][ T5899] usb 3-1: config 0 descriptor?? [ 341.889392][T10258] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 342.218676][ T52] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 342.380758][ T52] usb 2-1: config 0 has no interfaces? [ 342.395464][ T52] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 342.408798][ T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.427111][ T52] usb 2-1: Product: syz [ 342.437249][ T52] usb 2-1: Manufacturer: syz [ 342.447386][ T52] usb 2-1: SerialNumber: syz [ 342.469769][ T52] usb 2-1: config 0 descriptor?? [ 342.681701][ T52] usb 2-1: USB disconnect, device number 40 [ 342.729984][ T5899] usbhid 3-1:0.0: can't add hid device: -71 [ 342.747744][ T5899] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 342.890603][ T5899] usb 3-1: USB disconnect, device number 36 [ 344.248831][ T30] audit: type=1326 audit(1743848001.818:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10337 comm="syz.2.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010e98d169 code=0x7ffc0000 [ 344.271227][ C1] vkms_vblank_simulate: vblank timer overrun [ 344.315902][ T30] audit: type=1326 audit(1743848001.848:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10337 comm="syz.2.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010e98d169 code=0x7ffc0000 [ 344.338321][ C1] vkms_vblank_simulate: vblank timer overrun [ 344.408786][ T10] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 344.558731][ T52] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 344.658928][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 344.667628][ T30] audit: type=1326 audit(1743848001.848:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10337 comm="syz.2.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f010e98d169 code=0x7ffc0000 [ 344.724945][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.763167][ T10] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 344.801707][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 344.848831][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.898274][ T10] usb 1-1: config 0 descriptor?? [ 344.919199][ T52] usb 3-1: Using ep0 maxpacket: 16 [ 344.938679][ T30] audit: type=1326 audit(1743848001.848:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10337 comm="syz.2.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010e98d169 code=0x7ffc0000 [ 344.984071][ T30] audit: type=1326 audit(1743848001.868:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10337 comm="syz.2.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f010e98d169 code=0x7ffc0000 [ 344.999179][ T52] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 345.054526][ T30] audit: type=1326 audit(1743848001.868:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10337 comm="syz.2.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010e98d169 code=0x7ffc0000 [ 345.077267][ T52] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.077299][ T52] usb 3-1: config 0 has no interface number 0 [ 345.091177][ T52] usb 3-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 345.125835][ T52] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.164797][ T121] usb 1-1: USB disconnect, device number 38 [ 345.183118][ T52] usb 3-1: Product: syz [ 345.205959][ T52] usb 3-1: Manufacturer: syz [ 345.236585][ T30] audit: type=1326 audit(1743848001.868:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10337 comm="syz.2.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010e98d169 code=0x7ffc0000 [ 345.342642][ T52] usb 3-1: SerialNumber: syz [ 345.394560][ T52] usb 3-1: config 0 descriptor?? [ 345.404386][ T30] audit: type=1326 audit(1743848001.868:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10337 comm="syz.2.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f010e98d169 code=0x7ffc0000 [ 345.578773][ T30] audit: type=1326 audit(1743848001.868:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10337 comm="syz.2.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010e98d169 code=0x7ffc0000 [ 345.601176][ C1] vkms_vblank_simulate: vblank timer overrun [ 345.701877][ T30] audit: type=1326 audit(1743848001.868:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10337 comm="syz.2.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f010e98d169 code=0x7ffc0000 [ 346.371499][ T52] usb 3-1: Found UVC 0.00 device syz (046c:14e8) [ 346.416109][ T52] usb 3-1: No valid video chain found. [ 346.464413][ T52] usb 3-1: USB disconnect, device number 37 [ 347.798847][T10401] netlink: 'syz.2.1458': attribute type 5 has an invalid length. [ 348.548819][ T5956] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 348.710831][ T5956] usb 2-1: Using ep0 maxpacket: 32 [ 349.337405][ T5956] usb 2-1: config 0 interface 0 has no altsetting 0 [ 352.395154][ T5859] sched: DL replenish lagged too much [ 355.884140][T10437] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 356.030095][T10437] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 356.125952][T10437] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 359.229408][T10437] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 359.308852][T10440] netlink: 'syz.2.1472': attribute type 5 has an invalid length. [ 360.092721][ T5956] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 360.338728][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.440311][ T5956] usb 2-1: config 0 descriptor?? [ 360.469310][T10437] geneve2: entered promiscuous mode [ 360.474590][T10437] geneve2: entered allmulticast mode [ 360.519390][ T5956] usb 2-1: can't set config #0, error -32 [ 361.144391][T10437] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 361.158237][ T5956] usb 2-1: USB disconnect, device number 41 [ 361.367263][T10437] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 361.434814][T10437] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 361.496937][T10437] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 362.359846][T10456] openvswitch: netlink: IP tunnel dst address not specified [ 364.684425][T10482] x_tables: ip_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 365.938685][ T10] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 366.163140][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 366.907223][ T10] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 366.958609][ T10] usb 5-1: config 0 has no interface number 0 [ 366.981022][ T10] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 367.021248][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.073510][ T10] usb 5-1: Product: syz [ 367.077733][ T10] usb 5-1: Manufacturer: syz [ 367.119777][ T10] usb 5-1: SerialNumber: syz [ 367.210240][ T10] usb 5-1: config 0 descriptor?? [ 367.456491][ T10] usb 5-1: can't set config #0, error -71 [ 367.610083][ T10] usb 5-1: USB disconnect, device number 36 [ 367.999462][T10494] loop8: detected capacity change from 0 to 7 [ 368.087821][T10494] Dev loop8: unable to read RDB block 7 [ 368.107601][T10494] loop8: unable to read partition table [ 368.122903][T10494] loop8: partition table beyond EOD, truncated [ 368.158679][T10494] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 368.158679][T10494] ) failed (rc=-5) [ 369.105183][T10506] netlink: 'syz.1.1494': attribute type 10 has an invalid length. [ 369.143999][T10506] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1494'. [ 369.250953][T10506] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 369.300097][T10511] bridge5: entered allmulticast mode [ 369.768662][ T10] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 377.601378][ T10] usb 5-1: unable to read config index 0 descriptor/start: -110 [ 377.619925][ T10] usb 5-1: can't read configurations, error -110 [ 379.595910][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.610928][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.104554][T10515] raw-gadget.0 gadget.4: fail, usb_ep_queue returned -108 [ 424.242623][ T10] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 442.331914][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 442.346684][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.511562][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.526785][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 513.385770][ T10] usb 5-1: device descriptor read/64, error -32 [ 526.268302][ T10] usb usb5-port1: attempt power cycle [ 658.018432][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 658.025445][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10526/1:b..l P5505/1:b..l P5504/1:b..l [ 658.036214][ C0] rcu: (detected by 0, t=10502 jiffies, g=44417, q=1091 ncpus=2) [ 658.044053][ C0] task:dhcpcd state:R running task stack:24368 pid:5504 tgid:5504 ppid:1 task_flags:0x400140 flags:0x00000002 [ 658.058642][ C0] Call Trace: [ 658.061952][ C0] [ 658.064912][ C0] __schedule+0x1b88/0x5240 [ 658.069464][ C0] ? __lock_acquire+0xad5/0xd80 [ 658.074363][ C0] ? preempt_schedule_irq+0xfe/0x1c0 [ 658.079666][ C0] ? __pfx___schedule+0x10/0x10 [ 658.084559][ C0] ? __lock_acquire+0xad5/0xd80 [ 658.089432][ C0] ? preempt_schedule_irq+0xf3/0x1c0 [ 658.094795][ C0] preempt_schedule_irq+0xfe/0x1c0 [ 658.099896][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 658.105629][ C0] irqentry_exit+0x5e/0x90 [ 658.110065][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 658.116047][ C0] RIP: 0010:lock_release+0x244/0x3e0 [ 658.121330][ C0] Code: 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 0f 85 c3 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 65 48 8b 03 <48> 3b 44 24 28 0f 85 82 01 00 00 48 83 c4 30 5b 41 5c 41 5d 41 5e [ 658.140942][ C0] RSP: 0018:ffffc9000395efc0 EFLAGS: 00000206 [ 658.147448][ C0] RAX: 0004d56a24b5b100 RBX: ffffffff9368a020 RCX: 0000000000000001 [ 658.155409][ C0] RDX: dffffc0000000000 RSI: ffffffff8e4fd4e5 RDI: ffffffff8ca1b660 [ 658.163372][ C0] RBP: ffff8880308ac718 R08: ffffc9000395f3e8 R09: 0000000000000000 [ 658.171331][ C0] R10: ffffc9000395f150 R11: fffff5200072be2c R12: 0000000000000001 [ 658.179292][ C0] R13: ffff8880308abc00 R14: 0000000000000206 R15: ffffffff8ed3dfe0 [ 658.187265][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 658.192400][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 658.197501][ C0] unwind_next_frame+0x1a9f/0x23b0 [ 658.202625][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 658.207740][ C0] ? __reset_page_owner+0x76/0x1e0 [ 658.212842][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 658.218988][ C0] arch_stack_walk+0x11e/0x150 [ 658.223746][ C0] ? __free_frozen_pages+0xde8/0x10a0 [ 658.229112][ C0] stack_trace_save+0x11a/0x1d0 [ 658.233956][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 658.239324][ C0] save_stack+0xfc/0x1f0 [ 658.243559][ C0] ? __pfx_save_stack+0x10/0x10 [ 658.248409][ C0] __reset_page_owner+0x76/0x1e0 [ 658.253338][ C0] __free_frozen_pages+0xde8/0x10a0 [ 658.258530][ C0] __slab_free+0x2c6/0x390 [ 658.262936][ C0] ? __phys_addr+0xba/0x170 [ 658.267430][ C0] qlist_free_all+0x9a/0x140 [ 658.272010][ C0] kasan_quarantine_reduce+0x14f/0x170 [ 658.277461][ C0] __kasan_slab_alloc+0x23/0x80 [ 658.282309][ C0] kmem_cache_alloc_node_noprof+0x1f2/0x3b0 [ 658.288193][ C0] ? __alloc_skb+0x1c2/0x480 [ 658.293051][ C0] __alloc_skb+0x1c2/0x480 [ 658.297460][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 658.302390][ C0] alloc_skb_with_frags+0xc3/0x830 [ 658.307488][ C0] ? put_pid+0xcb/0x120 [ 658.311634][ C0] ? scm_destroy+0x82/0x90 [ 658.316041][ C0] ? unix_dgram_sendmsg+0xf6b/0x1ea0 [ 658.321327][ C0] sock_alloc_send_pskb+0x91c/0xa70 [ 658.326525][ C0] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 658.332241][ C0] unix_dgram_sendmsg+0x6d4/0x1ea0 [ 658.337351][ C0] ? aa_sk_perm+0x96f/0xac0 [ 658.341849][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 658.347394][ C0] ? __pfx_aa_file_perm+0x10/0x10 [ 658.352433][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 658.357369][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 658.362907][ C0] __sock_sendmsg+0x221/0x270 [ 658.367577][ C0] sock_write_iter+0x2d9/0x3f0 [ 658.372352][ C0] ? __pfx_sock_write_iter+0x10/0x10 [ 658.377654][ C0] ? bpf_lsm_file_permission+0x9/0x10 [ 658.383058][ C0] vfs_write+0x70f/0xd10 [ 658.387308][ C0] ? __pfx_sock_write_iter+0x10/0x10 [ 658.392600][ C0] ? __pfx_vfs_write+0x10/0x10 [ 658.397374][ C0] ksys_write+0x19d/0x2d0 [ 658.401706][ C0] ? __pfx_ksys_write+0x10/0x10 [ 658.406567][ C0] ? __secure_computing+0xef/0x2f0 [ 658.411676][ C0] do_syscall_64+0xf3/0x230 [ 658.416199][ C0] ? clear_bhb_loop+0x45/0xa0 [ 658.420868][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.426751][ C0] RIP: 0033:0x7fbb2fbe4bf2 [ 658.431159][ C0] RSP: 002b:00007ffc5398c5f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 658.439571][ C0] RAX: ffffffffffffffda RBX: 0000557968991bd0 RCX: 00007fbb2fbe4bf2 [ 658.447558][ C0] RDX: 0000000000000047 RSI: 00007ffc5398c610 RDI: 0000000000000005 [ 658.455527][ C0] RBP: 00007ffc5398c610 R08: 0000000000000008 R09: 0000000000000036 [ 658.463489][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00005579512e4efc [ 658.471449][ C0] R13: 00007ffc5398ca40 R14: 00005579689d7110 R15: 0000000000000001 [ 658.479420][ C0] [ 658.482457][ C0] task:dhcpcd state:R running task stack:21120 pid:5505 tgid:5505 ppid:5504 task_flags:0x400140 flags:0x00004002 [ 658.496032][ C0] Call Trace: [ 658.499311][ C0] [ 658.502243][ C0] __schedule+0x1b88/0x5240 [ 658.506767][ C0] ? preempt_schedule_irq+0xfe/0x1c0 [ 658.512071][ C0] ? __pfx___schedule+0x10/0x10 [ 658.516933][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 658.523080][ C0] ? kernel_text_address+0xa7/0xe0 [ 658.528185][ C0] ? __kernel_text_address+0xd/0x40 [ 658.533373][ C0] ? preempt_schedule_irq+0xf3/0x1c0 [ 658.538648][ C0] preempt_schedule_irq+0xfe/0x1c0 [ 658.543772][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 658.549488][ C0] irqentry_exit+0x5e/0x90 [ 658.553895][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 658.559869][ C0] RIP: 0010:lock_acquire+0x167/0x2f0 [ 658.565144][ C0] Code: c7 44 24 10 00 00 00 00 9c 8f 44 24 10 f7 44 24 10 00 02 00 00 0f 85 fd 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 65 48 8b 45 00 <48> 3b 44 24 38 0f 85 72 01 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e [ 658.584785][ C0] RSP: 0018:ffffc90003a0f3f8 EFLAGS: 00000206 [ 658.590853][ C0] RAX: 8e9bc7b4bb8e6900 RBX: ffffffff8ed3dfe0 RCX: 8e9bc7b4bb8e6900 [ 658.598922][ C0] RDX: 0000000000000000 RSI: ffffffff8e4fd4e5 RDI: ffffffff8ca1b660 [ 658.606909][ C0] RBP: ffffffff9368a020 R08: 0000000000000000 R09: 0000000000000000 [ 658.614872][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 658.622857][ C0] R13: 0000000000000002 R14: 0000000000000246 R15: 0000000000000000 [ 658.630831][ C0] ? __kasan_slab_alloc+0x23/0x80 [ 658.635849][ C0] ? kmem_cache_alloc_noprof+0x1e1/0x390 [ 658.641474][ C0] ? vm_area_dup+0x2b/0x5b0 [ 658.645994][ C0] ? copy_mm+0xc70/0x22c0 [ 658.650575][ C0] ? __update_page_owner_free_handle+0x2e/0x460 [ 658.656883][ C0] __update_page_owner_free_handle+0x4b/0x460 [ 658.662941][ C0] ? __update_page_owner_free_handle+0x2e/0x460 [ 658.669447][ C0] ? page_ext_put+0x97/0xc0 [ 658.673944][ C0] __reset_page_owner+0x89/0x1e0 [ 658.678872][ C0] __free_frozen_pages+0xde8/0x10a0 [ 658.684065][ C0] __put_partials+0x160/0x1c0 [ 658.688732][ C0] ? put_cpu_partial+0x14e/0x250 [ 658.693680][ C0] put_cpu_partial+0x17e/0x250 [ 658.698449][ C0] ? put_cpu_partial+0x72/0x250 [ 658.703321][ C0] __slab_free+0x294/0x390 [ 658.707784][ C0] ? __phys_addr+0xba/0x170 [ 658.712321][ C0] qlist_free_all+0x9a/0x140 [ 658.716933][ C0] kasan_quarantine_reduce+0x14f/0x170 [ 658.722412][ C0] __kasan_slab_alloc+0x23/0x80 [ 658.727280][ C0] kmem_cache_alloc_noprof+0x1e1/0x390 [ 658.732762][ C0] ? vm_area_dup+0x2b/0x5b0 [ 658.737280][ C0] vm_area_dup+0x2b/0x5b0 [ 658.741631][ C0] ? __vm_enough_memory+0x119/0x380 [ 658.746869][ C0] copy_mm+0xc70/0x22c0 [ 658.751054][ C0] ? __pfx_copy_mm+0x10/0x10 [ 658.755655][ C0] ? __init_rwsem+0x122/0x160 [ 658.760334][ C0] ? copy_signal+0x500/0x630 [ 658.764920][ C0] copy_process+0x17de/0x3d10 [ 658.769591][ C0] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 658.775660][ C0] ? copy_process+0xa07/0x3d10 [ 658.780420][ C0] ? __pfx_copy_process+0x10/0x10 [ 658.785436][ C0] ? sk_setsockopt+0xd10/0x3340 [ 658.790289][ C0] kernel_clone+0x242/0x930 [ 658.794786][ C0] ? __lock_acquire+0xad5/0xd80 [ 658.799720][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 658.804751][ C0] __x64_sys_clone+0x268/0x2e0 [ 658.809511][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 658.814802][ C0] ? do_syscall_64+0xb6/0x230 [ 658.819471][ C0] do_syscall_64+0xf3/0x230 [ 658.823966][ C0] ? clear_bhb_loop+0x45/0xa0 [ 658.828635][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.834522][ C0] RIP: 0033:0x7fbb2fbcaa12 [ 658.838933][ C0] RSP: 002b:00007ffc5396c768 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 658.847338][ C0] RAX: ffffffffffffffda RBX: 00005579689b1301 RCX: 00007fbb2fbcaa12 [ 658.855317][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 658.863300][ C0] RBP: 00007ffc5398ccd8 R08: 0000000000000000 R09: 00005579689b13a0 [ 658.871280][ C0] R10: 00007fbb2fb1aa10 R11: 0000000000000246 R12: 0000000000000000 [ 658.879268][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 00005579689b13d4 [ 658.887253][ C0] [ 658.890276][ C0] task:syz-executor state:R running task stack:26224 pid:10526 tgid:10526 ppid:5827 task_flags:0x400040 flags:0x00004002 [ 658.903773][ C0] Call Trace: [ 658.907067][ C0] [ 658.910020][ C0] __schedule+0x1b88/0x5240 [ 658.914534][ C0] ? do_syscall_64+0xf3/0x230 [ 658.919210][ C0] ? preempt_schedule_notrace+0x103/0x140 [ 658.924935][ C0] ? __pfx___schedule+0x10/0x10 [ 658.929777][ C0] ? stack_trace_save+0x11a/0x1d0 [ 658.934799][ C0] ? __lock_acquire+0xad5/0xd80 [ 658.939654][ C0] preempt_schedule_notrace+0x103/0x140 [ 658.945198][ C0] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 658.951263][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 658.956394][ C0] preempt_schedule_notrace_thunk+0x16/0x30 [ 658.962304][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 658.967417][ C0] rcu_is_watching+0x7e/0xb0 [ 658.972027][ C0] lock_release+0x4e/0x3e0 [ 658.976442][ C0] ? deref_stack_reg+0x17c/0x210 [ 658.981378][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 658.986482][ C0] unwind_next_frame+0x1a9f/0x23b0 [ 658.991589][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 658.996693][ C0] ? put_cpu_partial+0x17e/0x250 [ 659.001624][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 659.007770][ C0] arch_stack_walk+0x11e/0x150 [ 659.012545][ C0] ? __slab_free+0x294/0x390 [ 659.017126][ C0] stack_trace_save+0x11a/0x1d0 [ 659.021972][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 659.027337][ C0] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 659.033238][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 659.039558][ C0] save_stack+0xfc/0x1f0 [ 659.043793][ C0] ? __pfx_save_stack+0x10/0x10 [ 659.048650][ C0] ? __free_frozen_pages+0xde8/0x10a0 [ 659.054026][ C0] ? __put_partials+0x160/0x1c0 [ 659.058892][ C0] ? put_cpu_partial+0x17e/0x250 [ 659.063845][ C0] __reset_page_owner+0x76/0x1e0 [ 659.068774][ C0] __free_frozen_pages+0xde8/0x10a0 [ 659.073967][ C0] __put_partials+0x160/0x1c0 [ 659.078635][ C0] put_cpu_partial+0x17e/0x250 [ 659.083387][ C0] ? put_cpu_partial+0x72/0x250 [ 659.088238][ C0] __slab_free+0x294/0x390 [ 659.092648][ C0] ? __phys_addr+0xba/0x170 [ 659.097154][ C0] qlist_free_all+0x9a/0x140 [ 659.101737][ C0] kasan_quarantine_reduce+0x14f/0x170 [ 659.107625][ C0] __kasan_slab_alloc+0x23/0x80 [ 659.112469][ C0] kmem_cache_alloc_noprof+0x1e1/0x390 [ 659.117924][ C0] ? __anon_vma_prepare+0xc4/0x4a0 [ 659.123025][ C0] __anon_vma_prepare+0xc4/0x4a0 [ 659.127963][ C0] ? __kasan_slab_alloc+0x66/0x80 [ 659.132978][ C0] ? kmem_cache_alloc_noprof+0x1e1/0x390 [ 659.138599][ C0] ? __pmd_alloc+0x118/0x440 [ 659.143177][ C0] ? handle_mm_fault+0xf7a/0x1bf0 [ 659.148195][ C0] handle_pte_fault+0x518f/0x61c0 [ 659.153218][ C0] ? __pfx_handle_pte_fault+0x10/0x10 [ 659.158575][ C0] ? __lruvec_stat_mod_folio+0x7d/0x300 [ 659.164115][ C0] ? __lock_acquire+0xad5/0xd80 [ 659.168957][ C0] ? do_raw_spin_lock+0x151/0x370 [ 659.173977][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 659.179168][ C0] ? _raw_spin_unlock+0x28/0x50 [ 659.184008][ C0] ? __pmd_alloc+0x37f/0x440 [ 659.188591][ C0] ? __pfx___pmd_alloc+0x10/0x10 [ 659.193525][ C0] handle_mm_fault+0x1129/0x1bf0 [ 659.198470][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 659.203752][ C0] ? __pfx_find_vma+0x10/0x10 [ 659.208422][ C0] ? vma_is_secretmem+0xd/0x50 [ 659.213177][ C0] ? check_vma_flags+0x462/0x590 [ 659.218113][ C0] __get_user_pages+0x1adc/0x4180 [ 659.223163][ C0] ? __pfx___get_user_pages+0x10/0x10 [ 659.228533][ C0] ? down_read+0x813/0xa50 [ 659.232968][ C0] get_user_pages_remote+0x339/0xb70 [ 659.238267][ C0] ? __pfx_get_user_pages_remote+0x10/0x10 [ 659.244088][ C0] ? mmap_read_lock_maybe_expand+0xc5/0x3d0 [ 659.249989][ C0] get_arg_page+0x129/0x370 [ 659.254492][ C0] ? __pfx_get_arg_page+0x10/0x10 [ 659.259535][ C0] ? __might_fault+0xaa/0x120 [ 659.264215][ C0] copy_string_kernel+0x176/0x240 [ 659.269238][ C0] do_execveat_common+0x3fc/0x710 [ 659.274262][ C0] __x64_sys_execve+0x94/0xb0 [ 659.278940][ C0] do_syscall_64+0xf3/0x230 [ 659.283435][ C0] ? clear_bhb_loop+0x45/0xa0 [ 659.288103][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.294003][ C0] RIP: 0033:0x7f09757c0837 [ 659.298410][ C0] RSP: 002b:00007f0976558df8 EFLAGS: 00000202 ORIG_RAX: 000000000000003b [ 659.306815][ C0] RAX: ffffffffffffffda RBX: 00007fff4d7d0ef3 RCX: 00007f09757c0837 [ 659.314820][ C0] RDX: 00007fff4d7ce270 RSI: 00007fff4d7ce4b0 RDI: 00007fff4d7d0ef3 [ 659.322802][ C0] RBP: 00007f0976558e70 R08: 00007f0976558f20 R09: 0000000000000000 [ 659.330787][ C0] R10: 0000000000000008 R11: 0000000000000202 R12: 00007fff4d7ce4b0 [ 659.338762][ C0] R13: 00007fff4d7ce270 R14: 0000000000000000 R15: 0000000000000000 [ 659.346759][ C0] [ 659.349892][ C1] vkms_vblank_simulate: vblank timer overrun