last executing test programs: 54.374368641s ago: executing program 0 (id=1316): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TCFLSH(r0, 0x8926, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='erofs\x00', 0x0, &(0x7f0000590ffe)='v4') 54.272693414s ago: executing program 0 (id=1317): sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x14004085) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000a1ff000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 54.135335941s ago: executing program 0 (id=1318): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0x81, 0x43) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080088a84803", 0xffffffffffffff9b, 0x0, &(0x7f0000000140)={0x11, 0x16, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) 54.038628543s ago: executing program 0 (id=1319): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000100), 0x2, 0x40001) getdents64(r2, &(0x7f0000000500)=""/179, 0xb3) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000180)={0x10000, 0x8000, 0x2000000}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000077c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x40ceb152, 0x4, 0x40, 0x0, 0xc}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000009800)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="500100000000000000000000004602000000000000dfff00fdffffffffffffff0000000000000000000000000000000000000100020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000080000000000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="00000000fcffffff0000000000000000000000000000000000000000080000000200000067726f75705f6964030000000000000000000000000000000000000000000000730000000000000045070000a92400000100000000000000000000000000000000000000000000000000001000000000030000000000000000000000000000000000000000000000feffffff0010000004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000f40000000000000000000000000000000000000000000000080000002900000067726f75705f6964"], 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r7, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110a, 0x3}) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2236824, 0x0) r10 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = syz_pidfd_open(r10, 0x0) setns(r11, 0x24020000) mount(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x32e5c2a, 0x0) r12 = openat(r7, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_ro(r12, &(0x7f0000000040)='cpu.stat\x00', 0xf000, 0x0) 53.126610747s ago: executing program 0 (id=1321): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000140)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)={0x34, 0x5, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x20008010) setfsgid(0xee00) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r3, &(0x7f0000000100)='fd/3\x00') r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) open(&(0x7f00000001c0)='./file0\x00', 0x2, 0x10a) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x14, r4, 0x1, 0x0, 0x0, {{0x8}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 52.626090009s ago: executing program 0 (id=1326): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x22042, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x80, r1, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "376d54d103225225744ca986563c295707ef23cffaabb178"}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r2 = syz_open_dev$vim2m(&(0x7f0000000440), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x3, 0x2, 0x4}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001c40)=ANY=[@ANYBLOB="781100001100010000000000020000001d0000006411e3800800228004002b80080035"], 0x1178}, 0x1, 0x0, 0x0, 0x1}, 0x4) 52.211357626s ago: executing program 32 (id=1326): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x22042, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x80, r1, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "376d54d103225225744ca986563c295707ef23cffaabb178"}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r2 = syz_open_dev$vim2m(&(0x7f0000000440), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x3, 0x2, 0x4}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001c40)=ANY=[@ANYBLOB="781100001100010000000000020000001d0000006411e3800800228004002b80080035"], 0x1178}, 0x1, 0x0, 0x0, 0x1}, 0x4) 5.870785799s ago: executing program 2 (id=1646): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000070000000900010073797a30000000000900030073797a310000000068000000060a010400000000000000000100000008000b4000000000400004802800018007000100637400001c000280080001400000000108000240000000090500030000000000140001800a0001007265646972000000040002800900010073797a30"], 0xdc}, 0x1, 0x0, 0x0, 0x5090}, 0x4000000) 5.773194592s ago: executing program 2 (id=1648): sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x14004085) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200000000000000000000000000010000000000000088ffffff00000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 5.549061275s ago: executing program 2 (id=1652): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000080)) io_setup(0x0, &(0x7f0000000000)) 5.41380012s ago: executing program 2 (id=1654): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="410000000000000001000603000014000300060afc042f0300f006e8ffff00000001"], 0x44}, 0x1, 0x1000000}, 0x0) 5.33010082s ago: executing program 2 (id=1656): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000900)={0x1c, &(0x7f0000000a40)=ANY=[@ANYBLOB="00114f"], 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r7, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r7, &(0x7f0000007500)=[{{&(0x7f0000000300)=@llc={0x1a, 0x6, 0x0, 0x4, 0x8e}, 0x80, 0x0, 0x0, &(0x7f0000001f80)=[{0xd0, 0x10b, 0xfffffffb, "2835cfd358912dbda97144dd4b2c6f6f6b97b868e702780fba00dc9921ebed7861a13ae278a26eecd08e9279c0e5f3dcbe66b09598b25cdf00b2dc3e8483fa450836c77b31ecc22b4bd6cca133bd86cf14c16e7b06670621e2f615dfd8ff11ccf56eb6e1a4c9645b78c849ff1fbe54981b4111cb01291f79c9eaba8e1506e7eff10aeb19d4fdf4597bb0bba626a3f470de78d800ae3fd7cd4f5475e21c56c8832f79e472cb80d387f85cc01c4360c74a722cac54c987de10ea7ad6f4eb768e"}, {0x28, 0x116, 0x3, "e23308ac69e7d253af4b523201008091833cb74b9cbf2df6"}, {0x10, 0x107, 0x91e9}], 0x108}}, {{0x0, 0x0, 0x0}}], 0x2, 0x1) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="2503000003000000000008"], 0x14}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000240)={0x0, 0x13, 0x4, "efd055c6"}, 0x0, 0x0}) 4.050611475s ago: executing program 4 (id=1661): open_by_handle_at(0xffffffffffffffff, 0x0, 0x8000) mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, 0x0) r0 = socket(0x11, 0x800000003, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x5, 0x97, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0x4, 0x10, 0x25, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x8}, [@processing_unit={0x8, 0x24, 0x7, 0x1, 0x6, 0x2, "a0"}, @mixer_unit={0x6, 0x24, 0x4, 0x4, 0x10, "c3"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x4, 0xd, 0x1, {0x7, 0x25, 0x1, 0x80, 0x3, 0x3ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xf, 0x1, 0x5, 0x3, "7dc855bd84f1d971c7"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x8, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x7f, 0x0, 0x6, {0x7, 0x25, 0x1, 0x1, 0x1, 0x85e}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d39"]) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x10, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x9b090b, 0x0, '\x00', @p_u8=&(0x7f0000000080)}}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x5, 0x3a, '', 0x3a, '}!^-', 0x3a, './file0'}, 0x2b) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) r4 = fcntl$dupfd(r2, 0x0, r2) ioctl$TCFLSH(r4, 0x400455c8, 0x2) ioctl$TIOCSETD(r4, 0x5412, &(0x7f00000003c0)=0xffffffc0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f00000000c0)={0x1, 0x200075, 0x200000000}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000200)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f0000000040)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r7, 0x0, 0x0, 0x1f5, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000008dfff00"}}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, 0x10, r0, 0x59a40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b29, &(0x7f0000000000)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) 3.161267783s ago: executing program 3 (id=1665): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0xfffffff3, 0xbffc, 0xee52, 0x2, 0x10, 0x20008, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x5, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) 3.030794129s ago: executing program 3 (id=1666): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000090000000900010073797a30000000000900030073797a310000000068000000060a010400000000000000000100000008000b4000000000400004802800018007000100637400001c000280080001400000000108000240000000090500030000000000140001800a0001007265646972000000040002800900010073797a30"], 0xdc}, 0x1, 0x0, 0x0, 0x5090}, 0x4000000) 2.920267497s ago: executing program 3 (id=1667): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000340)={0x0, &(0x7f0000000280)=[@rdmsr={0x32, 0x18, {0x282}}], 0x18}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000100)=ANY=[@ANYRES32=r3], 0x2cc}, 0x1, 0x0, 0x0, 0x4a000}, 0x4048001) sendmsg$IPSET_CMD_GET_BYINDEX(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x101010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0xf, 0x6, 0x0, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008011}, 0x20040114) 2.749074254s ago: executing program 3 (id=1668): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) syz_usb_disconnect(r0) r1 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x2c02) syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x2c02) close(r1) r2 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) syz_usb_connect$cdc_ecm(0x3, 0x7f, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x1, 0x1, 0x1, 0x60, 0x2, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x2, 0x6, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x0, "fe97ff46afd4"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x5400, 0xd, 0x6, 0x3}, [@network_terminal={0x7, 0x24, 0xa, 0x3, 0x5, 0x6, 0x5}, @dmm={0x7, 0x24, 0x14, 0x0, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0xd, 0x9}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0xf4}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x5, 0xf}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0xe7}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x1, 0xd1, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x7f}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x3, 0xb5, 0x3, 0x8, 0x2}, 0x43, &(0x7f0000000400)=ANY=[@ANYBLOB="050f43000414100a00620000008f084dfe00c0fe010fc0ab00e7d82236f56f452d34ebf6da00000710021c95001020100a01250100000000fbff0fc00000f000ff00800100000f0000000000000003100b"], 0x3, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x459}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x81d}}, {0x86, &(0x7f0000000240)=@string={0x86, 0x3, "3a2ba6833afed5a73fe5ee2561c462de0e3ae9bac74f31c7ff901867f18b3de91cb89e50ec02da1f57c4c9387975c7f12ef939badda7c6ca5c33073a6a52666115eb4a0dcb4367ca07b417e3d91564836d61ef04cdcfbcf7346ec247369959e21ac08edb91857f61dfe1f7678d1e7b18907efa14cb50f299506a050df637808652be6f6f"}}]}) r3 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) r4 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) preadv(r5, &(0x7f00000023c0)=[{&(0x7f0000000240)=""/106, 0x6a}], 0x1, 0xfffffffc, 0x1) close_range(r2, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 2.506853168s ago: executing program 4 (id=1669): sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x14004085) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000008fffffff00000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 2.360269606s ago: executing program 4 (id=1672): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0x81, 0x43) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wg1\x00'}) sendto$packet(r0, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080088a84803", 0x1a, 0x0, 0x0, 0x0) 2.258819082s ago: executing program 4 (id=1674): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0xfffffff3, 0xbffc, 0xee52, 0x2, 0x10, 0x20008, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x5, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) 2.086809198s ago: executing program 4 (id=1676): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x441, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xe64, 0x5, 0x10, "0062ba7d82000000000000000000f7ffffff00"}) (async) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) 2.002808154s ago: executing program 2 (id=1678): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2481000}, 0xc, &(0x7f0000000480)={&(0x7f0000000c00)={0xd0, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_MASTER={0x94, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x23}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6b05}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz1\x00'}, @CTA_EXPECT_ZONE={0x0, 0x7, 0x1, 0x0, 0x2}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 1.665404323s ago: executing program 1 (id=1680): syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000440)=@ethtool_regs={0x4, 0x0, 0x1e, "f42a637b0000dda5b89a02db8deea00b06ee73e9da31e2faa7a8c0133206"}}) r1 = open(&(0x7f0000000040)='./bus\x00', 0x240, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'veth0_to_bond\x00', &(0x7f0000000140)=@ethtool_pauseparam={0x12, 0x7, 0x100007, 0x7}}) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r1], 0x2b) getsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000040)=0x7, &(0x7f0000000080)=0x1) r4 = syz_open_dev$video4linux(&(0x7f0000001380), 0x800000000005, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000003640)={r7, 0x56}, &(0x7f0000003680)=0x8) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f00000000c0)=0x2) ioctl$VIDIOC_SUBDEV_G_SELECTION(r4, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3001}) 1.386769577s ago: executing program 1 (id=1681): sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x14004085) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200000000000000000000000000010000000000000090ffffff00000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 1.381463558s ago: executing program 4 (id=1682): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904", @ANYRES16], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x40, 0xa0, 0x10, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x2, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x2, 0x3, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x3, 0x2, 0x4e}}]}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x7f, 0x3, 0xa, 0xff, 0x6}, 0xe0, &(0x7f00000005c0)={0x5, 0xf, 0xe0, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x1e, 0x0, 0x1, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x4, 0x4, 0x7fe}, @generic={0xcd, 0x10, 0x2, "99f6a1a256a2c1499724f1093d17a113eede9c118ddebb71bf88a501a549de63dc2938a785e3ca0fe55c90816396761d095d9a66316f93bab81a488bb140ca114e77c7d0efc68f6588c13e6d6f356a44fa3f3cd2b0cb38dc4a3f77e3ed1a3ef5def7e4c5a0eda2fb02d7fa1135fad3169115560c762278fb031927014597d47c5e8a2ec2572f5b9bf99eb6cedeedac477a7180e26e4bc1affb3c088c4c4b38a28f03fb4fe2a3194ecd4e9efa3ea578f3a289fb1d3e92484d62f99c403d790088f8bc0849af24eabfd755"}]}, 0x1, [{0x8c, &(0x7f0000000400)=ANY=[@ANYBLOB="8c03cb8c4e455aa2012377a2baa696d5dcb304cdfb749d08bf4fdccd561588524b966374e3135ef29b7f6b7745b22c90da8e67fe81c5e24b6896468dd21fd848336a4fcffcb8e0c722dad1bebccea8c467feb96d926fc69bdb491e472bb6b753a50aa016eb94340adf5211b363a2d6c7ef4cd54e934b86e08bdf9916860d3fd4632b10b31619ac1b5c778ddd95c6addb80d53bf0980ecc0be2ae3641ac9a9ac15736a0d66d9c874e1032c31e7053355ca36399e22fdbae0d4b929c61568ff2727b"]}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, &(0x7f0000000240)=ANY=[@ANYBLOB="a01302"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, 0x0, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x88) fchdir(r3) ioctl$HIDIOCGCOLLECTIONINFO(r3, 0xc0104811, &(0x7f0000000200)={0x6, 0xffffffff, 0x44, 0x3}) syz_usb_control_io(r0, 0x0, &(0x7f0000002440)={0x84, &(0x7f0000001f80)={0x20, 0x3, 0x11, "3904f6625fe4aa9a0a6f592ac28b74b171"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.060036819s ago: executing program 1 (id=1683): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="410000000000000001000603000014000300060afc042f0300f006e8ffff00000001080007003a3a"], 0x44}, 0x1, 0x1000000}, 0x0) 833.899394ms ago: executing program 1 (id=1684): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0xfffffff3, 0xbffc, 0xee52, 0x2, 0x10, 0x20008, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x5, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) 530.597904ms ago: executing program 1 (id=1685): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) recvmmsg(r0, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x45ff1503}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)=""/183, 0xb7}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000000000)=""/62, 0x3e}, {&(0x7f00000018c0)=""/4104, 0x1008}, {&(0x7f0000000340)=""/75, 0x4b}, {&(0x7f0000000500)=""/224, 0xe0}], 0x6}, 0x3}], 0x4, 0x4022, 0x0) (async) r1 = syz_usbip_server_init(0x4) write$usbip_server(r1, &(0x7f0000000000)=@ret_unlink={{0x4, 0x0, 0x0, 0x0, 0xfffffffe}, {0x481ff02b}}, 0x30) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r3 = syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100008d1e502039102021a702010203010902120001000b2c1b31f8681bb1cfffc00009047df600e4409806"], 0x0) (async) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000100)={r5, 0x3, r2, 0x7}) syz_usb_disconnect(r3) (async) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)={{0x12, 0x1, 0x0, 0xe2, 0x79, 0x3b, 0x10, 0x5d1, 0x2001, 0x900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x2f, 0x9c}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) 318.246782ms ago: executing program 1 (id=1686): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x6a, 0x0, 0x2, 0x54, 0x9, 0x1a}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, &(0x7f0000002a80)=ANY=[], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x3, 0xf, 0x0, 0xf, 0x5, 0x9}}}, &(0x7f00000029c0)={0x84, 0x0, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x10, 0x20}}, 0x0, &(0x7f0000000700)={0x40, 0x9, 0x1, 0x70}, 0x0, 0x0, 0x0, &(0x7f0000002840)={0x40, 0x17, 0x6, @local}, &(0x7f0000002880)={0x40, 0x19, 0x2, "a5ff"}, 0x0, &(0x7f0000002900)={0x40, 0x1c, 0x1}, &(0x7f0000002940)={0x40, 0x1e, 0x1, 0xf9}, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) recvmmsg$unix(r1, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004740)=""/199, 0xc7}, {&(0x7f0000004840)=""/220, 0xdc}, {&(0x7f0000000340)=""/268, 0x10c}, {&(0x7f0000004a40)=""/159, 0x9f}, {&(0x7f0000004c00)=""/4096, 0x1000}], 0x5}}], 0x1, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0) write(r1, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r2, 0x89e0, &(0x7f0000000480)={'wg2\x00', 0x3c, 0x6}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000080)=0x81, 0x43) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080088a84803", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x16, r5, 0x1, 0x0, 0x6, @random="e31760a93800"}, 0x14) 134.689165ms ago: executing program 3 (id=1687): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0x81, 0x43) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080088a84803", 0xffffffffffffff9b, 0x0, &(0x7f0000000140)={0x11, 0x16, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 0s ago: executing program 3 (id=1688): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix_mp={0x6dc, 0xdaf1, 0x41416770, 0x2, 0x5, [{0x1, 0x1}, {0x3, 0xa}, {0x4, 0x4000200}, {0xc061, 0x5}, {0xfffffff8, 0x1}, {0x1}, {0x4, 0x8}, {0x3, 0x400}], 0x0, 0x9b, 0x0, 0x0, 0x5}}) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0000, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000240)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e21, 0x0, @mcast1, 0x300000}}, [0x5, 0xfffffffffffffff9, 0x1, 0xffffffffffffaad2, 0x2, 0x9d7, 0x14b4b143, 0xc45, 0x7, 0x9, 0x3ff, 0x9, 0x2, 0x7fffffff, 0x80]}, &(0x7f0000000280)=0x100) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000003c0)={r5, 0x7b, "4ff35e3f691ed4efa99ff74ace9f9f364bc1fcdddcde31b549486bc025f677289a0d589a236c5d898197ff3b2640209c943c46605a8c78845287e41b2927ced56d1b2f65c02042f51967907a68a730f5b702521e124ee6daa02267dbbb5c2f5423f02235217d5e86610ffb7dea9479eb2d69b40487fa80716750d0"}, &(0x7f00000002c0)=0x83) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, r3, 0x509, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x4044000) r6 = socket(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300050018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x2f, 0xf8, 0x1, 0x200, 0x42, @empty, @private0, 0x8000, 0x20, 0x4239}}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="2c00000011000100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="12000000", @ANYRES32, @ANYBLOB="0a001b", @ANYRES64], 0x2c}], 0x45}, 0x40) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/consoles\x00', 0x0, 0x0) (async) r10 = timerfd_create(0x0, 0x0) timerfd_settime(r10, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r11 = dup2(r9, r10) read$FUSE(r11, &(0x7f0000004d80)={0x2020}, 0x2020) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b34, &(0x7f0000000000)={'wlan0\x00'}) (async) setsockopt$MRT_DEL_VIF(r6, 0x0, 0xcb, &(0x7f0000000180)={0x1, 0x8, 0xa3, 0x24, @vifc_lcl_ifindex=r7, @private=0xa010100}, 0x10) (async) r12 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0), 0xfffffffffffffead}], 0x1}, 0x20000000) kernel console output (not intermixed with test programs): mmy_hcd [ 338.427780][ T44] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 338.500682][ T5836] usb 1-1: Using ep0 maxpacket: 16 [ 338.517324][ T5836] usb 1-1: config 0 has an invalid interface number: 180 but max is 0 [ 338.531206][ T5836] usb 1-1: config 0 has no interface number 0 [ 338.541195][ T5836] usb 1-1: New USB device found, idVendor=0421, idProduct=0114, bcdDevice=11.72 [ 338.561935][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.583670][ T5836] usb 1-1: Product: syz [ 338.589706][ T5836] usb 1-1: Manufacturer: syz [ 338.590440][ T44] usb 2-1: device descriptor read/64, error -71 [ 338.601770][ T5836] usb 1-1: SerialNumber: syz [ 338.644434][ T5836] usb 1-1: config 0 descriptor?? [ 338.665956][ T5836] usb 1-1: bad CDC descriptors [ 338.680689][T10097] sctp: [Deprecated]: syz.2.1230 (pid 10097) Use of int in max_burst socket option deprecated. [ 338.680689][T10097] Use struct sctp_assoc_value instead [ 338.700917][T10098] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 338.725889][ T44] usb usb2-port1: attempt power cycle [ 338.757300][ T3098] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 338.879993][T10073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.889105][T10073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.899522][ T5914] usb 1-1: USB disconnect, device number 18 [ 338.933674][ T3098] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 338.945014][ T3098] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.954459][ T3098] usb 4-1: Product: syz [ 338.958675][ T3098] usb 4-1: Manufacturer: syz [ 338.963427][ T3098] usb 4-1: SerialNumber: syz [ 338.976968][ T3098] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 338.996059][ T5935] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 339.089030][ T44] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 339.110807][ T44] usb 2-1: device descriptor read/8, error -71 [ 339.377617][ T44] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 339.399742][ T44] usb 2-1: device descriptor read/8, error -71 [ 339.428546][T10087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.438684][T10087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.476233][ T5914] usb 4-1: USB disconnect, device number 116 [ 339.516832][ T44] usb usb2-port1: unable to enumerate USB device [ 340.106071][ T5935] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 340.115834][T10105] cgroup: name respecified [ 340.123322][ T5935] ath9k_htc: Failed to initialize the device [ 340.145369][ T5914] usb 4-1: ath9k_htc: USB layer deinitialized [ 340.549736][T10120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1236'. [ 340.810543][ T5836] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 340.970886][ T5836] usb 1-1: Using ep0 maxpacket: 16 [ 340.981058][ T5836] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 340.992063][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.028113][ T5836] usb 1-1: config 0 descriptor?? [ 341.059849][ T5836] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 341.236106][T10135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.246995][T10135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.419978][ T6634] usb 4-1: new low-speed USB device number 117 using dummy_hcd [ 341.441383][ T5935] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 341.474007][ T5836] gspca_sonixj: reg_r err -71 [ 341.479120][ T5836] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 341.490013][ T5836] usb 1-1: USB disconnect, device number 19 [ 341.582421][ T6634] usb 4-1: Invalid ep0 maxpacket: 64 [ 341.623186][ T5935] usb 2-1: Using ep0 maxpacket: 32 [ 341.632787][ T5935] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 341.641949][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.650071][ T5935] usb 2-1: Product: syz [ 341.654265][ T5935] usb 2-1: Manufacturer: syz [ 341.658998][ T5935] usb 2-1: SerialNumber: syz [ 341.666698][ T5935] usb 2-1: config 0 descriptor?? [ 341.730284][ T6634] usb 4-1: new low-speed USB device number 118 using dummy_hcd [ 341.855876][T10137] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1242'. [ 341.901216][ T6634] usb 4-1: Invalid ep0 maxpacket: 64 [ 341.925260][ T6634] usb usb4-port1: attempt power cycle [ 341.965094][T10142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.975123][T10142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.307647][ T6634] usb 4-1: new low-speed USB device number 119 using dummy_hcd [ 342.329810][ T6634] usb 4-1: Invalid ep0 maxpacket: 64 [ 342.386282][ T5935] peak_usb 2-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 342.396437][ T5935] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 342.403332][ T5935] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 342.478249][ T5935] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -22 [ 342.490289][ T6634] usb 4-1: new low-speed USB device number 120 using dummy_hcd [ 342.543390][ T6634] usb 4-1: Invalid ep0 maxpacket: 64 [ 342.577098][ T6634] usb usb4-port1: unable to enumerate USB device [ 342.611538][ T6634] usb 2-1: USB disconnect, device number 11 [ 342.706446][T10159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.725509][T10159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.738570][T10159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.752990][T10159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.893731][T10169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.905812][T10169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.473600][ T5935] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 343.574370][T10179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.584632][T10179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.667508][ T5935] usb 2-1: config 9 has an invalid interface number: 1 but max is 0 [ 343.675636][ T5935] usb 2-1: config 9 has no interface number 0 [ 343.681996][ T5935] usb 2-1: config 9 interface 1 has no altsetting 0 [ 343.691947][ T5935] usb 2-1: string descriptor 0 read error: -22 [ 343.698722][ T5935] usb 2-1: New USB device found, idVendor=2040, idProduct=b140, bcdDevice=75.36 [ 343.707839][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.731517][ T5935] cx231xx 2-1:9.1: New device @ 1.5 Mbps (2040:b140) with 1 interfaces [ 343.740041][ T5935] cx231xx 2-1:9.1: Not found matching IAD interface [ 343.981213][T10186] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1255'. [ 344.132766][T10191] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1257'. [ 344.134092][T10192] netlink: 'syz.0.1257': attribute type 11 has an invalid length. [ 344.151690][T10192] netlink: 'syz.0.1257': attribute type 11 has an invalid length. [ 344.160682][T10192] netlink: 'syz.0.1257': attribute type 11 has an invalid length. [ 344.169843][T10192] netlink: 'syz.0.1257': attribute type 11 has an invalid length. [ 344.178397][T10192] netlink: 'syz.0.1257': attribute type 11 has an invalid length. [ 344.189242][T10192] netlink: 'syz.0.1257': attribute type 11 has an invalid length. [ 344.198940][T10192] netlink: 'syz.0.1257': attribute type 11 has an invalid length. [ 344.209472][T10192] netlink: 'syz.0.1257': attribute type 11 has an invalid length. [ 344.244128][T10192] netlink: 'syz.0.1257': attribute type 11 has an invalid length. [ 344.252765][T10192] netlink: 'syz.0.1257': attribute type 11 has an invalid length. [ 344.397137][ T5836] usb 2-1: USB disconnect, device number 12 [ 345.069116][T10231] openvswitch: netlink: Key 4 has unexpected len 4 expected 12 [ 345.119448][T10231] net veth1_virt_wifi : renamed from virt_wifi0 [ 345.174262][ T5935] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 345.323607][ T5935] usb 4-1: device descriptor read/64, error -71 [ 345.355410][T10240] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 345.362076][T10240] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 345.403039][T10240] vhci_hcd vhci_hcd.0: Device attached [ 345.443497][T10240] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(8) [ 345.450083][T10240] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 345.490992][T10255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.501129][T10240] vhci_hcd vhci_hcd.0: Device attached [ 345.502030][T10255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.522776][T10249] vhci_hcd: connection closed [ 345.523165][T10246] vhci_hcd: connection closed [ 345.532054][T10255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.539575][ T8769] vhci_hcd: stop threads [ 345.546823][T10255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.559500][ T8769] vhci_hcd: release socket [ 345.565522][ T8769] vhci_hcd: disconnect device [ 345.572650][ T8769] vhci_hcd: stop threads [ 345.577206][ T8769] vhci_hcd: release socket [ 345.583094][ T5935] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 345.591399][ T8769] vhci_hcd: disconnect device [ 345.601536][ T1211] vhci_hcd: vhci_device speed not set [ 345.677214][T10255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.686360][T10255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.730990][ T5935] usb 4-1: device descriptor read/64, error -71 [ 345.781523][T10259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.791218][T10259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.851084][ T5935] usb usb4-port1: attempt power cycle [ 345.922980][ T44] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 346.103967][ T44] usb 1-1: Using ep0 maxpacket: 16 [ 346.116900][ T44] usb 1-1: config index 0 descriptor too short (expected 55, got 27) [ 346.125066][ T44] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 92, changing to 10 [ 346.158243][ T44] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 18374, setting to 1024 [ 346.190363][ T44] usb 1-1: config 0 interface 0 has no altsetting 0 [ 346.204089][ T44] usb 1-1: New USB device found, idVendor=15f6, idProduct=0041, bcdDevice=1f.20 [ 346.216362][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.224782][ T5935] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 346.236008][ T44] usb 1-1: Product: syz [ 346.240225][ T44] usb 1-1: Manufacturer: syz [ 346.245046][ T44] usb 1-1: SerialNumber: syz [ 346.252887][ T44] usb 1-1: config 0 descriptor?? [ 346.259408][ T5935] usb 4-1: device descriptor read/8, error -71 [ 346.266663][T10258] raw-gadget.6 gadget.0: fail, usb_ep_enable returned -22 [ 346.499626][ T3098] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 346.520057][ T44] usb 1-1: USB disconnect, device number 20 [ 346.529529][ T5935] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 346.565056][ T5935] usb 4-1: device descriptor read/8, error -71 [ 346.649458][ T3098] usb 2-1: device descriptor read/64, error -71 [ 346.692974][ T5935] usb usb4-port1: unable to enumerate USB device [ 346.729713][T10266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.738850][T10266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.907170][ T3098] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 347.044958][ T3098] usb 2-1: device descriptor read/64, error -71 [ 347.162911][ T3098] usb usb2-port1: attempt power cycle [ 347.526178][ T3098] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 347.548205][ T3098] usb 2-1: device descriptor read/8, error -71 [ 347.804213][ T3098] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 347.836968][ T3098] usb 2-1: device descriptor read/8, error -71 [ 347.966444][ T3098] usb usb2-port1: unable to enumerate USB device [ 348.309722][T10279] ceph: Unknown parameter 'b6VMʞhA{Ι&63' [ 348.464173][T10287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.497713][T10287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.541483][T10287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.562609][T10287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.178084][T10291] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1288'. [ 349.187741][T10291] openvswitch: netlink: Flow key attr not present in new flow. [ 349.521484][T10307] EXT4-fs (loop3): unable to read superblock [ 349.849796][T10320] netlink: 'syz.1.1298': attribute type 10 has an invalid length. [ 349.863593][T10320] wlan1: mtu less than device minimum [ 349.872187][T10320] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 349.884229][T10324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.899682][T10324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.909478][T10325] netlink: 'syz.0.1300': attribute type 1 has an invalid length. [ 349.920633][T10325] netlink: 'syz.0.1300': attribute type 3 has an invalid length. [ 349.927963][T10320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.929226][T10325] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1300'. [ 350.066548][ T5836] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 350.285388][ T5836] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.311623][ T5836] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 350.323661][ T5836] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 350.333117][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 350.342357][ T5836] usb 4-1: SerialNumber: syz [ 350.349399][ T44] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 350.505286][ T44] usb 2-1: device descriptor read/64, error -71 [ 350.558289][T10350] afs: Bad value for 'flock' [ 350.573914][ T3098] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 350.579550][ T5836] usb 4-1: 0:2 : does not exist [ 350.635215][ T5836] usb 4-1: USB disconnect, device number 125 [ 350.713717][ T6537] udevd[6537]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 350.747682][ T3098] usb 1-1: Using ep0 maxpacket: 16 [ 350.758436][ T3098] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.769293][ T3098] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 350.783441][ T3098] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 350.792898][ T44] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 350.803366][ T3098] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.813517][ T3098] usb 1-1: Product: syz [ 350.817722][ T3098] usb 1-1: Manufacturer: syz [ 350.822713][ T3098] usb 1-1: SerialNumber: syz [ 350.948303][ T44] usb 2-1: device descriptor read/64, error -71 [ 350.985699][T10361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.997213][T10361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.051829][T10348] nbd: couldn't find a device at index 0 [ 351.061705][ T3098] usb 1-1: 0:2 : does not exist [ 351.067354][ T44] usb usb2-port1: attempt power cycle [ 351.078793][ T3098] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 351.105932][ T3098] usb 1-1: USB disconnect, device number 21 [ 351.153775][ T6537] udevd[6537]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 351.450862][ T44] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 351.472304][ T5934] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 351.481247][ T44] usb 2-1: device descriptor read/8, error -71 [ 351.643401][ T5934] usb 4-1: Using ep0 maxpacket: 16 [ 351.658286][ T5934] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 351.669872][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.672356][T10367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.680778][ T5934] usb 4-1: Product: syz [ 351.692126][ T5934] usb 4-1: Manufacturer: syz [ 351.697065][ T5934] usb 4-1: SerialNumber: syz [ 351.698958][T10367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.714799][ T5934] usb 4-1: config 0 descriptor?? [ 351.723819][ T5934] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 351.739920][ T44] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 351.783241][ T44] usb 2-1: device descriptor read/8, error -71 [ 351.902029][ T44] usb usb2-port1: unable to enumerate USB device [ 352.376274][T10383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.388589][T10383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.393464][T10384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.408765][T10384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.469669][T10383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.480767][T10383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.034289][ T5934] usb 4-1: Quatech SSU-100 USB to Serial Driver converter now attached to ttyUSB0 [ 353.353318][T10388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.378695][T10388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.405506][T10388] netlink: 'syz.2.1322': attribute type 10 has an invalid length. [ 353.422523][T10388] macvlan0: entered promiscuous mode [ 353.438897][T10388] macvlan0: entered allmulticast mode [ 353.566777][T10388] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1322'. [ 353.584376][ T1094] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.743793][ T1094] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.861351][ T1094] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.931786][ T5934] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 354.002309][ T1094] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.116701][ T5934] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 354.145630][ T5934] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 354.180983][ T5934] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 354.213010][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 354.221830][ T5934] usb 2-1: SerialNumber: syz [ 354.509516][ T1211] usb 4-1: USB disconnect, device number 126 [ 354.531869][ T1211] ssu100 ttyUSB0: Quatech SSU-100 USB to Serial Driver converter now disconnected from ttyUSB0 [ 354.590880][ T1211] ssu100 4-1:0.0: device disconnected [ 354.937995][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 354.957255][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 354.967271][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 354.977852][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 354.986294][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 355.800776][ T1094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.839686][ T1094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.851748][ T1094] bond0 (unregistering): Released all slaves [ 355.890131][ T5934] usb 2-1: 0:2 : does not exist [ 355.988044][ T5934] usb 2-1: USB disconnect, device number 21 [ 356.043943][ T1094] tipc: Left network mode [ 356.058502][ T6537] udevd[6537]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 356.883378][ T5934] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 357.054394][ T5934] usb 2-1: Using ep0 maxpacket: 32 [ 357.066466][ T5934] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 357.074754][ T5934] usb 2-1: config 0 has no interface number 0 [ 357.088304][ T5934] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 357.105817][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.121171][ T5934] usb 2-1: Product: syz [ 357.125394][ T5934] usb 2-1: Manufacturer: syz [ 357.140121][ T5934] usb 2-1: SerialNumber: syz [ 357.204135][ T5846] Bluetooth: hci0: command tx timeout [ 357.212726][ T5934] usb 2-1: config 0 descriptor?? [ 357.245951][ T5934] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 357.282271][ T5934] usb 2-1: selecting invalid altsetting 1 [ 357.306900][ T5934] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 357.340389][ T5934] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 357.352306][ T5934] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 357.361292][ T5934] usb 2-1: media controller created [ 357.391692][ T5934] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 357.681685][ T5934] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 357.803143][ T5935] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 357.834284][ T5934] usb 2-1: USB disconnect, device number 22 [ 357.918508][ T1094] hsr_slave_0: left promiscuous mode [ 357.935576][ T1094] hsr_slave_1: left promiscuous mode [ 357.953245][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.960744][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.976027][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.983484][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.985662][ T5935] usb 4-1: Using ep0 maxpacket: 8 [ 357.998515][ T5935] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 358.009504][ T5935] usb 4-1: config 0 has no interface number 0 [ 358.015738][ T5935] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 358.027332][ T5935] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 358.034507][ T1094] veth1_macvtap: left promiscuous mode [ 358.043404][ T5935] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 358.057909][ T5935] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 358.060784][ T1094] veth0_macvtap: left promiscuous mode [ 358.071747][ T5935] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 358.083200][ T1094] veth1_vlan: left promiscuous mode [ 358.086501][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.100439][ T1094] veth0_vlan: left promiscuous mode [ 358.105883][ T5935] usb 4-1: config 0 descriptor?? [ 358.125682][ T5935] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 358.808200][ T5935] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 358.896387][ T1094] team0 (unregistering): Port device team_slave_1 removed [ 358.954317][ T1094] team0 (unregistering): Port device team_slave_0 removed [ 358.981847][ T5935] usb 2-1: Using ep0 maxpacket: 16 [ 358.989251][ T5935] usb 2-1: config 1 has an invalid interface number: 4 but max is 2 [ 359.003654][ T5935] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 359.016568][ T5935] usb 2-1: config 1 has no interface number 1 [ 359.022827][ T5935] usb 2-1: too many endpoints for config 1 interface 4 altsetting 0: 102, using maximum allowed: 30 [ 359.033851][ T5935] usb 2-1: config 1 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 102 [ 359.047004][ T5935] usb 2-1: too many endpoints for config 1 interface 2 altsetting 255: 255, using maximum allowed: 30 [ 359.058079][ T5935] usb 2-1: config 1 interface 2 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 359.072206][ T5935] usb 2-1: config 1 interface 2 has no altsetting 0 [ 359.081484][ T5935] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.53 [ 359.095084][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.103893][ T5935] usb 2-1: Product: syz [ 359.108184][ T5935] usb 2-1: Manufacturer: syz [ 359.112959][ T5935] usb 2-1: SerialNumber: syz [ 359.356589][T10479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.368436][T10479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.439368][ T5846] Bluetooth: hci0: command tx timeout [ 359.595912][ T1211] usb 4-1: USB disconnect, device number 127 [ 359.638069][ T1211] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 359.712173][T10413] chnl_net:caif_netlink_parms(): no params data found [ 359.824307][ T5935] usb 2-1: USB disconnect, device number 23 [ 360.098553][T10413] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.114997][T10413] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.122551][T10413] bridge_slave_0: entered allmulticast mode [ 360.131764][T10413] bridge_slave_0: entered promiscuous mode [ 360.147492][T10413] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.158802][T10413] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.178558][T10413] bridge_slave_1: entered allmulticast mode [ 360.193192][T10413] bridge_slave_1: entered promiscuous mode [ 360.270270][T10413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.285412][T10413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.334596][T10413] team0: Port device team_slave_0 added [ 360.346012][T10413] team0: Port device team_slave_1 added [ 360.469975][T10413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.500941][T10413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.522546][T10503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.533397][T10413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.549570][T10413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.556986][T10413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.584937][T10413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.606466][T10503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.709853][T10413] hsr_slave_0: entered promiscuous mode [ 360.721425][T10413] hsr_slave_1: entered promiscuous mode [ 360.729439][T10413] debugfs: 'hsr0' already exists in 'hsr' [ 360.736687][T10413] Cannot create hsr debugfs directory [ 360.754767][ T5935] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 360.925904][ T5935] usb 4-1: Using ep0 maxpacket: 16 [ 360.945187][ T5935] usb 4-1: config 1 has an invalid interface number: 4 but max is 2 [ 360.953645][ T5935] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 360.983110][ T5935] usb 4-1: config 1 has no interface number 1 [ 360.997136][ T5935] usb 4-1: too many endpoints for config 1 interface 4 altsetting 0: 102, using maximum allowed: 30 [ 361.021858][ T5935] usb 4-1: config 1 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 102 [ 361.050480][ T5935] usb 4-1: too many endpoints for config 1 interface 2 altsetting 255: 255, using maximum allowed: 30 [ 361.067310][T10413] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 361.078496][ T5935] usb 4-1: config 1 interface 2 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 361.094349][ T5935] usb 4-1: config 1 interface 2 has no altsetting 0 [ 361.106584][T10413] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 361.119896][ T5935] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.53 [ 361.129883][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.137965][ T5935] usb 4-1: Product: syz [ 361.148710][T10413] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 361.156469][ T5935] usb 4-1: Manufacturer: syz [ 361.161991][ T5935] usb 4-1: SerialNumber: syz [ 361.174989][T10413] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 361.414290][T10502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.458051][T10502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.543439][T10413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.636783][T10413] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.645429][ T5935] usb 4-1: USB disconnect, device number 2 [ 361.654877][ T5846] Bluetooth: hci0: command tx timeout [ 361.704707][ T8769] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.711987][ T8769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.785499][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.792824][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.291501][T10549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.314509][T10549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.408395][T10413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.561718][ T44] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 362.732811][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 362.745391][ T44] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 362.759957][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.769501][ T44] usb 4-1: Product: syz [ 362.773841][ T44] usb 4-1: Manufacturer: syz [ 362.781498][ T44] usb 4-1: SerialNumber: syz [ 362.790776][ T44] usb 4-1: config 0 descriptor?? [ 362.809737][ T44] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 362.810055][T10413] veth0_vlan: entered promiscuous mode [ 362.833948][T10413] veth1_vlan: entered promiscuous mode [ 362.882295][T10413] veth0_macvtap: entered promiscuous mode [ 362.895356][T10413] veth1_macvtap: entered promiscuous mode [ 362.926473][T10413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.943695][T10413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.972488][ T1115] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.994115][ T1115] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.003710][ T1115] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.014421][ T1115] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.092475][ T2973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.102204][ T2973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.149139][ T2973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.159195][ T2973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.296524][T10566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.309486][T10566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.663386][ T5934] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 363.825527][ T5934] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 363.837044][ T5934] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 363.848734][ T5934] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 363.857933][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 363.865988][ T5934] usb 5-1: SerialNumber: syz [ 363.877287][ T5846] Bluetooth: hci0: command tx timeout [ 364.110788][ T5934] usb 5-1: 0:2 : does not exist [ 364.136140][ T5934] usb 5-1: USB disconnect, device number 2 [ 364.171372][ T5854] udevd[5854]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 365.224567][ T1211] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 365.363516][ T1211] usb 2-1: device descriptor read/64, error -71 [ 365.620251][ T1211] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 365.759484][ T1211] usb 2-1: device descriptor read/64, error -71 [ 365.834051][ T5931] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 365.878232][ T1211] usb usb2-port1: attempt power cycle [ 366.005108][ T5931] usb 5-1: Using ep0 maxpacket: 16 [ 366.012626][ T5931] usb 5-1: config 1 has an invalid interface number: 4 but max is 2 [ 366.020843][ T5931] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 366.031423][ T5931] usb 5-1: config 1 has no interface number 1 [ 366.037932][ T5931] usb 5-1: too many endpoints for config 1 interface 4 altsetting 0: 102, using maximum allowed: 30 [ 366.048934][ T5931] usb 5-1: config 1 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 102 [ 366.062007][ T5931] usb 5-1: too many endpoints for config 1 interface 2 altsetting 255: 255, using maximum allowed: 30 [ 366.073114][ T5931] usb 5-1: config 1 interface 2 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 366.086484][ T5931] usb 5-1: config 1 interface 2 has no altsetting 0 [ 366.096404][ T5931] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.53 [ 366.105651][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.113772][ T5931] usb 5-1: Product: syz [ 366.118006][ T5931] usb 5-1: Manufacturer: syz [ 366.122775][ T5931] usb 5-1: SerialNumber: syz [ 366.240620][ T1211] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 366.264566][ T1211] usb 2-1: device descriptor read/8, error -71 [ 366.267990][ T44] gspca_stk1135: reg_w 0x353 err -71 [ 366.279768][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 366.286290][ T44] gspca_stk1135: Sensor write failed [ 366.291630][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 366.298243][ T44] gspca_stk1135: Sensor write failed [ 366.303587][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 366.310250][ T44] gspca_stk1135: Sensor read failed [ 366.316508][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 366.322889][ T44] gspca_stk1135: Sensor read failed [ 366.329582][ T44] gspca_stk1135: Detected sensor type unknown (0x0) [ 366.336255][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 366.342668][ T44] gspca_stk1135: Sensor read failed [ 366.348104][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 366.354467][ T44] gspca_stk1135: Sensor read failed [ 366.362425][T10587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.364823][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 366.378133][T10587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.378792][ T44] gspca_stk1135: Sensor write failed [ 366.391511][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 366.397873][ T44] gspca_stk1135: Sensor write failed [ 366.403577][ T44] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 366.422760][ T44] usb 4-1: USB disconnect, device number 3 [ 366.466531][ T5931] usb 5-1: USB disconnect, device number 3 [ 366.512373][ T6537] udevd[6537]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 366.531549][ T1211] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 366.583555][ T1211] usb 2-1: device descriptor read/8, error -71 [ 366.713397][ T1211] usb usb2-port1: unable to enumerate USB device [ 367.150795][ T5931] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 367.331420][ T5931] usb 4-1: Using ep0 maxpacket: 16 [ 367.338361][ T5931] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 367.350060][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 367.363566][ T5931] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 367.372735][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.380903][ T5931] usb 4-1: Product: syz [ 367.386740][ T5931] usb 4-1: Manufacturer: syz [ 367.391413][ T5931] usb 4-1: SerialNumber: syz [ 367.399069][ T5931] usb 4-1: config 0 descriptor?? [ 367.408516][ T5931] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 367.418078][ T5931] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 367.557367][ T5934] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 367.727130][ T5934] usb 5-1: Using ep0 maxpacket: 32 [ 367.734205][ T5934] usb 5-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.744256][ T5934] usb 5-1: config 0 interface 0 has no altsetting 0 [ 367.752091][ T5934] usb 5-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 367.761312][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.773127][ T5934] usb 5-1: config 0 descriptor?? [ 368.050113][ T5931] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 368.057001][ T5931] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 368.064722][ T5931] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 368.071927][ T5931] em28xx 4-1:0.0: No AC97 audio processor [ 368.400034][T10621] FAULT_INJECTION: forcing a failure. [ 368.400034][T10621] name failslab, interval 1, probability 0, space 0, times 1 [ 368.415037][T10621] CPU: 1 UID: 0 PID: 10621 Comm: syz.1.1378 Not tainted syzkaller #0 PREEMPT(full) [ 368.415068][T10621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 368.415088][T10621] Call Trace: [ 368.415101][T10621] [ 368.415110][T10621] dump_stack_lvl+0x189/0x250 [ 368.415143][T10621] ? __pfx____ratelimit+0x10/0x10 [ 368.415167][T10621] ? __pfx_dump_stack_lvl+0x10/0x10 [ 368.415188][T10621] ? __pfx__printk+0x10/0x10 [ 368.415214][T10621] ? __pfx___might_resched+0x10/0x10 [ 368.415247][T10621] should_fail_ex+0x414/0x560 [ 368.415284][T10621] should_failslab+0xa8/0x100 [ 368.415311][T10621] __kmalloc_noprof+0xcb/0x7f0 [ 368.415329][T10621] ? kfree+0x4d/0x6d0 [ 368.415356][T10621] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 368.415389][T10621] tomoyo_realpath_from_path+0xe3/0x5d0 [ 368.415416][T10621] ? tomoyo_domain+0xd9/0x130 [ 368.415447][T10621] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 368.415482][T10621] tomoyo_path_number_perm+0x1e8/0x5a0 [ 368.415525][T10621] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 368.415598][T10621] ? __fget_files+0x2a/0x420 [ 368.415631][T10621] ? __fget_files+0x3a0/0x420 [ 368.415656][T10621] ? __fget_files+0x2a/0x420 [ 368.415688][T10621] security_file_ioctl+0xcb/0x2d0 [ 368.415721][T10621] __se_sys_ioctl+0x47/0x170 [ 368.415746][T10621] do_syscall_64+0xfa/0xfa0 [ 368.415769][T10621] ? lockdep_hardirqs_on+0x9c/0x150 [ 368.415792][T10621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.415812][T10621] ? clear_bhb_loop+0x60/0xb0 [ 368.415837][T10621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.415875][T10621] RIP: 0033:0x7f9b0f58eec9 [ 368.415900][T10621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.415920][T10621] RSP: 002b:00007f9b103f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 368.415943][T10621] RAX: ffffffffffffffda RBX: 00007f9b0f7e5fa0 RCX: 00007f9b0f58eec9 [ 368.415958][T10621] RDX: 0000200000000000 RSI: 0000000000004b70 RDI: 0000000000000003 [ 368.415972][T10621] RBP: 00007f9b103f2090 R08: 0000000000000000 R09: 0000000000000000 [ 368.415985][T10621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.415998][T10621] R13: 00007f9b0f7e6038 R14: 00007f9b0f7e5fa0 R15: 00007ffc70a85928 [ 368.416033][T10621] [ 368.416065][T10621] ERROR: Out of memory at tomoyo_realpath_from_path. [ 368.656960][ T5934] usbhid 5-1:0.0: can't add hid device: -71 [ 368.663143][ T5934] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 368.675858][ T5934] usb 5-1: USB disconnect, device number 4 [ 369.053115][ T44] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 369.228509][ T5931] usb 4-1: USB disconnect, device number 4 [ 369.250105][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 369.260512][ T5931] em28xx 4-1:0.0: Disconnecting em28xx [ 369.269759][ T44] usb 2-1: config 1 has an invalid interface number: 4 but max is 2 [ 369.290965][ T5931] em28xx 4-1:0.0: Freeing device [ 369.310119][ T44] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 369.336113][ T44] usb 2-1: config 1 has no interface number 1 [ 369.368404][ T44] usb 2-1: too many endpoints for config 1 interface 4 altsetting 0: 102, using maximum allowed: 30 [ 369.384192][T10645] FAULT_INJECTION: forcing a failure. [ 369.384192][T10645] name failslab, interval 1, probability 0, space 0, times 0 [ 369.399039][ T44] usb 2-1: config 1 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 102 [ 369.412201][T10645] CPU: 1 UID: 0 PID: 10645 Comm: syz.4.1389 Not tainted syzkaller #0 PREEMPT(full) [ 369.412232][T10645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 369.412245][T10645] Call Trace: [ 369.412254][T10645] [ 369.412263][T10645] dump_stack_lvl+0x189/0x250 [ 369.412289][T10645] ? __pfx____ratelimit+0x10/0x10 [ 369.412315][T10645] ? __pfx_dump_stack_lvl+0x10/0x10 [ 369.412338][T10645] ? __pfx__printk+0x10/0x10 [ 369.412366][T10645] ? __pfx___might_resched+0x10/0x10 [ 369.412403][T10645] ? fs_reclaim_acquire+0x7d/0x100 [ 369.412433][T10645] should_fail_ex+0x414/0x560 [ 369.412473][T10645] should_failslab+0xa8/0x100 [ 369.412502][T10645] __kmalloc_noprof+0xcb/0x7f0 [ 369.412523][T10645] ? tomoyo_encode+0x28b/0x550 [ 369.412557][T10645] tomoyo_encode+0x28b/0x550 [ 369.412590][T10645] tomoyo_realpath_from_path+0x58d/0x5d0 [ 369.412632][T10645] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 369.412669][T10645] tomoyo_path_number_perm+0x1e8/0x5a0 [ 369.412708][T10645] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 369.412789][T10645] ? __fget_files+0x2a/0x420 [ 369.412838][T10645] ? __fget_files+0x3a0/0x420 [ 369.412868][T10645] ? __fget_files+0x2a/0x420 [ 369.412921][T10645] security_file_ioctl+0xcb/0x2d0 [ 369.412959][T10645] __se_sys_ioctl+0x47/0x170 [ 369.412987][T10645] do_syscall_64+0xfa/0xfa0 [ 369.413011][T10645] ? lockdep_hardirqs_on+0x9c/0x150 [ 369.413038][T10645] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.413062][T10645] ? clear_bhb_loop+0x60/0xb0 [ 369.413089][T10645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.413112][T10645] RIP: 0033:0x7f5095b8eec9 [ 369.413133][T10645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.413153][T10645] RSP: 002b:00007f5096985038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 369.413178][T10645] RAX: ffffffffffffffda RBX: 00007f5095de5fa0 RCX: 00007f5095b8eec9 [ 369.413195][T10645] RDX: 0000200000000000 RSI: 0000000000004b70 RDI: 0000000000000003 [ 369.413210][T10645] RBP: 00007f5096985090 R08: 0000000000000000 R09: 0000000000000000 [ 369.413225][T10645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.413238][T10645] R13: 00007f5095de6038 R14: 00007f5095de5fa0 R15: 00007ffea9806b78 [ 369.413276][T10645] [ 369.413302][T10645] ERROR: Out of memory at tomoyo_realpath_from_path. [ 369.651669][ T44] usb 2-1: too many endpoints for config 1 interface 2 altsetting 255: 255, using maximum allowed: 30 [ 369.670200][ T44] usb 2-1: config 1 interface 2 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 369.706266][ T44] usb 2-1: config 1 interface 2 has no altsetting 0 [ 369.717988][ T44] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.53 [ 369.748098][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.756447][ T44] usb 2-1: Product: syz [ 369.765868][ T44] usb 2-1: Manufacturer: syz [ 369.773444][ T44] usb 2-1: SerialNumber: syz [ 370.048636][T10625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.071836][T10625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.138298][ T44] usb 2-1: USB disconnect, device number 28 [ 370.186404][ T5914] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 370.195565][ T6537] udevd[6537]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 370.351266][T10661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.364518][ T5914] usb 4-1: config 0 has an invalid interface number: 202 but max is 0 [ 370.373525][ T5914] usb 4-1: config 0 has no interface number 0 [ 370.383233][T10661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.400506][ T5914] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=3c.e4 [ 370.411383][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.424295][ T5914] usb 4-1: Product: syz [ 370.428519][ T5914] usb 4-1: Manufacturer: syz [ 370.433867][ T5914] usb 4-1: SerialNumber: syz [ 370.450069][ T5914] usb 4-1: config 0 descriptor?? [ 370.669105][ T5931] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 370.699414][ T5914] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 370.717023][ T5914] gspca_sonixj: reg_w1 err -71 [ 370.740593][ T5914] sonixj 4-1:0.202: probe with driver sonixj failed with error -71 [ 370.755719][ T5914] usb 4-1: USB disconnect, device number 5 [ 370.841327][ T5931] usb 5-1: config 0 has an invalid interface number: 11 but max is 0 [ 370.850262][ T5931] usb 5-1: config 0 has no interface number 0 [ 370.853263][T10667] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1398'. [ 370.856965][ T5931] usb 5-1: config 0 interface 11 altsetting 253 bulk endpoint 0x7 has invalid maxpacket 1024 [ 370.874312][T10667] pimreg3: entered allmulticast mode [ 370.877317][ T5931] usb 5-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 370.886844][T10667] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1398'. [ 370.893817][ T5931] usb 5-1: config 0 interface 11 has no altsetting 0 [ 370.893865][ T5931] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 370.893891][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.903995][ T5931] usb 5-1: config 0 descriptor?? [ 370.936803][ T5931] keyspan 5-1:0.11: Keyspan 2 port adapter converter detected [ 370.948800][ T5931] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 81 [ 370.962551][ T5931] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 82 [ 370.970587][ T5931] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 1 [ 370.979020][ T5931] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 2 [ 370.986794][ T5931] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 85 [ 370.994887][ T5931] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 5 [ 371.010940][ T5931] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 371.042978][ T5931] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 83 [ 371.050901][ T5931] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 84 [ 371.091376][ T5931] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 3 [ 371.117557][ T5931] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 4 [ 371.141670][ T5931] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 86 [ 371.160996][ T5931] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 6 [ 371.171467][T10663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.180420][T10663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.196764][ T5931] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 371.358111][T10677] FAULT_INJECTION: forcing a failure. [ 371.358111][T10677] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 371.401624][T10677] CPU: 0 UID: 0 PID: 10677 Comm: syz.1.1402 Not tainted syzkaller #0 PREEMPT(full) [ 371.401654][T10677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 371.401672][T10677] Call Trace: [ 371.401681][T10677] [ 371.401691][T10677] dump_stack_lvl+0x189/0x250 [ 371.401719][T10677] ? __pfx____ratelimit+0x10/0x10 [ 371.401744][T10677] ? __pfx_dump_stack_lvl+0x10/0x10 [ 371.401767][T10677] ? __pfx__printk+0x10/0x10 [ 371.401801][T10677] should_fail_ex+0x414/0x560 [ 371.401841][T10677] _copy_to_user+0x31/0xb0 [ 371.401871][T10677] con_get_cmap+0x244/0x2b0 [ 371.401896][T10677] ? __pfx_con_get_cmap+0x10/0x10 [ 371.401928][T10677] ? bpf_lsm_capable+0x9/0x20 [ 371.401959][T10677] ? security_capable+0x7e/0x2e0 [ 371.401989][T10677] vt_ioctl+0x120e/0x1f20 [ 371.402017][T10677] ? __pfx_vt_ioctl+0x10/0x10 [ 371.402054][T10677] ? __fget_files+0x2a/0x420 [ 371.402087][T10677] ? tty_jobctrl_ioctl+0x369/0xb70 [ 371.402107][T10677] ? __fget_files+0x3a0/0x420 [ 371.402134][T10677] ? __fget_files+0x2a/0x420 [ 371.402185][T10677] tty_ioctl+0x929/0xde0 [ 371.402211][T10677] ? __pfx_tty_ioctl+0x10/0x10 [ 371.402246][T10677] __se_sys_ioctl+0xfc/0x170 [ 371.402279][T10677] do_syscall_64+0xfa/0xfa0 [ 371.402300][T10677] ? lockdep_hardirqs_on+0x9c/0x150 [ 371.402322][T10677] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.402341][T10677] ? clear_bhb_loop+0x60/0xb0 [ 371.402365][T10677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.402383][T10677] RIP: 0033:0x7f9b0f58eec9 [ 371.402400][T10677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.402417][T10677] RSP: 002b:00007f9b103f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 371.402437][T10677] RAX: ffffffffffffffda RBX: 00007f9b0f7e5fa0 RCX: 00007f9b0f58eec9 [ 371.402451][T10677] RDX: 0000200000000000 RSI: 0000000000004b70 RDI: 0000000000000003 [ 371.402463][T10677] RBP: 00007f9b103f2090 R08: 0000000000000000 R09: 0000000000000000 [ 371.402475][T10677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.402486][T10677] R13: 00007f9b0f7e6038 R14: 00007f9b0f7e5fa0 R15: 00007ffc70a85928 [ 371.402514][T10677] [ 371.657530][ T5914] usb 5-1: USB disconnect, device number 5 [ 371.668807][ T5914] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 371.701915][ T5914] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 371.762834][ T5914] keyspan 5-1:0.11: device disconnected [ 372.474195][T10719] openvswitch: netlink: Multiple metadata blocks provided [ 372.483135][T10720] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 372.489762][T10720] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 372.494111][T10720] vhci_hcd vhci_hcd.0: Device attached [ 372.498635][T10721] FAULT_INJECTION: forcing a failure. [ 372.498635][T10721] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 372.505163][T10722] vhci_hcd: cannot find a urb of seqnum 18414 max seqnum 0 [ 372.520596][T10721] CPU: 1 UID: 0 PID: 10721 Comm: syz.2.1418 Not tainted syzkaller #0 PREEMPT(full) [ 372.520633][T10721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 372.520651][T10721] Call Trace: [ 372.520661][T10721] [ 372.520672][T10721] dump_stack_lvl+0x189/0x250 [ 372.520704][T10721] ? __pfx____ratelimit+0x10/0x10 [ 372.520732][T10721] ? __pfx_dump_stack_lvl+0x10/0x10 [ 372.520758][T10721] ? __pfx__printk+0x10/0x10 [ 372.520784][T10721] ? fs_reclaim_acquire+0x7d/0x100 [ 372.520822][T10721] should_fail_ex+0x414/0x560 [ 372.520866][T10721] prepare_alloc_pages+0x213/0x610 [ 372.520922][T10721] __alloc_frozen_pages_noprof+0x123/0x370 [ 372.520957][T10721] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 372.520998][T10721] ? policy_nodemask+0x27c/0x720 [ 372.521039][T10721] alloc_pages_mpol+0x232/0x4a0 [ 372.521075][T10721] alloc_pages_noprof+0xa9/0x190 [ 372.521107][T10721] __pud_alloc+0x3f/0x450 [ 372.521153][T10721] __handle_mm_fault+0x3372/0x5400 [ 372.521201][T10721] ? mt_find+0x15c/0x5e0 [ 372.521238][T10721] ? __pfx___handle_mm_fault+0x10/0x10 [ 372.521298][T10721] ? find_vma+0xe7/0x160 [ 372.521336][T10721] ? __pfx_find_vma+0x10/0x10 [ 372.521378][T10721] handle_mm_fault+0x40a/0x8e0 [ 372.521427][T10721] do_user_addr_fault+0x764/0x1380 [ 372.521490][T10721] exc_page_fault+0x82/0x100 [ 372.521523][T10721] asm_exc_page_fault+0x26/0x30 [ 372.521551][T10721] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 372.521589][T10721] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 0d 35 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 372.521610][T10721] RSP: 0018:ffffc9001a1b7ba8 EFLAGS: 00050216 [ 372.521634][T10721] RAX: 0000000000000000 RBX: 0000000000000030 RCX: 0000000000000030 [ 372.521650][T10721] RDX: 0000000000000000 RSI: ffffc9001a1b7c00 RDI: 0000200000000000 [ 372.521668][T10721] RBP: ffffc9001a1b7cb0 R08: ffffc9001a1b7c2f R09: 1ffff92003436f85 [ 372.521687][T10721] R10: dffffc0000000000 R11: fffff52003436f86 R12: 0000200000000030 [ 372.521705][T10721] R13: 00007ffffffff000 R14: ffffc9001a1b7c00 R15: 0000200000000000 [ 372.521745][T10721] _copy_to_user+0x8a/0xb0 [ 372.521781][T10721] con_get_cmap+0x244/0x2b0 [ 372.521808][T10721] ? __pfx_con_get_cmap+0x10/0x10 [ 372.521843][T10721] ? bpf_lsm_capable+0x9/0x20 [ 372.521876][T10721] ? security_capable+0x7e/0x2e0 [ 372.521910][T10721] vt_ioctl+0x120e/0x1f20 [ 372.521941][T10721] ? __pfx_vt_ioctl+0x10/0x10 [ 372.521982][T10721] ? __fget_files+0x2a/0x420 [ 372.522019][T10721] ? tty_jobctrl_ioctl+0x369/0xb70 [ 372.522050][T10721] ? __fget_files+0x3a0/0x420 [ 372.522080][T10721] ? __fget_files+0x2a/0x420 [ 372.522116][T10721] tty_ioctl+0x929/0xde0 [ 372.522147][T10721] ? __pfx_tty_ioctl+0x10/0x10 [ 372.522176][T10721] __se_sys_ioctl+0xfc/0x170 [ 372.522204][T10721] do_syscall_64+0xfa/0xfa0 [ 372.522231][T10721] ? lockdep_hardirqs_on+0x9c/0x150 [ 372.522259][T10721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.522282][T10721] ? clear_bhb_loop+0x60/0xb0 [ 372.522312][T10721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.522337][T10721] RIP: 0033:0x7f2e69f8eec9 [ 372.522358][T10721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.522380][T10721] RSP: 002b:00007f2e6ae64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 372.522403][T10721] RAX: ffffffffffffffda RBX: 00007f2e6a1e5fa0 RCX: 00007f2e69f8eec9 [ 372.522421][T10721] RDX: 0000200000000000 RSI: 0000000000004b70 RDI: 0000000000000003 [ 372.522438][T10721] RBP: 00007f2e6ae64090 R08: 0000000000000000 R09: 0000000000000000 [ 372.522454][T10721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.522469][T10721] R13: 00007f2e6a1e6038 R14: 00007f2e6a1e5fa0 R15: 00007fff66478bc8 [ 372.522507][T10721] [ 372.646054][ T5934] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 372.731713][ T1211] vhci_hcd: vhci_device speed not set [ 372.919218][ T1094] vhci_hcd: stop threads [ 372.919239][ T1094] vhci_hcd: release socket [ 372.919284][ T1094] vhci_hcd: disconnect device [ 373.048882][ T1211] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 373.056850][ T1211] usb 41-1: enqueue for inactive port 0 [ 373.098726][ T5934] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 373.108087][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.138014][ T1211] vhci_hcd: vhci_device speed not set [ 373.139028][ T5934] usb 2-1: config 0 descriptor?? [ 373.165821][ T5934] cp210x 2-1:0.0: cp210x converter detected [ 373.308983][ T5914] libceph: connect (1)[c::]:6789 error -101 [ 373.332997][ T5914] libceph: mon0 (1)[c::]:6789 connect error [ 373.348975][T10737] ceph: No mds server is up or the cluster is laggy [ 373.368588][ T5935] libceph: connect (1)[c::]:6789 error -101 [ 373.380484][ T5935] libceph: mon0 (1)[c::]:6789 connect error [ 373.634947][T10753] FAULT_INJECTION: forcing a failure. [ 373.634947][T10753] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 373.671840][ T5934] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 373.688770][T10753] CPU: 1 UID: 0 PID: 10753 Comm: syz.4.1429 Not tainted syzkaller #0 PREEMPT(full) [ 373.688804][T10753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 373.688819][T10753] Call Trace: [ 373.688828][T10753] [ 373.688838][T10753] dump_stack_lvl+0x189/0x250 [ 373.688870][T10753] ? __pfx____ratelimit+0x10/0x10 [ 373.688895][T10753] ? __pfx_dump_stack_lvl+0x10/0x10 [ 373.688918][T10753] ? __pfx__printk+0x10/0x10 [ 373.688942][T10753] ? fs_reclaim_acquire+0x7d/0x100 [ 373.688975][T10753] should_fail_ex+0x414/0x560 [ 373.689014][T10753] prepare_alloc_pages+0x213/0x610 [ 373.689047][T10753] __alloc_frozen_pages_noprof+0x123/0x370 [ 373.689079][T10753] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 373.689105][T10753] ? __lock_acquire+0xab9/0xd20 [ 373.689151][T10753] alloc_pages_mpol+0x232/0x4a0 [ 373.689190][T10753] alloc_pages_noprof+0xa9/0x190 [ 373.689217][T10753] __pmd_alloc+0x3a/0x540 [ 373.689255][T10753] __handle_mm_fault+0x9ad/0x5400 [ 373.689307][T10753] ? __pfx___handle_mm_fault+0x10/0x10 [ 373.689361][T10753] ? find_vma+0xe7/0x160 [ 373.689392][T10753] ? __pfx_find_vma+0x10/0x10 [ 373.689431][T10753] handle_mm_fault+0x40a/0x8e0 [ 373.689474][T10753] do_user_addr_fault+0x764/0x1380 [ 373.689520][T10753] exc_page_fault+0x82/0x100 [ 373.689548][T10753] asm_exc_page_fault+0x26/0x30 [ 373.689570][T10753] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 373.689604][T10753] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 0d 35 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 373.689625][T10753] RSP: 0018:ffffc9001a0bfba8 EFLAGS: 00050216 [ 373.689646][T10753] RAX: 0000000000000000 RBX: 0000000000000030 RCX: 0000000000000030 [ 373.689661][T10753] RDX: 0000000000000000 RSI: ffffc9001a0bfc00 RDI: 0000200000000000 [ 373.689678][T10753] RBP: ffffc9001a0bfcb0 R08: ffffc9001a0bfc2f R09: 1ffff92003417f85 [ 373.689694][T10753] R10: dffffc0000000000 R11: fffff52003417f86 R12: 0000200000000030 [ 373.689711][T10753] R13: 00007ffffffff000 R14: ffffc9001a0bfc00 R15: 0000200000000000 [ 373.689749][T10753] _copy_to_user+0x8a/0xb0 [ 373.689781][T10753] con_get_cmap+0x244/0x2b0 [ 373.689807][T10753] ? __pfx_con_get_cmap+0x10/0x10 [ 373.689837][T10753] ? bpf_lsm_capable+0x9/0x20 [ 373.689869][T10753] ? security_capable+0x7e/0x2e0 [ 373.689902][T10753] vt_ioctl+0x120e/0x1f20 [ 373.689928][T10753] ? __pfx_vt_ioctl+0x10/0x10 [ 373.689963][T10753] ? __fget_files+0x2a/0x420 [ 373.689998][T10753] ? tty_jobctrl_ioctl+0x369/0xb70 [ 373.690018][T10753] ? __fget_files+0x3a0/0x420 [ 373.690047][T10753] ? __fget_files+0x2a/0x420 [ 373.690078][T10753] tty_ioctl+0x929/0xde0 [ 373.690105][T10753] ? __pfx_tty_ioctl+0x10/0x10 [ 373.690130][T10753] __se_sys_ioctl+0xfc/0x170 [ 373.690156][T10753] do_syscall_64+0xfa/0xfa0 [ 373.690192][T10753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.690213][T10753] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 373.690236][T10753] ? clear_bhb_loop+0x60/0xb0 [ 373.690264][T10753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.690285][T10753] RIP: 0033:0x7f5095b8eec9 [ 373.690304][T10753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.690324][T10753] RSP: 002b:00007f5096985038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 373.690348][T10753] RAX: ffffffffffffffda RBX: 00007f5095de5fa0 RCX: 00007f5095b8eec9 [ 373.690365][T10753] RDX: 0000200000000000 RSI: 0000000000004b70 RDI: 0000000000000003 [ 373.690379][T10753] RBP: 00007f5096985090 R08: 0000000000000000 R09: 0000000000000000 [ 373.690393][T10753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.690407][T10753] R13: 00007f5095de6038 R14: 00007f5095de5fa0 R15: 00007ffea9806b78 [ 373.690443][T10753] [ 374.062731][ C1] vkms_vblank_simulate: vblank timer overrun [ 374.132883][ T5934] usb 2-1: cp210x converter now attached to ttyUSB0 [ 374.254202][T10763] netlink: 'syz.2.1431': attribute type 1 has an invalid length. [ 374.268317][T10763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.291888][T10763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.357053][ T5845] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 374.524829][ T5845] usb 4-1: unable to get BOS descriptor or descriptor too short [ 374.544813][ T5845] usb 4-1: config 2 has an invalid interface number: 9 but max is 2 [ 374.564103][ T5845] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 374.587108][ T5845] usb 4-1: config 2 has 1 interface, different from the descriptor's value: 3 [ 374.603738][T10780] misc userio: No port type given on /dev/userio [ 374.632151][T10780] program syz.4.1435 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 374.641445][ T5845] usb 4-1: config 2 has no interface number 0 [ 374.641541][ T5845] usb 4-1: config 2 interface 9 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 374.641572][ T5845] usb 4-1: config 2 interface 9 has no altsetting 0 [ 374.644936][ T5845] usb 4-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=49.af [ 374.716067][ T5845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.724565][ T5845] usb 4-1: Product: syz [ 374.728878][ T5845] usb 4-1: Manufacturer: syz [ 374.733674][ T5845] usb 4-1: SerialNumber: syz [ 374.934577][ T5914] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 374.966560][ T5845] usb 4-1: bad CDC descriptors [ 374.977467][ T5845] usb 4-1: USB disconnect, device number 6 [ 375.099281][ T5914] usb 5-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 375.108392][ T5914] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 375.118186][ T5914] usb 5-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 375.127789][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.151318][ T5914] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 375.369217][ T5914] gspca_sn9c2028: read1 error -71 [ 375.388746][ T5914] gspca_sn9c2028: read1 error -71 [ 375.409698][ T5914] gspca_sn9c2028: read1 error -71 [ 375.437310][ T5914] sn9c2028 5-1:220.0: probe with driver sn9c2028 failed with error -71 [ 375.462543][ T5914] usb 5-1: USB disconnect, device number 6 [ 375.550404][ T30] audit: type=1326 audit(1759518674.243:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10708 comm="syz.1.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0f58eec9 code=0x7fc00000 [ 375.640715][ T5934] usb 2-1: USB disconnect, device number 29 [ 375.668232][ T5934] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 375.759437][ T5934] cp210x 2-1:0.0: device disconnected [ 375.933189][T10805] FAULT_INJECTION: forcing a failure. [ 375.933189][T10805] name failslab, interval 1, probability 0, space 0, times 0 [ 375.952681][T10807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.969444][T10805] CPU: 1 UID: 0 PID: 10805 Comm: syz.3.1440 Not tainted syzkaller #0 PREEMPT(full) [ 375.969474][T10805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 375.969489][T10805] Call Trace: [ 375.969499][T10805] [ 375.969509][T10805] dump_stack_lvl+0x189/0x250 [ 375.969537][T10805] ? __pfx____ratelimit+0x10/0x10 [ 375.969563][T10805] ? __pfx_dump_stack_lvl+0x10/0x10 [ 375.969581][T10805] ? __pfx__printk+0x10/0x10 [ 375.969609][T10805] ? __pfx___might_resched+0x10/0x10 [ 375.969644][T10805] should_fail_ex+0x414/0x560 [ 375.969684][T10805] should_failslab+0xa8/0x100 [ 375.969723][T10805] kmem_cache_alloc_noprof+0x74/0x6e0 [ 375.969759][T10805] ? __pmd_alloc+0xc2/0x540 [ 375.969798][T10805] __pmd_alloc+0xc2/0x540 [ 375.969838][T10805] __handle_mm_fault+0x9ad/0x5400 [ 375.969889][T10805] ? __pfx___handle_mm_fault+0x10/0x10 [ 375.969941][T10805] ? find_vma+0xe7/0x160 [ 375.969975][T10805] ? __pfx_find_vma+0x10/0x10 [ 375.970013][T10805] handle_mm_fault+0x40a/0x8e0 [ 375.970058][T10805] do_user_addr_fault+0x764/0x1380 [ 375.970104][T10805] exc_page_fault+0x82/0x100 [ 375.970133][T10805] asm_exc_page_fault+0x26/0x30 [ 375.970154][T10805] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 375.970187][T10805] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 0d 35 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 375.970206][T10805] RSP: 0018:ffffc9001a41fba8 EFLAGS: 00050216 [ 375.970226][T10805] RAX: 0000000000000000 RBX: 0000000000000030 RCX: 0000000000000030 [ 375.970240][T10805] RDX: 0000000000000000 RSI: ffffc9001a41fc00 RDI: 0000200000000000 [ 375.970256][T10805] RBP: ffffc9001a41fcb0 R08: ffffc9001a41fc2f R09: 1ffff92003483f85 [ 375.970273][T10805] R10: dffffc0000000000 R11: fffff52003483f86 R12: 0000200000000030 [ 375.970290][T10805] R13: 00007ffffffff000 R14: ffffc9001a41fc00 R15: 0000200000000000 [ 375.970325][T10805] _copy_to_user+0x8a/0xb0 [ 375.970357][T10805] con_get_cmap+0x244/0x2b0 [ 375.970381][T10805] ? __pfx_con_get_cmap+0x10/0x10 [ 375.970412][T10805] ? bpf_lsm_capable+0x9/0x20 [ 375.970445][T10805] ? security_capable+0x7e/0x2e0 [ 375.970476][T10805] vt_ioctl+0x120e/0x1f20 [ 375.970504][T10805] ? __pfx_vt_ioctl+0x10/0x10 [ 375.970541][T10805] ? __fget_files+0x2a/0x420 [ 375.970575][T10805] ? tty_jobctrl_ioctl+0x369/0xb70 [ 375.970594][T10805] ? __fget_files+0x3a0/0x420 [ 375.970623][T10805] ? __fget_files+0x2a/0x420 [ 375.970655][T10805] tty_ioctl+0x929/0xde0 [ 375.970682][T10805] ? __pfx_tty_ioctl+0x10/0x10 [ 375.970715][T10805] __se_sys_ioctl+0xfc/0x170 [ 375.970742][T10805] do_syscall_64+0xfa/0xfa0 [ 375.970766][T10805] ? lockdep_hardirqs_on+0x9c/0x150 [ 375.970792][T10805] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.970814][T10805] ? clear_bhb_loop+0x60/0xb0 [ 375.970841][T10805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.970863][T10805] RIP: 0033:0x7f583ef8eec9 [ 375.970883][T10805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.970902][T10805] RSP: 002b:00007f583fd75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 375.970925][T10805] RAX: ffffffffffffffda RBX: 00007f583f1e5fa0 RCX: 00007f583ef8eec9 [ 375.970942][T10805] RDX: 0000200000000000 RSI: 0000000000004b70 RDI: 0000000000000003 [ 375.970956][T10805] RBP: 00007f583fd75090 R08: 0000000000000000 R09: 0000000000000000 [ 375.970971][T10805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.970984][T10805] R13: 00007f583f1e6038 R14: 00007f583f1e5fa0 R15: 00007ffcd8e268b8 [ 375.971023][T10805] [ 376.004761][T10803] hugetlbfs: Unknown parameter 'fd' [ 376.007173][ C1] vkms_vblank_simulate: vblank timer overrun [ 376.333384][ C1] vkms_vblank_simulate: vblank timer overrun [ 376.339400][ C1] hrtimer: interrupt took 343886860 ns [ 376.372714][T10807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.439467][ C1] vkms_vblank_simulate: vblank timer overrun [ 376.608544][T10819] netlink: 'syz.2.1444': attribute type 13 has an invalid length. [ 376.639777][T10819] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1444'. [ 376.720536][T10824] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.811694][T10827] netlink: 'syz.3.1447': attribute type 4 has an invalid length. [ 377.233646][ T5914] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 377.404901][ T5914] usb 2-1: Using ep0 maxpacket: 16 [ 377.419930][ T5914] usb 2-1: config 205 has an invalid interface number: 58 but max is 2 [ 377.439852][ T5914] usb 2-1: config 205 has an invalid descriptor of length 0, skipping remainder of the config [ 377.472966][ T5914] usb 2-1: config 205 has 1 interface, different from the descriptor's value: 3 [ 377.495949][ T5914] usb 2-1: config 205 has no interface number 0 [ 377.504240][ T5914] usb 2-1: config 205 interface 58 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 377.517702][ T5914] usb 2-1: config 205 interface 58 has no altsetting 0 [ 377.527677][ T5914] usb 2-1: New USB device found, idVendor=0fce, idProduct=d008, bcdDevice= 0.00 [ 377.539702][ T5934] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 377.554745][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.563019][ T5914] usb 2-1: Product: ꢌ⳦⥒讟챳䏨ᓽꃅ脦狼䒊갔痬㍆ᦚＨ૏驐ᖙ섛읫补椡墵鋅죱䜾ϝ錞퇞꠪춉詈撰퍗ㆩ鴸ā鱝査⠷研䈐홼欃 [ 377.618633][ T5914] usb 2-1: Manufacturer: ᣅ킪ꄻⲱ낛ꙃ䱐쇩菼ﳘ苽ᄢ띏⍰揋ꀟ [ 377.627873][ T5914] usb 2-1: SerialNumber: 둡ꗰ蠱⑫馍Ŀ➫䫆 [ 377.870831][T10853] FAULT_INJECTION: forcing a failure. [ 377.870831][T10853] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 377.945271][T10853] CPU: 1 UID: 0 PID: 10853 Comm: syz.3.1453 Not tainted syzkaller #0 PREEMPT(full) [ 377.945309][T10853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 377.945326][T10853] Call Trace: [ 377.945337][T10853] [ 377.945348][T10853] dump_stack_lvl+0x189/0x250 [ 377.945379][T10853] ? __pfx____ratelimit+0x10/0x10 [ 377.945407][T10853] ? __pfx_dump_stack_lvl+0x10/0x10 [ 377.945432][T10853] ? __pfx__printk+0x10/0x10 [ 377.945458][T10853] ? fs_reclaim_acquire+0x7d/0x100 [ 377.945508][T10853] should_fail_ex+0x414/0x560 [ 377.945551][T10853] prepare_alloc_pages+0x213/0x610 [ 377.945586][T10853] __alloc_frozen_pages_noprof+0x123/0x370 [ 377.945619][T10853] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 377.945671][T10853] ? __lock_acquire+0xab9/0xd20 [ 377.945701][T10853] ? policy_nodemask+0x27c/0x720 [ 377.945733][T10853] alloc_pages_mpol+0x232/0x4a0 [ 377.945766][T10853] alloc_pages_noprof+0xa9/0x190 [ 377.945796][T10853] pte_alloc_one+0x23/0x310 [ 377.945829][T10853] ? __pte_alloc+0x1d/0x1a0 [ 377.945859][T10853] __pte_alloc+0x25/0x1a0 [ 377.945899][T10853] __handle_mm_fault+0x4985/0x5400 [ 377.945953][T10853] ? __pfx___handle_mm_fault+0x10/0x10 [ 377.946008][T10853] ? find_vma+0xe7/0x160 [ 377.946041][T10853] ? __pfx_find_vma+0x10/0x10 [ 377.946081][T10853] handle_mm_fault+0x40a/0x8e0 [ 377.946133][T10853] do_user_addr_fault+0x764/0x1380 [ 377.946181][T10853] exc_page_fault+0x82/0x100 [ 377.946210][T10853] asm_exc_page_fault+0x26/0x30 [ 377.946232][T10853] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 377.946268][T10853] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 0d 35 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 377.946289][T10853] RSP: 0018:ffffc90019c67ba8 EFLAGS: 00050216 [ 377.946311][T10853] RAX: 0000000000000000 RBX: 0000000000000030 RCX: 0000000000000030 [ 377.946326][T10853] RDX: 0000000000000000 RSI: ffffc90019c67c00 RDI: 0000200000000000 [ 377.946342][T10853] RBP: ffffc90019c67cb0 R08: ffffc90019c67c2f R09: 1ffff9200338cf85 [ 377.946360][T10853] R10: dffffc0000000000 R11: fffff5200338cf86 R12: 0000200000000030 [ 377.946377][T10853] R13: 00007ffffffff000 R14: ffffc90019c67c00 R15: 0000200000000000 [ 377.946416][T10853] _copy_to_user+0x8a/0xb0 [ 377.946451][T10853] con_get_cmap+0x244/0x2b0 [ 377.946476][T10853] ? __pfx_con_get_cmap+0x10/0x10 [ 377.946509][T10853] ? bpf_lsm_capable+0x9/0x20 [ 377.946541][T10853] ? security_capable+0x7e/0x2e0 [ 377.946574][T10853] vt_ioctl+0x120e/0x1f20 [ 377.946603][T10853] ? __pfx_vt_ioctl+0x10/0x10 [ 377.946644][T10853] ? __fget_files+0x2a/0x420 [ 377.946678][T10853] ? tty_jobctrl_ioctl+0x369/0xb70 [ 377.946698][T10853] ? __fget_files+0x3a0/0x420 [ 377.946728][T10853] ? __fget_files+0x2a/0x420 [ 377.946760][T10853] tty_ioctl+0x929/0xde0 [ 377.946786][T10853] ? __pfx_tty_ioctl+0x10/0x10 [ 377.946812][T10853] __se_sys_ioctl+0xfc/0x170 [ 377.946839][T10853] do_syscall_64+0xfa/0xfa0 [ 377.946874][T10853] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.946896][T10853] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 377.946917][T10853] ? clear_bhb_loop+0x60/0xb0 [ 377.946946][T10853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.946967][T10853] RIP: 0033:0x7f583ef8eec9 [ 377.946987][T10853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.947007][T10853] RSP: 002b:00007f583fd75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 377.947030][T10853] RAX: ffffffffffffffda RBX: 00007f583f1e5fa0 RCX: 00007f583ef8eec9 [ 377.947047][T10853] RDX: 0000200000000000 RSI: 0000000000004b70 RDI: 0000000000000003 [ 377.947062][T10853] RBP: 00007f583fd75090 R08: 0000000000000000 R09: 0000000000000000 [ 377.947076][T10853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.947089][T10853] R13: 00007f583f1e6038 R14: 00007f583f1e5fa0 R15: 00007ffcd8e268b8 [ 377.947127][T10853] [ 378.058184][ T5914] usb-storage 2-1:205.58: USB Mass Storage device detected [ 378.091292][ T5914] usb-storage 2-1:205.58: Quirks match for vid 0fce pid d008: 200 [ 378.265453][ T5914] usb 2-1: USB disconnect, device number 30 [ 379.458070][ T44] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 379.653484][ T44] usb 2-1: config 8 has an invalid interface number: 250 but max is 0 [ 379.672214][ T44] usb 2-1: config 8 has no interface number 0 [ 379.678423][ T44] usb 2-1: config 8 interface 250 has no altsetting 0 [ 379.714396][ T44] usb 2-1: New USB device found, idVendor=0545, idProduct=8333, bcdDevice=8f.86 [ 379.728413][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.781461][ T44] usb 2-1: Product: syz [ 379.785774][ T44] usb 2-1: Manufacturer: syz [ 379.857112][ T44] usb 2-1: SerialNumber: syz [ 380.108072][ T44] gspca_main: tv8532-2.14.0 probing 0545:8333 [ 380.240675][ T44] usb 2-1: USB disconnect, device number 31 [ 380.584281][T10918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.593635][T10918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.849087][T10927] FAULT_INJECTION: forcing a failure. [ 380.849087][T10927] name failslab, interval 1, probability 0, space 0, times 0 [ 380.868819][T10927] CPU: 0 UID: 0 PID: 10927 Comm: syz.3.1473 Not tainted syzkaller #0 PREEMPT(full) [ 380.868845][T10927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 380.868858][T10927] Call Trace: [ 380.868867][T10927] [ 380.868876][T10927] dump_stack_lvl+0x189/0x250 [ 380.868916][T10927] ? __pfx____ratelimit+0x10/0x10 [ 380.868937][T10927] ? __pfx_dump_stack_lvl+0x10/0x10 [ 380.868955][T10927] ? __pfx__printk+0x10/0x10 [ 380.868975][T10927] ? __pfx___might_resched+0x10/0x10 [ 380.869001][T10927] ? fs_reclaim_acquire+0x7d/0x100 [ 380.869026][T10927] should_fail_ex+0x414/0x560 [ 380.869059][T10927] should_failslab+0xa8/0x100 [ 380.869082][T10927] kmem_cache_alloc_noprof+0x74/0x6e0 [ 380.869111][T10927] ? ptlock_alloc+0x20/0x70 [ 380.869125][T10927] ? set_page_refcounted+0xa0/0x1e0 [ 380.869152][T10927] ptlock_alloc+0x20/0x70 [ 380.869168][T10927] pte_alloc_one+0x7a/0x310 [ 380.869193][T10927] ? __pte_alloc+0x1d/0x1a0 [ 380.869216][T10927] __pte_alloc+0x25/0x1a0 [ 380.869241][T10927] __handle_mm_fault+0x4985/0x5400 [ 380.869282][T10927] ? __pfx___handle_mm_fault+0x10/0x10 [ 380.869325][T10927] ? find_vma+0xe7/0x160 [ 380.869352][T10927] ? __pfx_find_vma+0x10/0x10 [ 380.869382][T10927] handle_mm_fault+0x40a/0x8e0 [ 380.869419][T10927] do_user_addr_fault+0x764/0x1380 [ 380.869457][T10927] exc_page_fault+0x82/0x100 [ 380.869480][T10927] asm_exc_page_fault+0x26/0x30 [ 380.869497][T10927] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 380.869543][T10927] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 0d 35 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 380.869561][T10927] RSP: 0018:ffffc9001957fba8 EFLAGS: 00050216 [ 380.869598][T10927] RAX: 0000000000000000 RBX: 0000000000000030 RCX: 0000000000000030 [ 380.869610][T10927] RDX: 0000000000000000 RSI: ffffc9001957fc00 RDI: 0000200000000000 [ 380.869623][T10927] RBP: ffffc9001957fcb0 R08: ffffc9001957fc2f R09: 1ffff920032aff85 [ 380.869638][T10927] R10: dffffc0000000000 R11: fffff520032aff86 R12: 0000200000000030 [ 380.869651][T10927] R13: 00007ffffffff000 R14: ffffc9001957fc00 R15: 0000200000000000 [ 380.869682][T10927] _copy_to_user+0x8a/0xb0 [ 380.869709][T10927] con_get_cmap+0x244/0x2b0 [ 380.869730][T10927] ? __pfx_con_get_cmap+0x10/0x10 [ 380.869756][T10927] ? bpf_lsm_capable+0x9/0x20 [ 380.869782][T10927] ? security_capable+0x7e/0x2e0 [ 380.869808][T10927] vt_ioctl+0x120e/0x1f20 [ 380.869831][T10927] ? __pfx_vt_ioctl+0x10/0x10 [ 380.869861][T10927] ? __fget_files+0x2a/0x420 [ 380.869890][T10927] ? tty_jobctrl_ioctl+0x369/0xb70 [ 380.869906][T10927] ? __fget_files+0x3a0/0x420 [ 380.869929][T10927] ? __fget_files+0x2a/0x420 [ 380.869956][T10927] tty_ioctl+0x929/0xde0 [ 380.869978][T10927] ? __pfx_tty_ioctl+0x10/0x10 [ 380.870000][T10927] __se_sys_ioctl+0xfc/0x170 [ 380.870022][T10927] do_syscall_64+0xfa/0xfa0 [ 380.870044][T10927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.870062][T10927] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 380.870082][T10927] ? clear_bhb_loop+0x60/0xb0 [ 380.870104][T10927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.870122][T10927] RIP: 0033:0x7f583ef8eec9 [ 380.870138][T10927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.870155][T10927] RSP: 002b:00007f583fd75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 380.870173][T10927] RAX: ffffffffffffffda RBX: 00007f583f1e5fa0 RCX: 00007f583ef8eec9 [ 380.870187][T10927] RDX: 0000200000000000 RSI: 0000000000004b70 RDI: 0000000000000003 [ 380.870199][T10927] RBP: 00007f583fd75090 R08: 0000000000000000 R09: 0000000000000000 [ 380.870211][T10927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.870222][T10927] R13: 00007f583f1e6038 R14: 00007f583f1e5fa0 R15: 00007ffcd8e268b8 [ 380.870252][T10927] [ 380.923042][ T5934] usb 5-1: device descriptor read/64, error -71 [ 381.520533][ T5934] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 381.703664][ T5934] usb 5-1: Invalid ep0 maxpacket: 9 [ 381.709599][ T5934] usb usb5-port1: attempt power cycle [ 381.821315][ T5914] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 381.981684][ T5914] usb 4-1: Invalid ep0 maxpacket: 64 [ 382.014098][ T44] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 382.078065][ T5934] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 382.099940][ T5934] usb 5-1: Invalid ep0 maxpacket: 9 [ 382.120745][ T5914] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 382.152810][ T44] usb 2-1: device descriptor read/64, error -71 [ 382.238432][ T5934] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 382.271846][ T5934] usb 5-1: Invalid ep0 maxpacket: 9 [ 382.277897][ T5934] usb usb5-port1: unable to enumerate USB device [ 382.286193][ T5914] usb 4-1: Invalid ep0 maxpacket: 64 [ 382.293797][ T5914] usb usb4-port1: attempt power cycle [ 382.409487][ T44] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 382.519226][T10962] FAULT_INJECTION: forcing a failure. [ 382.519226][T10962] name failslab, interval 1, probability 0, space 0, times 0 [ 382.532452][T10962] CPU: 1 UID: 0 PID: 10962 Comm: syz.2.1487 Not tainted syzkaller #0 PREEMPT(full) [ 382.532484][T10962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 382.532499][T10962] Call Trace: [ 382.532509][T10962] [ 382.532519][T10962] dump_stack_lvl+0x189/0x250 [ 382.532547][T10962] ? __pfx____ratelimit+0x10/0x10 [ 382.532572][T10962] ? __pfx_dump_stack_lvl+0x10/0x10 [ 382.532595][T10962] ? __pfx__printk+0x10/0x10 [ 382.532619][T10962] ? __pfx___might_resched+0x10/0x10 [ 382.532648][T10962] ? fs_reclaim_acquire+0x7d/0x100 [ 382.532677][T10962] should_fail_ex+0x414/0x560 [ 382.532709][T10962] should_failslab+0xa8/0x100 [ 382.532728][T10962] kmem_cache_alloc_noprof+0x74/0x6e0 [ 382.532760][T10962] ? ptlock_alloc+0x20/0x70 [ 382.532779][T10962] ? set_page_refcounted+0xa0/0x1e0 [ 382.532809][T10962] ptlock_alloc+0x20/0x70 [ 382.532828][T10962] pte_alloc_one+0x7a/0x310 [ 382.532854][T10962] ? __pte_alloc+0x1d/0x1a0 [ 382.532874][T10962] __pte_alloc+0x25/0x1a0 [ 382.532894][T10962] __handle_mm_fault+0x4985/0x5400 [ 382.532946][T10962] ? __pfx___handle_mm_fault+0x10/0x10 [ 382.533005][T10962] ? find_vma+0xe7/0x160 [ 382.533027][T10962] ? __pfx_find_vma+0x10/0x10 [ 382.533052][T10962] handle_mm_fault+0x40a/0x8e0 [ 382.533097][T10962] do_user_addr_fault+0x764/0x1380 [ 382.533140][T10962] exc_page_fault+0x82/0x100 [ 382.533179][T10962] asm_exc_page_fault+0x26/0x30 [ 382.533195][T10962] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 382.533227][T10962] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 0d 35 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 382.533247][T10962] RSP: 0018:ffffc9001954fba8 EFLAGS: 00050216 [ 382.533267][T10962] RAX: 0000000000000000 RBX: 0000000000000030 RCX: 0000000000000030 [ 382.533281][T10962] RDX: 0000000000000000 RSI: ffffc9001954fc00 RDI: 0000200000000000 [ 382.533296][T10962] RBP: ffffc9001954fcb0 R08: ffffc9001954fc2f R09: 1ffff920032a9f85 [ 382.533308][T10962] R10: dffffc0000000000 R11: fffff520032a9f86 R12: 0000200000000030 [ 382.533319][T10962] R13: 00007ffffffff000 R14: ffffc9001954fc00 R15: 0000200000000000 [ 382.533344][T10962] _copy_to_user+0x8a/0xb0 [ 382.533374][T10962] con_get_cmap+0x244/0x2b0 [ 382.533399][T10962] ? __pfx_con_get_cmap+0x10/0x10 [ 382.533444][T10962] ? bpf_lsm_capable+0x9/0x20 [ 382.533467][T10962] ? security_capable+0x7e/0x2e0 [ 382.533489][T10962] vt_ioctl+0x120e/0x1f20 [ 382.533511][T10962] ? __pfx_vt_ioctl+0x10/0x10 [ 382.533549][T10962] ? __fget_files+0x2a/0x420 [ 382.533582][T10962] ? tty_jobctrl_ioctl+0x369/0xb70 [ 382.533600][T10962] ? __fget_files+0x3a0/0x420 [ 382.533620][T10962] ? __fget_files+0x2a/0x420 [ 382.533641][T10962] tty_ioctl+0x929/0xde0 [ 382.533663][T10962] ? __pfx_tty_ioctl+0x10/0x10 [ 382.533689][T10962] __se_sys_ioctl+0xfc/0x170 [ 382.533714][T10962] do_syscall_64+0xfa/0xfa0 [ 382.533737][T10962] ? lockdep_hardirqs_on+0x9c/0x150 [ 382.533758][T10962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.533773][T10962] ? clear_bhb_loop+0x60/0xb0 [ 382.533791][T10962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.533806][T10962] RIP: 0033:0x7f2e69f8eec9 [ 382.533826][T10962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.533846][T10962] RSP: 002b:00007f2e6ae64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 382.533866][T10962] RAX: ffffffffffffffda RBX: 00007f2e6a1e5fa0 RCX: 00007f2e69f8eec9 [ 382.533882][T10962] RDX: 0000200000000000 RSI: 0000000000004b70 RDI: 0000000000000003 [ 382.533899][T10962] RBP: 00007f2e6ae64090 R08: 0000000000000000 R09: 0000000000000000 [ 382.533909][T10962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.533919][T10962] R13: 00007f2e6a1e6038 R14: 00007f2e6a1e5fa0 R15: 00007fff66478bc8 [ 382.533943][T10962] [ 382.570030][ T44] usb 2-1: device descriptor read/64, error -71 [ 382.989384][ T5914] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 383.019762][ T5914] usb 4-1: Invalid ep0 maxpacket: 64 [ 383.041188][ T44] usb usb2-port1: attempt power cycle [ 383.059815][T10968] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1490'. [ 383.168712][ T5914] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 383.192473][ T5914] usb 4-1: Invalid ep0 maxpacket: 64 [ 383.203878][ T5914] usb usb4-port1: unable to enumerate USB device [ 383.238691][T10972] evm: overlay not supported [ 383.245515][T10972] Bluetooth: MGMT ver 1.23 [ 383.404478][ T44] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 383.426110][ T44] usb 2-1: device descriptor read/8, error -71 [ 383.592798][T10983] FAULT_INJECTION: forcing a failure. [ 383.592798][T10983] name failslab, interval 1, probability 0, space 0, times 0 [ 383.606300][T10983] CPU: 1 UID: 0 PID: 10983 Comm: syz.2.1496 Not tainted syzkaller #0 PREEMPT(full) [ 383.606330][T10983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 383.606345][T10983] Call Trace: [ 383.606354][T10983] [ 383.606363][T10983] dump_stack_lvl+0x189/0x250 [ 383.606391][T10983] ? __pfx____ratelimit+0x10/0x10 [ 383.606415][T10983] ? __pfx_dump_stack_lvl+0x10/0x10 [ 383.606437][T10983] ? __pfx__printk+0x10/0x10 [ 383.606464][T10983] ? __pfx___might_resched+0x10/0x10 [ 383.606500][T10983] should_fail_ex+0x414/0x560 [ 383.606538][T10983] should_failslab+0xa8/0x100 [ 383.606566][T10983] kmem_cache_alloc_noprof+0x74/0x6e0 [ 383.606599][T10983] ? __anon_vma_prepare+0x117/0x4a0 [ 383.606626][T10983] __anon_vma_prepare+0x117/0x4a0 [ 383.606646][T10983] ? __pte_alloc+0x15e/0x1a0 [ 383.606676][T10983] __handle_mm_fault+0x4aff/0x5400 [ 383.606727][T10983] ? __pfx___handle_mm_fault+0x10/0x10 [ 383.606778][T10983] ? find_vma+0xe7/0x160 [ 383.606810][T10983] ? __pfx_find_vma+0x10/0x10 [ 383.606848][T10983] handle_mm_fault+0x40a/0x8e0 [ 383.606891][T10983] do_user_addr_fault+0x764/0x1380 [ 383.606936][T10983] exc_page_fault+0x82/0x100 [ 383.606968][T10983] asm_exc_page_fault+0x26/0x30 [ 383.606988][T10983] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 383.607027][T10983] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 0d 35 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 383.607046][T10983] RSP: 0018:ffffc9001945fba8 EFLAGS: 00050216 [ 383.607067][T10983] RAX: 0000000000000000 RBX: 0000000000000030 RCX: 0000000000000030 [ 383.607080][T10983] RDX: 0000000000000000 RSI: ffffc9001945fc00 RDI: 0000200000000000 [ 383.607095][T10983] RBP: ffffc9001945fcb0 R08: ffffc9001945fc2f R09: 1ffff9200328bf85 [ 383.607111][T10983] R10: dffffc0000000000 R11: fffff5200328bf86 R12: 0000200000000030 [ 383.607126][T10983] R13: 00007ffffffff000 R14: ffffc9001945fc00 R15: 0000200000000000 [ 383.607161][T10983] _copy_to_user+0x8a/0xb0 [ 383.607192][T10983] con_get_cmap+0x244/0x2b0 [ 383.607216][T10983] ? __pfx_con_get_cmap+0x10/0x10 [ 383.607244][T10983] ? bpf_lsm_capable+0x9/0x20 [ 383.607273][T10983] ? security_capable+0x7e/0x2e0 [ 383.607303][T10983] vt_ioctl+0x120e/0x1f20 [ 383.607330][T10983] ? __pfx_vt_ioctl+0x10/0x10 [ 383.607366][T10983] ? __fget_files+0x2a/0x420 [ 383.607397][T10983] ? tty_jobctrl_ioctl+0x369/0xb70 [ 383.607416][T10983] ? __fget_files+0x3a0/0x420 [ 383.607442][T10983] ? __fget_files+0x2a/0x420 [ 383.607473][T10983] tty_ioctl+0x929/0xde0 [ 383.607497][T10983] ? __pfx_tty_ioctl+0x10/0x10 [ 383.607521][T10983] __se_sys_ioctl+0xfc/0x170 [ 383.607546][T10983] do_syscall_64+0xfa/0xfa0 [ 383.607573][T10983] ? lockdep_hardirqs_on+0x9c/0x150 [ 383.607616][T10983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.607638][T10983] ? clear_bhb_loop+0x60/0xb0 [ 383.607665][T10983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.607686][T10983] RIP: 0033:0x7f2e69f8eec9 [ 383.607705][T10983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.607723][T10983] RSP: 002b:00007f2e6ae64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 383.607745][T10983] RAX: ffffffffffffffda RBX: 00007f2e6a1e5fa0 RCX: 00007f2e69f8eec9 [ 383.607761][T10983] RDX: 0000200000000000 RSI: 0000000000004b70 RDI: 0000000000000003 [ 383.607776][T10983] RBP: 00007f2e6ae64090 R08: 0000000000000000 R09: 0000000000000000 [ 383.607790][T10983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 383.607803][T10983] R13: 00007f2e6a1e6038 R14: 00007f2e6a1e5fa0 R15: 00007fff66478bc8 [ 383.607840][T10983] [ 383.964866][ C1] vkms_vblank_simulate: vblank timer overrun [ 384.099126][ T44] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 384.121099][ T44] usb 2-1: device descriptor read/8, error -71 [ 384.240426][ T44] usb usb2-port1: unable to enumerate USB device [ 384.457083][T11008] dvmrp0: entered allmulticast mode [ 384.473833][T11012] FAULT_INJECTION: forcing a failure. [ 384.473833][T11012] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 384.489433][T11012] CPU: 0 UID: 0 PID: 11012 Comm: syz.4.1506 Not tainted syzkaller #0 PREEMPT(full) [ 384.489463][T11012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 384.489478][T11012] Call Trace: [ 384.489487][T11012] [ 384.489500][T11012] dump_stack_lvl+0x189/0x250 [ 384.489529][T11012] ? __pfx____ratelimit+0x10/0x10 [ 384.489564][T11012] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.489586][T11012] ? __pfx__printk+0x10/0x10 [ 384.489626][T11012] ? fs_reclaim_acquire+0x7d/0x100 [ 384.489660][T11012] should_fail_ex+0x414/0x560 [ 384.489702][T11012] prepare_alloc_pages+0x213/0x610 [ 384.489736][T11012] __alloc_frozen_pages_noprof+0x123/0x370 [ 384.489767][T11012] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 384.489804][T11012] ? policy_nodemask+0x27c/0x720 [ 384.489829][T11012] ? __lock_acquire+0xab9/0xd20 [ 384.489859][T11012] alloc_pages_mpol+0x232/0x4a0 [ 384.489891][T11012] vma_alloc_folio_noprof+0xe4/0x200 [ 384.489916][T11012] ? __anon_vma_prepare+0x3d2/0x4a0 [ 384.489939][T11012] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 384.489966][T11012] ? up_write+0x1c4/0x420 [ 384.489982][T11012] ? do_raw_spin_unlock+0x122/0x240 [ 384.490014][T11012] folio_prealloc+0x30/0x180 [ 384.490039][T11012] __handle_mm_fault+0x2a8b/0x5400 [ 384.490090][T11012] ? __pfx___handle_mm_fault+0x10/0x10 [ 384.490143][T11012] ? find_vma+0xe7/0x160 [ 384.490175][T11012] ? __pfx_find_vma+0x10/0x10 [ 384.490213][T11012] handle_mm_fault+0x40a/0x8e0 [ 384.490267][T11012] do_user_addr_fault+0x764/0x1380 [ 384.490312][T11012] exc_page_fault+0x82/0x100 [ 384.490341][T11012] asm_exc_page_fault+0x26/0x30 [ 384.490361][T11012] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 384.490394][T11012] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 0d 35 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 384.490413][T11012] RSP: 0018:ffffc900193ffba8 EFLAGS: 00050216 [ 384.490434][T11012] RAX: 0000000000000000 RBX: 0000000000000030 RCX: 0000000000000030 [ 384.490449][T11012] RDX: 0000000000000000 RSI: ffffc900193ffc00 RDI: 0000200000000000 [ 384.490464][T11012] RBP: ffffc900193ffcb0 R08: ffffc900193ffc2f R09: 1ffff9200327ff85 [ 384.490481][T11012] R10: dffffc0000000000 R11: fffff5200327ff86 R12: 0000200000000030 [ 384.490497][T11012] R13: 00007ffffffff000 R14: ffffc900193ffc00 R15: 0000200000000000 [ 384.490533][T11012] _copy_to_user+0x8a/0xb0 [ 384.490565][T11012] con_get_cmap+0x244/0x2b0 [ 384.490590][T11012] ? __pfx_con_get_cmap+0x10/0x10 [ 384.490621][T11012] ? bpf_lsm_capable+0x9/0x20 [ 384.490651][T11012] ? security_capable+0x7e/0x2e0 [ 384.490681][T11012] vt_ioctl+0x120e/0x1f20 [ 384.490708][T11012] ? __pfx_vt_ioctl+0x10/0x10 [ 384.490745][T11012] ? __fget_files+0x2a/0x420 [ 384.490778][T11012] ? tty_jobctrl_ioctl+0x369/0xb70 [ 384.490798][T11012] ? __fget_files+0x3a0/0x420 [ 384.490825][T11012] ? __fget_files+0x2a/0x420 [ 384.490857][T11012] tty_ioctl+0x929/0xde0 [ 384.490884][T11012] ? __pfx_tty_ioctl+0x10/0x10 [ 384.490909][T11012] __se_sys_ioctl+0xfc/0x170 [ 384.490935][T11012] do_syscall_64+0xfa/0xfa0 [ 384.490961][T11012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.490982][T11012] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 384.491004][T11012] ? clear_bhb_loop+0x60/0xb0 [ 384.491032][T11012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.491054][T11012] RIP: 0033:0x7f5095b8eec9 [ 384.491072][T11012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.491091][T11012] RSP: 002b:00007f5096985038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 384.491112][T11012] RAX: ffffffffffffffda RBX: 00007f5095de5fa0 RCX: 00007f5095b8eec9 [ 384.491128][T11012] RDX: 0000200000000000 RSI: 0000000000004b70 RDI: 0000000000000003 [ 384.491142][T11012] RBP: 00007f5096985090 R08: 0000000000000000 R09: 0000000000000000 [ 384.491156][T11012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 384.491169][T11012] R13: 00007f5095de6038 R14: 00007f5095de5fa0 R15: 00007ffea9806b78 [ 384.491206][T11012] [ 385.082943][ T5855] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 385.269835][ T5855] usb 4-1: Using ep0 maxpacket: 32 [ 385.289923][ T5855] usb 4-1: unable to get BOS descriptor or descriptor too short [ 385.308076][ T5855] usb 4-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 24 [ 385.320227][T11030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.331608][ T5855] usb 4-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 1023 [ 385.344272][T11030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.352832][ T5855] usb 4-1: config 1 interface 0 has no altsetting 0 [ 385.366624][ T5855] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 385.382506][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.398865][ T5855] usb 4-1: Product: syz [ 385.408073][ T5855] usb 4-1: Manufacturer: syz [ 385.427272][T11030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.435893][ T5855] usb 4-1: SerialNumber: syz [ 385.448524][T11016] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 385.451381][T11030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.459681][T11016] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 385.691031][ T5855] usb 4-1: bad CDC descriptors [ 385.707490][ T5855] usb 4-1: USB disconnect, device number 11 [ 385.725040][ T5931] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 385.863805][ T5931] usb 5-1: device descriptor read/64, error -71 [ 386.014762][T11037] FAULT_INJECTION: forcing a failure. [ 386.014762][T11037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 386.028842][T11037] CPU: 0 UID: 0 PID: 11037 Comm: syz.1.1518 Not tainted syzkaller #0 PREEMPT(full) [ 386.028874][T11037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 386.028889][T11037] Call Trace: [ 386.028898][T11037] [ 386.028907][T11037] dump_stack_lvl+0x189/0x250 [ 386.028936][T11037] ? __pfx____ratelimit+0x10/0x10 [ 386.028961][T11037] ? __pfx_dump_stack_lvl+0x10/0x10 [ 386.028984][T11037] ? __pfx__printk+0x10/0x10 [ 386.029018][T11037] should_fail_ex+0x414/0x560 [ 386.029066][T11037] _copy_to_user+0x31/0xb0 [ 386.029097][T11037] simple_read_from_buffer+0xe1/0x170 [ 386.029129][T11037] proc_fail_nth_read+0x1b3/0x220 [ 386.029155][T11037] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 386.029182][T11037] ? rw_verify_area+0x2a6/0x4d0 [ 386.029205][T11037] ? __lock_acquire+0xab9/0xd20 [ 386.029229][T11037] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 386.029254][T11037] vfs_read+0x200/0xa30 [ 386.029277][T11037] ? fdget_pos+0x247/0x320 [ 386.029310][T11037] ? __pfx___mutex_lock+0x10/0x10 [ 386.029339][T11037] ? __pfx_vfs_read+0x10/0x10 [ 386.029366][T11037] ? __fget_files+0x2a/0x420 [ 386.029399][T11037] ? __fget_files+0x3a0/0x420 [ 386.029427][T11037] ? __fget_files+0x2a/0x420 [ 386.029465][T11037] ksys_read+0x145/0x250 [ 386.029493][T11037] ? __pfx_ksys_read+0x10/0x10 [ 386.029522][T11037] ? do_syscall_64+0xbe/0xfa0 [ 386.029551][T11037] do_syscall_64+0xfa/0xfa0 [ 386.029578][T11037] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.029599][T11037] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 386.029622][T11037] ? clear_bhb_loop+0x60/0xb0 [ 386.029649][T11037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.029672][T11037] RIP: 0033:0x7f9b0f58d8dc [ 386.029708][T11037] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 386.029728][T11037] RSP: 002b:00007f9b103f2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 386.029752][T11037] RAX: ffffffffffffffda RBX: 00007f9b0f7e5fa0 RCX: 00007f9b0f58d8dc [ 386.029769][T11037] RDX: 000000000000000f RSI: 00007f9b103f20a0 RDI: 0000000000000004 [ 386.029783][T11037] RBP: 00007f9b103f2090 R08: 0000000000000000 R09: 0000000000000000 [ 386.029797][T11037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 386.029810][T11037] R13: 00007f9b0f7e6038 R14: 00007f9b0f7e5fa0 R15: 00007ffc70a85928 [ 386.029847][T11037] [ 386.311940][T11039] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1520'. [ 386.325250][T11039] input: syz0 as /devices/virtual/input/input28 [ 386.407829][ T5931] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 386.549221][ T5931] usb 5-1: device descriptor read/64, error -71 [ 386.666872][ T5931] usb usb5-port1: attempt power cycle [ 386.853983][T11059] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1528'. [ 387.029241][ T5931] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 387.051311][ T5931] usb 5-1: device descriptor read/8, error -71 [ 387.074224][T11067] QAT: failed to copy from user cfg_data. [ 387.104306][ T5845] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 387.200289][ T5914] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 387.264475][ T5845] usb 2-1: Using ep0 maxpacket: 8 [ 387.271424][ T5845] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.281705][ T5845] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 387.290887][ T5845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.301784][ T5845] usb 2-1: config 0 descriptor?? [ 387.307364][ T5931] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 387.319494][ T5845] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 387.340365][ T5931] usb 5-1: device descriptor read/8, error -71 [ 387.365402][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.376551][ T5914] usb 4-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00 [ 387.385712][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.397132][ T5914] usb 4-1: config 0 descriptor?? [ 387.457269][ T5931] usb usb5-port1: unable to enumerate USB device [ 387.840919][ T5914] thrustmaster 0003:044F:B654.002A: item fetching failed at offset 6/7 [ 387.852213][ T5914] thrustmaster 0003:044F:B654.002A: parse failed [ 387.858806][ T5914] thrustmaster 0003:044F:B654.002A: probe with driver thrustmaster failed with error -22 [ 388.115194][ T1211] usb 4-1: USB disconnect, device number 12 [ 388.143876][T11074] netlink: 'syz.2.1533': attribute type 1 has an invalid length. [ 388.154670][T11074] netlink: 'syz.2.1533': attribute type 2 has an invalid length. [ 388.164056][T11074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1533'. [ 388.608631][ T5845] gspca_vc032x: reg_w err -71 [ 388.622721][ T5845] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 388.646243][ T5845] usb 2-1: USB disconnect, device number 36 [ 388.947816][ T30] audit: type=1326 audit(1759518686.774:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11094 comm="syz.4.1542" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5095b8eec9 code=0x0 [ 389.507783][T11111] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1549'. [ 389.596114][ T5914] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 389.769920][ T5914] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 389.788562][ T5931] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 389.796306][ T5914] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 389.796340][ T5914] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 389.796457][ T5914] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 389.796489][ T5914] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 389.864177][ T5914] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 389.875121][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 389.883181][ T5914] usb 2-1: Product: syz [ 389.914548][ T5914] usb 2-1: Manufacturer: syz [ 389.941724][ T5914] cdc_wdm 2-1:1.0: skipping garbage [ 389.947006][ T5914] cdc_wdm 2-1:1.0: skipping garbage [ 389.957179][T11123] [U]  [ 389.971922][ T5914] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 389.977891][ T5914] cdc_wdm 2-1:1.0: Unknown control protocol [ 390.015430][ T5931] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.036704][ T5931] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 390.050591][ T5931] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 390.061147][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.070242][ T5931] usb 4-1: Product: syz [ 390.074431][ T5931] usb 4-1: Manufacturer: syz [ 390.079281][ T5931] usb 4-1: SerialNumber: syz [ 390.100755][ T5931] cdc_mbim 4-1:1.0: skipping garbage [ 390.176791][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 390.177450][ T1211] usb 2-1: USB disconnect, device number 37 [ 390.183454][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 390.183480][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 390.206049][ C1] vkms_vblank_simulate: vblank timer overrun [ 390.232323][T11109] cdc_wdm 2-1:1.0: Tx URB error: -19 [ 390.312269][T11113] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 390.582885][T11145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.594135][T11145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.697208][T11150] loop7: detected capacity change from 0 to 16384 [ 390.752353][T11113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.772714][T11113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.834670][T11154] syzkaller1: entered promiscuous mode [ 390.840445][T11154] syzkaller1: entered allmulticast mode [ 391.006436][T11113] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 391.015195][ T5931] cdc_mbim 4-1:1.0: setting tx_max = 16384 [ 391.029033][ T5931] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 391.071175][ T5931] wwan wwan0: port wwan0mbim0 attached [ 391.094843][ T5931] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, d6:76:2a:07:bf:db [ 391.221998][ T44] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 391.249227][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 391.255993][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 391.265562][ T5931] usb 4-1: USB disconnect, device number 13 [ 391.278253][ T5931] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 391.310288][ T5914] usb 2-1: new low-speed USB device number 38 using dummy_hcd [ 391.409964][ T44] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.431609][ T44] usb 5-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df [ 391.448301][ T5931] wwan wwan0: port wwan0mbim0 disconnected [ 391.467331][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.490497][ T5914] usb 2-1: config 61 has an invalid interface number: 50 but max is 0 [ 391.505519][ T5914] usb 2-1: config 61 has no interface number 0 [ 391.512984][ T5914] usb 2-1: New USB device found, idVendor=12d1, idProduct=2384, bcdDevice=40.6b [ 391.531971][ T44] usb 5-1: config 0 descriptor?? [ 391.553422][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.573232][ T44] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected. [ 391.810663][ T5914] usb 2-1: string descriptor 0 read error: -71 [ 391.837925][ T5914] option 2-1:61.50: GSM modem (1-port) converter detected [ 391.872563][ T5914] usb 2-1: USB disconnect, device number 38 [ 391.888566][ T5914] option 2-1:61.50: device disconnected [ 391.976260][ T44] pwc: recv_control_msg error -71 req 02 val 2b00 [ 392.002561][ T44] pwc: recv_control_msg error -71 req 02 val 2700 [ 392.011112][ T44] pwc: recv_control_msg error -71 req 04 val 1700 [ 392.028977][ T44] pwc: recv_control_msg error -71 req 02 val 2c00 [ 392.036920][ T44] pwc: recv_control_msg error -71 req 04 val 1000 [ 392.054407][ T44] pwc: recv_control_msg error -71 req 04 val 1300 [ 392.076037][ T44] pwc: recv_control_msg error -71 req 04 val 1400 [ 392.083322][ T44] pwc: recv_control_msg error -71 req 02 val 2000 [ 392.098348][ T44] pwc: recv_control_msg error -71 req 02 val 2100 [ 392.114691][ T44] pwc: recv_control_msg error -71 req 02 val 2200 [ 392.135528][ T44] pwc: recv_control_msg error -71 req 06 val 0600 [ 392.164458][ T44] pwc: recv_control_msg error -71 req 04 val 1500 [ 392.199775][ T44] pwc: recv_control_msg error -71 req 02 val 2500 [ 392.224198][ T44] pwc: recv_control_msg error -71 req 02 val 2400 [ 392.231784][ T44] pwc: recv_control_msg error -71 req 02 val 2600 [ 392.236481][T11189] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1576'. [ 392.253067][ T44] pwc: recv_control_msg error -71 req 02 val 2900 [ 392.292805][ T44] pwc: recv_control_msg error -71 req 02 val 2800 [ 392.300013][ T44] pwc: recv_control_msg error -71 req 04 val 1100 [ 392.312439][ T44] pwc: recv_control_msg error -71 req 04 val 1200 [ 392.323613][ T44] pwc: Registered as video103. [ 392.330748][ T44] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input29 [ 392.413005][ T44] usb 5-1: USB disconnect, device number 15 [ 392.810817][ T5931] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 392.889554][T11201] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1579'. [ 392.997771][ T5931] usb 4-1: Using ep0 maxpacket: 8 [ 393.005211][ T5931] usb 4-1: config 111 has an invalid interface number: 71 but max is 0 [ 393.016205][ T5931] usb 4-1: config 111 has no interface number 0 [ 393.039483][ T5931] usb 4-1: config 111 interface 71 has no altsetting 0 [ 393.063101][ T5931] usb 4-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice=50.12 [ 393.081922][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.090045][ T5931] usb 4-1: Product: syz [ 393.093419][ T44] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 393.096563][ T5931] usb 4-1: Manufacturer: syz [ 393.107003][ T5931] usb 4-1: SerialNumber: syz [ 393.157630][ T5855] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 393.297822][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 393.306998][ T5855] usb 5-1: device descriptor read/64, error -71 [ 393.321203][ T44] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 393.335099][ T44] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 393.350549][ T44] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 393.362839][ T5931] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:111.71/input/input30 [ 393.363942][ T44] usb 2-1: config 0 interface 0 has no altsetting 0 [ 393.382442][ T44] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 393.391629][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.394343][ T5199] bcm5974 4-1:111.71: could not read from device [ 393.424427][ T44] usb 2-1: config 0 descriptor?? [ 393.438017][ T5199] bcm5974 4-1:111.71: could not read from device [ 393.444877][ T5931] usb 4-1: USB disconnect, device number 14 [ 393.457771][ T5199] bcm5974 4-1:111.71: could not read from device [ 393.564182][ T5855] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 393.725861][ T5855] usb 5-1: device descriptor read/64, error -71 [ 393.747751][T11230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.759527][T11230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.865550][ T5855] usb usb5-port1: attempt power cycle [ 393.940781][ T44] hid (null): invalid report_size 29797 [ 393.957314][ T44] hid (null): nested delimiters [ 393.983845][ T44] hid (null): invalid report_size 28520 [ 394.169321][ T44] usb 2-1: USB disconnect, device number 39 [ 394.240692][ T5855] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 394.269909][ T5855] usb 5-1: device descriptor read/8, error -71 [ 394.493632][ T5931] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 394.525567][ T5855] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 394.547794][ T5855] usb 5-1: device descriptor read/8, error -71 [ 394.655811][ T5931] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 394.677260][ T5931] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 394.677595][ T5855] usb usb5-port1: unable to enumerate USB device [ 394.689742][ T5931] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 394.703911][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.713511][ T5931] usb 4-1: Product: syz [ 394.717770][ T5931] usb 4-1: Manufacturer: syz [ 394.743329][ T5931] usb 4-1: SerialNumber: syz [ 395.207190][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 395.216688][ T5931] usb 4-1: 0:2 : does not exist [ 395.221776][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 395.290672][T11270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.300423][T11270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.477419][ T44] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 395.637708][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 395.644548][ T44] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 395.653324][ T44] usb 2-1: config 0 has no interface number 0 [ 395.661785][ T44] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 395.670642][ T1211] usb 4-1: USB disconnect, device number 15 [ 395.673033][ T44] usb 2-1: config 0 interface 85 has no altsetting 0 [ 395.690852][ T44] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 395.700501][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.709226][ T44] usb 2-1: Product: syz [ 395.713940][ T44] usb 2-1: Manufacturer: syz [ 395.718628][ T44] usb 2-1: SerialNumber: syz [ 395.730976][ T44] usb 2-1: config 0 descriptor?? [ 395.929358][T11272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.943867][T11272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.463385][ T44] appletouch 2-1:0.85: Geyser mode initialized. [ 396.476507][ T44] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input31 [ 396.653911][T11298] loop2: detected capacity change from 0 to 7 [ 396.672404][T11298] Dev loop2: unable to read RDB block 7 [ 396.680438][T11298] loop2: AHDI p1 p2 p3 [ 396.684773][T11298] loop2: partition table partially beyond EOD, truncated [ 396.695158][T11298] loop2: p1 start 1601398130 is beyond EOD, truncated [ 396.702843][T11298] loop2: p2 start 1702059890 is beyond EOD, truncated [ 396.749914][ T5845] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 396.900142][ T5845] usb 5-1: device descriptor read/64, error -71 [ 396.949942][T11307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.960522][T11307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.156281][ T5855] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 397.166985][ T5845] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 397.316746][ T5855] usb 4-1: Using ep0 maxpacket: 16 [ 397.316724][ T5845] usb 5-1: device descriptor read/64, error -71 [ 397.331857][ T5855] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 397.343692][ T5855] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 397.353808][ T5855] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 397.367461][ T5855] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 397.376659][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.384820][ T5855] usb 4-1: Product: syz [ 397.389034][ T5855] usb 4-1: Manufacturer: syz [ 397.393750][ T5855] usb 4-1: SerialNumber: syz [ 397.435474][ T5845] usb usb5-port1: attempt power cycle [ 397.627291][ T5855] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 397.635182][ T5855] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 397.701024][ T5855] usb 4-1: USB disconnect, device number 16 [ 397.737841][ T5952] udevd[5952]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 397.798956][ T5845] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 397.833329][ T5845] usb 5-1: device descriptor read/8, error -71 [ 398.108332][ T5845] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 398.141269][ T5845] usb 5-1: device descriptor read/8, error -71 [ 398.259195][ T5845] usb usb5-port1: unable to enumerate USB device [ 398.310976][T11329] vxfs: unable to read disk superblock at 1 [ 398.318093][T11329] vxfs: unable to read disk superblock at 8 [ 398.324438][T11329] vxfs: can't find superblock. [ 398.363432][T11332] overlayfs: overlapping lowerdir path [ 398.437751][ T44] usb 2-1: USB disconnect, device number 40 [ 398.467239][ T44] appletouch 2-1:0.85: input: appletouch disconnected [ 398.559073][T11337] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1626'. [ 399.085321][ T44] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 399.189206][T11356] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1635'. [ 399.275804][ T44] usb 2-1: config index 0 descriptor too short (expected 1051, got 27) [ 399.302946][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 399.318066][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 399.338876][ T44] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 399.348265][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.356467][ T44] usb 2-1: Product: syz [ 399.361544][ T44] usb 2-1: Manufacturer: syz [ 399.366477][ T44] usb 2-1: SerialNumber: syz [ 399.374847][ T44] usb 2-1: config 0 descriptor?? [ 399.505765][T11367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.520231][T11367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.602359][ T44] usb 2-1: USB disconnect, device number 41 [ 399.829822][ T5845] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 399.968760][ T5845] usb 4-1: device descriptor read/64, error -71 [ 400.236635][ T5845] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 400.307401][T11379] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1644'. [ 400.386391][ T5845] usb 4-1: device descriptor read/64, error -71 [ 400.512373][ T5845] usb usb4-port1: attempt power cycle [ 400.880446][T11406] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1654'. [ 400.900829][ T5845] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 400.943229][ T5845] usb 4-1: device descriptor read/8, error -71 [ 400.970525][T11409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.981436][T11409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.997835][T11409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1656'. [ 401.121041][T11415] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1658'. [ 401.132765][T11415] netlink: 'syz.1.1658': attribute type 2 has an invalid length. [ 401.141100][T11415] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1658'. [ 401.219918][ T5845] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 401.242245][ T5845] usb 4-1: device descriptor read/8, error -71 [ 401.360465][ T5845] usb usb4-port1: unable to enumerate USB device [ 401.412488][ T44] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 401.578689][ T44] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 401.589059][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.597163][ T44] usb 2-1: Product: syz [ 401.601372][ T44] usb 2-1: Manufacturer: syz [ 401.607994][ T44] usb 2-1: SerialNumber: syz [ 401.615408][ T44] usb 2-1: config 0 descriptor?? [ 401.837748][ T44] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 402.015489][T11417] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 402.018691][T11418] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 402.503228][ T5855] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 402.674355][ T5855] usb 5-1: Using ep0 maxpacket: 8 [ 402.682594][ T5855] usb 5-1: unable to get BOS descriptor or descriptor too short [ 402.692825][ T5855] usb 5-1: config 1 has an invalid interface descriptor of length 4, skipping [ 402.701885][ T5855] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 402.711088][ T5855] usb 5-1: config 1 has no interface number 1 [ 402.717639][ T5855] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 402.731393][ T5855] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 402.740624][ T5855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.748682][ T5855] usb 5-1: Product: syz [ 402.752953][ T5855] usb 5-1: Manufacturer: syz [ 402.757604][ T5855] usb 5-1: SerialNumber: syz [ 402.859610][T11424] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1662'. [ 402.869528][T11424] netlink: 'syz.3.1662': attribute type 5 has an invalid length. [ 402.984089][T11422] 9pnet: Unknown protocol version 9 [ 403.019598][ T8769] Bluetooth: (null): Invalid header checksum [ 403.049305][T11429] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1664'. [ 403.158353][ T5855] usb 5-1: 2:1: cannot set freq 15828157 to ep 0x82 [ 403.178277][ T44] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 403.218436][ T44] usb 2-1: USB disconnect, device number 42 [ 403.244584][ T5855] usb 5-1: USB disconnect, device number 24 [ 403.786967][ T5855] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 403.959790][ T5855] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 403.970452][T11452] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1673'. [ 403.976919][ T5855] usb 4-1: config 0 interface 0 has no altsetting 0 [ 404.015220][ T5855] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 404.026902][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 404.035454][ T5855] usb 4-1: Product: syz [ 404.039826][ T5855] usb 4-1: Manufacturer: syz [ 404.046290][ T5855] usb 4-1: SerialNumber: syz [ 404.058949][ T5855] usb 4-1: config 0 descriptor?? [ 404.084867][ T5855] usb 4-1: selecting invalid altsetting 0 [ 404.320869][ T5855] usb 4-1: USB disconnect, device number 21 [ 404.681162][T11472] bridge0: port 3(veth1_to_bridge) entered blocking state [ 404.699757][T11472] bridge0: port 3(veth1_to_bridge) entered disabled state [ 404.718287][T11472] veth1_to_bridge: entered allmulticast mode [ 404.743538][T11472] veth1_to_bridge: entered promiscuous mode [ 404.864073][ T5855] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 405.063090][ T5855] usb 4-1: Using ep0 maxpacket: 32 [ 405.073213][ T5855] usb 4-1: config 1 interface 0 altsetting 9 bulk endpoint 0x82 has invalid maxpacket 1023 [ 405.091981][ T5855] usb 4-1: config 1 interface 0 altsetting 9 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 405.123242][ T5855] usb 4-1: config 1 interface 0 has no altsetting 0 [ 405.136267][ T5855] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 405.155259][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.163343][ T5855] usb 4-1: Product: ⬺莦︺ꟕ◮쑡㨎뫩俇윱郿朘诱렜傞ˬῚ쑗㣉畹冷먹꟝쫆㍜㨇剪慦ൊ䏋쩧됇ᗙ荤慭ӯ쿍渴䟂餶쀚薑慿柷ẍ᡻纐ᓺ僋駲橐അ㟶蚀빒潯 [ 405.187454][ T1211] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 405.219400][ T5855] usb 4-1: Manufacturer: ࠝ [ 405.224235][ T5855] usb 4-1: SerialNumber: syz [ 405.234028][T11439] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 405.282200][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 405.295117][T11480] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1683'. [ 405.297364][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 405.317892][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 405.326584][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 405.335714][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 405.401774][ T1211] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 405.432082][ T1211] usb 5-1: config 0 has no interface number 0 [ 405.453880][ T1211] usb 5-1: config 0 interface 255 has no altsetting 0 [ 405.487094][T11439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.507559][T11439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.510901][ T1211] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 405.546397][ T1211] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.557470][ T5855] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 405.578204][ T1211] usb 5-1: config 0 descriptor?? [ 405.597540][ T5855] usb 4-1: USB disconnect, device number 22 [ 405.618154][ T1211] cp210x 5-1:0.255: cp210x converter detected [ 405.789285][T11487] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 405.795864][T11487] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 405.853060][T11487] vhci_hcd vhci_hcd.0: Device attached [ 405.918023][T11488] vhci_hcd: connection closed [ 405.918566][ T1094] vhci_hcd: stop threads [ 405.958821][ T1094] vhci_hcd: release socket [ 405.963322][ T1094] vhci_hcd: disconnect device [ 406.038021][T11476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.067860][T11476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.098850][ T1211] cp210x 5-1:0.255: failed to get vendor val 0x000e size 3: -32 [ 406.301124][ T5855] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 406.322989][ C0] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71 [ 406.323236][ T5914] usb 3-1: USB disconnect, device number 48 [ 406.330002][ C0] ------------[ cut here ]------------ [ 406.341731][ C0] URB ffff8881462cbf00 submitted while active [ 406.348865][ C0] WARNING: drivers/usb/core/urb.c:380 at usb_submit_urb+0xf8c/0x18b0, CPU#0: syz-executor/11479 [ 406.359372][ C0] Modules linked in: [ 406.363528][ C0] CPU: 0 UID: 0 PID: 11479 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 406.373105][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 406.383202][ C0] RIP: 0010:usb_submit_urb+0xf8c/0x18b0 [ 406.388810][ C0] Code: 00 00 00 e8 96 eb c6 fa e9 25 f1 ff ff e8 8c eb c6 fa c6 05 c8 75 8f 08 01 90 48 c7 c7 a0 14 12 8c 48 89 de e8 c5 58 8a fa 90 <0f> 0b 90 90 e9 ec f0 ff ff e8 66 eb c6 fa c6 05 f7 c0 a5 08 01 41 [ 406.408455][ C0] RSP: 0018:ffffc90000007878 EFLAGS: 00010046 [ 406.414565][ C0] RAX: 5b129187b4803c00 RBX: ffff8881462cbf00 RCX: 0000000000040000 [ 406.422576][ C0] RDX: ffffc900021a1000 RSI: 0000000000015900 RDI: 0000000000015901 [ 406.430585][ C0] RBP: 000000000000000f R08: ffff8880b8624293 R09: 1ffff110170c4852 [ 406.438584][ C0] R10: dffffc0000000000 R11: ffffed10170c4853 R12: 0000000000000820 [ 406.446569][ C0] R13: ffff888057472830 R14: ffff8881462cbf08 R15: dffffc0000000000 [ 406.454552][ C0] FS: 00005555864dc500(0000) GS:ffff888125d18000(0000) knlGS:0000000000000000 [ 406.463509][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 406.470127][ C0] CR2: 00007f583fd156c0 CR3: 0000000064b38000 CR4: 00000000003526f0 [ 406.478126][ C0] Call Trace: [ 406.481428][ C0] [ 406.484279][ C0] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 406.489666][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 406.495577][ C0] ? kcov_remote_start+0x97/0x7f0 [ 406.500627][ C0] cm109_urb_irq_callback+0x709/0xca0 [ 406.506022][ C0] __usb_hcd_giveback_urb+0x376/0x540 [ 406.511411][ C0] dummy_timer+0x85f/0x44c0 [ 406.515960][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 406.521403][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 406.526388][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 406.531365][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 406.536328][ C0] __hrtimer_run_queues+0x52c/0xc60 [ 406.541566][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 406.547304][ C0] ? read_tsc+0x9/0x20 [ 406.551384][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 406.557215][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 406.562357][ C0] handle_softirqs+0x286/0x870 [ 406.567149][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 406.571939][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 406.577252][ C0] __irq_exit_rcu+0xca/0x1f0 [ 406.581872][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 406.587106][ C0] irq_exit_rcu+0x9/0x30 [ 406.591368][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 406.597025][ C0] [ 406.599980][ C0] [ 406.602921][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 406.608919][ C0] RIP: 0010:lock_acquire+0x175/0x360 [ 406.614218][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 fb fc f2 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 406.633837][ C0] RSP: 0018:ffffc90018fae438 EFLAGS: 00000206 [ 406.639932][ C0] RAX: 5b129187b4803c00 RBX: 0000000000000000 RCX: 5b129187b4803c00 [ 406.647916][ C0] RDX: 0000000000000000 RSI: ffffffff8d9f687f RDI: ffffffff8bc0f3e0 [ 406.655900][ C0] RBP: ffffffff8173bd25 R08: 0000000000000000 R09: ffffffff8173bd25 [ 406.663883][ C0] R10: ffffc90018fae5f8 R11: ffffffff81ac5cd0 R12: 0000000000000002 [ 406.671873][ C0] R13: ffffffff8e13d2e0 R14: 0000000000000000 R15: 0000000000000246 [ 406.679879][ C0] ? unwind_next_frame+0xa5/0x2390 [ 406.685021][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 406.691183][ C0] ? unwind_next_frame+0xa5/0x2390 [ 406.696339][ C0] ? unwind_next_frame+0xa5/0x2390 [ 406.701498][ C0] ? __sys_sendto+0x3bd/0x520 [ 406.706204][ C0] ? unwind_next_frame+0xa5/0x2390 [ 406.711382][ C0] unwind_next_frame+0xc2/0x2390 [ 406.716362][ C0] ? unwind_next_frame+0xa5/0x2390 [ 406.721519][ C0] ? unwind_next_frame+0xa5/0x2390 [ 406.726656][ C0] ? __sock_sendmsg+0x21c/0x270 [ 406.731536][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 406.737722][ C0] arch_stack_walk+0x11c/0x150 [ 406.742554][ C0] ? __sys_sendto+0x3bd/0x520 [ 406.747253][ C0] stack_trace_save+0x9c/0xe0 [ 406.751940][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 406.757317][ C0] ? rcu_is_watching+0x15/0xb0 [ 406.762107][ C0] kasan_save_track+0x3e/0x80 [ 406.766795][ C0] ? kasan_save_track+0x3e/0x80 [ 406.771649][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 406.776688][ C0] ? kmem_cache_alloc_noprof+0x367/0x6e0 [ 406.782337][ C0] ? __kernfs_new_node+0xd7/0x7e0 [ 406.787367][ C0] ? kernfs_new_node+0x102/0x210 [ 406.792311][ C0] ? __kernfs_create_file+0x4b/0x2e0 [ 406.797613][ C0] ? sysfs_add_file_mode_ns+0x238/0x300 [ 406.803172][ C0] ? internal_create_group+0x66d/0x1110 [ 406.808732][ C0] ? sysfs_create_groups+0x59/0x120 [ 406.813952][ C0] ? netdev_queue_update_kobjects+0x2b3/0x6d0 [ 406.820038][ C0] ? netdev_register_kobject+0x258/0x310 [ 406.825684][ C0] ? register_netdevice+0x126c/0x1ae0 [ 406.831076][ C0] ? ip6gre_newlink_common+0x3dd/0x590 [ 406.836553][ C0] ? ip6gre_newlink+0x228/0x360 [ 406.841429][ C0] ? rtnl_newlink_create+0x310/0xb00 [ 406.846734][ C0] ? rtnl_newlink+0x16e4/0x1c80 [ 406.851605][ C0] ? rtnetlink_rcv_msg+0x7cf/0xb70 [ 406.856731][ C0] ? netlink_rcv_skb+0x208/0x470 [ 406.861685][ C0] ? netlink_unicast+0x82f/0x9e0 [ 406.866637][ C0] ? netlink_sendmsg+0x805/0xb30 [ 406.871585][ C0] ? __sock_sendmsg+0x21c/0x270 [ 406.876450][ C0] ? __sys_sendto+0x3bd/0x520 [ 406.881175][ C0] __kasan_slab_alloc+0x6c/0x80 [ 406.886041][ C0] kmem_cache_alloc_noprof+0x367/0x6e0 [ 406.891527][ C0] ? __kernfs_new_node+0xd7/0x7e0 [ 406.896571][ C0] __kernfs_new_node+0xd7/0x7e0 [ 406.901431][ C0] ? __lock_acquire+0xab9/0xd20 [ 406.906304][ C0] ? __pfx___kernfs_new_node+0x10/0x10 [ 406.911778][ C0] ? kernfs_root+0x1c/0x230 [ 406.916325][ C0] ? kernfs_root+0x1c/0x230 [ 406.920843][ C0] ? kernfs_root+0x1c/0x230 [ 406.925364][ C0] ? kernfs_root+0x1c/0x230 [ 406.929892][ C0] kernfs_new_node+0x102/0x210 [ 406.934804][ C0] __kernfs_create_file+0x4b/0x2e0 [ 406.939967][ C0] sysfs_add_file_mode_ns+0x238/0x300 [ 406.945381][ C0] internal_create_group+0x66d/0x1110 [ 406.950778][ C0] ? register_netdevice+0x126c/0x1ae0 [ 406.956182][ C0] ? ip6gre_newlink_common+0x3dd/0x590 [ 406.961658][ C0] ? ip6gre_newlink+0x228/0x360 [ 406.966538][ C0] ? rtnl_newlink_create+0x310/0xb00 [ 406.971852][ C0] ? __pfx_internal_create_group+0x10/0x10 [ 406.977685][ C0] ? __sock_sendmsg+0x21c/0x270 [ 406.982579][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.988661][ C0] sysfs_create_groups+0x59/0x120 [ 406.993705][ C0] netdev_queue_update_kobjects+0x2b3/0x6d0 [ 406.999623][ C0] netdev_register_kobject+0x258/0x310 [ 407.005106][ C0] register_netdevice+0x126c/0x1ae0 [ 407.010358][ C0] ? __pfx_register_netdevice+0x10/0x10 [ 407.015931][ C0] ? __asan_memset+0x22/0x50 [ 407.020540][ C0] ? dev_addr_mod+0x2ce/0x3d0 [ 407.025238][ C0] ip6gre_newlink_common+0x3dd/0x590 [ 407.030535][ C0] ? __pfx_ip6gre_newlink_common+0x10/0x10 [ 407.036358][ C0] ? lockdep_rtnl_is_held+0x26/0x40 [ 407.041574][ C0] ? ip6gre_tunnel_find+0x501/0x5a0 [ 407.046794][ C0] ip6gre_newlink+0x228/0x360 [ 407.051492][ C0] ? __pfx_ip6gre_newlink+0x10/0x10 [ 407.056796][ C0] rtnl_newlink_create+0x310/0xb00 [ 407.061925][ C0] ? __lock_acquire+0xab9/0xd20 [ 407.066801][ C0] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 407.072460][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 407.077510][ C0] ? full_name_hash+0x92/0xe0 [ 407.082212][ C0] rtnl_newlink+0x16e4/0x1c80 [ 407.086918][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 407.091974][ C0] ? __lock_acquire+0xab9/0xd20 [ 407.096850][ C0] ? __lock_acquire+0xab9/0xd20 [ 407.101735][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 407.106959][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 407.112259][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 407.117481][ C0] ? __lock_acquire+0xab9/0xd20 [ 407.122362][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 407.127396][ C0] rtnetlink_rcv_msg+0x7cf/0xb70 [ 407.132338][ C0] ? __lock_acquire+0xab9/0xd20 [ 407.137208][ C0] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 407.142327][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 407.147813][ C0] netlink_rcv_skb+0x208/0x470 [ 407.152586][ C0] ? __lock_acquire+0xab9/0xd20 [ 407.157453][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 407.162924][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 407.168232][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 407.173456][ C0] netlink_unicast+0x82f/0x9e0 [ 407.178253][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 407.183552][ C0] ? netlink_sendmsg+0x642/0xb30 [ 407.188509][ C0] ? skb_put+0x11b/0x210 [ 407.192764][ C0] netlink_sendmsg+0x805/0xb30 [ 407.197545][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 407.202852][ C0] ? aa_sock_msg_perm+0xf1/0x1d0 [ 407.207808][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 407.213110][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 407.218412][ C0] __sock_sendmsg+0x21c/0x270 [ 407.223116][ C0] __sys_sendto+0x3bd/0x520 [ 407.227639][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 407.232670][ C0] ? __lock_acquire+0xab9/0xd20 [ 407.237558][ C0] ? fd_install+0x97/0x540 [ 407.241992][ C0] ? fd_install+0x30d/0x540 [ 407.246512][ C0] __x64_sys_sendto+0xde/0x100 [ 407.251290][ C0] do_syscall_64+0xfa/0xfa0 [ 407.255808][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.261903][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 407.268069][ C0] ? clear_bhb_loop+0x60/0xb0 [ 407.272769][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.278672][ C0] RIP: 0033:0x7fbf0b190d5c [ 407.283112][ C0] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 407.302746][ C0] RSP: 002b:00007ffe46521080 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 407.311185][ C0] RAX: ffffffffffffffda RBX: 00007fbf0bf14620 RCX: 00007fbf0b190d5c [ 407.319166][ C0] RDX: 0000000000000044 RSI: 00007fbf0bf14670 RDI: 0000000000000003 [ 407.327160][ C0] RBP: 0000000000000000 R08: 00007ffe465210d4 R09: 000000000000000c [ 407.335140][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 407.343126][ C0] R13: 0000000000000000 R14: 00007fbf0bf14670 R15: 0000000000000000 [ 407.351118][ C0] [ 407.354159][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 407.361461][ C0] CPU: 0 UID: 0 PID: 11479 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 407.371037][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 407.381110][ C0] Call Trace: [ 407.384405][ C0] [ 407.387255][ C0] dump_stack_lvl+0x99/0x250 [ 407.391865][ C0] ? __asan_memcpy+0x40/0x70 [ 407.396510][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 407.401728][ C0] ? __pfx__printk+0x10/0x10 [ 407.406342][ C0] vpanic+0x237/0x6d0 [ 407.410339][ C0] ? __pfx_vpanic+0x10/0x10 [ 407.414857][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 407.420081][ C0] panic+0xb9/0xc0 [ 407.423824][ C0] ? __pfx_panic+0x10/0x10 [ 407.428271][ C0] __warn+0x334/0x4c0 [ 407.432270][ C0] ? usb_submit_urb+0xf8c/0x18b0 [ 407.437227][ C0] ? usb_submit_urb+0xf8c/0x18b0 [ 407.442190][ C0] report_bug+0x2be/0x4f0 [ 407.446539][ C0] ? usb_submit_urb+0xf8c/0x18b0 [ 407.451492][ C0] ? usb_submit_urb+0xf8c/0x18b0 [ 407.456433][ C0] ? usb_submit_urb+0xf8e/0x18b0 [ 407.461374][ C0] handle_bug+0x84/0x160 [ 407.465626][ C0] exc_invalid_op+0x1a/0x50 [ 407.470143][ C0] asm_exc_invalid_op+0x1a/0x20 [ 407.474999][ C0] RIP: 0010:usb_submit_urb+0xf8c/0x18b0 [ 407.480573][ C0] Code: 00 00 00 e8 96 eb c6 fa e9 25 f1 ff ff e8 8c eb c6 fa c6 05 c8 75 8f 08 01 90 48 c7 c7 a0 14 12 8c 48 89 de e8 c5 58 8a fa 90 <0f> 0b 90 90 e9 ec f0 ff ff e8 66 eb c6 fa c6 05 f7 c0 a5 08 01 41 [ 407.500207][ C0] RSP: 0018:ffffc90000007878 EFLAGS: 00010046 [ 407.506309][ C0] RAX: 5b129187b4803c00 RBX: ffff8881462cbf00 RCX: 0000000000040000 [ 407.514301][ C0] RDX: ffffc900021a1000 RSI: 0000000000015900 RDI: 0000000000015901 [ 407.522289][ C0] RBP: 000000000000000f R08: ffff8880b8624293 R09: 1ffff110170c4852 [ 407.530268][ C0] R10: dffffc0000000000 R11: ffffed10170c4853 R12: 0000000000000820 [ 407.538249][ C0] R13: ffff888057472830 R14: ffff8881462cbf08 R15: dffffc0000000000 [ 407.546243][ C0] ? usb_submit_urb+0xf8b/0x18b0 [ 407.551204][ C0] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 407.556587][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 407.562491][ C0] ? kcov_remote_start+0x97/0x7f0 [ 407.567531][ C0] cm109_urb_irq_callback+0x709/0xca0 [ 407.572922][ C0] __usb_hcd_giveback_urb+0x376/0x540 [ 407.578313][ C0] dummy_timer+0x85f/0x44c0 [ 407.582846][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 407.588250][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 407.593204][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 407.598151][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 407.603100][ C0] __hrtimer_run_queues+0x52c/0xc60 [ 407.608356][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 407.614111][ C0] ? read_tsc+0x9/0x20 [ 407.618212][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 407.624058][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 407.629207][ C0] handle_softirqs+0x286/0x870 [ 407.633993][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 407.638788][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 407.644095][ C0] __irq_exit_rcu+0xca/0x1f0 [ 407.648699][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 407.653920][ C0] irq_exit_rcu+0x9/0x30 [ 407.658178][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 407.663825][ C0] [ 407.666764][ C0] [ 407.669729][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 407.675742][ C0] RIP: 0010:lock_acquire+0x175/0x360 [ 407.681052][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 fb fc f2 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 407.700667][ C0] RSP: 0018:ffffc90018fae438 EFLAGS: 00000206 [ 407.706749][ C0] RAX: 5b129187b4803c00 RBX: 0000000000000000 RCX: 5b129187b4803c00 [ 407.714728][ C0] RDX: 0000000000000000 RSI: ffffffff8d9f687f RDI: ffffffff8bc0f3e0 [ 407.722713][ C0] RBP: ffffffff8173bd25 R08: 0000000000000000 R09: ffffffff8173bd25 [ 407.730705][ C0] R10: ffffc90018fae5f8 R11: ffffffff81ac5cd0 R12: 0000000000000002 [ 407.738687][ C0] R13: ffffffff8e13d2e0 R14: 0000000000000000 R15: 0000000000000246 [ 407.746675][ C0] ? unwind_next_frame+0xa5/0x2390 [ 407.751809][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 407.757973][ C0] ? unwind_next_frame+0xa5/0x2390 [ 407.763119][ C0] ? unwind_next_frame+0xa5/0x2390 [ 407.768242][ C0] ? __sys_sendto+0x3bd/0x520 [ 407.772928][ C0] ? unwind_next_frame+0xa5/0x2390 [ 407.778054][ C0] unwind_next_frame+0xc2/0x2390 [ 407.783040][ C0] ? unwind_next_frame+0xa5/0x2390 [ 407.788174][ C0] ? unwind_next_frame+0xa5/0x2390 [ 407.793302][ C0] ? __sock_sendmsg+0x21c/0x270 [ 407.798178][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 407.804355][ C0] arch_stack_walk+0x11c/0x150 [ 407.809165][ C0] ? __sys_sendto+0x3bd/0x520 [ 407.813872][ C0] stack_trace_save+0x9c/0xe0 [ 407.818571][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 407.823958][ C0] ? rcu_is_watching+0x15/0xb0 [ 407.828759][ C0] kasan_save_track+0x3e/0x80 [ 407.833463][ C0] ? kasan_save_track+0x3e/0x80 [ 407.838343][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 407.843389][ C0] ? kmem_cache_alloc_noprof+0x367/0x6e0 [ 407.849054][ C0] ? __kernfs_new_node+0xd7/0x7e0 [ 407.854094][ C0] ? kernfs_new_node+0x102/0x210 [ 407.859048][ C0] ? __kernfs_create_file+0x4b/0x2e0 [ 407.864352][ C0] ? sysfs_add_file_mode_ns+0x238/0x300 [ 407.869914][ C0] ? internal_create_group+0x66d/0x1110 [ 407.875466][ C0] ? sysfs_create_groups+0x59/0x120 [ 407.880668][ C0] ? netdev_queue_update_kobjects+0x2b3/0x6d0 [ 407.886755][ C0] ? netdev_register_kobject+0x258/0x310 [ 407.892501][ C0] ? register_netdevice+0x126c/0x1ae0 [ 407.897888][ C0] ? ip6gre_newlink_common+0x3dd/0x590 [ 407.903357][ C0] ? ip6gre_newlink+0x228/0x360 [ 407.908228][ C0] ? rtnl_newlink_create+0x310/0xb00 [ 407.913526][ C0] ? rtnl_newlink+0x16e4/0x1c80 [ 407.918386][ C0] ? rtnetlink_rcv_msg+0x7cf/0xb70 [ 407.923509][ C0] ? netlink_rcv_skb+0x208/0x470 [ 407.928468][ C0] ? netlink_unicast+0x82f/0x9e0 [ 407.933412][ C0] ? netlink_sendmsg+0x805/0xb30 [ 407.938371][ C0] ? __sock_sendmsg+0x21c/0x270 [ 407.943257][ C0] ? __sys_sendto+0x3bd/0x520 [ 407.948005][ C0] __kasan_slab_alloc+0x6c/0x80 [ 407.952872][ C0] kmem_cache_alloc_noprof+0x367/0x6e0 [ 407.958354][ C0] ? __kernfs_new_node+0xd7/0x7e0 [ 407.963404][ C0] __kernfs_new_node+0xd7/0x7e0 [ 407.968273][ C0] ? __lock_acquire+0xab9/0xd20 [ 407.973186][ C0] ? __pfx___kernfs_new_node+0x10/0x10 [ 407.978659][ C0] ? kernfs_root+0x1c/0x230 [ 407.983178][ C0] ? kernfs_root+0x1c/0x230 [ 407.987692][ C0] ? kernfs_root+0x1c/0x230 [ 407.992202][ C0] ? kernfs_root+0x1c/0x230 [ 407.996721][ C0] kernfs_new_node+0x102/0x210 [ 408.001504][ C0] __kernfs_create_file+0x4b/0x2e0 [ 408.006632][ C0] sysfs_add_file_mode_ns+0x238/0x300 [ 408.012032][ C0] internal_create_group+0x66d/0x1110 [ 408.017421][ C0] ? register_netdevice+0x126c/0x1ae0 [ 408.022811][ C0] ? ip6gre_newlink_common+0x3dd/0x590 [ 408.028279][ C0] ? ip6gre_newlink+0x228/0x360 [ 408.033146][ C0] ? rtnl_newlink_create+0x310/0xb00 [ 408.038444][ C0] ? __pfx_internal_create_group+0x10/0x10 [ 408.044255][ C0] ? __sock_sendmsg+0x21c/0x270 [ 408.049134][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.055246][ C0] sysfs_create_groups+0x59/0x120 [ 408.060336][ C0] netdev_queue_update_kobjects+0x2b3/0x6d0 [ 408.066256][ C0] netdev_register_kobject+0x258/0x310 [ 408.071737][ C0] register_netdevice+0x126c/0x1ae0 [ 408.076974][ C0] ? __pfx_register_netdevice+0x10/0x10 [ 408.082545][ C0] ? __asan_memset+0x22/0x50 [ 408.087155][ C0] ? dev_addr_mod+0x2ce/0x3d0 [ 408.091848][ C0] ip6gre_newlink_common+0x3dd/0x590 [ 408.097145][ C0] ? __pfx_ip6gre_newlink_common+0x10/0x10 [ 408.102961][ C0] ? lockdep_rtnl_is_held+0x26/0x40 [ 408.108186][ C0] ? ip6gre_tunnel_find+0x501/0x5a0 [ 408.113417][ C0] ip6gre_newlink+0x228/0x360 [ 408.118151][ C0] ? __pfx_ip6gre_newlink+0x10/0x10 [ 408.123370][ C0] rtnl_newlink_create+0x310/0xb00 [ 408.128498][ C0] ? __lock_acquire+0xab9/0xd20 [ 408.133369][ C0] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 408.139025][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 408.144076][ C0] ? full_name_hash+0x92/0xe0 [ 408.148781][ C0] rtnl_newlink+0x16e4/0x1c80 [ 408.153487][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 408.158554][ C0] ? __lock_acquire+0xab9/0xd20 [ 408.163452][ C0] ? __lock_acquire+0xab9/0xd20 [ 408.168338][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 408.173557][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 408.178853][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 408.184076][ C0] ? __lock_acquire+0xab9/0xd20 [ 408.188961][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 408.194002][ C0] rtnetlink_rcv_msg+0x7cf/0xb70 [ 408.198957][ C0] ? __lock_acquire+0xab9/0xd20 [ 408.203846][ C0] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 408.208977][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 408.214465][ C0] netlink_rcv_skb+0x208/0x470 [ 408.219239][ C0] ? __lock_acquire+0xab9/0xd20 [ 408.224102][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 408.229570][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 408.234877][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 408.240093][ C0] netlink_unicast+0x82f/0x9e0 [ 408.244873][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 408.250169][ C0] ? netlink_sendmsg+0x642/0xb30 [ 408.255128][ C0] ? skb_put+0x11b/0x210 [ 408.259398][ C0] netlink_sendmsg+0x805/0xb30 [ 408.264188][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 408.269519][ C0] ? aa_sock_msg_perm+0xf1/0x1d0 [ 408.274480][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 408.279783][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 408.285101][ C0] __sock_sendmsg+0x21c/0x270 [ 408.289801][ C0] __sys_sendto+0x3bd/0x520 [ 408.294321][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 408.299352][ C0] ? __lock_acquire+0xab9/0xd20 [ 408.304240][ C0] ? fd_install+0x97/0x540 [ 408.308674][ C0] ? fd_install+0x30d/0x540 [ 408.313200][ C0] __x64_sys_sendto+0xde/0x100 [ 408.317982][ C0] do_syscall_64+0xfa/0xfa0 [ 408.322500][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.328574][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 408.334738][ C0] ? clear_bhb_loop+0x60/0xb0 [ 408.339437][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.345339][ C0] RIP: 0033:0x7fbf0b190d5c [ 408.349765][ C0] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 408.369389][ C0] RSP: 002b:00007ffe46521080 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 408.377834][ C0] RAX: ffffffffffffffda RBX: 00007fbf0bf14620 RCX: 00007fbf0b190d5c [ 408.385825][ C0] RDX: 0000000000000044 RSI: 00007fbf0bf14670 RDI: 0000000000000003 [ 408.393829][ C0] RBP: 0000000000000000 R08: 00007ffe465210d4 R09: 000000000000000c [ 408.401813][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 408.409792][ C0] R13: 0000000000000000 R14: 00007fbf0bf14670 R15: 0000000000000000 [ 408.417786][ C0] [ 408.421194][ C0] Kernel Offset: disabled [ 408.425523][ C0] Rebooting in 86400 seconds..