last executing test programs: 10.600746325s ago: executing program 0 (id=1090): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000012c0)={0x2004}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000040)={0x40001000}) poll(&(0x7f0000000000)=[{r2, 0x8}], 0x1, 0x1) mmap(&(0x7f0000161000/0x2000)=nil, 0x2000, 0x2000007, 0x38011, r0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000440)={0xe, {0xa, 0x2, 0xfa, 0x96, "17c3793c5c38db8bef9ed965647845f9b6b2893b57e38a86b2e260f088ea3ef92ea87847fbc7a90227f647a17837c457b3db6e8ff28a9c25000994fe36a9f76613c4792549c37fd89fc72ce6a6df31e47210b2aa4179fe6779b75dffd49ae99d84590704abd56c802c5d2a3593cde1744275a5ab37953c03e27bd954281dfb12cbb5139bacd38069a43c34896721859280836a6dc093"}}, 0xa2) syz_usb_control_io(r3, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) close_range(r4, r4, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x3b080, 0x0) r6 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000054c00048018000180080001006f7366000c000280080001400000000430000180080001006e6174002400028008000140000000010800034000000016080002400000000208000440080000070900010073797a30007f00000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x24040845}, 0x80) r8 = socket(0x2, 0x80805, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000000340)={r10, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r8, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000000400)=@sack_info={0x0, 0x9, 0x5}, 0xc) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r6, 0x0) sendfile(r5, r5, 0x0, 0x200000) landlock_create_ruleset(&(0x7f0000000080)={0x8, 0x1}, 0x18, 0x1) 10.2884533s ago: executing program 2 (id=1093): r0 = inotify_init() syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES8=r0, @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYRES8=r0, @ANYRES64=r0, @ANYRES16=r0, @ANYRES64=r0, @ANYRES32=r0], 0x0) 8.384839376s ago: executing program 4 (id=1096): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x28, 0x3f7, 0x4, 0x70bd26, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}}, 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x8000) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, 0xffffffffffffffff, 0x0) socket(0x15, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000280)={0x0, 0x224e, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 7.476668685s ago: executing program 0 (id=1102): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001840)={{0x14}, [@NFT_MSG_NEWRULE={0xb0, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x84, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}]}}}, {0x60, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x34, 0x3, "55b0f1230a6a7db23b6d45fcd6c231e61562388840e6520b620f0c97ff4d151ff6840ec33256fa29356e76d1711be493"}, @NFTA_MATCH_NAME={0xe, 0x1, 'multiport\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xd8}, 0x1, 0x0, 0x0, 0x20000091}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r6 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) 7.263472209s ago: executing program 2 (id=1103): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0) write$6lowpan_enable(r1, &(0x7f0000000040)='0', 0x1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aae", 0xb) r2 = accept$alg(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042c"], 0x14) sendmmsg$alg(r2, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906c594125a10053c8e288ac4445ff0e999d423cc250e31e8650d248e49ba5fb3be8db01db38acf5a4455630ecb10f753530ada6598a1ff4805370a5cebf05e199368871b2751c242633419d13a6b05a390d21ab1d44be1254385b3d882c646f9762bf3480e05e98c9cc655adb7caa279e66709794e3b93cda0b9a14794e6d020cc68ea70e71a083e1a2b375591203ce218e8d244cf32f5dd7af0ee1ed032d3b59e4d57136639d68b7577553393a9", 0xf1}, {&(0x7f0000000280)="ef7791000dc7777cb951ca638ea0e1b5d280548c882aa59a68cd17c0e7f23d6d56a03be6caa272b3505e304463179c4d7768d9c3e5c21f3a9963ffde6682e5ec406f20e7766c0dcaee3f3cfefe30b771e51c8dba17ea430255d30c5843b8c6c14eecd0db79bb292ac9fe259ce24d1fc233cfc40fabbfb8a7a5e1ebb324dcb3020b47c9be6f1e3adf2084a5d782b882ebd9720de1b208910e86c9bd7b3de44dbab0c0", 0xa2}], 0x2, 0x0, 0x0, 0x40041}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)=""/64, 0x40}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x7fff}], 0x1, 0x2101, 0x0) 6.703689247s ago: executing program 2 (id=1104): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4000}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x70, 0x0, 0xf2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6d1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe02e, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x4, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x789], 0x1, 0x400}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x0, 0x1}, 0x8) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000013c0)={0xffffffffffffffff, 0xa, {0x0, 0x0, 0x0, 0x5, 0x8000, 0x0, 0x4, 0x1f, 0x10, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "143939c787a16c1ca43f80026d1a8554fe581b59dee430e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d200", "24431a1e77a68e17000000040008000000000000000000e5e900", [0x83]}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000006080)=ANY=[@ANYBLOB="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"], 0x8814}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 6.260715875s ago: executing program 3 (id=1105): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_setup(0x10000, &(0x7f0000000800)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x4f, 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1f, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_io_uring_setup(0x1b18, &(0x7f0000000300)={0x0, 0x939d, 0x8000, 0x0, 0x35}, &(0x7f0000000380), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f0000000800)={0x0}, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000900)={&(0x7f0000003000)={[{&(0x7f0000000440)="ac6766f5e1acf00769a777d4dbf5598dc381571628bde66b4d89a28e554cd26c3bcc3f1cb22d6903f244937c929996f1671901d6c5bf773a1ba88d8929178e955408a4907e38910c17fba80f275e6c9110c47ca5163594d26e73cb4f1fb55b6d1cadc7a1b6277878a865ff0b26e06f1d51ded983e72ea5472e90d3fdb6d4830889ae51e6fa48b5437ddc41a060e20fe1d8d00214dbc9", 0x96, 0x2}, {&(0x7f0000000540)="8000e6e3631563911233939824e9e25399f5d9729cabe4f32281381d9be42be0b54d588090b8005d9e3ff0911a4185325a96a9b9dd0a276fb9d55c88832ed0584f4465c938b21ea91fbd22c6c51e2d3f8fea94e61a652f578551d23c40ada11331b4bf91098086db732254b839b9074f70f0e5662405a35ac704ed147d17d499f92ed066b8c7d451875ff11e2a611f373ab0c823c4a72f42486af25e278c9dc8e3a14a3fd67824a385d1a04c662584395db1caac2a271a651624b1c4e56fb0a3", 0xc0, 0x1}, {&(0x7f0000000740)="162e1313e4c72f0c43dfbf09be5591631ef06e8e18c9587f05b41b7add246b7687a669020f0aba6af30f2d902b5beb53f3c3f4b1462435da0b74af18ee45819c6f79be415467ad20787beab4c078086c2d3279fcccfded5a0f2d70ae3a5322ed68a516c372f71c7615df4443ae408a2516f15dcaf9e54384cc", 0x79, 0x3}, {&(0x7f0000001840)="da1ebcaaa99dd005dd6f6165670058a91f7d15a9253e5d214a7aed07572a0273913b086cab8c971d929abb850a8c97778144b85a99d2cd6225dc6732a6577328121fea307076b627e9f01edff9ccf39af5376e6ccd022a5e36fecbd45b907976f13d938b72a2557e697d5d1e00a2540b40f81be5c518bf8ed71721cfbd9b869fdbc93d66303565f3809160e50e2c076b7be67f20936f29f60d290cb19924e0b08a047f7fe35a56cb7392b4f9ccf8ffb0bdf89764125efb7148be9c435694621b22614256e8b27f22aa44eb5db84dec8e2f19af711575c22ea3632c69dd08785313e8191edcc7def75c15f669e4f6eb1f7a99ccfba66e5d0f27f9862c1cccc677d46cabd1b54598a7b7e1553e2cecf20ecb9a9ebd918c01e6696f8294f90024418b73170b8398db08053e9d6e3f74c6e79f71f056c52b1d501df039fa769ca7d8fcb49f4e0452afd88994963c8e2fdba1f96b6f2f9539ae6945920fdc01c09211c834c75901b31c8f8d8d841ca798d12717056f474b04acd50545f07f72b8db0e1290680ccb2b3cc53132df25bdd2189d7375c26b3796ee2cc7d119bfd72d57698ab2212fe9b634d126507177a3f84b6c4e53e721ca2330cfef1718869a185e2534f655492ebf88228cadd4c1f51b79d2cbc51020a5b2762b1842c975d6cf7b00a213e1de7d5855823862b9becdfcf9e6e12bb2729de17bfa713a3961df6b9c552289a48665997d8a9f53557280108fbb281a90e1acc1ba48c0a627d6db9c65b05020024cdd0908eb9a29e78b0026329d3e5870056693c54bb63f92c05ca71addab11690ccdda0b6293cc31c3208c8d04a2f699e2d2d140df5f3f4dc1f290fdb5c0b61518cd663f8cd9a7f876dd5a69b28fdddded975ed467097a94dc47a90b626220711bd4e2213f70c0cafa0b0a305d52caea01de998d61a29964867d30fa2bbd5ea532e1eebed71ce6b1138ccac84ca1f91fee3213146acff124cd071d6e3daae1df5ac41fa2994c4c351829ee249f1d50dc1a61ee4e5f3aae7d925d7bbb559b082c41560ba5f6bd7828d8a2de3af7e62234754da64e62ab451453e2aead83eb61ab95cdf4adef8d26330559de1b5a4dbaedb7e5600bc5493c97ab07e32bb11c6a7179932ce4648dac03e024c72b94caff9117c2a038ac4fc693c593797a468658764dcc448a2261ada976b648c79577770c0f7b2ae9325c1af94d90e60361714ec84f286b79f7c0b57d7aade49fc9505f73a6a4ce4ca8fb5b3bf176019cf425a7e860857366d9a5a7e9d3510d91abd452763747f1333f2fa9bb4196b3e22d11f119ef548e7217f638d5f2b658d2f4972c8d3b6c905704692cc2b3d31fdc9081685220a14ea2a2f7530ecb65d944864219292a5f70f5a8df3ccca8d105fd362f855ca8469eb47f9119d43a6475182eca5e7364d844376dc8d638ff05f948c5a907521d2c827874b21cbcb74b2e1afbd7d38275b9fdc39c07a5accd1eb8035051a3031b766d8398731efd8cc780b5f7772c8a172b0957fca75722daaf9fc7cda8abde0e6f1722700e088560c18c605c7239cb142e483efb5c9a0e88e2539ee91e1bfe72a9f9b58986b18c795e1fa12b7c012f7411e2b43a9de78c59161394efe953ab51b0acbae7d2e3e73c17a99fdb4c95ac4ef44bbf1d193867467b6beb3cbc3d5f44115254c60c616ddbcd24b78523abd4ecc0946dd25644f9c883b40e92abad445aa2ac1c31ab61a39f0d3cd16c6e5f56ea7e75b6ac1c8c2f5575713ba6a6b435fe0d81af6568a937d7b302624f011a873a42d4005618f5a0516b5fa1d68d70915553961b54537ae9c5cacd46e9bec9f5843041ec4766d6eac4d5ba6bc5ddb62e46955b970fe93dbed6bc435821a02ebe650ac4cdbd46f1b05b0782d651ffa36de022d1001475cf2fc4b8e997aeefdc212cb5be7acdb6225c670e6f104bbd1dcf9808db37cc228fa06867fdadeca30bd3e3d3b4befec61d5d935c89d1be96ee7bc3a0f54742e6a1c7b02041a85eef7b6a6ef2e85909ad65a97ab592f02634c2e279937e6d20cac2ae1d8e420062b3c94ddb6efa85b0e005affdc1d18528d4ebfafc583a8b2e87d4bea7ac237d5ff21f54e929ee54188de75219a1aa30f71356c0dc5de54f5c5305608063061c0ff91deb7cf040c1df0f23eace8b952f74411a0adbc9b4ebf68feee856aa3e5439031aacfde5aa9a8580162dbce5a75ec75210ea97d3d2e3e49b74a2509d1940aedf07e18db68a03764cb5e590dbba7988a7fdd60503be445fd71b2b15d01fb1a0b0730845255a3ec9ebaecf35bd01ae41b641fa4eae2d332cea72daa796296ae81f40938896cb783e71ce5dbf216b4efe90a7274a51564c321cc4a92414128048ea2005a6cdf8f2ef99097b7650e80e500acd8ada861459681233c66b0715ee625fffd611c2d27acabbd84a90702d2c1f7eb23bf7d423840b616d7f0d1d63fd022a045f0bdf0c742915142dd4bb401367b29e710496e3d526fb74236ac341857d8cc0a5b4271c026894ba4bdbec4e42d94d5961fcce4407cd407dfeb8f2421b521f1507ca6f3686423b89b76c0bb8d1ffe648754ea901dc45e623b53bf9b713cc26a8fa680c897f0070cbc917c1d9c0e6631405ef0f66f06c20838d98923e097ba22e3819d903155d55776c977572f63e1141c95bdc40ae9243d573990304ea6d0aacc62a909a759903d537b06102ee489f4d8628e42dda617b2fa41a02798cef2c4f0c310f1e139323cd1fb0a6eb6480eb58012878ce0d67bfc8cd3460e797fe2d2cfa3f9800e20f8a6e9ad5da1861ac7f2e98dfedf99e9c595b40b28e1e19cf2a51950eab93224a29be01dc97ee2193f0a5c70001274f5bcaddc44e15639f02e21c0c63edefed838ca5eed9fcb368b93f6f3a3932953ccc2a43d8da1eedb1f6a29b34d0f753f4e7d3ef7bc08a776af03d1a125f04fb640e17f931638f8817c31f3a319e3dfe1a692c393d57e529ae2723e684584e5be6d205d04c2d1ddee8ba044e90f630d045ff900b51182ec1b24b95ac0a01cdc5faa54c3dce16d5c9acf959bd3fae0676c52fa87091594061cb3d7df44399fd747e110da525d5c9a1b0ce4f81db3db3e7a4261661c080d47c0133ec03540ff0537deaae4fe3f0d0578b14f4f49e2683b797f8158efe8b350e284d40277aa86dcb2dcc82651630ff450080ec13b72faa66380f6bb71b611ddd1da976519be665f8c53f0ed2e216ee17360cb4f64c95f9f316e8644654153724b3a9d06cf69277465700b65210f6efeb15c7b91681fc0bad5ff7a575d449074a0d2fa8de9208f47b5f555552fd9824877995f49d25f16c79257a2245cdeca4a2efc961903fc882122416dd50a401996ba73be7c99bac7450c47b8d51ac397c60b83613664b5e3a389d867d8fc3435a4a13d2609d777a385407362e04a9d9cfa7c99241ce0be9b0e2bcac535eac8b10542ef2e5785d50237c74efdcd7bde7ae8a8813e25570eaa4a354c4aaa3fa52bedef7a462251c2e1305b1d2621be75862c6969c55bd4f7a673249dbcd8928018f207b33f906510a43e36431a2b9167733ee8d9fce733c9b5c85c7b43f10d21edbaacc4af98383aa05798ce90d2d83890153982265b61ec463065ad5b1317bb4fdce22e1d5caac8f925a55e26e5128eb0e519795f652f66ff6a949b953e5286267211a37813eec3e9b16c68814562e9487461b6a3abc9e2618bbd4f058e793e34f43a4d1e56df32cb76f96b1bbcc2aa0b50124e7ab2202cd41b11cefbe652bca272d565bd1483642b22f1f7076f84f4ebbc53a51ec72fc7c769d621f2f60673861e66ae9cd736d48e7ca4be9e691b691b4be7b52d96ad1abac094e79c02805dbc697448d62724ba1bbe9a3e4cffbbb291371298d506d26eaf30eaafe103032bc220fc0f05a946b55f12c61f24c5fe268625b5df9273da04f7ec1f472d7c78fdf19e3bcdd20a9b0ef8301acde16ff90a69bdcdeb84d4d9373fe83643a38f01d54e18d678c1604dda27bfbfe7064afbdb1c3261c62084f72195ac027d748848227300ed283a9ad81a0d52fb8b5706f47453f84cb91891d2552366155d45bf76d1dabbe52d0608651981a2fa43836adfdcb0703ec753ddc006b720f6f4d03ccc21a8bcbc9defd2c1f0d7ba0a8c26492ae3215345dff3963512abe118475c3739174d6355a2fef126368f59b188464fd4c0bdb51afcb790c3bef5b0ce0293a8a924ffc5cfa631c741645fb7084dbca6c61813b7ecd58f3add186d959702173933e16732743892ac8e75f3efb44d902ba090164eca102be657d1c37aed9b550f8eaf2bd914d4372858dc3cbf3b1d14a94ae3d6aa2f79e3391945493d7c5568111514e85928040de6a7ba779b056c6561f49801b782abd49667f44d4c5d6ccf98cb04cd13f5915695a5ab5fdbff1c9915efcb515beaea0f6e549de269ce4f7c5438d23f00ccec4140dc82acbc34a6302df806e7144e1b8877f4bb49e7404556ab261fa9929e4c23fea6b92c5c8f2de9f2bb7d16b2360bf30f49b15b7c559fca88df516532f6bde3e26a1ed41849998cbf20719baf29f94eb8e397c23c98b706cf7e09c4f7f2395396d38f35ff2bd9cf6652b47502143a5851e4158f6185f4341f63789ae92d99ea129f083b5f9c9e619c3e2fadbae7930fc26445dfca01a743a6af36be7ced56f752cae65e78397bf4607899fb138e326ad43303acc1a6c71f94f6f74d4af2f59117f33503e36bc95513d3a65bfae20d1ad04556eb523af66f688dc6c8fdb688451b5bb707135b7222bdbf513a82e38805209a9d977f232c890203e1699d19bcf4aa7d4ccdfd27afaf755ea28ffcec51c11a780c6ae2ffe8353203362fbd8d0f8bc6421c7af9de4680527632520b58cec12b203c652ed9f3b632153e7e03ea6096db29471456f7aca6bf0d2359a1fc1f5fc6378d84e9759f5903910b3d70dc2ff1b3c2653abc702c21d69c3e79f3bf4617239d9ab03cf3fc168b97fb7121a0041d1a42cbcf89fdac4d5ef284dbd0c921202f254ae943a6e8d5aab38b82f35dd6843608f39f814257e718676cebc97994f7bb01c0a71c7add14ad85686fbab9cff9ac4892caa51f537de5bd1abf3a1082306e2050ca9af5730299053ae8d03384b999563936afafdb2200089405931dd27eacfd2f31f4beb081b16ceb2a5f571ab05e0cc74cc29c37c5c3f5da9b89070ce61dffb68a4a528fc0c48a46fbb800fa3878d4ef97704f554a39da14eda26951a5e3ca9f58c866adef5b674346479cbf6476c68018544b631995fd768a58fdf9defb690ba0d29673f0ef813c34169e3d502c48e439b99fa5cd410a781f7b9c6497e67f1c4c8b01d6c747f645c1184fd344bdecb9f73f5addfed1f8aebda73da31356dbae382529b8251cb057c7c29ead038a3df95332ed33a8062c4f2aacecac8f77ddcb303848592765123c54de02dd2bdb4a47bfc2f63a3367520a7a73e50211edc1c80440a94372d15e47f3dcc3fa94df666bb06739671f30b8a2f5d06343472def36034846e371c136c710f2fa153539834b976b60b310fa5b57fea891c1fef361a998e399abdccccb43258e8e9824d942f3a9f603b7a3a46ae641ddc52bda7dcfc041d276aecdc8009312a43aae7d019ad1a2b44a995b9eac91c639dfa1efff046dff3b70c4751d876703a415e2944c483708d88245e95f82113910786f47c838b3c72991d4e7d0773a35ac8b182aea02ea062ad192394d7a484129d710fe64fa41e8c1330110040076b29817d47e3cadfff53fc1d06722401a09b3e1fe7", 0x1000, 0x2}, {&(0x7f00000002c0)="9cff6ccee6051dd1887b0546a3fb3939c30042419f", 0x15, 0x1}]}, 0x5, 0x23}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r6, 0x17, &(0x7f0000000f40)={0x0, 0x0, 0x3}, 0x1) io_setup(0x9, &(0x7f0000002e40)) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000140)=0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000005500000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="002a8688b6e37862c5eb8471780000ba9a9df9604202b300"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x7, '\x00', 0x0, @cgroup_skb}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r7, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001800)=[0x0], 0x0, 0xf5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRES64=r3, @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r3], 0x48) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) 5.027601389s ago: executing program 4 (id=1106): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x40, 0x10, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}}}) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000200)=0x6, 0x4) sendmmsg$inet6(r1, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000640)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffffd, {{0x7, 0x4, 0x0, 0x0, 0x1c, 0xfffc, 0x0, 0x0, 0x0, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x7, 0x5, "64b6cb"}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000640)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffffd, {{0x7, 0x4, 0x0, 0x0, 0x1c, 0xfffc, 0x0, 0x0, 0x0, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x7, 0x5, "64b6cb"}]}}}}}) socket$can_bcm(0x1d, 0x2, 0x2) (async) socket$can_bcm(0x1d, 0x2, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (async) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create(0x6) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000001c0)={0xa0000004}) socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@gettaction={0x7c, 0x32, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8100007}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080) sendto$packet(0xffffffffffffffff, &(0x7f0000000240)="ebc1fc13969696889827496429a85d416491715e79bdecfb46e2a33e942a2ed8d6baba08609067848ab2ca86c87eeaf07fb437832aa1a29927a2841a61f1581d1683358f70f2138af68fcc6f5b1450d25a2ade8ba98fee981766dce3b9b76cf8b2b7995e82c4e1b1a7ad42593ae2f15f05fcf1eafe8c62ed46f86f376a3e644cb1a23fddaa94ec871418a8018d0885e4fe57d9e5bb90b14621842f9ff322447cb2a1091d13dd6adf82785538cae047c654454e11949ec983058040542a6e7b266a21677600ea283f67185fab851686246917aa45308c9ef39d9827", 0xdb, 0x801, &(0x7f0000000340)={0x11, 0x1a, r2, 0x1, 0x5}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) eventfd2(0x0, 0x0) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) (async) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r6 = syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7738, 0x80, 0x3, 0x16e}, &(0x7f0000000440)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000380)={0x20000, 0x0, 0x20}, &(0x7f00000003c0)='./file0\x00', 0x18, 0x0, 0x12345}) (async) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000380)={0x20000, 0x0, 0x20}, &(0x7f00000003c0)='./file0\x00', 0x18, 0x0, 0x12345}) io_uring_enter(r6, 0x47bc, 0x0, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) (async) r9 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendmmsg$inet(r9, &(0x7f0000001180)=[{{&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)="93", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e80)}}], 0x2, 0x46054) 4.863249825s ago: executing program 1 (id=1107): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x40) write$sndseq(r2, &(0x7f0000000480)=[{0x1e, 0x4, 0xf2, 0x9, @tick, {0xe7, 0x3}, {0xa, 0x7}, @queue={0x1, {0xf, 0xf}}}, {0x2, 0x0, 0x1f, 0x3, @tick=0x80, {0x3, 0x2}, {0x64, 0x5}, @addr={0x9, 0x40}}, {0x23, 0x3, 0x2, 0x0, @time={0xfffffff7}, {0x8, 0x7}, {}, @result={0x3, 0x2}}, {0x2b, 0x6, 0x80, 0x8, @time={0x8, 0x401}, {0x4, 0xa}, {0xf9, 0x5}, @note={0xb9, 0x3, 0x8, 0x6, 0x80}}, {0x7f, 0xa, 0x95, 0x9, @time={0x3, 0x5}, {0xff, 0x4}, {0xd0, 0x1}, @raw32={[0x0, 0x0, 0xfffff99c]}}, {0x7, 0x1, 0x2, 0x3, @tick=0x10, {0x0, 0x27}, {0x3, 0x1}, @control={0x8, 0x9, 0x4}}, {0xc, 0x8, 0x0, 0x8, @tick, {0x4}, {0xf8, 0x5}, @ext={0x83, &(0x7f0000000200)="c54d7ad392476e2d5f9b412bc5a5b92e49ce5c4a4f35595afe2ca4680c4e24aa59cd61a626a313c5f9c14ac81474f1a125dd3f69fc28314f23cf919ddb280f7baef3ba4f20559306cf001affbf7f275cb3a5774e8070acceb891943fd88b7b7d3a0cfb20d8c314a15cef5b5bd5d92d59963e97766b48ebf9b42b531409f4f1b5a9b537"}}], 0xc4) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x216}], 0x1}, 0xff00) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_clone3(&(0x7f0000000200)={0x4000000, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = dup(r5) syz_kvm_setup_cpu$x86(r6, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x6c, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000008b04"]) (async, rerun: 32) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYRES16=r5], 0x0) (async, rerun: 64) socket(0xa, 0x2, 0x0) (async, rerun: 64) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) (async) syz_usb_control_io$hid(r7, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="030000000000000022eccb"], 0x0}, 0x0) (async) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) (async) r10 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r10, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r11, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000400)={r12, 0x0, 0x820000, 0x8, 0x0, [0x0], [], [0x1003], [0x0, 0x1, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc00c642d, &(0x7f0000000100)={r13}) 4.756695681s ago: executing program 4 (id=1108): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffffc, 0x0, 0x2, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x278000003e7, 0x0, 0x1, r2, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x278000003e7, 0x0, 0x1, r2, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000000000000bfa30000000000000703000020feffff720af0fff8ffffff71a4f0ff0000000035040000500000001d400200000000006504020000ffffffb4030000000000001d440000000000007a0a00fe000000000f03000000000000b5000000000000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b5264f00000000cd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af2542ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b1100886475923906f88b53987ad0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d64364f56e24e6d2128c7e0ec82770c8204a1ddeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7dfcb59b854e9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d3490dd97adab638cca595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8c83c3d8cbfedc038395342846e1b207974e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfcd7ad0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f9212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0000cf70a91c76e8b14de02b884114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6a582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae315c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbad8508f7550cad7ec93af7fb1b50c75ba1ee7baa19faf67256b56a355b6a686ba99d0a8950f0937f778af083e055f5138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c2811e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96735600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15ecb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003ebfbdc1f9be78537756ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca311a28ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1e1979e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a508460f2d0455cf79a43746979f99f60037e84fb478199dc1020f4beb98b8074bf7df8b5e783637da7418fd3aa81cff202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adde305ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0d0274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1ecbf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cbf5d6b6898335792747588d49df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d943622000000000000000000000000000000000000000000000000000000000000000000000000000000000000f112fc8a4942d7453cf29cbbef3a567ea0a2a8a0561dfb6cfe7f1812405e1a092b382adc0698c377b0a1f49afb6ba26f8e28cf68b0065857b36276931c318cb84f748a26c4d81a0322ce21e7d9c002006cf8ac6402e036cf9344a1cb1b8603276000144268a0aa584a92188f55318dde1d1b09319c00d0de3471ab4243ac0f49516a690c514ba6449f0a804fcac3f30bf4a933d32c889283aa092cca9aa349b624c5ed2b66fa0439f54f83c9ff8be083221609c8696433da46c91ac52e5b1d159daed1af0cda0ee05ae770a7ea467d5602b441e748b7f22496f8453fb6b7cc2dd3a8ce15fd76387fc02d4e2b7b4502a80000000000000000000000000000000000000000e046c0756c0955a81165e4212a1a58334fe51269f228ad32fba2bdae0172278d3bb48c370f6b59c0c7ba9b0aaae317d3f8104fd696bc76268923c396b017003ddcd205c05311dcae277e5b00"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 4.44420003s ago: executing program 4 (id=1109): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0)=[0x0], &(0x7f00000190c0), 0x0, 0x1, 0x1c, 0x0, r1}) 4.303948865s ago: executing program 0 (id=1110): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa1000095ffffff07010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) 3.944656996s ago: executing program 0 (id=1111): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800) r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000240)=0x4) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000900)=ANY=[@ANYBLOB="2014030200001c53ab"], 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) io_setup(0x8, &(0x7f0000000000)) r4 = openat$tun(0xffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'veth1_macvtap\x00', 0x2}) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000480)) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r5 = getpid() r6 = socket$kcm(0xa, 0xa, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x100000}, 0x80, &(0x7f0000000500)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="18000000000000008400000000000000620000000000010020000000000000008400000008"], 0x38}, 0x0) r7 = syz_pidfd_open(r5, 0x0) setns(r7, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x72, 0x80000}, 0x20) open$dir(0x0, 0x400000, 0x100) socket$inet(0x2b, 0x800, 0xfffffffd) 3.944155249s ago: executing program 2 (id=1112): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) accept$alg(r3, 0x0, 0x0) (async) r4 = accept$alg(r3, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) (async) r5 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x41, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x14, 0x10f}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x6, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$loop(&(0x7f00000000c0), 0xa, 0x0) (async) syz_open_dev$loop(&(0x7f00000000c0), 0xa, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) (async) dup(0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x4, 0x1d}, &(0x7f0000000340), &(0x7f0000000600)) (async) r7 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x4, 0x1d}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) (async) io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r6, 0x0, 0x0, 0x0, 0x40002202, 0x1, {0x1}}) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60ae7474950e24fa3e88000000016aff0000000000000001020090780000000060fd906300093b00fe800000000000000000000000000000000000000000000000ffffac1414aaba70852ce595e9590d06a17fd1395700000000000000"], 0x0) sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="d8000000000000001701000004000000e1d4000000000000780000000000000017010000020000006200000081fc22bc337654c1a09336d90b5e11ae7f782d327d5105a2f8f03cfeca475c30dfe6fde01aa301718059c712d7315fb8fd664077363ea418051f6e60302bf99a3384995149f9fb86c126e79f10b122ef0a949a1614fe2e3cc272c2b4559d32f99ab0ceaba503860971e3eb94"], 0x90}, 0x20000040) (async) sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="d8000000000000001701000004000000e1d4000000000000780000000000000017010000020000006200000081fc22bc337654c1a09336d90b5e11ae7f782d327d5105a2f8f03cfeca475c30dfe6fde01aa301718059c712d7315fb8fd664077363ea418051f6e60302bf99a3384995149f9fb86c126e79f10b122ef0a949a1614fe2e3cc272c2b4559d32f99ab0ceaba503860971e3eb94"], 0x90}, 0x20000040) write$binfmt_script(r4, &(0x7f0000000600), 0xfec8) 3.942512033s ago: executing program 3 (id=1113): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x8d41, 0x0) mkdirat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x1ff) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES64=r0], 0x0) 3.192703217s ago: executing program 1 (id=1114): ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x0, 0x0, 0x3f00, 0x0, 0x6, 0x0}) 3.071091688s ago: executing program 1 (id=1115): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42c840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff0180c200000308060001080006"], 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0xc1e77e5858ad7519, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mlock(&(0x7f0000000000/0x1000)=nil, 0x1000) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000001c0)={0x80000, 0x0, [0x8, 0x9b, 0x1, 0x5, 0xf84, 0x6, 0x3000000002, 0x2]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.687911988s ago: executing program 4 (id=1116): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x28, 0x3f7, 0x4, 0x70bd26, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x8000) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, 0xffffffffffffffff, 0x0) socket(0x15, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000280)={0x0, 0x224e, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 2.636959436s ago: executing program 1 (id=1117): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(0xffffffffffffffff, 0x4068aea3, 0x0) (async) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300)) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c643c, &(0x7f0000000000)) r2 = syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x2) read(r2, &(0x7f0000000340)=""/129, 0x81) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f00000000c0)={0x2, 0x8, 0x2}) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000280)={0x2, 0x3}) (async) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f0000000000)={0x2, 0xad9, 0x3}) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x1, 0x59, 0x90, 0x5, 0x9, 0x7f}}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000060000000d20000000048b84b000000000000000f23000f21f8d618b7d2df84c032b9a00d00000f320f79445c79c4817be6ab10868c2a010c00d82e0fc7b9f21ee6dc6426f3450fc737c4c1f56c8f030000000f073e3e0f08c3"], 0x60}) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0xb, 0x7, 0x0, 0x9, 0x5, 0x4, 0xf1, 0xffffffffffff18c4, 0x7fffffffffffe, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0xeeee0000, 0x3c4210}) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r6, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x46004}, 0x4840) (async) unshare(0x8040480) (async) r7 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x6) (async) open(&(0x7f0000000140)='./file0\x00', 0x400800, 0xff) 2.204725339s ago: executing program 3 (id=1118): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f80000001600010000000000000000006401010000000000000000000000000000000000000000000000ffff000000000000000000130000000080a000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000003a0000000033"], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b0000000000000000000000000000000000000000000080ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 1.709626032s ago: executing program 3 (id=1119): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="0008000007500500580012800b000100627269646765000048000280050019000200000005001700a100000008001d00040000000c00220006000000000000000800040081000000050024"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.424754049s ago: executing program 3 (id=1120): r0 = socket$inet(0xa, 0x2, 0xc) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001680)=@mangle={'mangle\x00', 0x44, 0x6, 0xc28, 0x98, 0x98, 0x0, 0x228, 0x98, 0xb90, 0xb90, 0xb90, 0xb90, 0xb90, 0x6, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xac8}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0xe}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @ECN={0x28}}, {{@ip={@private, @multicast2, 0x0, 0x0, 'veth0\x00', 'bond0\x00'}, 0x0, 0x878, 0x8a0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@u32={{0x7e0}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xc88) 1.075058293s ago: executing program 3 (id=1121): set_mempolicy(0x2, 0x0, 0xf5) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$sndctrl(&(0x7f0000000580), 0x2, 0x141240) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x64, 0x4, 0x3b0, 0xffffffff, 0x128, 0x210, 0x210, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}, @common=@ah={{0x30}, {[], 0x0, 0x0, 0x5}}]}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [], [], 'wlan0\x00', 'wg0\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) r4 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000480), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000002000000000000a4c000000060a0b04000000000000000002000000200004801c000180090001006c617374000000000c00028008000140000000060900010073797a30000000000900020073797a320000000014000000110001c98c8254a599c1000000000000"], 0x74}}, 0x0) recvmmsg(r4, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001d80)=""/166, 0xa6}], 0x1, &(0x7f0000001fc0)=""/67, 0x43}, 0x1}], 0x1, 0x40002122, 0x0) r6 = socket(0x2, 0x80805, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r8 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xdf4, 0x80, 0x9, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) writev(r7, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) sendmmsg$inet_sctp(r6, &(0x7f00000032c0), 0x0, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x1}], 0x1}], 0x1, 0x0) munmap(&(0x7f0000002000/0x800000)=nil, 0x800000) 827.135257ms ago: executing program 2 (id=1122): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa10000b0ffffff07010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) 426.218799ms ago: executing program 2 (id=1123): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x11100, 0x3, 0x17d}, &(0x7f0000000100), &(0x7f00000003c0)) io_uring_enter(r0, 0x4d10, 0x2, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000000)="071cb48042a33fbbf7bf4c2d15da11f6f683ee01b11ce078908a65f7810fec15ad2350122b", 0x25) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa4010203010902240001000000000904000002437d67000905fc57d4"], 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0x0, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="850000002200000007000000000000089500000000000000e26c9bd1a636"], 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000003500)=""/4080, 0xff0}], 0x1}, 0x40000122) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00910069cdfb5cc682e02e0a"], 0xfe33) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = syz_io_uring_setup(0x1881, &(0x7f0000000880)={0x0, 0x17ec, 0x400, 0x2, 0x3c2}, &(0x7f0000000580), &(0x7f0000000900)) io_uring_register$IORING_UNREGISTER_NAPI(r3, 0x1c, &(0x7f0000001980), 0x1) 347.773574ms ago: executing program 1 (id=1124): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffe72, &(0x7f0000000200)={&(0x7f0000000640)={0x24, r1, 0x2cb3b0415539fbbb, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xffffff81}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x80005, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f00000002c0)={0x2, 0x1, 0x0, "eee98fb006178749cb4dfd9300009b6b7bd152f35ed730fc700000cb4f1891e2", 0x32314752}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8f, 0xffffffd4, 0x0, 0x0, 0x10}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c40000404fc800c000180060006004358000008000280040005"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000040), 0x4) 187.415389ms ago: executing program 0 (id=1125): r0 = syz_open_dev$usbfs(0x0, 0x201, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x0, 0x0, 0x3f00, 0x0, 0x6, 0x0}) 168.601253ms ago: executing program 4 (id=1126): r0 = openat$full(0xffffffffffffff9c, 0x0, 0x54000, 0x0) r1 = epoll_create1(0x0) r2 = socket$unix(0x1, 0x1, 0x0) close(r2) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000740)={0x48, 0x7, r5, 0x0, 0x1, 0x0, 0x0, 0x19575c, 0x1000000}) socket$kcm(0xa, 0x1, 0x106) r6 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r6, 0x0) r7 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r7, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$inet6(r6, 0x0, 0x0, 0x0) sendmsg$tipc(r7, &(0x7f0000000640)={&(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0xa888c4504cf45ada}) io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, r0}) socket$rds(0x15, 0x5, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x8010) r8 = socket$nl_route(0x10, 0x3, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c0}}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r9 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_REAPURB(r9, 0x4008550c, 0x0) syz_io_uring_setup(0x5e3c, &(0x7f00000001c0)={0x0, 0xd143, 0x1, 0x2, 0xba}, &(0x7f0000000140), &(0x7f0000000240)) syz_io_uring_setup(0x132c, &(0x7f00000002c0)={0x0, 0x69c6, 0x800, 0x1, 0x3a3, 0x0, r0}, &(0x7f0000000340), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 28.78911ms ago: executing program 1 (id=1127): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0)=[0x0], &(0x7f00000190c0), 0x0, 0x1, 0x20, 0x0, r1}) 0s ago: executing program 0 (id=1128): socket$packet(0x11, 0xa, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, 0x0, 0x7) syz_emit_ethernet(0x82, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @mcast2, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "697c17d667a42ba5d7c4b65fb7705bc03e2c226ffbf7e75d", "f878883ee28aa149e8b23b609df88012386928b4661736daa22c0ed3a2a2d7db"}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x9}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x8}]}}]}, 0x40}}, 0x4048000) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206"], 0x0) kernel console output (not intermixed with test programs): ce unplugged -19 [ 278.918799][ T5926] usb 2-1: 0:2 : does not exist [ 278.962168][ T5926] usb 2-1: USB disconnect, device number 24 [ 278.989825][ T977] usb 5-1: Using ep0 maxpacket: 16 [ 278.999532][ T977] usb 5-1: config 0 has an invalid interface number: 107 but max is 0 [ 279.000939][ T5946] udevd[5946]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 279.027654][ T977] usb 5-1: config 0 has no interface number 0 [ 279.035114][ T977] usb 5-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 279.047523][ T977] usb 5-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 279.077822][ T977] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 279.099756][ T977] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 279.108163][ T977] usb 5-1: Product: syz [ 279.114586][ T977] usb 5-1: Manufacturer: syz [ 279.119316][ T977] usb 5-1: SerialNumber: syz [ 279.140213][ T977] usb 5-1: config 0 descriptor?? [ 279.150876][ T977] keyspan 5-1:0.107: Keyspan 4 port adapter converter detected [ 279.159773][ T5956] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 279.163563][ T977] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 81 [ 279.191407][ T977] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 1 [ 279.210249][ T977] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 279.224643][ T977] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 2 [ 279.246900][ T977] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 279.262796][ T977] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 4 [ 279.280240][ T977] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 279.293542][ T977] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 6 [ 279.312078][ T5956] usb 3-1: Using ep0 maxpacket: 8 [ 279.315093][ T977] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 279.339575][ T5956] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 279.347774][ T5956] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 279.369492][ T5956] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 279.451609][ T5956] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 279.504183][ T8349] netlink: 56 bytes leftover after parsing attributes in process `syz.3.617'. [ 279.513116][ T5956] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 279.541656][ T5956] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 279.549324][ T5956] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 279.565646][ T5956] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 279.581150][ T5956] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 279.597131][ T5956] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 279.610570][ T5956] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 279.618357][ T5956] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 279.630364][ T5956] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 279.642503][ T5956] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 279.654005][ T5956] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 279.672056][ T5956] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 279.681901][ T5956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.703754][ T5956] usb 3-1: Product: syz [ 279.715171][ T5956] usb 3-1: Manufacturer: syz [ 279.724894][ T5956] usb 3-1: SerialNumber: syz [ 279.944446][ T8332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.970285][ T8332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.014965][ T5956] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 280.048731][ T5956] usb 3-1: USB disconnect, device number 52 [ 280.100627][ T5991] usb 5-1: USB disconnect, device number 35 [ 280.143180][ T5991] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 280.198898][ T5991] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 280.232094][ T5991] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 280.254007][ T5991] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 280.274946][ T5991] keyspan 5-1:0.107: device disconnected [ 280.932956][ T8384] netlink: 'syz.2.629': attribute type 1 has an invalid length. [ 280.957734][ T8387] loop6: detected capacity change from 0 to 7 [ 280.969112][ T8387] Dev loop6: unable to read RDB block 7 [ 280.976050][ T8387] loop6: unable to read partition table [ 281.020456][ T8387] loop6: partition table beyond EOD, truncated [ 281.052706][ T30] audit: type=1326 audit(1753140127.941:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8380 comm="syz.1.627" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f529a78e9a9 code=0x0 [ 281.053190][ T8387] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 281.229446][ T8389] nvme_fabrics: missing parameter 'transport=%s' [ 281.259810][ T8389] nvme_fabrics: missing parameter 'nqn=%s' [ 281.268393][ T5849] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 281.469867][ T5849] usb 3-1: Using ep0 maxpacket: 8 [ 281.480296][ T5849] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 281.489222][ T5849] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 281.505989][ T5849] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 281.517459][ T5849] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 281.529874][ T5849] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 281.543156][ T5849] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 281.558395][ T5849] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 281.580087][ T5849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.857769][ T5849] usb 3-1: GET_CAPABILITIES returned 0 [ 281.863980][ T5849] usbtmc 3-1:16.0: can't read capabilities [ 282.009828][ T5926] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 282.065849][ T5918] usb 3-1: USB disconnect, device number 53 [ 282.169716][ T5926] usb 4-1: Using ep0 maxpacket: 16 [ 282.190337][ T5926] usb 4-1: config 4 has an invalid interface number: 51 but max is 0 [ 282.198877][ T5926] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 282.255229][ T5926] usb 4-1: config 4 has no interface number 0 [ 282.279595][ T5926] usb 4-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 282.334009][ T8404] netlink: 44 bytes leftover after parsing attributes in process `syz.4.634'. [ 282.348402][ T5926] usb 4-1: config 4 interface 51 has no altsetting 0 [ 282.361602][ T5926] usb 4-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 282.374352][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.398621][ T5926] usb 4-1: Product: syz [ 282.409437][ T8404] netlink: 24 bytes leftover after parsing attributes in process `syz.4.634'. [ 282.429498][ T5926] usb 4-1: Manufacturer: syz [ 282.442660][ T5926] usb 4-1: SerialNumber: syz [ 282.487111][ T5926] cdc_eem 4-1:4.51: probe with driver cdc_eem failed with error -22 [ 283.034522][ T8418] netlink: 104 bytes leftover after parsing attributes in process `syz.2.636'. [ 284.082152][ T8424] kvm: emulating exchange as write [ 284.844499][ T5849] usb 4-1: USB disconnect, device number 47 [ 285.302325][ T30] audit: type=1326 audit(1753140132.191:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8432 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff97918e9a9 code=0x7ffc0000 [ 285.570692][ T30] audit: type=1326 audit(1753140132.191:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8432 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7ff97918e9a9 code=0x7ffc0000 [ 286.101317][ T30] audit: type=1326 audit(1753140132.191:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8432 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff97918e9a9 code=0x7ffc0000 [ 286.208451][ T30] audit: type=1326 audit(1753140132.191:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8432 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff97918e9a9 code=0x7ffc0000 [ 286.328409][ T30] audit: type=1326 audit(1753140132.191:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8432 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff97918e9a9 code=0x7ffc0000 [ 286.456545][ T30] audit: type=1326 audit(1753140132.191:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8432 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff9791908c7 code=0x7ffc0000 [ 286.516825][ T8447] input: syz0 as /devices/virtual/input/input23 [ 286.523506][ T8447] input: failed to attach handler leds to device input23, error: -6 [ 286.553509][ T30] audit: type=1326 audit(1753140132.191:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8432 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7ff97919083c code=0x7ffc0000 [ 286.601981][ T5849] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 286.703321][ T30] audit: type=1326 audit(1753140132.191:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8432 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff979190774 code=0x7ffc0000 [ 286.849701][ T30] audit: type=1326 audit(1753140132.201:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8432 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff979190774 code=0x7ffc0000 [ 286.851800][ T5849] usb 5-1: config 0 has an invalid interface number: 46 but max is 0 [ 286.969724][ T30] audit: type=1326 audit(1753140132.201:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8432 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff97918d60a code=0x7ffc0000 [ 286.979748][ T5849] usb 5-1: config 0 has no interface number 0 [ 287.157268][ T5849] usb 5-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=9e.b9 [ 287.192420][ T5849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.529741][ T5849] usb 5-1: Product: syz [ 287.541845][ T5849] usb 5-1: Manufacturer: syz [ 287.569233][ T5849] usb 5-1: SerialNumber: syz [ 287.596280][ T5849] usb 5-1: config 0 descriptor?? [ 287.621339][ T5849] xr_serial 5-1:0.46: More than one union descriptor, skipping ... [ 288.045311][ T8445] netlink: 12 bytes leftover after parsing attributes in process `syz.4.644'. [ 288.069789][ T977] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 288.140473][ T8454] netlink: 12 bytes leftover after parsing attributes in process `syz.4.644'. [ 288.186192][ T5926] usb 5-1: USB disconnect, device number 36 [ 288.235825][ T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 288.254317][ T977] usb 2-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 288.279589][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.338259][ T977] usb 2-1: config 0 descriptor?? [ 288.370495][ T977] smsusb:smsusb_probe: board id=8, interface number 0 [ 288.388272][ T977] smsusb:smsusb_probe: Device initialized with return code -19 [ 289.075397][ T8470] nvme_fabrics: missing parameter 'transport=%s' [ 289.085742][ T8470] nvme_fabrics: missing parameter 'nqn=%s' [ 289.230000][ T977] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 289.421181][ T977] usb 3-1: Using ep0 maxpacket: 8 [ 289.430792][ T977] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 289.441942][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.484521][ T977] pvrusb2: Hardware description: Terratec Grabster AV400 [ 289.491626][ T977] pvrusb2: ********** [ 289.516160][ T977] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 289.529719][ T5991] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 289.545158][ T977] pvrusb2: Important functionality might not be entirely working. [ 289.564231][ T977] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 289.585127][ T977] pvrusb2: ********** [ 289.679805][ T5991] usb 5-1: Using ep0 maxpacket: 16 [ 289.687547][ T5991] usb 5-1: config 4 has an invalid interface number: 51 but max is 0 [ 289.690910][ T2342] pvrusb2: Invalid write control endpoint [ 289.696653][ T5991] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 289.714508][ T5991] usb 5-1: config 4 has no interface number 0 [ 289.729863][ T5991] usb 5-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 289.760642][ T5991] usb 5-1: config 4 interface 51 has no altsetting 0 [ 289.865819][ T5991] usb 5-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 289.875454][ T5991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.884849][ T5991] usb 5-1: Product: syz [ 289.899527][ T5991] usb 5-1: Manufacturer: syz [ 290.127726][ T5991] usb 5-1: SerialNumber: syz [ 290.161276][ T5991] cdc_eem 5-1:4.51: probe with driver cdc_eem failed with error -22 [ 290.204975][ T2342] pvrusb2: Invalid write control endpoint [ 290.224366][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 290.254923][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 290.309366][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 290.340340][ T2342] pvrusb2: Device being rendered inoperable [ 290.369421][ T2342] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 290.394516][ T2342] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 290.455884][ T2342] pvrusb2: Attached sub-driver cx25840 [ 290.482600][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 290.582032][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 290.651200][ T5926] usb 2-1: USB disconnect, device number 25 [ 291.169726][ T5926] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 291.439956][ T5926] usb 2-1: Using ep0 maxpacket: 8 [ 291.456472][ T5926] usb 2-1: unable to get BOS descriptor or descriptor too short [ 291.477400][ T5926] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 291.488010][ T5926] usb 2-1: config 7 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 291.513676][ T5926] usb 2-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 291.531293][ T5926] usb 2-1: New USB device found, idVendor=0489, idProduct=e0b5, bcdDevice=ae.2a [ 291.540648][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.548777][ T5926] usb 2-1: Product: syz [ 291.556073][ T5926] usb 2-1: Manufacturer: syz [ 291.561280][ T5926] usb 2-1: SerialNumber: syz [ 291.789005][ T8478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.801037][ T8478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.817108][ T8478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.826380][ T8479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.826778][ T8478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.853426][ T8479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.912801][ T5926] usb 2-1: USB disconnect, device number 26 [ 292.045552][ T5991] usb 3-1: USB disconnect, device number 54 [ 292.216817][ T8485] xt_socket: unknown flags 0xc [ 292.258378][ T5991] usb 5-1: USB disconnect, device number 37 [ 293.183971][ T8510] binder: BINDER_SET_CONTEXT_MGR already set [ 293.196237][ T8510] binder: 8507:8510 ioctl 4018620d 2000000000c0 returned -16 [ 293.218507][ T8509] binder: BINDER_SET_CONTEXT_MGR already set [ 293.246849][ T8509] binder: 8507:8509 ioctl 4018620d 200000000040 returned -16 [ 293.362931][ T8516] netlink: 88 bytes leftover after parsing attributes in process `syz.0.661'. [ 293.787097][ T8523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.664'. [ 293.894312][ T8526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.663'. [ 293.895853][ T8526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.663'. [ 293.897976][ T8526] vimc link validate: Scaler:src:16x16 (0x33424752, 12, 0, 2, 7) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 294.039737][ T7998] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 294.219982][ T7998] usb 5-1: Using ep0 maxpacket: 32 [ 294.230789][ T7998] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.230810][ T7998] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 294.230826][ T7998] usb 5-1: config 1 has no interface number 1 [ 294.230860][ T7998] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 294.236518][ T7998] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 294.236537][ T7998] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.236551][ T7998] usb 5-1: Product: syz [ 294.236560][ T7998] usb 5-1: Manufacturer: syz [ 294.236571][ T7998] usb 5-1: SerialNumber: syz [ 294.636111][ T8524] tty tty26: ldisc open failed (-12), clearing slot 25 [ 295.995505][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 296.015866][ T30] audit: type=1326 audit(1753140142.901:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8535 comm="syz.3.667" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff97918e9a9 code=0x0 [ 296.069836][ T43] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 296.178962][ T8540] nvme_fabrics: missing parameter 'transport=%s' [ 296.201834][ T8540] nvme_fabrics: missing parameter 'nqn=%s' [ 296.233807][ T43] usb 3-1: device descriptor read/64, error -71 [ 296.427953][ T7998] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 296.461607][ T7998] usb 5-1: 2:1 : format type 6 is not supported yet [ 296.480376][ T43] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 296.540911][ T7998] usb 5-1: USB disconnect, device number 38 [ 296.619825][ T43] usb 3-1: device descriptor read/64, error -71 [ 296.718665][ T5946] udevd[5946]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 296.751872][ T43] usb usb3-port1: attempt power cycle [ 297.149859][ T43] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 297.170707][ T43] usb 3-1: device descriptor read/8, error -71 [ 297.348864][ T8553] loop6: detected capacity change from 0 to 7 [ 297.393783][ T5946] Dev loop6: unable to read RDB block 7 [ 297.402117][ T5946] loop6: unable to read partition table [ 297.410536][ T43] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 297.432448][ T5946] loop6: partition table beyond EOD, truncated [ 297.441878][ T43] usb 3-1: device descriptor read/8, error -71 [ 297.455606][ T8553] Dev loop6: unable to read RDB block 7 [ 297.464270][ T8553] loop6: unable to read partition table [ 297.485247][ T8553] loop6: partition table beyond EOD, truncated [ 297.494036][ T8553] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 297.560367][ T43] usb usb3-port1: unable to enumerate USB device [ 298.245439][ T7998] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 298.454702][ T7998] usb 5-1: config 0 has no interfaces? [ 298.474726][ T7998] usb 5-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 298.541686][ T7998] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.580858][ T7998] usb 5-1: Product: syz [ 298.596073][ T7998] usb 5-1: Manufacturer: syz [ 298.617448][ T7998] usb 5-1: SerialNumber: syz [ 298.823427][ T7998] usb 5-1: config 0 descriptor?? [ 298.940486][ T977] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 299.112088][ T30] audit: type=1326 audit(1753140146.031:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8566 comm="syz.4.677" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f36f2f8e9a9 code=0x0 [ 299.160508][ T977] usb 3-1: Using ep0 maxpacket: 16 [ 299.175291][ T977] usb 3-1: config 4 has an invalid interface number: 51 but max is 0 [ 299.188106][ T977] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 299.207321][ T977] usb 3-1: config 4 has no interface number 0 [ 299.214505][ T977] usb 3-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 299.238083][ T5926] usb 5-1: USB disconnect, device number 39 [ 299.258374][ T977] usb 3-1: config 4 interface 51 has no altsetting 0 [ 299.278194][ T977] usb 3-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 299.294774][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.305388][ T977] usb 3-1: Product: syz [ 299.311222][ T977] usb 3-1: Manufacturer: syz [ 299.316184][ T977] usb 3-1: SerialNumber: syz [ 299.362460][ T977] cdc_eem 3-1:4.51: probe with driver cdc_eem failed with error -22 [ 299.489935][ T43] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 299.650840][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 299.665214][ T5849] usb 3-1: USB disconnect, device number 59 [ 299.677905][ T43] usb 4-1: unable to get BOS descriptor or descriptor too short [ 299.711881][ T43] usb 4-1: config 152 has an invalid interface number: 136 but max is 0 [ 299.724933][ T43] usb 4-1: config 152 has an invalid interface association descriptor of length 5, skipping [ 299.747120][ T43] usb 4-1: config 152 has no interface number 0 [ 299.764020][ T43] usb 4-1: config 152 interface 136 altsetting 3 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 299.786957][ T43] usb 4-1: config 152 interface 136 has no altsetting 0 [ 299.812253][ T43] usb 4-1: New USB device found, idVendor=067b, idProduct=0000, bcdDevice=44.42 [ 299.827713][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.836890][ T43] usb 4-1: Product: syz [ 299.845773][ T43] usb 4-1: Manufacturer: syz [ 299.851446][ T43] usb 4-1: SerialNumber: syz [ 300.346375][ T43] plusb 4-1:152.136: probe with driver plusb failed with error -22 [ 300.384453][ T43] usb 4-1: USB disconnect, device number 48 [ 300.669023][ T8601] netlink: 'syz.2.688': attribute type 1 has an invalid length. [ 300.810376][ T8601] 8021q: adding VLAN 0 to HW filter on device bond1 [ 301.033139][ T30] audit: type=1326 audit(1753140147.941:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8606 comm="syz.1.690" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f529a78e9a9 code=0x0 [ 301.130277][ T8605] bond1: (slave geneve3): making interface the new active one [ 301.236897][ T8605] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 301.429509][ T8613] nvme_fabrics: missing parameter 'transport=%s' [ 301.436601][ T8613] nvme_fabrics: missing parameter 'nqn=%s' [ 301.446423][ T8605] syz.2.688 (8605) used greatest stack depth: 19736 bytes left [ 301.850839][ T8627] netlink: 72 bytes leftover after parsing attributes in process `syz.4.694'. [ 301.998478][ T8631] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 301.998478][ T8631] The task syz.4.694 (8631) triggered the difference, watch for misbehavior. [ 302.139849][ T977] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 302.299757][ T977] usb 3-1: Using ep0 maxpacket: 16 [ 302.308414][ T977] usb 3-1: config 4 has an invalid interface number: 51 but max is 0 [ 302.343876][ T977] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 302.356280][ T977] usb 3-1: config 4 has no interface number 0 [ 302.385400][ T977] usb 3-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 302.404740][ T977] usb 3-1: config 4 interface 51 has no altsetting 0 [ 302.414640][ T977] usb 3-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 302.431896][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.444657][ T977] usb 3-1: Product: syz [ 302.449021][ T977] usb 3-1: Manufacturer: syz [ 302.456738][ T977] usb 3-1: SerialNumber: syz [ 302.481576][ T977] cdc_eem 3-1:4.51: probe with driver cdc_eem failed with error -22 [ 302.773704][ T5926] usb 3-1: USB disconnect, device number 60 [ 303.513705][ T30] audit: type=1326 audit(1753140150.341:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8642 comm="syz.3.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff97918e9a9 code=0x7ffc0000 [ 303.779878][ T30] audit: type=1326 audit(1753140150.341:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8642 comm="syz.3.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff97918e9a9 code=0x7ffc0000 [ 303.805757][ T30] audit: type=1326 audit(1753140150.341:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8642 comm="syz.3.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7ff97918e9a9 code=0x7ffc0000 [ 303.835270][ T30] audit: type=1326 audit(1753140150.341:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8642 comm="syz.3.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff97918e9a9 code=0x7ffc0000 [ 303.892361][ T30] audit: type=1326 audit(1753140150.341:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8642 comm="syz.3.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff97918e9a9 code=0x7ffc0000 [ 303.997748][ T30] audit: type=1326 audit(1753140150.341:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8642 comm="syz.3.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7ff97918e9a9 code=0x7ffc0000 [ 304.089853][ T30] audit: type=1326 audit(1753140150.341:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8642 comm="syz.3.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff97918e9a9 code=0x7ffc0000 [ 304.214774][ T30] audit: type=1326 audit(1753140150.341:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8642 comm="syz.3.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff97918e9a9 code=0x7ffc0000 [ 304.318201][ T30] audit: type=1326 audit(1753140150.341:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8642 comm="syz.3.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff97918e9a9 code=0x7ffc0000 [ 305.299117][ T8665] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 305.530028][ T5849] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 305.618013][ T8683] netlink: 16 bytes leftover after parsing attributes in process `syz.4.711'. [ 305.714026][ T5849] usb 3-1: Using ep0 maxpacket: 16 [ 305.735573][ T5849] usb 3-1: config 4 has an invalid interface number: 51 but max is 0 [ 305.758803][ T5849] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 305.792368][ T5849] usb 3-1: config 4 has no interface number 0 [ 305.817754][ T5849] usb 3-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 305.839164][ T5849] usb 3-1: config 4 interface 51 has no altsetting 0 [ 305.854149][ T5849] usb 3-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 305.864566][ T5849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.873569][ T5849] usb 3-1: Product: syz [ 305.878606][ T5849] usb 3-1: Manufacturer: syz [ 305.884876][ T5849] usb 3-1: SerialNumber: syz [ 305.901222][ T5849] cdc_eem 3-1:4.51: probe with driver cdc_eem failed with error -22 [ 306.069727][ T43] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 306.269716][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 306.286916][ T43] usb 5-1: config 4 has an invalid interface number: 51 but max is 0 [ 306.307336][ T43] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 306.322254][ T43] usb 5-1: config 4 has no interface number 0 [ 306.330744][ T43] usb 5-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 306.353855][ T43] usb 5-1: config 4 interface 51 has no altsetting 0 [ 306.374633][ T43] usb 5-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 306.384673][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.400991][ T43] usb 5-1: Product: syz [ 306.406502][ T43] usb 5-1: Manufacturer: syz [ 306.415593][ T43] usb 5-1: SerialNumber: syz [ 306.443244][ T43] cdc_eem 5-1:4.51: probe with driver cdc_eem failed with error -22 [ 306.512895][ T43] usb 3-1: USB disconnect, device number 61 [ 307.313371][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 307.313390][ T30] audit: type=1326 audit(1753140154.231:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8688 comm="syz.3.713" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff97918e9a9 code=0x0 [ 307.404085][ T8695] nvme_fabrics: missing parameter 'transport=%s' [ 307.411126][ T8695] nvme_fabrics: missing parameter 'nqn=%s' [ 307.920172][ T5926] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 308.115432][ T5926] usb 2-1: config 255 has too many interfaces: 227, using maximum allowed: 32 [ 308.160876][ T5926] usb 2-1: config 255 has 1 interface, different from the descriptor's value: 227 [ 308.208564][ T5926] usb 2-1: config 255 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.222042][ T8717] syzkaller0: entered promiscuous mode [ 308.232878][ T8717] syzkaller0: entered allmulticast mode [ 308.254848][ T5926] usb 2-1: config 255 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.343666][ T5926] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 308.391667][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.761851][ T8704] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 309.008458][ T8704] fuse: Bad value for 'fd' [ 309.018358][ T5926] usb 2-1: string descriptor 0 read error: -71 [ 309.039803][ T7998] usb 5-1: USB disconnect, device number 40 [ 309.057103][ T5926] usbhid 2-1:255.0: can't add hid device: -71 [ 309.070458][ T5926] usbhid 2-1:255.0: probe with driver usbhid failed with error -71 [ 309.100642][ T5926] usb 2-1: USB disconnect, device number 27 [ 309.519921][ T7998] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 309.693080][ T7998] usb 5-1: config 0 has an invalid interface number: 58 but max is 0 [ 309.705537][ T7998] usb 5-1: config 0 has no interface number 0 [ 309.730617][ T7998] usb 5-1: New USB device found, idVendor=041e, idProduct=400a, bcdDevice=49.f8 [ 309.749760][ T7998] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.779018][ T7998] usb 5-1: config 0 descriptor?? [ 309.797042][ T7998] gspca_main: spca500-2.14.0 probing 041e:400a [ 309.941194][ T5926] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 310.000934][ T5849] usb 5-1: USB disconnect, device number 41 [ 310.124294][ T5926] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 310.133202][ T5926] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 310.144096][ T5926] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 310.157445][ T5926] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 310.166622][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.176753][ T5926] usb 2-1: Product: syz [ 310.181036][ T5926] usb 2-1: Manufacturer: syz [ 310.185683][ T5926] usb 2-1: SerialNumber: syz [ 310.413236][ T5926] usb 2-1: 0:2 : does not exist [ 310.436064][ T5926] usb 2-1: USB disconnect, device number 28 [ 310.479836][ T5946] udevd[5946]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 310.821565][ T5849] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 310.979953][ T5849] usb 5-1: Using ep0 maxpacket: 8 [ 310.989593][ T5849] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 311.001061][ T5849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.009075][ T5849] usb 5-1: Product: syz [ 311.014321][ T5849] usb 5-1: Manufacturer: syz [ 311.024344][ T5849] usb 5-1: SerialNumber: syz [ 311.037436][ T5849] usb 5-1: config 0 descriptor?? [ 311.053371][ T5849] gspca_main: se401-2.14.0 probing 047d:5003 [ 311.101228][ T8759] netlink: 28 bytes leftover after parsing attributes in process `syz.1.730'. [ 311.363842][ T8762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.379517][ T8762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.398118][ T8761] xt_hashlimit: size too large, truncated to 1048576 [ 312.521500][ T5849] usb 5-1: reset high-speed USB device number 42 using dummy_hcd [ 312.724322][ T5849] usb 5-1: device descriptor read/64, error -32 [ 313.099791][ T5849] usb 5-1: reset high-speed USB device number 42 using dummy_hcd [ 313.350227][ T5849] usb 5-1: device descriptor read/64, error -32 [ 313.549697][ T5926] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 313.599925][ T5849] usb 5-1: reset high-speed USB device number 42 using dummy_hcd [ 313.630280][ T5849] usb 5-1: device descriptor read/8, error -32 [ 313.740015][ T5926] usb 3-1: Using ep0 maxpacket: 16 [ 313.749483][ T5926] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 313.756784][ T8784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.735'. [ 313.770491][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 313.785900][ T5926] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 313.796928][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.799753][ T5956] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 313.805158][ T5926] usb 3-1: Product: syz [ 313.818986][ T5926] usb 3-1: Manufacturer: syz [ 313.825759][ T5926] usb 3-1: SerialNumber: syz [ 313.837961][ T5926] usb 3-1: config 0 descriptor?? [ 313.853501][ T5926] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 313.864080][ T5926] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 313.882196][ T5849] usb 5-1: reset high-speed USB device number 42 using dummy_hcd [ 313.912733][ T5849] usb 5-1: device descriptor read/8, error -32 [ 313.972520][ T5956] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.990583][ T5956] usb 4-1: config 0 interface 0 has no altsetting 0 [ 314.029412][ T5956] usb 4-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 314.047216][ T5849] raw-gadget.0 gadget.4: failed to queue suspend event [ 314.059477][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.082927][ T5849] gspca_se401: read req failed req 0x06 error -19 [ 314.102204][ T5926] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 314.112623][ T5956] usb 4-1: config 0 descriptor?? [ 314.132313][ T5849] usb 5-1: USB disconnect, device number 42 [ 314.142247][ T5926] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 314.161230][ T5926] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 314.164326][ T5849] raw-gadget.0 gadget.4: failed to queue reset event [ 314.178753][ T5926] em28xx 3-1:0.0: No AC97 audio processor [ 314.221079][ T5926] usb 3-1: USB disconnect, device number 62 [ 314.235613][ T5926] em28xx 3-1:0.0: Disconnecting em28xx [ 314.248455][ T5926] em28xx 3-1:0.0: Freeing device [ 314.319999][ T5849] raw-gadget.0 gadget.4: failed to queue resume event [ 314.371762][ T8788] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 314.378465][ T8788] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 314.392777][ T5849] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 314.405891][ T8788] vhci_hcd vhci_hcd.0: Device attached [ 314.411574][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 314.419764][ T5849] raw-gadget.0 gadget.4: failed to queue reset event [ 314.434599][ T8788] fuse: Unknown parameter '0x000000000000000b' [ 314.453355][ T8755] raw-gadget.0 gadget.4: failed to queue disconnect event [ 314.544687][ T8782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.553414][ T5926] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 314.561250][ T8782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.577081][ T5956] logitech 0003:046D:C623.000B: unknown main item tag 0x0 [ 314.585327][ T5956] logitech 0003:046D:C623.000B: unknown main item tag 0x0 [ 314.592755][ T5956] logitech 0003:046D:C623.000B: unknown main item tag 0x0 [ 314.600198][ T5956] logitech 0003:046D:C623.000B: unknown main item tag 0x0 [ 314.607855][ T5956] logitech 0003:046D:C623.000B: unknown main item tag 0x0 [ 314.618809][ T5956] logitech 0003:046D:C623.000B: hidraw0: USB HID v0.00 Device [HID 046d:c623] on usb-dummy_hcd.3-1/input0 [ 314.639930][ T5991] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 314.704403][ T8795] vhci_hcd: connection reset by peer [ 314.717021][ T2962] vhci_hcd: stop threads [ 314.723152][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.735159][ T2962] vhci_hcd: release socket [ 314.743145][ T2962] vhci_hcd: disconnect device [ 314.747894][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.760496][ T5926] usb 3-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 314.769580][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.782273][ T5926] usb 3-1: config 0 descriptor?? [ 314.790311][ T7998] usb 4-1: USB disconnect, device number 49 [ 315.219018][ T5926] cypress 0003:04B4:DE61.000C: unknown main item tag 0x0 [ 315.235595][ T5926] cypress 0003:04B4:DE61.000C: unknown main item tag 0x0 [ 315.262253][ T30] audit: type=1326 audit(1753140162.171:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8799 comm="syz.4.738" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f36f2f8e9a9 code=0x0 [ 315.284653][ T5926] cypress 0003:04B4:DE61.000C: hidraw0: USB HID v0.00 Device [HID 04b4:de61] on usb-dummy_hcd.2-1/input0 [ 315.450132][ T5926] usb 3-1: USB disconnect, device number 63 [ 315.467447][ T8804] nvme_fabrics: missing parameter 'transport=%s' [ 315.473934][ T8804] nvme_fabrics: missing parameter 'nqn=%s' [ 315.559138][ T8806] fido_id[8806]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 315.961109][ T5918] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 316.110253][ T5918] usb 4-1: device descriptor read/64, error -71 [ 316.274550][ T7998] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 316.353285][ T5918] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 316.439735][ T7998] usb 2-1: Using ep0 maxpacket: 8 [ 316.489813][ T5918] usb 4-1: device descriptor read/64, error -71 [ 316.532194][ T7998] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 316.549911][ T7998] usb 2-1: config 0 has no interface number 0 [ 316.575703][ T7998] usb 2-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=be.68 [ 316.585457][ T7998] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.599470][ T7998] usb 2-1: Product: syz [ 316.606441][ T5918] usb usb4-port1: attempt power cycle [ 316.616372][ T7998] usb 2-1: Manufacturer: syz [ 316.628879][ T7998] usb 2-1: SerialNumber: syz [ 316.651823][ T7998] usb 2-1: config 0 descriptor?? [ 316.739003][ T7998] redrat3 2-1:0.31: Couldn't find all endpoints [ 316.949719][ T5918] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 316.971011][ T5918] usb 4-1: device descriptor read/8, error -71 [ 317.167237][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.174618][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.260153][ T5918] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 317.290391][ T5918] usb 4-1: device descriptor read/8, error -71 [ 317.400044][ T5918] usb usb4-port1: unable to enumerate USB device [ 318.619800][ T5918] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 318.805631][ T5918] usb 5-1: not running at top speed; connect to a high speed hub [ 318.815262][ T5918] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 318.830800][ T5918] usb 5-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 318.845717][ T5918] usb 5-1: config 1 interface 0 has no altsetting 0 [ 318.850389][ T8840] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 318.862080][ T5918] usb 5-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.40 [ 318.882741][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.891251][ T5918] usb 5-1: Product: syz [ 318.895594][ T5918] usb 5-1: Manufacturer: syz [ 318.902715][ T5918] usb 5-1: SerialNumber: syz [ 318.941220][ T8834] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 319.160906][ T8834] bond0: entered promiscuous mode [ 319.166287][ T8834] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 319.179923][ T8834] macvlan1: entered promiscuous mode [ 319.186109][ T8834] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 319.197518][ T8834] Cannot create hsr debugfs directory [ 319.219923][ T8834] hsr1: entered promiscuous mode [ 319.268975][ T5918] usbhid 5-1:1.0: can't add hid device: -71 [ 319.275859][ T5918] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 319.299495][ T5918] usb 5-1: USB disconnect, device number 44 [ 319.428445][ T7998] usb 2-1: USB disconnect, device number 29 [ 319.793874][ T5991] vhci_hcd: vhci_device speed not set [ 321.169780][ T5991] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 321.277380][ T5926] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 321.325936][ T5991] usb 2-1: Using ep0 maxpacket: 32 [ 321.370593][ T5991] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 321.379920][ T5991] usb 2-1: config 0 has no interface number 0 [ 321.391257][ T5991] usb 2-1: config 0 interface 184 has no altsetting 0 [ 321.406085][ T5991] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 321.415981][ T5991] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.426909][ T5991] usb 2-1: Product: syz [ 321.431446][ T5991] usb 2-1: Manufacturer: syz [ 321.436188][ T5991] usb 2-1: SerialNumber: syz [ 321.444099][ T5991] usb 2-1: config 0 descriptor?? [ 321.449920][ T5926] usb 4-1: Using ep0 maxpacket: 8 [ 321.452679][ T5991] smsc75xx v1.0.0 [ 321.464517][ T5926] usb 4-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 321.476357][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 321.485499][ T5926] usb 4-1: Product: syz [ 321.490582][ T5926] usb 4-1: Manufacturer: syz [ 321.497602][ T5926] usb 4-1: SerialNumber: syz [ 321.528295][ T5926] usb 4-1: config 0 descriptor?? [ 321.548289][ T5926] usbtest 4-1:0.0: FX2 device [ 321.563435][ T5926] usbtest 4-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 321.652144][ T5991] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 321.672397][ T5991] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 321.694846][ T5991] usb 2-1: USB disconnect, device number 30 [ 321.750175][ T8868] dlm: non-version read from control device 36 [ 321.757184][ T5926] usb 4-1: USB disconnect, device number 54 [ 321.996623][ T8880] hsr0: entered promiscuous mode [ 322.002344][ T8880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.758'. [ 322.015695][ T8880] hsr_slave_0: left promiscuous mode [ 322.023472][ T8880] hsr_slave_1: left promiscuous mode [ 322.045315][ T8880] hsr0 (unregistering): left promiscuous mode [ 322.275026][ T8882] netlink: 40 bytes leftover after parsing attributes in process `syz.1.759'. [ 323.039696][ T5926] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 323.234696][ T5926] usb 4-1: config 0 has no interfaces? [ 323.249362][ T5926] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 323.262276][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.273779][ T5926] usb 4-1: Product: syz [ 323.278146][ T5926] usb 4-1: Manufacturer: syz [ 323.283507][ T5926] usb 4-1: SerialNumber: syz [ 323.332571][ T5926] usb 4-1: config 0 descriptor?? [ 323.571376][ T8888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.760'. [ 323.679140][ T8895] netlink: 'syz.0.762': attribute type 10 has an invalid length. [ 324.582730][ T8900] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 325.107458][ T8909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.767'. [ 325.130924][ T5991] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 325.185524][ T8910] futex_wake_op: syz.2.767 tries to shift op by -1; fix this program [ 325.330014][ T5991] usb 2-1: Using ep0 maxpacket: 8 [ 325.337227][ T5991] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 325.356939][ T5991] usb 2-1: config 0 has no interface number 0 [ 325.384562][ T5991] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 325.429518][ T5991] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 325.472576][ T5991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.509573][ T5991] usb 2-1: config 0 descriptor?? [ 325.537395][ T5991] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 325.725519][ T8922] dlm: non-version read from control device 36 [ 325.738308][ T7998] usb 2-1: USB disconnect, device number 31 [ 325.835365][ T8923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.769'. [ 326.425996][ T5918] usb 4-1: USB disconnect, device number 55 [ 326.601585][ T8942] netlink: 16 bytes leftover after parsing attributes in process `syz.3.776'. [ 327.127849][ T8956] loop6: detected capacity change from 0 to 7 [ 327.148438][ T8956] Dev loop6: unable to read RDB block 7 [ 327.186134][ T8956] loop6: unable to read partition table [ 327.198633][ T8956] loop6: partition table beyond EOD, truncated [ 327.225773][ T8956] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 328.422974][ T8975] netlink: 32 bytes leftover after parsing attributes in process `syz.3.779'. [ 329.147325][ T8991] netlink: 68 bytes leftover after parsing attributes in process `syz.1.786'. [ 329.756696][ T43] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 330.038722][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 330.123325][ T43] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 330.136602][ T43] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 330.145954][ T43] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 330.158993][ T43] usb 5-1: Product: syz [ 330.164453][ T43] usb 5-1: Manufacturer: syz [ 330.178738][ T43] usb 5-1: SerialNumber: syz [ 330.397965][ T43] usb 5-1: Handspring Visor / Palm OS: No valid connect info available [ 330.542650][ T43] usb 5-1: Handspring Visor / Palm OS: port 109, is for unknown use [ 330.568732][ T43] usb 5-1: Handspring Visor / Palm OS: port 211, is for unknown use [ 330.577116][ T43] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2 [ 330.600410][ T43] usb 5-1: palm_os_3_probe - error -71 getting bytes available request [ 330.616675][ T43] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 330.637871][ T9008] loop6: detected capacity change from 0 to 7 [ 330.648887][ T43] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 330.661016][ T9008] Dev loop6: unable to read RDB block 7 [ 330.666636][ T9008] loop6: unable to read partition table [ 330.685299][ T43] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 330.695044][ T9008] loop6: partition table beyond EOD, truncated [ 330.710980][ T43] usb 5-1: USB disconnect, device number 45 [ 330.718019][ T9008] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 330.784075][ T43] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 330.834834][ T43] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 330.877385][ T43] visor 5-1:1.0: device disconnected [ 331.208388][ T9021] netlink: 16 bytes leftover after parsing attributes in process `syz.4.797'. [ 331.319908][ T5991] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 331.481601][ T5991] usb 2-1: config 0 has an invalid interface number: 112 but max is 0 [ 331.491759][ T5991] usb 2-1: config 0 has no interface number 0 [ 331.518609][ T5991] usb 2-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 331.538139][ T5991] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.546792][ T5991] usb 2-1: Product: syz [ 331.556481][ T5991] usb 2-1: Manufacturer: syz [ 331.566603][ T5991] usb 2-1: SerialNumber: syz [ 331.597753][ T5991] usb 2-1: config 0 descriptor?? [ 331.607631][ T9030] netlink: 2 bytes leftover after parsing attributes in process `syz.3.800'. [ 331.660219][ T5991] mvusb_mdio 2-1:0.112: probe with driver mvusb_mdio failed with error -5 [ 331.892536][ T9036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.912410][ T9026] FAULT_INJECTION: forcing a failure. [ 331.912410][ T9026] name failslab, interval 1, probability 0, space 0, times 0 [ 331.925862][ T9036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.955159][ T9026] CPU: 1 UID: 0 PID: 9026 Comm: syz.4.799 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 331.955185][ T9026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 331.955197][ T9026] Call Trace: [ 331.955205][ T9026] [ 331.955213][ T9026] dump_stack_lvl+0x189/0x250 [ 331.955241][ T9026] ? __pfx____ratelimit+0x10/0x10 [ 331.955263][ T9026] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.955285][ T9026] ? __pfx__printk+0x10/0x10 [ 331.955314][ T9026] ? __pfx___might_resched+0x10/0x10 [ 331.955336][ T9026] ? fs_reclaim_acquire+0x7d/0x100 [ 331.955359][ T9026] should_fail_ex+0x414/0x560 [ 331.955384][ T9026] should_failslab+0xa8/0x100 [ 331.955414][ T9026] __kmalloc_noprof+0xcb/0x4f0 [ 331.955440][ T9026] ? tomoyo_encode+0x28b/0x550 [ 331.955466][ T9026] tomoyo_encode+0x28b/0x550 [ 331.955495][ T9026] tomoyo_realpath_from_path+0x58d/0x5d0 [ 331.955528][ T9026] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 331.955546][ T9026] tomoyo_path_number_perm+0x1e8/0x5a0 [ 331.955568][ T9026] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 331.955604][ T9026] ? __lock_acquire+0xab9/0xd20 [ 331.955643][ T9026] ? __fget_files+0x2a/0x420 [ 331.955663][ T9026] ? __fget_files+0x2a/0x420 [ 331.955679][ T9026] ? __fget_files+0x3a0/0x420 [ 331.955694][ T9026] ? __fget_files+0x2a/0x420 [ 331.955715][ T9026] security_file_ioctl+0xcb/0x2d0 [ 331.955747][ T9026] __se_sys_ioctl+0x47/0x170 [ 331.955774][ T9026] do_syscall_64+0xfa/0x3b0 [ 331.955794][ T9026] ? lockdep_hardirqs_on+0x9c/0x150 [ 331.955814][ T9026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.955832][ T9026] ? clear_bhb_loop+0x60/0xb0 [ 331.955856][ T9026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.955874][ T9026] RIP: 0033:0x7f36f2f8e9a9 [ 331.955891][ T9026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.955908][ T9026] RSP: 002b:00007f36f3e87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 331.955933][ T9026] RAX: ffffffffffffffda RBX: 00007f36f31b5fa0 RCX: 00007f36f2f8e9a9 [ 331.955947][ T9026] RDX: 0000200000000a00 RSI: 00000000c05064a7 RDI: 0000000000000003 [ 331.955959][ T9026] RBP: 00007f36f3e87090 R08: 0000000000000000 R09: 0000000000000000 [ 331.955970][ T9026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.955981][ T9026] R13: 0000000000000000 R14: 00007f36f31b5fa0 R15: 00007f36f32dfa28 [ 331.956010][ T9026] [ 331.956133][ T9026] ERROR: Out of memory at tomoyo_realpath_from_path. [ 332.037312][ T977] usb 2-1: USB disconnect, device number 32 [ 332.212167][ T5918] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 332.310788][ T9042] loop6: detected capacity change from 0 to 7 [ 332.318866][ T9042] Dev loop6: unable to read RDB block 7 [ 332.329284][ T9042] loop6: unable to read partition table [ 332.336709][ T9042] loop6: partition table beyond EOD, truncated [ 332.346573][ T9042] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 332.369732][ T5918] usb 4-1: Using ep0 maxpacket: 16 [ 332.376204][ T5918] usb 4-1: too many configurations: 146, using maximum allowed: 8 [ 332.389526][ T5918] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 332.399209][ T5918] usb 4-1: can't read configurations, error -61 [ 332.541771][ T5918] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 332.613534][ T9048] macvtap2: entered allmulticast mode [ 332.700050][ T5918] usb 4-1: Using ep0 maxpacket: 16 [ 332.715098][ T5918] usb 4-1: too many configurations: 146, using maximum allowed: 8 [ 332.745499][ T5918] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 332.757553][ T5918] usb 4-1: can't read configurations, error -61 [ 332.774721][ T5918] usb usb4-port1: attempt power cycle [ 332.833091][ T9052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.808'. [ 332.965902][ T9054] netlink: 88 bytes leftover after parsing attributes in process `syz.2.809'. [ 333.013357][ T43] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 333.129708][ T5918] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 333.150338][ T5918] usb 4-1: Using ep0 maxpacket: 16 [ 333.156316][ T5918] usb 4-1: too many configurations: 146, using maximum allowed: 8 [ 333.194594][ T5918] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 333.206717][ T43] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 333.213040][ T5918] usb 4-1: can't read configurations, error -61 [ 333.224018][ T43] usb 2-1: config 0 interface 0 has no altsetting 0 [ 333.224078][ T43] usb 2-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 333.224103][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.260939][ T43] usb 2-1: config 0 descriptor?? [ 333.266595][ T9050] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 333.287211][ T30] audit: type=1326 audit(1753140180.201:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9059 comm="syz.2.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51b6b8e9a9 code=0x7ffc0000 [ 333.309466][ C0] vkms_vblank_simulate: vblank timer overrun [ 333.323662][ T30] audit: type=1326 audit(1753140180.201:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9059 comm="syz.2.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51b6b8e9a9 code=0x7ffc0000 [ 333.372966][ T30] audit: type=1326 audit(1753140180.201:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9059 comm="syz.2.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51b6b8e9a9 code=0x7ffc0000 [ 333.402116][ T30] audit: type=1326 audit(1753140180.201:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9059 comm="syz.2.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f51b6b8e9a9 code=0x7ffc0000 [ 333.424300][ C0] vkms_vblank_simulate: vblank timer overrun [ 333.433168][ T5918] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 333.441373][ T30] audit: type=1326 audit(1753140180.201:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9059 comm="syz.2.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51b6b8e9a9 code=0x7ffc0000 [ 333.465462][ T30] audit: type=1326 audit(1753140180.201:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9059 comm="syz.2.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f51b6b8e9a9 code=0x7ffc0000 [ 333.494487][ T30] audit: type=1326 audit(1753140180.201:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9059 comm="syz.2.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51b6b8e9a9 code=0x7ffc0000 [ 333.516961][ T5918] usb 4-1: Using ep0 maxpacket: 16 [ 333.522325][ T30] audit: type=1326 audit(1753140180.201:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9059 comm="syz.2.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f51b6b8e9a9 code=0x7ffc0000 [ 333.544387][ C0] vkms_vblank_simulate: vblank timer overrun [ 333.554486][ T5918] usb 4-1: too many configurations: 146, using maximum allowed: 8 [ 333.563570][ T30] audit: type=1326 audit(1753140180.201:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9059 comm="syz.2.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51b6b8e9a9 code=0x7ffc0000 [ 333.586736][ T5918] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 333.594604][ T5918] usb 4-1: can't read configurations, error -61 [ 333.601750][ T5918] usb usb4-port1: unable to enumerate USB device [ 333.699088][ T43] hid (null): global environment stack underflow [ 333.714747][ T43] hid (null): global environment stack underflow [ 333.721852][ T43] hid (null): report_id 0 is invalid [ 333.727494][ T43] hid (null): global environment stack underflow [ 333.734373][ T43] hid (null): report_id 0 is invalid [ 333.740047][ T43] hid (null): report_id 0 is invalid [ 333.742337][ T9063] FAULT_INJECTION: forcing a failure. [ 333.742337][ T9063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.745639][ T43] hid (null): global environment stack underflow [ 333.770784][ T9063] CPU: 0 UID: 0 PID: 9063 Comm: syz.2.813 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 333.770810][ T9063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 333.770823][ T9063] Call Trace: [ 333.770831][ T9063] [ 333.770839][ T9063] dump_stack_lvl+0x189/0x250 [ 333.770875][ T9063] ? __pfx____ratelimit+0x10/0x10 [ 333.770898][ T9063] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.770922][ T9063] ? __pfx__printk+0x10/0x10 [ 333.770948][ T9063] ? __might_fault+0xb0/0x130 [ 333.770987][ T9063] should_fail_ex+0x414/0x560 [ 333.771013][ T9063] _copy_from_user+0x2d/0xb0 [ 333.771043][ T9063] drm_ioctl+0x58a/0xb10 [ 333.771071][ T9063] ? __pfx_drm_mode_getconnector+0x10/0x10 [ 333.771100][ T9063] ? __pfx_drm_ioctl+0x10/0x10 [ 333.771138][ T9063] ? __fget_files+0x2a/0x420 [ 333.771160][ T9063] ? bpf_lsm_file_ioctl+0x9/0x20 [ 333.771186][ T9063] ? __pfx_drm_ioctl+0x10/0x10 [ 333.771209][ T9063] __se_sys_ioctl+0xfc/0x170 [ 333.771237][ T9063] do_syscall_64+0xfa/0x3b0 [ 333.771260][ T9063] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.771282][ T9063] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.771302][ T9063] ? clear_bhb_loop+0x60/0xb0 [ 333.771327][ T9063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.771347][ T9063] RIP: 0033:0x7f51b6b8e9a9 [ 333.771365][ T9063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.771383][ T9063] RSP: 002b:00007f51b7a3a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 333.771405][ T9063] RAX: ffffffffffffffda RBX: 00007f51b6db5fa0 RCX: 00007f51b6b8e9a9 [ 333.771420][ T9063] RDX: 0000200000000a00 RSI: 00000000c05064a7 RDI: 0000000000000003 [ 333.771433][ T9063] RBP: 00007f51b7a3a090 R08: 0000000000000000 R09: 0000000000000000 [ 333.771445][ T9063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.771457][ T9063] R13: 0000000000000000 R14: 00007f51b6db5fa0 R15: 00007f51b6edfa28 [ 333.771488][ T9063] [ 333.774414][ T43] uclogic 0003:28BD:0078.000D: interface is invalid, ignoring [ 333.985500][ T43] usb 2-1: USB disconnect, device number 33 [ 334.031536][ T9066] netlink: 'syz.2.814': attribute type 5 has an invalid length. [ 334.293666][ T9076] gretap0: entered promiscuous mode [ 335.407206][ T9108] netlink: 12 bytes leftover after parsing attributes in process `syz.3.826'. [ 335.621515][ T9106] FAULT_INJECTION: forcing a failure. [ 335.621515][ T9106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.663465][ T9106] CPU: 1 UID: 0 PID: 9106 Comm: syz.2.825 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 335.663493][ T9106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 335.663506][ T9106] Call Trace: [ 335.663515][ T9106] [ 335.663524][ T9106] dump_stack_lvl+0x189/0x250 [ 335.663553][ T9106] ? __pfx____ratelimit+0x10/0x10 [ 335.663577][ T9106] ? __pfx_dump_stack_lvl+0x10/0x10 [ 335.663601][ T9106] ? __pfx__printk+0x10/0x10 [ 335.663630][ T9106] ? __might_fault+0xb0/0x130 [ 335.663670][ T9106] should_fail_ex+0x414/0x560 [ 335.663697][ T9106] _copy_from_user+0x2d/0xb0 [ 335.663727][ T9106] drm_ioctl+0x58a/0xb10 [ 335.663764][ T9106] ? __pfx_drm_mode_getconnector+0x10/0x10 [ 335.663792][ T9106] ? __pfx_drm_ioctl+0x10/0x10 [ 335.663829][ T9106] ? __fget_files+0x2a/0x420 [ 335.663852][ T9106] ? bpf_lsm_file_ioctl+0x9/0x20 [ 335.663878][ T9106] ? __pfx_drm_ioctl+0x10/0x10 [ 335.663900][ T9106] __se_sys_ioctl+0xfc/0x170 [ 335.663929][ T9106] do_syscall_64+0xfa/0x3b0 [ 335.663951][ T9106] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.663973][ T9106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.663993][ T9106] ? clear_bhb_loop+0x60/0xb0 [ 335.664017][ T9106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.664037][ T9106] RIP: 0033:0x7f51b6b8e9a9 [ 335.664055][ T9106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.664072][ T9106] RSP: 002b:00007f51b7a3a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 335.664094][ T9106] RAX: ffffffffffffffda RBX: 00007f51b6db5fa0 RCX: 00007f51b6b8e9a9 [ 335.664108][ T9106] RDX: 0000200000000a00 RSI: 00000000c05064a7 RDI: 0000000000000003 [ 335.664121][ T9106] RBP: 00007f51b7a3a090 R08: 0000000000000000 R09: 0000000000000000 [ 335.664133][ T9106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.664144][ T9106] R13: 0000000000000000 R14: 00007f51b6db5fa0 R15: 00007f51b6edfa28 [ 335.664175][ T9106] [ 335.920997][ T7998] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 336.045552][ T9123] erspan1: entered promiscuous mode [ 336.102549][ T7998] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 336.123643][ T7998] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.159832][ T7998] usb 4-1: Product: syz [ 336.164391][ T7998] usb 4-1: Manufacturer: syz [ 336.169045][ T7998] usb 4-1: SerialNumber: syz [ 336.209375][ T7998] usb 4-1: config 0 descriptor?? [ 336.224857][ T7998] ch341 4-1:0.0: ch341-uart converter detected [ 336.326232][ T9139] dlm: non-version read from control device 36 [ 336.469713][ T5918] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 336.655097][ T5918] usb 3-1: device descriptor read/64, error -71 [ 336.874409][ T7998] usb 4-1: failed to send control message: -71 [ 336.891630][ T7998] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 336.900446][ T5926] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 336.931572][ T5918] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 336.942038][ T7998] usb 4-1: USB disconnect, device number 60 [ 336.955407][ T7998] ch341 4-1:0.0: device disconnected [ 337.061716][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 337.071535][ T5918] usb 3-1: device descriptor read/64, error -71 [ 337.081154][ T5926] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 337.091587][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 337.157896][ T5926] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 337.198872][ T5918] usb usb3-port1: attempt power cycle [ 337.329397][ T5926] usb 5-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 337.345669][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.359782][ T5926] usb 5-1: Product: syz [ 337.368352][ T5926] usb 5-1: Manufacturer: syz [ 337.447784][ T5926] usb 5-1: SerialNumber: syz [ 337.589880][ T5918] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 337.626115][ T5926] usb 5-1: config 0 descriptor?? [ 337.632111][ T5918] usb 3-1: device descriptor read/8, error -71 [ 337.640949][ T5926] kvaser_usb 5-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 337.657057][ T5926] kvaser_usb 5-1:0.0: error -EMSGSIZE: Failed to initialize card [ 337.679760][ T5926] kvaser_usb 5-1:0.0: probe with driver kvaser_usb failed with error -90 [ 337.857870][ T9149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.869695][ T9149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.899895][ T5918] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 337.928092][ T5918] usb 3-1: device descriptor read/8, error -71 [ 338.040026][ T5918] usb usb3-port1: unable to enumerate USB device [ 339.502343][ T9185] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 339.575988][ T9186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.588289][ T7998] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 339.594929][ T9186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.606813][ T9186] netlink: 16 bytes leftover after parsing attributes in process `syz.0.848'. [ 339.720077][ T7998] usb 3-1: device descriptor read/64, error -71 [ 339.736748][ T5926] usb 5-1: USB disconnect, device number 46 [ 339.960187][ T7998] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 340.109762][ T7998] usb 3-1: device descriptor read/64, error -71 [ 340.221700][ T7998] usb usb3-port1: attempt power cycle [ 340.342664][ T30] audit: type=1400 audit(1753140187.261:156): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=3A3A0AE10CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A552C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=9200 comm="syz.4.852" [ 340.373946][ C0] vkms_vblank_simulate: vblank timer overrun [ 340.589696][ T7998] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 340.611446][ T7998] usb 3-1: device descriptor read/8, error -71 [ 340.849794][ T7998] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 340.913502][ T7998] usb 3-1: device descriptor read/8, error -71 [ 341.060197][ T7998] usb usb3-port1: unable to enumerate USB device [ 341.332506][ T7998] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 341.499765][ T7998] usb 5-1: Using ep0 maxpacket: 8 [ 341.514670][ T7998] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 341.532143][ T7998] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.544047][ T7998] usb 5-1: Product: syz [ 341.548360][ T7998] usb 5-1: Manufacturer: syz [ 341.554911][ T7998] usb 5-1: SerialNumber: syz [ 341.566988][ T7998] usb 5-1: config 0 descriptor?? [ 341.798488][ T7998] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 342.108890][ T9248] fuse: Unknown parameter '3Fj]groupGi' [ 342.709853][ T5991] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 342.919725][ T5991] usb 3-1: Using ep0 maxpacket: 8 [ 342.931176][ T5991] usb 3-1: unable to get BOS descriptor or descriptor too short [ 342.974703][ T5991] usb 3-1: config 8 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 8 [ 343.006177][ T5991] usb 3-1: config 8 interface 0 has no altsetting 0 [ 343.018006][ T5991] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 343.041340][ T9217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.049969][ T5991] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.071926][ T9217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.084032][ T5991] usb 3-1: Product: syz [ 343.091796][ T9280] FAULT_INJECTION: forcing a failure. [ 343.091796][ T9280] name failslab, interval 1, probability 0, space 0, times 0 [ 343.104808][ T5991] usb 3-1: Manufacturer: syz [ 343.124481][ T5991] usb 3-1: SerialNumber: syz [ 343.129502][ T9217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.139733][ T9280] CPU: 0 UID: 0 PID: 9280 Comm: syz.1.863 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 343.139757][ T9280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 343.139768][ T9280] Call Trace: [ 343.139774][ T9280] [ 343.139780][ T9280] dump_stack_lvl+0x189/0x250 [ 343.139800][ T9280] ? __pfx____ratelimit+0x10/0x10 [ 343.139816][ T9280] ? __pfx_dump_stack_lvl+0x10/0x10 [ 343.139832][ T9280] ? __pfx__printk+0x10/0x10 [ 343.139857][ T9280] ? __pfx___might_resched+0x10/0x10 [ 343.139872][ T9280] ? fs_reclaim_acquire+0x7d/0x100 [ 343.139889][ T9280] should_fail_ex+0x414/0x560 [ 343.139907][ T9280] should_failslab+0xa8/0x100 [ 343.139929][ T9280] __kmalloc_cache_noprof+0x70/0x3d0 [ 343.139948][ T9280] ? vlan_vid_add+0x313/0x760 [ 343.139969][ T9280] vlan_vid_add+0x313/0x760 [ 343.139986][ T9280] ? alloc_netdev_mqs+0xc9e/0x11e0 [ 343.140007][ T9280] register_vlan_dev+0x9e/0x800 [ 343.140026][ T9280] ? vlan_changelink+0x4ac/0x560 [ 343.140039][ T9280] ? vlan_check_real_dev+0x148/0x380 [ 343.140060][ T9280] vlan_newlink+0x4b2/0x610 [ 343.140075][ T9280] ? __pfx_vlan_newlink+0x10/0x10 [ 343.140090][ T9280] rtnl_newlink_create+0x310/0xb00 [ 343.140116][ T9280] ? __pfx_aa_get_newest_label+0x10/0x10 [ 343.140133][ T9280] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 343.140152][ T9280] ? rtnl_newlink+0x8db/0x1c70 [ 343.140172][ T9280] ? __pfx___mutex_lock+0x10/0x10 [ 343.140195][ T9280] ? ns_capable+0x8a/0xf0 [ 343.140214][ T9280] rtnl_newlink+0x16d6/0x1c70 [ 343.140233][ T9280] ? netlink_sendmsg+0x805/0xb30 [ 343.140260][ T9280] ? __pfx_rtnl_newlink+0x10/0x10 [ 343.140294][ T9280] ? kasan_quarantine_put+0xdd/0x220 [ 343.140311][ T9280] ? lockdep_hardirqs_on+0x9c/0x150 [ 343.140329][ T9280] ? nlmon_xmit+0xb0/0x100 [ 343.140346][ T9280] ? kmem_cache_free+0x18f/0x400 [ 343.140370][ T9280] ? __local_bh_enable_ip+0x12d/0x1c0 [ 343.140385][ T9280] ? lockdep_hardirqs_on+0x9c/0x150 [ 343.140400][ T9280] ? __local_bh_enable_ip+0x12d/0x1c0 [ 343.140415][ T9280] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 343.140433][ T9280] ? __dev_queue_xmit+0x27e/0x3a70 [ 343.140455][ T9280] ? __lock_acquire+0xab9/0xd20 [ 343.140492][ T9280] ? __pfx_rtnl_newlink+0x10/0x10 [ 343.140510][ T9280] rtnetlink_rcv_msg+0x7cf/0xb70 [ 343.140530][ T9280] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 343.140547][ T9280] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 343.140563][ T9280] ? ref_tracker_free+0x63a/0x7d0 [ 343.140577][ T9280] ? __copy_skb_header+0xa7/0x550 [ 343.140591][ T9280] ? __pfx_ref_tracker_free+0x10/0x10 [ 343.140606][ T9280] ? __skb_clone+0x63/0x7a0 [ 343.140623][ T9280] netlink_rcv_skb+0x208/0x470 [ 343.140644][ T9280] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 343.140663][ T9280] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 343.140690][ T9280] ? netlink_deliver_tap+0x2e/0x1b0 [ 343.140709][ T9280] ? netlink_deliver_tap+0x2e/0x1b0 [ 343.140731][ T9280] netlink_unicast+0x759/0x8e0 [ 343.140756][ T9280] netlink_sendmsg+0x805/0xb30 [ 343.140782][ T9280] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.140803][ T9280] ? aa_sock_msg_perm+0x94/0x160 [ 343.140819][ T9280] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 343.140833][ T9280] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.140853][ T9280] __sock_sendmsg+0x21c/0x270 [ 343.140871][ T9280] ____sys_sendmsg+0x505/0x830 [ 343.140896][ T9280] ? __pfx_____sys_sendmsg+0x10/0x10 [ 343.140922][ T9280] ? import_iovec+0x74/0xa0 [ 343.140944][ T9280] ___sys_sendmsg+0x21f/0x2a0 [ 343.140966][ T9280] ? __pfx____sys_sendmsg+0x10/0x10 [ 343.141012][ T9280] ? __fget_files+0x2a/0x420 [ 343.141023][ T9280] ? __fget_files+0x3a0/0x420 [ 343.141042][ T9280] __x64_sys_sendmsg+0x19b/0x260 [ 343.141065][ T9280] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 343.141092][ T9280] ? __pfx_ksys_write+0x10/0x10 [ 343.141108][ T9280] ? rcu_is_watching+0x15/0xb0 [ 343.141128][ T9280] ? do_syscall_64+0xbe/0x3b0 [ 343.141146][ T9280] do_syscall_64+0xfa/0x3b0 [ 343.141161][ T9280] ? lockdep_hardirqs_on+0x9c/0x150 [ 343.141174][ T9280] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.141187][ T9280] ? clear_bhb_loop+0x60/0xb0 [ 343.141204][ T9280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.141217][ T9280] RIP: 0033:0x7f529a78e9a9 [ 343.141230][ T9280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.141242][ T9280] RSP: 002b:00007f529b5bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 343.141256][ T9280] RAX: ffffffffffffffda RBX: 00007f529a9b5fa0 RCX: 00007f529a78e9a9 [ 343.141266][ T9280] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000003 [ 343.141274][ T9280] RBP: 00007f529b5bc090 R08: 0000000000000000 R09: 0000000000000000 [ 343.141282][ T9280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 343.141290][ T9280] R13: 0000000000000000 R14: 00007f529a9b5fa0 R15: 00007f529aadfa28 [ 343.141311][ T9280] [ 343.616877][ C0] vkms_vblank_simulate: vblank timer overrun [ 343.649940][ T9259] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 343.650392][ T9217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.959040][ T5991] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 343.990329][ T7998] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 344.003076][ T5991] usb 3-1: selecting invalid altsetting 0 [ 344.200326][ T5991] usb 3-1: USB disconnect, device number 72 [ 344.234207][ T9292] netlink: 24 bytes leftover after parsing attributes in process `syz.0.866'. [ 344.815697][ T9287] FAULT_INJECTION: forcing a failure. [ 344.815697][ T9287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.857390][ T9287] CPU: 0 UID: 0 PID: 9287 Comm: syz.1.865 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 344.857417][ T9287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 344.857429][ T9287] Call Trace: [ 344.857437][ T9287] [ 344.857445][ T9287] dump_stack_lvl+0x189/0x250 [ 344.857472][ T9287] ? __pfx____ratelimit+0x10/0x10 [ 344.857492][ T9287] ? __pfx_dump_stack_lvl+0x10/0x10 [ 344.857514][ T9287] ? __pfx__printk+0x10/0x10 [ 344.857540][ T9287] ? __might_fault+0xb0/0x130 [ 344.857577][ T9287] should_fail_ex+0x414/0x560 [ 344.857602][ T9287] _copy_from_user+0x2d/0xb0 [ 344.857631][ T9287] kstrtouint_from_user+0xc4/0x170 [ 344.857656][ T9287] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 344.857696][ T9287] proc_fail_nth_write+0x88/0x240 [ 344.857716][ T9287] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 344.857740][ T9287] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 344.857760][ T9287] vfs_write+0x27e/0xa90 [ 344.857795][ T9287] ? __pfx_vfs_write+0x10/0x10 [ 344.857821][ T9287] ? __fget_files+0x2a/0x420 [ 344.857842][ T9287] ? __fget_files+0x3a0/0x420 [ 344.857857][ T9287] ? __fget_files+0x2a/0x420 [ 344.857882][ T9287] ksys_write+0x145/0x250 [ 344.857910][ T9287] ? __pfx_ksys_write+0x10/0x10 [ 344.857939][ T9287] ? do_syscall_64+0xbe/0x3b0 [ 344.857965][ T9287] do_syscall_64+0xfa/0x3b0 [ 344.857985][ T9287] ? lockdep_hardirqs_on+0x9c/0x150 [ 344.858004][ T9287] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.858022][ T9287] ? clear_bhb_loop+0x60/0xb0 [ 344.858045][ T9287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.858062][ T9287] RIP: 0033:0x7f529a78d45f [ 344.858078][ T9287] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 344.858103][ T9287] RSP: 002b:00007f529b5bc030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 344.858123][ T9287] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f529a78d45f [ 344.858135][ T9287] RDX: 0000000000000001 RSI: 00007f529b5bc0a0 RDI: 0000000000000004 [ 344.858145][ T9287] RBP: 00007f529b5bc090 R08: 0000000000000000 R09: 0000000000000000 [ 344.858156][ T9287] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 344.858166][ T9287] R13: 0000000000000000 R14: 00007f529a9b5fa0 R15: 00007f529aadfa28 [ 344.858195][ T9287] [ 345.084765][ C0] vkms_vblank_simulate: vblank timer overrun [ 345.117354][ T9311] netlink: 76 bytes leftover after parsing attributes in process `syz.4.854'. [ 345.166907][ T9314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.187547][ T9314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.409700][ T5991] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 345.562505][ T5991] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 345.592310][ T5991] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 345.623715][ T5991] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 345.633285][ T5991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.651510][ T5991] usb 4-1: Product: syz [ 345.661374][ T5991] usb 4-1: Manufacturer: Д [ 345.671725][ T5991] usb 4-1: SerialNumber: syz [ 345.703015][ T9315] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 345.958883][ T5991] usb 4-1: USB disconnect, device number 61 [ 345.977878][ T5939] usb 5-1: USB disconnect, device number 47 [ 347.140182][ T5849] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 347.289802][ T5849] usb 3-1: device descriptor read/64, error -71 [ 347.533727][ T5849] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 347.693516][ T5849] usb 3-1: device descriptor read/64, error -71 [ 347.810064][ T5849] usb usb3-port1: attempt power cycle [ 347.986586][ T9390] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 347.989096][ T9392] UHID_CREATE from different security context by process 681 (syz.0.885), this is not allowed. [ 347.994248][ T9390] IPv6: NLM_F_CREATE should be set when creating new route [ 347.994325][ T9390] IPv6: NLM_F_CREATE should be set when creating new route [ 348.180054][ T5849] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 348.228685][ T5849] usb 3-1: device descriptor read/8, error -71 [ 348.487878][ T5849] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 348.592267][ T5849] usb 3-1: device descriptor read/8, error -71 [ 348.665178][ T9411] block device autoloading is deprecated and will be removed. [ 348.694574][ T9411] syz.4.889: attempt to access beyond end of device [ 348.694574][ T9411] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 348.717005][ T5859] block device autoloading is deprecated and will be removed. [ 348.717790][ T5849] usb usb3-port1: unable to enumerate USB device [ 348.889777][ T9415] netlink: 16 bytes leftover after parsing attributes in process `syz.0.891'. [ 349.169836][ T5991] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 349.332037][ T5991] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 349.353364][ T5991] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 349.376076][ T5991] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 349.389156][ T5991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.400960][ T5991] usb 5-1: Product: syz [ 349.405174][ T5991] usb 5-1: Manufacturer: syz [ 349.412997][ T5991] usb 5-1: SerialNumber: syz [ 349.647560][ T9417] netlink: 20 bytes leftover after parsing attributes in process `syz.4.892'. [ 349.798070][ T9443] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 349.964941][ T5991] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 350.008599][ T5991] usb 5-1: USB disconnect, device number 48 [ 350.157336][ T5946] udevd[5946]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 351.050314][ T9453] netlink: 36 bytes leftover after parsing attributes in process `syz.3.898'. [ 351.112628][ T9460] netlink: 'syz.1.903': attribute type 10 has an invalid length. [ 351.133057][ T9453] netlink: 12 bytes leftover after parsing attributes in process `syz.3.898'. [ 351.213448][ T9460] hsr_slave_0: left promiscuous mode [ 351.253831][ T9460] hsr_slave_1: left promiscuous mode [ 351.339732][ T5956] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 351.482135][ T9466] netlink: 72 bytes leftover after parsing attributes in process `syz.1.904'. [ 351.489763][ T5956] usb 5-1: Using ep0 maxpacket: 16 [ 351.501435][ T5956] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 351.514438][ T5956] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 351.529710][ T5956] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 351.545229][ T5956] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 351.563043][ T5956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.584342][ T5956] usb 5-1: Product: syz [ 351.588674][ T5956] usb 5-1: Manufacturer: syz [ 351.598797][ T5956] usb 5-1: SerialNumber: syz [ 351.844718][ T5956] usb 5-1: 0:2 : does not exist [ 351.858237][ T5956] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 351.889742][ T5926] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 351.909232][ T5956] usb 5-1: USB disconnect, device number 49 [ 351.952850][ T5946] udevd[5946]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 352.049910][ T5926] usb 2-1: Using ep0 maxpacket: 8 [ 352.060513][ T5926] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 352.068851][ T5926] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 352.113211][ T5926] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 352.137185][ T9481] vlan0: entered promiscuous mode [ 352.154542][ T5926] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 352.165273][ T9481] xt_CT: You must specify a L4 protocol and not use inversions on it [ 352.201616][ T5926] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 352.221385][ T5926] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 352.239641][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.320023][ T5991] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 352.360723][ T9485] FAULT_INJECTION: forcing a failure. [ 352.360723][ T9485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.374037][ T5956] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 352.382965][ T9485] CPU: 1 UID: 0 PID: 9485 Comm: syz.0.910 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 352.382996][ T9485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 352.383009][ T9485] Call Trace: [ 352.383018][ T9485] [ 352.383027][ T9485] dump_stack_lvl+0x189/0x250 [ 352.383058][ T9485] ? __pfx____ratelimit+0x10/0x10 [ 352.383081][ T9485] ? __pfx_dump_stack_lvl+0x10/0x10 [ 352.383106][ T9485] ? __pfx__printk+0x10/0x10 [ 352.383135][ T9485] ? __might_fault+0xb0/0x130 [ 352.383176][ T9485] should_fail_ex+0x414/0x560 [ 352.383205][ T9485] _copy_from_user+0x2d/0xb0 [ 352.383236][ T9485] kstrtouint_from_user+0xc4/0x170 [ 352.383265][ T9485] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 352.383309][ T9485] proc_fail_nth_write+0x88/0x240 [ 352.383331][ T9485] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 352.383359][ T9485] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 352.383383][ T9485] vfs_write+0x27e/0xa90 [ 352.383421][ T9485] ? __pfx_vfs_write+0x10/0x10 [ 352.383451][ T9485] ? __fget_files+0x2a/0x420 [ 352.383475][ T9485] ? __fget_files+0x3a0/0x420 [ 352.383492][ T9485] ? __fget_files+0x2a/0x420 [ 352.383521][ T9485] ksys_write+0x145/0x250 [ 352.383552][ T9485] ? __pfx_ksys_write+0x10/0x10 [ 352.383577][ T9485] ? rcu_is_watching+0x15/0xb0 [ 352.383608][ T9485] ? do_syscall_64+0xbe/0x3b0 [ 352.383636][ T9485] do_syscall_64+0xfa/0x3b0 [ 352.383659][ T9485] ? lockdep_hardirqs_on+0x9c/0x150 [ 352.383681][ T9485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.383701][ T9485] ? clear_bhb_loop+0x60/0xb0 [ 352.383727][ T9485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.383746][ T9485] RIP: 0033:0x7f808a38d45f [ 352.383765][ T9485] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 352.383782][ T9485] RSP: 002b:00007f808a1f7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 352.383804][ T9485] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f808a38d45f [ 352.383818][ T9485] RDX: 0000000000000001 RSI: 00007f808a1f70a0 RDI: 0000000000000005 [ 352.383839][ T9485] RBP: 00007f808a1f7090 R08: 0000000000000000 R09: 0000000000000000 [ 352.383852][ T9485] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 352.383863][ T9485] R13: 0000000000000000 R14: 00007f808a5b5fa0 R15: 00007f808a6dfa28 [ 352.383896][ T9485] [ 352.635395][ T5926] usb 2-1: GET_CAPABILITIES returned 0 [ 352.644507][ T5926] usbtmc 2-1:16.0: can't read capabilities [ 352.865703][ T5926] usb 2-1: USB disconnect, device number 34 [ 352.939669][ T5991] usb 3-1: Using ep0 maxpacket: 8 [ 352.944839][ T5956] usb 4-1: Using ep0 maxpacket: 8 [ 352.957038][ T5991] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 352.967048][ T5991] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 353.000103][ T5956] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 353.015532][ T5956] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 353.025449][ T5991] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 353.059729][ T5956] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 353.072731][ T5991] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 353.085963][ T5956] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 50976, setting to 1024 [ 353.099371][ T5991] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 353.109496][ T5956] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 353.121245][ T5991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.130400][ T5956] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 353.147242][ T5956] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 353.183120][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.361662][ T5991] usb 3-1: GET_CAPABILITIES returned 0 [ 353.367490][ T5991] usbtmc 3-1:16.0: can't read capabilities [ 353.425312][ T5956] usb 4-1: usb_control_msg returned -32 [ 353.441847][ T5956] usbtmc 4-1:16.0: can't read capabilities [ 354.195860][ T9500] loop6: detected capacity change from 0 to 7 [ 354.354747][ T9500] Dev loop6: unable to read RDB block 7 [ 354.372443][ T9500] loop6: unable to read partition table [ 354.382650][ T9500] loop6: partition table beyond EOD, truncated [ 354.395868][ T9500] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 354.529427][ T9502] netlink: 16 bytes leftover after parsing attributes in process `syz.0.915'. [ 355.223746][ T9508] netlink: 'syz.1.916': attribute type 12 has an invalid length. [ 356.199919][ T5956] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 356.401812][ T5956] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 356.419876][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.449536][ T5956] usb 5-1: config 0 descriptor?? [ 356.467659][ T5956] cp210x 5-1:0.0: cp210x converter detected [ 356.874091][ T9516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.888873][ T9516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.897731][ T5956] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 356.968376][ T5956] usb 5-1: cp210x converter now attached to ttyUSB0 [ 357.146117][ T5956] usb 5-1: USB disconnect, device number 50 [ 357.155129][ T5956] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 357.200805][ T5956] cp210x 5-1:0.0: device disconnected [ 358.828415][ T9494] usbtmc 3-1:16.0: usb_control_msg returned -110 [ 358.858781][ T7998] usb 3-1: USB disconnect, device number 77 [ 359.031442][ T9534] loop6: detected capacity change from 0 to 7 [ 359.050579][ T9534] Dev loop6: unable to read RDB block 7 [ 359.056224][ T9534] loop6: unable to read partition table [ 359.108169][ T9508] syz.1.916 (9508): drop_caches: 1 [ 359.119897][ T9534] loop6: partition table beyond EOD, truncated [ 359.126256][ T9534] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 359.321559][ T9541] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 359.884691][ T7998] usb 4-1: USB disconnect, device number 62 [ 360.455402][ T9554] netlink: 44 bytes leftover after parsing attributes in process `syz.3.931'. [ 363.113315][ T9588] loop6: detected capacity change from 0 to 7 [ 363.125155][ T9588] Dev loop6: unable to read RDB block 7 [ 363.134533][ T9588] loop6: unable to read partition table [ 363.142206][ T9588] loop6: partition table beyond EOD, truncated [ 363.148785][ T9588] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 363.854348][ T9599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.941'. [ 366.522678][ T30] audit: type=1326 audit(1753140213.441:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9638 comm="syz.2.952" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f51b6b8e9a9 code=0x0 [ 366.793981][ T9643] nvme_fabrics: missing parameter 'transport=%s' [ 366.800573][ T9643] nvme_fabrics: missing parameter 'nqn=%s' [ 367.031471][ T9655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.110070][ T9655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.272838][ T9658] fuse: Unknown parameter '~' [ 367.324051][ T43] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 367.340224][ T9660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.957'. [ 367.481365][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 367.490657][ T43] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 367.501510][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.509580][ T43] usb 4-1: Product: syz [ 367.514452][ T43] usb 4-1: Manufacturer: syz [ 367.519040][ T43] usb 4-1: SerialNumber: syz [ 367.740576][ T43] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 63 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 367.758703][ T43] usb 4-1: USB disconnect, device number 63 [ 367.777902][ T43] usblp0: removed [ 367.789836][ T5904] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 367.951813][ T5904] usb 5-1: Using ep0 maxpacket: 16 [ 367.961579][ T5904] usb 5-1: config 0 has an invalid interface number: 20 but max is 0 [ 367.975921][ T5904] usb 5-1: config 0 has no interface number 0 [ 367.984576][ T5904] usb 5-1: config 0 interface 20 altsetting 6 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 367.997884][ T5904] usb 5-1: config 0 interface 20 altsetting 6 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 368.011735][ T5904] usb 5-1: config 0 interface 20 altsetting 6 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 368.023896][ T5904] usb 5-1: config 0 interface 20 altsetting 6 endpoint 0x1 has invalid maxpacket 608, setting to 64 [ 368.036847][ T5904] usb 5-1: config 0 interface 20 altsetting 6 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 368.047886][ T5904] usb 5-1: config 0 interface 20 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 368.060706][ T5904] usb 5-1: config 0 interface 20 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 368.077486][ T5904] usb 5-1: config 0 interface 20 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 368.108158][ T5904] usb 5-1: config 0 interface 20 has no altsetting 0 [ 368.153093][ T5904] usb 5-1: New USB device found, idVendor=0403, idProduct=f9d2, bcdDevice=85.d2 [ 368.162577][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.182333][ T5904] usb 5-1: Product: syz [ 368.193825][ T5904] usb 5-1: Manufacturer: syz [ 368.232413][ T5904] usb 5-1: SerialNumber: syz [ 368.250492][ T5904] usb 5-1: config 0 descriptor?? [ 368.539947][ T43] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 368.643593][ T5991] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 368.652200][ T9671] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 368.658773][ T9671] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 368.672805][ T9671] vhci_hcd vhci_hcd.0: Device attached [ 368.702876][ T9671] QAT: Invalid ioctl 21531 [ 368.723330][ T9672] vhci_hcd: connection closed [ 368.724511][ T1143] vhci_hcd: stop threads [ 368.734485][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 368.739846][ T1143] vhci_hcd: release socket [ 368.744315][ T1143] vhci_hcd: disconnect device [ 368.751275][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 368.768141][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 368.792630][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 368.805335][ T43] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 368.816048][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 368.831473][ T5991] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.842542][ T5991] usb 4-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.00 [ 368.855826][ T5991] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.856024][ T43] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 368.952168][ T5991] usb 4-1: config 0 descriptor?? [ 368.962347][ T43] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 368.977298][ T43] usb 2-1: Manufacturer: syz [ 369.077180][ T43] usb 2-1: config 0 descriptor?? [ 369.197869][ T5991] usb 4-1: string descriptor 0 read error: -71 [ 369.215307][ T5991] usbhid 4-1:0.0: can't add hid device: -71 [ 369.221845][ T5991] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 369.234417][ T5991] usb 4-1: USB disconnect, device number 64 [ 369.414972][ T9678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.425652][ T9678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.991545][ T9686] loop6: detected capacity change from 0 to 7 [ 370.006919][ T6006] Dev loop6: unable to read RDB block 7 [ 370.013528][ T6006] loop6: unable to read partition table [ 370.021285][ T6006] loop6: partition table beyond EOD, truncated [ 370.029476][ T9686] Dev loop6: unable to read RDB block 7 [ 370.038287][ T9686] loop6: unable to read partition table [ 370.046600][ T9686] loop6: partition table beyond EOD, truncated [ 370.053074][ T9686] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 370.672002][ T5904] ftdi_sio 5-1:0.20: FTDI USB Serial Device converter detected [ 370.941337][ T5904] ftdi_sio ttyUSB0: unknown device type: 0x85d2 [ 371.118890][ T5904] usb 5-1: USB disconnect, device number 51 [ 371.156906][ T5904] ftdi_sio 5-1:0.20: device disconnected [ 371.609998][ T43] rc_core: IR keymap rc-hauppauge not found [ 371.617590][ T43] Registered IR keymap rc-empty [ 371.626003][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 371.680411][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 371.730617][ T43] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 371.764951][ T43] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input24 [ 371.829507][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 371.870055][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 371.906428][ T5939] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 371.910078][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 371.959741][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 372.017775][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 372.059795][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 372.114925][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 372.149811][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 372.159703][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.169826][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 372.199809][ T5939] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 372.238277][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 372.248464][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.280128][ T5939] usb 3-1: config 0 descriptor?? [ 372.285226][ T43] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 372.328437][ T43] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 372.371283][ T43] usb 2-1: USB disconnect, device number 35 [ 372.699755][ T5939] keytouch 0003:0926:3333.000E: fixing up Keytouch IEC report descriptor [ 372.764832][ T5939] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.000E/input/input25 [ 372.937950][ T9721] loop6: detected capacity change from 0 to 7 [ 372.981834][ T9721] Dev loop6: unable to read RDB block 7 [ 372.989547][ T9721] loop6: unable to read partition table [ 373.024208][ T9721] loop6: partition table beyond EOD, truncated [ 373.036231][ T9721] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 373.056840][ T5939] keytouch 0003:0926:3333.000E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 373.373165][ T9728] netlink: 28 bytes leftover after parsing attributes in process `syz.1.976'. [ 373.478579][ T9723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.513007][ T9723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.705246][ T9739] netlink: 16 bytes leftover after parsing attributes in process `syz.3.980'. [ 373.899908][ T7998] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 374.069772][ T7998] usb 2-1: Using ep0 maxpacket: 32 [ 374.082612][ T7998] usb 2-1: config 0 has an invalid interface number: 230 but max is 0 [ 374.095039][ T7998] usb 2-1: config 0 has no interface number 0 [ 374.114766][ T7998] usb 2-1: config 0 interface 230 has no altsetting 0 [ 374.143809][ T7998] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 374.161895][ T7998] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.191934][ T7998] usb 2-1: Product: syz [ 374.196502][ T7998] usb 2-1: Manufacturer: syz [ 374.202385][ T7998] usb 2-1: SerialNumber: syz [ 374.214021][ T7998] usb 2-1: config 0 descriptor?? [ 374.230678][ T7998] ums-usbat 2-1:0.230: USB Mass Storage device detected [ 374.280746][ T7998] ums-usbat 2-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 374.595103][ T5939] usb 3-1: USB disconnect, device number 78 [ 374.644867][ T7998] ums-usbat 2-1:0.230: probe with driver ums-usbat failed with error -5 [ 374.711073][ T7998] usb 2-1: USB disconnect, device number 36 [ 375.131606][ T9770] loop6: detected capacity change from 0 to 7 [ 375.151964][ T9770] Dev loop6: unable to read RDB block 7 [ 375.157649][ T9770] loop6: unable to read partition table [ 375.174190][ T9770] loop6: partition table beyond EOD, truncated [ 375.187640][ T9770] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 375.568879][ T9781] netlink: 16 bytes leftover after parsing attributes in process `syz.2.991'. [ 375.793136][ T9787] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 375.967226][ T5939] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 376.109805][ T5991] usb 3-1: new full-speed USB device number 79 using dummy_hcd [ 376.149785][ T5939] usb 4-1: Using ep0 maxpacket: 16 [ 376.162875][ T5939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.214584][ T5939] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 376.311066][ T5991] usb 3-1: device descriptor read/64, error -71 [ 376.349651][ T5939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.404253][ T5939] usb 4-1: config 0 descriptor?? [ 376.549805][ T5991] usb 3-1: new full-speed USB device number 80 using dummy_hcd [ 376.685522][ T5991] usb 3-1: device descriptor read/64, error -71 [ 376.734252][ T5939] usbhid 4-1:0.0: can't add hid device: -71 [ 376.741619][ T5939] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 376.800035][ T5991] usb usb3-port1: attempt power cycle [ 376.804921][ T5939] usb 4-1: USB disconnect, device number 65 [ 377.140201][ T5991] usb 3-1: new full-speed USB device number 81 using dummy_hcd [ 377.180766][ T9824] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1000'. [ 377.682380][ T5991] usb 3-1: device descriptor read/8, error -71 [ 377.728311][ T9826] syz.0.1001: attempt to access beyond end of device [ 377.728311][ T9826] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 377.799732][ T5918] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 378.053850][ T5918] usb 4-1: config 0 has no interfaces? [ 378.129527][ T5991] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 378.267111][ T5991] usb 3-1: device descriptor read/8, error -71 [ 378.284600][ T5918] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 378.295408][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.305065][ T5918] usb 4-1: Product: syz [ 378.309557][ T5918] usb 4-1: Manufacturer: syz [ 378.315865][ T5918] usb 4-1: SerialNumber: syz [ 378.357939][ T5918] usb 4-1: config 0 descriptor?? [ 378.449947][ T5991] usb usb3-port1: unable to enumerate USB device [ 378.583828][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.590341][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.697248][ T9821] xt_policy: neither incoming nor outgoing policy selected [ 378.914543][ T9841] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 378.921121][ T9841] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 378.934590][ T9841] vhci_hcd vhci_hcd.0: Device attached [ 378.947787][ T9841] fuse: Bad value for 'fd' [ 378.959281][ T9842] vhci_hcd: connection closed [ 378.962638][ T12] vhci_hcd: stop threads [ 378.974576][ T12] vhci_hcd: release socket [ 378.979206][ T12] vhci_hcd: disconnect device [ 379.112702][ T9848] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1008'. [ 379.279767][ T5991] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 379.441552][ T5991] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 379.451513][ T5991] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.473066][ T5991] usb 5-1: config 0 descriptor?? [ 379.486446][ T5991] cp210x 5-1:0.0: cp210x converter detected [ 379.569800][ T5918] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 379.741932][ T5918] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 379.777470][ T5918] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 379.794459][ T5918] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 379.865420][ T5918] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 379.874694][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.875494][ T43] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 379.915965][ T5991] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 379.925966][ T5991] cp210x 5-1:0.0: failed to get vendor val 0x3711 size 2: -121 [ 379.935726][ T5991] cp210x 5-1:0.0: GPIO initialisation failed: -121 [ 379.935961][ T9858] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 380.012605][ T5991] usb 5-1: cp210x converter now attached to ttyUSB0 [ 380.079886][ T7998] usb 4-1: USB disconnect, device number 66 [ 380.093625][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 380.103648][ T43] usb 3-1: unable to get BOS descriptor or descriptor too short [ 380.113385][ T43] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 380.130898][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 380.147560][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 380.166025][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 380.182631][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 380.194598][ T43] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 380.206202][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 380.218090][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 380.258996][ T43] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 380.270292][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.282109][ T43] usb 3-1: Product: syz [ 380.314487][ T43] usb 3-1: Manufacturer: syz [ 380.632195][ T9870] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1004'. [ 380.641420][ T5918] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 380.644095][ T5918] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input27 [ 380.683677][ T43] usb 3-1: SerialNumber: syz [ 380.799785][ T43] usb 3-1: config 0 descriptor?? [ 380.832018][ T43] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 380.845775][ T5918] usb 2-1: USB disconnect, device number 37 [ 380.851815][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 381.112696][ T5918] usb 5-1: USB disconnect, device number 52 [ 381.139949][ T5918] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 381.148229][ T5918] cp210x 5-1:0.0: device disconnected [ 381.200115][ T9877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.323425][ T9877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.371183][ T43] usb 3-1: USB disconnect, device number 83 [ 381.619828][ T5918] usb 5-1: new low-speed USB device number 53 using dummy_hcd [ 381.782327][ T5918] usb 5-1: unable to get BOS descriptor or descriptor too short [ 381.794256][ T5918] usb 5-1: config 7 has an invalid interface number: 67 but max is 0 [ 381.806963][ T5918] usb 5-1: config 7 has no interface number 0 [ 381.829773][ T5918] usb 5-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=63.16 [ 381.841144][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.859387][ T5918] usb 5-1: Product: 㯑 [ 381.873247][ T5918] usb 5-1: Manufacturer: 떒 [ 382.186464][ T6677] udevd[6677]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 382.227422][ T5918] usb 5-1: USB disconnect, device number 53 [ 383.624717][ T5939] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 383.794657][ T5939] usb 3-1: Using ep0 maxpacket: 16 [ 383.806196][ T5939] usb 3-1: config 4 has an invalid interface number: 51 but max is 0 [ 383.829929][ T5939] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 383.854058][ T5939] usb 3-1: config 4 has no interface number 0 [ 383.869786][ T5939] usb 3-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 383.899805][ T5939] usb 3-1: config 4 interface 51 has no altsetting 0 [ 383.916519][ T5939] usb 3-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 383.987529][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.092574][ T5939] usb 3-1: Product: syz [ 384.096911][ T5939] usb 3-1: Manufacturer: syz [ 384.149821][ T5939] usb 3-1: SerialNumber: syz [ 384.221937][ T5939] cdc_eem 3-1:4.51: probe with driver cdc_eem failed with error -22 [ 384.300114][ T5918] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 384.580933][ T9920] 8021q: adding VLAN 0 to HW filter on device bond2 [ 384.590091][ T9920] bond0: (slave bond2): Enslaving as an active interface with an up link [ 384.740828][ T5918] usb 2-1: config 0 has no interfaces? [ 384.758166][ T5918] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 384.817309][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.848932][ T5918] usb 2-1: Product: syz [ 384.862636][ T5918] usb 2-1: Manufacturer: syz [ 384.885661][ T5918] usb 2-1: SerialNumber: syz [ 384.907767][ T5918] usb 2-1: config 0 descriptor?? [ 385.576392][ T9914] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1024'. [ 385.697181][ T9931] usb 3-1: USB disconnect, device number 84 [ 385.835951][ T9931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1029'. [ 386.790910][ T9942] netlink: 'syz.4.1033': attribute type 2 has an invalid length. [ 386.862329][ T9942] : entered promiscuous mode [ 386.945117][ T9947] xt_hashlimit: invalid rate [ 387.038423][ T5904] usb 2-1: USB disconnect, device number 38 [ 387.302679][ T9935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1030'. [ 387.538039][ T5918] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 387.745819][ T5918] usb 5-1: device descriptor read/64, error -71 [ 388.019808][ T5918] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 388.160249][ T9969] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1040'. [ 388.170316][ T5918] usb 5-1: device descriptor read/64, error -71 [ 388.192386][ T9969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1040'. [ 388.280207][ T5918] usb usb5-port1: attempt power cycle [ 388.659853][ T5918] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 388.690513][ T5918] usb 5-1: device descriptor read/8, error -71 [ 388.969858][ T5918] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 389.001160][ T5918] usb 5-1: device descriptor read/8, error -71 [ 389.110154][ T5918] usb usb5-port1: unable to enumerate USB device [ 389.579909][ T5904] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 389.732507][ T5904] usb 2-1: Using ep0 maxpacket: 16 [ 389.743777][ T5904] usb 2-1: config 4 has an invalid interface number: 51 but max is 0 [ 389.753838][ T5904] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 389.770184][ T5904] usb 2-1: config 4 has no interface number 0 [ 389.776432][ T5904] usb 2-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 389.792394][ T5904] usb 2-1: config 4 interface 51 has no altsetting 0 [ 389.805168][ T5904] usb 2-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 389.815266][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.829670][ T5904] usb 2-1: Product: syz [ 389.835568][ T5904] usb 2-1: Manufacturer: syz [ 389.843347][ T5904] usb 2-1: SerialNumber: syz [ 389.867412][ T5904] cdc_eem 2-1:4.51: probe with driver cdc_eem failed with error -22 [ 389.970015][ T5918] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 390.021695][ T9989] fuse: Bad value for 'fd' [ 390.121474][ T5904] usb 2-1: USB disconnect, device number 39 [ 390.129786][ T5918] usb 4-1: Using ep0 maxpacket: 32 [ 390.140768][ T5918] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 390.153408][ T5918] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 390.162938][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 390.171785][ T5918] usb 4-1: Product: syz [ 390.176056][ T5918] usb 4-1: Manufacturer: syz [ 390.181236][ T5918] usb 4-1: SerialNumber: syz [ 390.188208][ T5918] usb 4-1: config 0 descriptor?? [ 390.194673][ T9987] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 390.203030][ T5918] hub 4-1:0.0: bad descriptor, ignoring hub [ 390.208975][ T5918] hub 4-1:0.0: probe with driver hub failed with error -5 [ 390.483162][T10003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.504387][T10003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.526345][T10003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.537107][T10003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.543344][T10005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1052'. [ 390.700170][ T5918] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 390.874939][ T5918] usb 5-1: not running at top speed; connect to a high speed hub [ 390.885484][ T5918] usb 5-1: config 1 interface 0 altsetting 254 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 390.896944][ T5918] usb 5-1: config 1 interface 0 altsetting 254 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 390.911727][ T5918] usb 5-1: config 1 interface 0 has no altsetting 0 [ 390.923300][ T5918] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 390.932546][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.940807][ T5918] usb 5-1: Product: 嗀뮼쫚◠ｲ䯱鰌銬譜䚣꘮딇僷楌쉼톺蓙⢮蓭錉뭍鷪빤ᒱ냄ᔠ刻樥逆膓ⴁ햱쥭䬲鵷ວ㎻松䏧裯壀渴ꃆ쌟鍎䗉⽔멺鶊呙짛쓊賂 [ 390.959787][ T5918] usb 5-1: Manufacturer: 晏⦟娃⣎ↅ퐉줻∹䝳盝⳿刚 [ 390.967907][ T5918] usb 5-1: SerialNumber: syz [ 390.977864][T10002] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 391.601990][T10002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.624802][T10002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.650299][ T5918] usblp 5-1:1.0: usblp1: USB Unidirectional printer dev 58 if 0 alt 254 proto 1 vid 0x0525 pid 0xA4A8 [ 391.677724][ T5918] usb 5-1: USB disconnect, device number 58 [ 391.703688][ T5918] usblp1: removed [ 392.880489][ T5939] usb 4-1: USB disconnect, device number 67 [ 393.248927][T10038] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1060'. [ 395.405902][T10067] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1066'. [ 395.424727][T10067] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 395.512463][ T5904] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 395.679808][ T5904] usb 2-1: Using ep0 maxpacket: 16 [ 397.057856][T10082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1072'. [ 397.607190][T10086] netlink: 'syz.4.1074': attribute type 3 has an invalid length. [ 397.656413][T10086] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1074'. [ 397.744630][T10090] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1076'. [ 398.111236][ T5939] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 398.244925][ T5904] usb 2-1: unable to get BOS descriptor or descriptor too short [ 398.258291][ T5904] usb 2-1: no configurations [ 398.268298][ T5904] usb 2-1: can't read configurations, error -22 [ 398.269819][ T5939] usb 4-1: Using ep0 maxpacket: 32 [ 398.307458][ T5939] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 398.316957][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.325857][ T5939] usb 4-1: Product: syz [ 398.330581][ T5939] usb 4-1: Manufacturer: syz [ 398.335221][ T5939] usb 4-1: SerialNumber: syz [ 398.358941][ T5939] usb 4-1: config 0 descriptor?? [ 398.372747][ T5939] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 398.670175][ T5918] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 398.708471][T10109] fuse: Unknown parameter 'w:ǂ-o [ 398.708471][T10109] N}8Gt${' [ 398.819814][ T5918] usb 5-1: Using ep0 maxpacket: 8 [ 398.833665][ T5918] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 398.864196][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.890074][ T5918] usb 5-1: Product: syz [ 398.894408][ T5918] usb 5-1: Manufacturer: syz [ 398.900068][T10115] binder: 10114:10115 unknown command 0 [ 398.907815][ T5939] gspca_ov534_9: reg_w failed -110 [ 398.919823][ T5918] usb 5-1: SerialNumber: syz [ 398.923458][T10115] binder: 10114:10115 ioctl c0306201 200000000c40 returned -22 [ 398.934432][ T5918] usb 5-1: config 0 descriptor?? [ 399.165086][ T5918] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 399.705717][ T5939] gspca_ov534_9: Unknown sensor 0000 [ 399.705791][ T5939] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 399.719839][ T5904] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 399.944734][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.964688][ T5904] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 399.978536][ T5904] usb 2-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 399.990186][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.045061][ T5904] usb 2-1: config 0 descriptor?? [ 400.084893][ T5956] usb 4-1: USB disconnect, device number 68 [ 400.338796][T10125] geneve4: entered promiscuous mode [ 400.371777][T10125] geneve4: entered allmulticast mode [ 400.468937][T10134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.483222][ T5904] lenovo 0003:17EF:6067.000F: reserved main item tag 0xd [ 400.503857][T10134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.512442][ T5904] lenovo 0003:17EF:6067.000F: hidraw0: USB HID v0.01 Device [HID 17ef:6067] on usb-dummy_hcd.1-1/input0 [ 400.684149][ T5956] usb 2-1: USB disconnect, device number 41 [ 400.690299][ T5904] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 400.768386][T10142] vxcan1: tx address claim with dlc 0 [ 400.976243][ T5918] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 400.989016][ T5918] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 401.001782][ T5918] usb 5-1: media controller created [ 401.052536][ T5918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 401.142638][ T5918] i2c i2c-2: Added multiplexed i2c bus 3 [ 401.148432][ T5918] rtl2832 2-0010: Realtek RTL2832 successfully attached [ 401.162073][ T5918] usb 5-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 401.174108][ T5918] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 401.253309][ T5918] DVB: Unable to find symbol r820t_attach() [ 401.609802][ T5956] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 401.774726][ T5956] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 401.785781][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.794754][ T5956] usb 2-1: Product: syz [ 401.799088][ T5956] usb 2-1: Manufacturer: syz [ 401.805665][ T5956] usb 2-1: SerialNumber: syz [ 401.817526][ T5956] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 401.944798][ T5904] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 401.979716][ T5918] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 402.131623][ T5918] usb 4-1: config 0 has an invalid interface number: 83 but max is 0 [ 402.140348][ T5918] usb 4-1: config 0 has no interface number 0 [ 402.150923][ T7998] usb 2-1: USB disconnect, device number 42 [ 402.164139][ T5918] usb 4-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=92.20 [ 402.176469][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.184782][ T5918] usb 4-1: Product: syz [ 402.188970][ T5918] usb 4-1: Manufacturer: syz [ 402.193727][ T5918] usb 4-1: SerialNumber: syz [ 402.202428][ T5918] usb 4-1: config 0 descriptor?? [ 402.214041][ T5918] s2255 4-1:0.83: Could not find bulk-in endpoint [ 402.220659][ T5918] Sensoray 2255 driver load failed: 0xfffffff4 [ 402.226835][ T5918] s2255 4-1:0.83: probe with driver s2255 failed with error -12 [ 402.363128][T10155] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.375700][T10155] input: syz1 as /devices/virtual/input/input28 [ 402.418184][ T5956] usb 4-1: USB disconnect, device number 70 [ 402.740388][ T5956] usb 5-1: USB disconnect, device number 59 [ 402.984846][ T5904] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 403.010353][ T5904] ath9k_htc: Failed to initialize the device [ 403.069081][ T7998] usb 2-1: ath9k_htc: USB layer deinitialized [ 407.620101][ T7998] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 407.791653][ T7998] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 407.832014][ T7998] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 407.955669][ T7998] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 407.997447][ T7998] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 408.033725][ T7998] usb 4-1: SerialNumber: syz [ 408.265988][ T7998] usb 4-1: 0:2 : does not exist [ 408.325022][T10268] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 408.433598][ T7998] usb 4-1: USB disconnect, device number 71 [ 408.524953][ T5946] udevd[5946]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 409.336457][T10282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1118'. [ 409.529468][T10284] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1119'. [ 410.936654][T10302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1124'. [ 410.966210][T10302] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 411.220756][ T31] INFO: task kworker/1:0:24 blocked for more than 143 seconds. [ 411.251250][ T31] Not tainted 6.16.0-rc7-syzkaller #0 [ 411.257209][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 411.286454][ T31] task:kworker/1:0 state:D stack:19480 pid:24 tgid:24 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 411.317868][ T31] Workqueue: usb_hub_wq hub_event [ 411.329759][ T31] Call Trace: [ 411.336839][ T31] [ 411.346873][ T31] __schedule+0x16fd/0x4cf0 [ 411.359186][ T31] ? bus_probe_device+0x185/0x260 [ 411.371509][ T31] ? hub_event+0x2958/0x4a20 [ 411.386006][ T31] ? schedule+0x165/0x360 [ 411.397390][ T31] ? __pfx___schedule+0x10/0x10 [ 411.409955][ T31] ? schedule+0x91/0x360 [ 411.432929][ T31] schedule+0x165/0x360 [ 411.437307][ T31] schedule_timeout+0x9a/0x270 [ 411.466203][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 411.484074][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 411.496650][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 411.510534][ T31] ? wait_for_completion+0x267/0x5d0 [ 411.520777][ T31] wait_for_completion+0x2bf/0x5d0 [ 411.537453][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 411.546814][ T31] i2c_del_adapter+0x581/0x6e0 [ 411.557287][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 411.574382][ T31] ? rcu_is_watching+0x15/0xb0 [ 411.579323][ T31] ? dvb_usb_adapter_exit+0xd7/0x240 [ 411.584965][ T31] dvb_usb_i2c_exit+0x64/0xb0 [ 411.592055][ T31] dvb_usb_device_exit+0x1be/0x350 [ 411.598246][ T31] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 411.604126][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 411.614098][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 411.619454][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 411.625947][ T31] cxusb_probe+0x603/0x700 [ 411.632406][ T31] ? __pfx_cxusb_probe+0x10/0x10 [ 411.637534][ T31] ? __pm_runtime_set_status+0x785/0xa50 [ 411.643960][ T31] usb_probe_interface+0x644/0xbc0 [ 411.649286][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 411.655564][ T31] really_probe+0x26a/0x9a0 [ 411.660577][ T31] __driver_probe_device+0x18c/0x2f0 [ 411.665986][ T31] driver_probe_device+0x4f/0x430 [ 411.671582][ T31] __device_attach_driver+0x2ce/0x530 [ 411.677087][ T31] bus_for_each_drv+0x251/0x2e0 [ 411.682831][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 411.688846][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 411.694708][ T31] __device_attach+0x2b8/0x400 [ 411.700058][ T31] ? __pfx___device_attach+0x10/0x10 [ 411.705510][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 411.711297][ T31] bus_probe_device+0x185/0x260 [ 411.716311][ T31] device_add+0x7b6/0xb50 [ 411.721213][ T31] usb_set_configuration+0x1a87/0x20e0 [ 411.727280][ T31] usb_generic_driver_probe+0x8d/0x150 [ 411.733498][ T31] usb_probe_device+0x1c4/0x390 [ 411.738717][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 411.744717][ T31] really_probe+0x26a/0x9a0 [ 411.749397][ T31] __driver_probe_device+0x18c/0x2f0 [ 411.755228][ T31] driver_probe_device+0x4f/0x430 [ 411.760954][ T31] __device_attach_driver+0x2ce/0x530 [ 411.766504][ T31] bus_for_each_drv+0x251/0x2e0 [ 411.773008][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 411.779013][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 411.784758][ T31] __device_attach+0x2b8/0x400 [ 411.789622][ T31] ? __pfx___device_attach+0x10/0x10 [ 411.795030][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 411.809612][ T31] bus_probe_device+0x185/0x260 [ 411.814527][ T31] device_add+0x7b6/0xb50 [ 411.818871][ T31] usb_new_device+0xa39/0x16c0 [ 411.839741][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 411.844984][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 411.862633][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 411.869811][ T31] hub_event+0x2958/0x4a20 [ 411.874426][ T31] ? __pfx_hub_event+0x10/0x10 [ 411.879232][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 411.885474][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 411.890752][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 411.896613][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 411.902502][ T31] process_scheduled_works+0xae1/0x17b0 [ 411.908252][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 411.914368][ T31] worker_thread+0x8a0/0xda0 [ 411.919132][ T31] kthread+0x70e/0x8a0 [ 411.923487][ T31] ? __pfx_worker_thread+0x10/0x10 [ 411.928643][ T31] ? __pfx_kthread+0x10/0x10 [ 411.933321][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 411.938711][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 411.944530][ T31] ? __pfx_kthread+0x10/0x10 [ 411.949178][ T31] ret_from_fork+0x3fc/0x770 [ 411.956701][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 411.962090][ T31] ? __switch_to_asm+0x39/0x70 [ 411.966902][ T31] ? __switch_to_asm+0x33/0x70 [ 411.971871][ T31] ? __pfx_kthread+0x10/0x10 [ 411.976651][ T31] ret_from_fork_asm+0x1a/0x30 [ 411.981525][ T31] [ 411.984920][ T31] [ 411.984920][ T31] Showing all locks held in the system: [ 411.995090][ T31] 2 locks held by kworker/u8:1/13: [ 412.001358][ T31] #0: ffff88801ff93148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.016436][ T31] #1: ffffc90000127bc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.030674][ T31] 5 locks held by kworker/1:0/24: [ 412.035743][ T31] #0: ffff888021e85148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.047129][ T31] #1: ffffc900001e7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.059156][ T31] #2: ffff8881437b5198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 412.068271][ T31] #3: ffff888077a11198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 412.077545][ T31] #4: ffff888023d72160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 412.086936][ T31] 1 lock held by khungtaskd/31: [ 412.091910][ T31] #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 412.102153][ T31] 2 locks held by kworker/u8:2/36: [ 412.107301][ T31] #0: ffff88801ff93148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.118559][ T31] #1: ffffc90000ac7bc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.131074][ T31] 2 locks held by kworker/u8:7/2962: [ 412.136379][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 412.146390][ T31] #1: ffff8880b8723f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39a/0x6d0 [ 412.158057][ T31] 2 locks held by getty/5607: [ 412.162821][ T31] #0: ffff8880353020a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 412.172887][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 412.183081][ T31] 4 locks held by udevd/5903: [ 412.187852][ T31] #0: ffff8880328619e0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 412.196761][ T31] #1: ffff888031a23888 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x55/0x3c0 [ 412.206347][ T31] #2: ffff8880246163c8 (kn->active#28){++++}-{0:0}, at: kernfs_seq_start+0x75/0x3c0 [ 412.216278][ T31] #3: ffff888077a11198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 412.225767][ T31] [ 412.229089][ T31] ============================================= [ 412.229089][ T31] [ 412.243585][ T31] NMI backtrace for cpu 0 [ 412.243606][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 412.243629][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 412.243641][ T31] Call Trace: [ 412.243649][ T31] [ 412.243658][ T31] dump_stack_lvl+0x189/0x250 [ 412.243683][ T31] ? __wake_up_klogd+0xd9/0x110 [ 412.243715][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 412.243738][ T31] ? __pfx__printk+0x10/0x10 [ 412.243779][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 412.243813][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 412.243841][ T31] ? _printk+0xcf/0x120 [ 412.243872][ T31] ? __pfx__printk+0x10/0x10 [ 412.243902][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 412.243926][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 412.243959][ T31] watchdog+0xfee/0x1030 [ 412.243981][ T31] ? watchdog+0x1de/0x1030 [ 412.244018][ T31] kthread+0x70e/0x8a0 [ 412.244047][ T31] ? __pfx_watchdog+0x10/0x10 [ 412.244063][ T31] ? __pfx_kthread+0x10/0x10 [ 412.244090][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 412.244108][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.244125][ T31] ? __pfx_kthread+0x10/0x10 [ 412.244151][ T31] ret_from_fork+0x3fc/0x770 [ 412.244173][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 412.244198][ T31] ? __switch_to_asm+0x39/0x70 [ 412.244220][ T31] ? __switch_to_asm+0x33/0x70 [ 412.244242][ T31] ? __pfx_kthread+0x10/0x10 [ 412.244268][ T31] ret_from_fork_asm+0x1a/0x30 [ 412.244307][ T31] [ 412.244320][ T31] Sending NMI from CPU 0 to CPUs 1: [ 412.400176][ C1] NMI backtrace for cpu 1 [ 412.400192][ C1] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 412.400211][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 412.400222][ C1] Workqueue: bat_events batadv_nc_worker [ 412.400252][ C1] RIP: 0010:__lock_acquire+0x2f0/0xd20 [ 412.400272][ C1] Code: 0a 00 00 00 0f 95 c2 c1 e2 0d c1 e6 0e 09 d6 8b 54 24 1c c1 e2 0f 0f b7 d2 09 f2 41 83 e4 03 41 c1 e4 10 41 09 d4 8b 54 24 0c <83> e2 01 c1 e2 12 44 09 e2 41 c1 e6 14 41 09 d6 8b 54 24 10 c1 e2 [ 412.400286][ C1] RSP: 0018:ffffc900001278f0 EFLAGS: 00000006 [ 412.400299][ C1] RAX: 000000000000000a RBX: ffffffff8e13f0e0 RCX: 0000000000000007 [ 412.400310][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88801d2a8000 [ 412.400320][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8b3b58f2 [ 412.400331][ C1] R10: dffffc0000000000 R11: ffffffff8b3b5820 R12: 0000000000020000 [ 412.400343][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88801d2a8af0 [ 412.400354][ C1] FS: 0000000000000000(0000) GS:ffff888125d23000(0000) knlGS:0000000000000000 [ 412.400367][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 412.400378][ C1] CR2: 00007f36f3182ab8 CR3: 000000007dc64000 CR4: 00000000003526f0 [ 412.400393][ C1] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000 [ 412.400402][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 412.400412][ C1] Call Trace: [ 412.400418][ C1] [ 412.400429][ C1] ? batadv_nc_worker+0xd2/0x610 [ 412.400444][ C1] lock_acquire+0x120/0x360 [ 412.400459][ C1] ? batadv_nc_worker+0xd2/0x610 [ 412.400476][ C1] ? batadv_nc_worker+0xd2/0x610 [ 412.400490][ C1] ? batadv_nc_worker+0xd2/0x610 [ 412.400504][ C1] batadv_nc_worker+0xef/0x610 [ 412.400518][ C1] ? batadv_nc_worker+0xd2/0x610 [ 412.400533][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 412.400553][ C1] process_scheduled_works+0xae1/0x17b0 [ 412.400583][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 412.400614][ C1] worker_thread+0x8a0/0xda0 [ 412.400644][ C1] kthread+0x70e/0x8a0 [ 412.400667][ C1] ? __pfx_worker_thread+0x10/0x10 [ 412.400685][ C1] ? __pfx_kthread+0x10/0x10 [ 412.400708][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 412.400724][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.400739][ C1] ? __pfx_kthread+0x10/0x10 [ 412.400762][ C1] ret_from_fork+0x3fc/0x770 [ 412.400780][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 412.400798][ C1] ? __switch_to_asm+0x39/0x70 [ 412.400820][ C1] ? __switch_to_asm+0x33/0x70 [ 412.400840][ C1] ? __pfx_kthread+0x10/0x10 [ 412.400862][ C1] ret_from_fork_asm+0x1a/0x30 [ 412.400890][ C1] [ 412.563966][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 412.563984][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 412.564002][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 412.564025][ T31] Call Trace: [ 412.564032][ T31] [ 412.564039][ T31] dump_stack_lvl+0x99/0x250 [ 412.564062][ T31] ? __asan_memcpy+0x40/0x70 [ 412.564080][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 412.564098][ T31] ? __pfx__printk+0x10/0x10 [ 412.564127][ T31] panic+0x2db/0x790 [ 412.564148][ T31] ? __pfx_panic+0x10/0x10 [ 412.564164][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 412.564186][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 412.564209][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 412.564238][ T31] watchdog+0x102d/0x1030 [ 412.564254][ T31] ? watchdog+0x1de/0x1030 [ 412.564273][ T31] kthread+0x70e/0x8a0 [ 412.564297][ T31] ? __pfx_watchdog+0x10/0x10 [ 412.564315][ T31] ? __pfx_kthread+0x10/0x10 [ 412.564336][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 412.564351][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.564366][ T31] ? __pfx_kthread+0x10/0x10 [ 412.564387][ T31] ret_from_fork+0x3fc/0x770 [ 412.564405][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 412.564425][ T31] ? __switch_to_asm+0x39/0x70 [ 412.564443][ T31] ? __switch_to_asm+0x33/0x70 [ 412.564462][ T31] ? __pfx_kthread+0x10/0x10 [ 412.564483][ T31] ret_from_fork_asm+0x1a/0x30 [ 412.564513][ T31] [ 412.564866][ T31] Kernel Offset: disabled