last executing test programs: 10.044504227s ago: executing program 3 (id=996): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(0xffffffffffffffff, 0x708, 0x41e3, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mknod$loop(0x0, 0x8, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000280)="66b9800000c00f326635010000000f3064660f38828e4258660f086766c744240012e93bf96766c7442402010000006766c744240600000000670f011c2466b9800000c00f326635002000000f300f01df66b80500000066b900200000a90a000f01c40f019f09000f01c2", 0x6b}], 0x1, 0x7d, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000300)={[0x7, 0xffffffffffffffca, 0x100, 0x0, 0x5700000000000000, 0x401, 0x6, 0xfffffffffffffff7, 0x0, 0x8, 0x100000001, 0xba25, 0xfff, 0x3, 0xfffffffffffffe00, 0x4], 0xeeef0000, 0x1c0080}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 8.751268954s ago: executing program 3 (id=999): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000}) r3 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0x40000014}) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8417f, 0x0) socket$inet(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x40082) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r4, 0x80045518, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r7 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x670, 0x5, 0x35c, 0xa4, 0x16c, 0xfeffffff, 0x0, 0xa4, 0x2c8, 0x2c8, 0xffffffff, 0x2c8, 0x2c8, 0x5, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0x0, '\x00', 'geneve0\x00'}, 0x0, 0x70, 0xa4}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @gre_key}}}}, {{@ip={@private, @broadcast, 0x0, 0x0, 'pimreg0\x00', 'syzkaller0\x00'}, 0x0, 0xa4, 0xc8, 0x0, {0x0, 0x7}, [@common=@unspec=@devgroup={{0x34}, {0x1}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0x210}}, {{@uncond, 0x0, 0x70, 0xa4}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x0, @loopback, @local, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x94, 0xb8, 0x0, {}, [@common=@ttl={{0x24}}]}, @common=@inet=@TCPMSS={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0xffeb) openat$adsp1(0xffffff9c, &(0x7f0000000000), 0x125000, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r7, 0x0, 0x0) 8.27681384s ago: executing program 4 (id=1003): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x1000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 7.652339917s ago: executing program 4 (id=1005): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000}) r3 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0x40000014}) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8417f, 0x0) socket$inet(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x40082) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, 0x0, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r4, 0x80045518, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r7 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x670, 0x5, 0x35c, 0xa4, 0x16c, 0xfeffffff, 0x0, 0xa4, 0x2c8, 0x2c8, 0xffffffff, 0x2c8, 0x2c8, 0x5, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0x0, '\x00', 'geneve0\x00'}, 0x0, 0x70, 0xa4}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @gre_key}}}}, {{@ip={@private, @broadcast, 0x0, 0x0, 'pimreg0\x00', 'syzkaller0\x00'}, 0x0, 0xa4, 0xc8, 0x0, {0x0, 0x7}, [@common=@unspec=@devgroup={{0x34}, {0x1}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0x210}}, {{@uncond, 0x0, 0x70, 0xa4}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x0, @loopback, @local, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x94, 0xb8, 0x0, {}, [@common=@ttl={{0x24}}]}, @common=@inet=@TCPMSS={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0xffeb) r9 = openat$adsp1(0xffffff9c, &(0x7f0000000000), 0x125000, 0x0) write$dsp(r9, &(0x7f0000000240)="046002263d307baa6bca7e42fdac287004a66159755c4cdf97cf4d1443d63728e884d79438634ff1fbc20c102e3ddfdc200de8fe794e8d95030001b1d61e233ce8472a17be806fa7764487c1282c6bdb3333077b4639c3e30e98ac49d84371c8cc0d2ae83bc45e85670804b3874772f2c6afe4aefbee0fea0e89dae179dd667846baa6a40ded101b38c0149a48c5ddc6422e7e5c24cb595a17fd1fb46af4277249aea06bb904", 0xa6) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r7, 0x0, 0x0) 7.371434657s ago: executing program 2 (id=1006): r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000140)=0xfffffffe, 0x4) 7.334010079s ago: executing program 1 (id=1007): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000012df885bdf3a0c6fe2c426e8a31a17cac03759e6e9c32ad5f0f5db8a905e65dcbf2edb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001140)={0x18, &(0x7f0000000f00)={0x40, 0x14}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x10, &(0x7f0000000140)={0x40, 0x10, 0x96, "fe289e12d8eedd6dc38955f19f45eb98c983412ee60adcd8b72fe478be404d70fbbc39ca727cb27c4a13eeb70babf06f21f6f95c4882efc43abf4290c1ea506323a84cf7afe554d1901521cb33d2c9ff4a2189eb7d6e64730da46654dfbccfaa61d2a501858a0b193150fce68fcb06f118bbcc61c452eae43fc4f765bd218df710658c2c02adccb233abef81adc5a92886634f5bb990"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0xf9}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x1}}) syz_usb_control_io$printer(r0, &(0x7f0000000640)={0xc, &(0x7f0000000440)={0x40, 0x21, 0x7d, {0x7d, 0x10, "167e3f0cf5c3132e0519ab71f46fa8387e8b9b2274a57423df19291746c22d7a885e9c95c2d9bf783424b7361478eebf1c6104c547e06a5c8bf6df1f102ed5505342084985013fe1aab163a5cfaea6cfe3e369e33c1cbdfb419dd2474becd8be13e5fb30f89c25053da334958451ab71c850029c8690a5220ff148"}}, &(0x7f0000000600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x411}}}, &(0x7f0000000900)={0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="200e1f000000fb014087e0ba299d55a265db6bcd3d803b0125a9d4137f823f6ff328b0edf2"], &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000740)={0x20, 0x0, 0x95, {0x93, "7bb69f582d14d9e4da698bf12ea0d6dfa4b2b9b04825fae86beb0a7fe5a862e670fd90a5724d7ede6cf81bd65eac44871cc06d4e449ff54f1b9bfa89798e622b2f615df60400fa81e82bd6f22bd9a648c18e96dc248b26fa5480c56fadee3c8eaf8d6688edb4a5997d5475d1fdae64bdd4e2a90fb4e1ddf68ea602362af7089ccd2ed6748b082ae1d2c8402a27226ad020db46"}}, &(0x7f0000000880)={0x20, 0x1, 0x1, 0x5}, &(0x7f00000008c0)={0x20, 0x0, 0x1, 0x6b}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 7.099788849s ago: executing program 2 (id=1009): r0 = getpid() prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000000)='\xbf\'\x00') r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f0000000840)=[{0x0}, {&(0x7f00000002c0)="86", 0x1}], 0x2, 0x10, 0x0) 7.005319389s ago: executing program 2 (id=1010): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x18, &(0x7f0000000a40)=ANY=[@ANYRES8=r0, @ANYBLOB="7be1d97a39c1a536a5e6e32b40a433bcb636d2647757859280c0a5beaeeaa9e73da092d81c68cdd667bbbd85", @ANYBLOB="43c1efdb04fc5c8933b553b518536532579ef44b", @ANYRESOCT=r0, @ANYBLOB="e7bd16ba41280b5511d667cc5b98f06ae04dd41fc0d7cc30b373", @ANYRES16=r0, @ANYRESDEC=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000012df885bdf3a0c6fe2c426e8a31a17cac03759e6e9c32ad5f0f5db8a905e65dcbf2edb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001140)={0x18, &(0x7f0000000f00)={0x40, 0x14}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x10, &(0x7f0000000140)={0x40, 0x10, 0x96, "fe289e12d8eedd6dc38955f19f45eb98c983412ee60adcd8b72fe478be404d70fbbc39ca727cb27c4a13eeb70babf06f21f6f95c4882efc43abf4290c1ea506323a84cf7afe554d1901521cb33d2c9ff4a2189eb7d6e64730da46654dfbccfaa61d2a501858a0b193150fce68fcb06f118bbcc61c452eae43fc4f765bd218df710658c2c02adccb233abef81adc5a92886634f5bb990"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0xf9}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x1}}) 5.442309568s ago: executing program 0 (id=1011): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x4b, &(0x7f0000000100)=0x20, 0x4) 5.08880168s ago: executing program 3 (id=1012): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x6, &(0x7f0000006680)) io_setup(0x5, 0x0) r0 = eventfd2(0x0, 0x80800) io_submit(0x0, 0x0, &(0x7f0000004540)) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000080)=""/129) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000940)=[{{&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000300)="b8d81d43b1e7c5840ee189b32a7e1087ac992845cac48a0a160331d65beedc0503ae93dfd09a5e2d2568e7829ac2511c08df2d45e71570f0065c79f30de8ca0a51dacc619b27343fc21db55917f0ee90a2199e5c67112c33ae8fe0643dd994c6e0d921e063e9f95b4eea1bd88e075980edc5a6cdbff2ac37a7a539f68e39ae083b578404dc44ff8bfd2918f319b83dcbaf04369b", 0x94}, {&(0x7f0000000140)="af5fd4", 0x3}], 0x2, &(0x7f0000000480)=[@rights={{0x18, 0x1, 0x1, [r0, r0, r0]}}], 0x18, 0xc000}}, {{&(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000540)="ca231b57718e3d82dedfa347e5a443d72618acab605540cf71324d2cac3f0113b778d17ecc8cdcb99e8605fa4f48272f42e95884a40f3b90a79688f641be8db2b8e7713dc05103337cc8f1bf94a5c2c9e367e4f3a1a8c0ba7b941c3cf9e7210d6b8b11", 0x63}, {&(0x7f00000005c0)="18194337feda7290b8aacebcc563cd5fd1be132f8681ef8f8d54cc6ca99d6594cf7aa953d7c4665d77be190f89b34414b3086eab645de27c66dda7a2e4bd0d3d8c059db171142f36721e031baa58bb4c5f542a7e1798d29b2cf8e64acdd143", 0x5f}, {&(0x7f0000000640)="1e3e689f412969864e5e66b0ca5a92dd083985ad18955a0e84763076b795eb61e1378df69c5897ef113565ab756762cc96166aeb6af3f8e182e0bead1ca498947952118de5db95ef91ff9920e66b3cd917e42d4377c71559e80475f55dd6c198e3691e194a15a85e1b2ae110b6a9905fd8569f5710653f1116c0d09c8e959308f43aae66d27468cee716685ef440c72c14f52cfa67c10330d5addee110433457e15c5e0b92317ee8d1539cfe99a9bc50fb77338cbebe5f12", 0xb8}, {&(0x7f0000000700)="9d811110b884973d680ba2b90b64541943c5ab5f9405b469dbf63cb9669a1f12374723e44e669bd1cc446416282fc3abc3ea5325a1758eb7ce8d23435ae80e6d84251de887886941354e2bb31ce676ece66f9f6fb3e452edf77fa566421b143f3fd1abbe7cd763886fc8f02362670463f51d8454", 0x74}, {&(0x7f0000000780)="de322f92e7d09e1a70bd307a43a6cc221394045e0cb11f4d8f", 0x19}, {&(0x7f00000007c0)="5f859828b1e6311273175c2fd931d366e448e0bcdc488145bd7947279bed8dc62a31bf0bceb12248c8ef44318b0694484ccc6cb584a2a179d4be8535be2d5df5fab682656f1aac84d833f1026ddaec32c3a50bb83c119eaa98294981593f375113a58a2e880b4b94453561a2d2698a75635ad6007182d4e5eea1fbd1e718adbca1b84f0c8e7f26995571f3d691d995c8dedb5df774fe80b8059ccd7f12b4df07de60e382d7cbb3667181b340bb4323026c68d873692a5e", 0xb7}], 0x6, &(0x7f0000000400)=ANY=[@ANYBLOB="1000000049c3106899e7f590", @ANYRES32=r2, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT, @ANYBLOB="100000000100000001000000", @ANYRES32=r0, @ANYBLOB="100000000100000001000000", @ANYRES32=r0], 0x48, 0x4010}}], 0x2, 0x8040) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r1, &(0x7f000000d3c0)=[{{&(0x7f00000008c0)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000980)=""/134, 0x86}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000a40)=""/137, 0x89}, {&(0x7f0000000b00)=""/191, 0xbf}, {&(0x7f0000000bc0)=""/219, 0xdb}, {&(0x7f0000000cc0)=""/96, 0x60}, {&(0x7f0000000d40)=""/19, 0x13}], 0x7, &(0x7f0000000dc0)=""/65, 0x41}, 0x5}, {{&(0x7f0000000e40)=@qipcrtr, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000ec0)=""/223, 0xdf}, {&(0x7f0000000fc0)=""/223, 0xdf}, {&(0x7f0000003140)=""/4096, 0x1000}], 0x3, &(0x7f0000001100)=""/70, 0x46}, 0x3}, {{&(0x7f0000001180)=@nl, 0x80, &(0x7f0000001800)=[{&(0x7f0000001200)=""/211, 0xd3}, {&(0x7f0000001400)=""/228, 0xe4}, {&(0x7f0000001500)=""/211, 0xd3}, {&(0x7f0000001600)=""/219, 0xdb}, {&(0x7f0000001700)=""/205, 0xcd}, {&(0x7f0000001300)=""/13, 0xd}, {&(0x7f0000001340)=""/93, 0x5d}], 0x7, &(0x7f0000001840)=""/219, 0xdb}, 0x400}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001940)=""/87, 0x57}, {&(0x7f00000019c0)=""/177, 0xb1}, {&(0x7f0000001a80)=""/195, 0xc3}, {&(0x7f0000001b80)=""/255, 0xff}, {&(0x7f0000004280)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/172, 0xac}, {&(0x7f0000005280)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/152, 0x98}], 0x8, &(0x7f0000001e40)=""/87, 0x57}, 0x7}, {{&(0x7f0000001ec0)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000006280)=[{&(0x7f0000008880)=""/4096, 0x1000}, {&(0x7f0000001f40)=""/208, 0xd0}, {&(0x7f0000002080)=""/71, 0x47}, {&(0x7f0000009880)=""/4096, 0x1000}, {&(0x7f0000004140)=""/180, 0xb4}], 0x5, &(0x7f00000062c0)=""/74, 0x4a}, 0xfffffffd}, {{&(0x7f0000006340)=@x25={0x9, @remote}, 0x80, &(0x7f0000006800)=[{&(0x7f00000063c0)=""/215, 0xd7}, {&(0x7f00000064c0)=""/53, 0x35}, {&(0x7f0000006500)=""/127, 0x7f}, {&(0x7f0000006580)=""/241, 0xf1}, {&(0x7f00000066c0)=""/244, 0xf4}, {&(0x7f00000067c0)=""/12, 0xc}, {&(0x7f000000a880)=""/157, 0x9d}, {&(0x7f000000a940)=""/4096, 0x1000}], 0x8, &(0x7f000000b940)=""/162, 0xa2}, 0x8}, {{&(0x7f000000ba00)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f000000bc40)=[{&(0x7f000000ba80)=""/122, 0x7a}, {&(0x7f000000bb00)=""/105, 0x69}, {&(0x7f000000bb80)=""/153, 0x99}], 0x3, &(0x7f000000bc80)=""/186, 0xba}, 0xfff}, {{&(0x7f000000bd40)=@xdp, 0x80, &(0x7f000000d240)=[{&(0x7f000000bdc0)=""/172, 0xac}, {&(0x7f000000be80)}, {&(0x7f000000bec0)=""/2, 0x2}, {&(0x7f000000bf00)=""/106, 0x6a}, {&(0x7f000000bf80)=""/227, 0xe3}, {&(0x7f000000c080)=""/236, 0xec}, {&(0x7f000000c180)}, {&(0x7f000000c1c0)=""/66, 0x42}, {&(0x7f000000c240)=""/4096, 0x1000}], 0x9, &(0x7f000000d2c0)=""/209, 0xd1}, 0xffff}], 0x8, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0xea) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x110, 0xffffffffffffffff, 0x0) syz_clone(0x642c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x0, 0x4) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendto$packet(r5, &(0x7f00000002c0)="48357e0287af48ffa745b497a54e0eec1bf2c69011", 0x15, 0x0, 0x0, 0x0) close(r3) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f00000001c0)=ANY=[]) read$FUSE(r6, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2048) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES64], 0x0) openat2$dir(0xffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x282001, 0x0, 0x2}, 0x18) write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x29, 0x0, 0x40004800, 0x5, 0xfffd, 0x0, 0xfffffffa, 0x0, 0x0, 0xb5bde87f9ff44b97}}, 0x50) mmap(&(0x7f00004de000/0x4000)=nil, 0x4000, 0x2000003, 0x10010, 0xffffffffffffffff, 0x44000) 4.764757732s ago: executing program 0 (id=1013): syz_emit_ethernet(0x36, &(0x7f0000000100)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x1, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @timestamp}}}}, 0x0) 4.587052152s ago: executing program 0 (id=1014): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x400, 0xfffffffffffffffc}, {0x0, 0x80000000000, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) (fail_nth: 8) 4.008051737s ago: executing program 0 (id=1015): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x1) 3.924366924s ago: executing program 1 (id=1016): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000001c0)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000e40)={0x1, 0x0, [{0x0, 0xf3, &(0x7f00000008c0)=""/243}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x100000}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x13, @void, @value}, 0x94) unshare(0x64000600) write(0xffffffffffffffff, &(0x7f0000000100)="8f2a072d", 0x4) r3 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x8fc0, 0xc}) 3.379850696s ago: executing program 2 (id=1017): r0 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000500)=@keyring) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1, 0x1, &(0x7f0000000400)=@raw=[@exit], &(0x7f00000000c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1, 0x1, &(0x7f0000000400)=@raw=[@exit], &(0x7f00000000c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.342944859s ago: executing program 4 (id=1018): socket(0x848000000015, 0x805, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='X\x00', @ANYRES16=r1], 0x58}}, 0x4000000) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket(0x1e, 0x805, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e00000004000280", @ANYRES64=r2], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 3.112312316s ago: executing program 2 (id=1019): syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000086e051c0140000102030109022d000101000904002501"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff199610b90661408801010203010902120001000000000904"], 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e010203010902"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @lirc_mode2=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x24fa, &(0x7f00000006c0)={0x0, 0x0, 0x10100, 0x0, 0x1c5}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x24844}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2.874194491s ago: executing program 4 (id=1020): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x48000, 0x0) ioctl$FBIOPUTCMAP(r4, 0x4605, &(0x7f0000001cc0)={0x8, 0x4, &(0x7f0000001bc0)=[0xb, 0x26e5, 0x8, 0x5], &(0x7f0000001c00), &(0x7f0000001c40), 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="08003f000003"], 0x2c}}, 0x0) 2.696652011s ago: executing program 1 (id=1021): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = openat$fb0(0xffffffffffffff9c, 0x0, 0x48000, 0x0) ioctl$FBIOPUTCMAP(r3, 0x4605, &(0x7f0000001cc0)={0x8, 0x4, &(0x7f0000001bc0)=[0xb, 0x26e5, 0x8, 0x5], &(0x7f0000001c00), &(0x7f0000001c40), 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="08003f000003"], 0x2c}}, 0x0) 2.485649624s ago: executing program 1 (id=1022): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa8}}, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r2, &(0x7f0000000100)="ab", 0x1, 0xe61e2840a154b0c0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) connect$unix(r1, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587", @ANYRES16], 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x7, r3}, 0x38) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f0000000040)=""/4092, 0xffc) r5 = syz_open_dev$sg(&(0x7f0000001040), 0x2, 0x200000) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000001080)={0xba, 0x8, 0x7, "fe8daef6dde70d781fb13b902f91336b15174ea71f46f779c2d7e4696829fece7d926ff85e36127981a1ee360f575345fc226934918e82f2357af9117824c7b8b0929208a5f4ce234682e6af289f34350e452c1d9b827e986a39c810c1978a74b0036272c9cb2dba3fc2f3db2079e29aa758894286e393d5d57835b0c6505457c01c0abf519890d157bdd282b5a814dfb9178730d0bb35cdcd1ec8701ac13c5be4917e35b40f3a28fd1bc53ada4d3edaa5e950cb592133cd7fb0"}) r6 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x5, 0x6, 0x1, 0x900}}) 2.459748281s ago: executing program 4 (id=1023): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) ioctl$BLKRRPART(r1, 0x125f, 0x0) socket(0x2b, 0x80801, 0x1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) timer_create(0xb, &(0x7f0000000380)={0x0, 0x0, 0x1}, &(0x7f00000003c0)) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) socket$netlink(0x10, 0x3, 0x5) r3 = socket$inet6(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x38, &(0x7f0000000040)={@random="c3ad7f0ceb48", @random="f8794fda5bd6", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x16, 0x0, @gue={{0x1, 0x1, 0x3, 0x96, 0x100, @void}, "f23b42718621b06f8f20"}}}}}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r4, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r2, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 1.878945767s ago: executing program 0 (id=1024): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) ioctl$BLKRRPART(r1, 0x125f, 0x0) r2 = socket(0x2b, 0x80801, 0x1) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) timer_create(0xb, &(0x7f0000000380)={0x0, 0x0, 0x1}, &(0x7f00000003c0)) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) socket$netlink(0x10, 0x3, 0x5) r4 = socket$inet6(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x38, &(0x7f0000000040)={@random="c3ad7f0ceb48", @random="f8794fda5bd6", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x16, 0x0, @gue={{0x1, 0x1, 0x3, 0x96, 0x100, @void}, "f23b42718621b06f8f20"}}}}}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r5, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r3, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 1.720790978s ago: executing program 3 (id=1025): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x22020600) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) renameat2(r0, &(0x7f00000002c0)='./file0\x00', r0, &(0x7f00000003c0)='./bus\x00', 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2542, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000680), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000400", @ANYRES32=r4, @ANYBLOB="0001010024a701001c00128009000100626f6e64000000000c00028008000200c6"], 0x3c}, 0x1, 0x0, 0x0, 0x40050814}, 0x4000044) read(r2, 0x0, 0x2) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000040)) ioctl$KVM_CAP_X86_DISABLE_EXITS(r5, 0x4068aea3, &(0x7f00000000c0)={0x8f, 0x0, 0xa}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 1.313639709s ago: executing program 2 (id=1026): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000012df885bdf3a0c6fe2c426e8a31a17cac03759e6e9c32ad5f0f5db8a905e65dcbf2edb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001140)={0x18, &(0x7f0000000f00)={0x40, 0x14}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x10, &(0x7f0000000140)={0x40, 0x10, 0x96, "fe289e12d8eedd6dc38955f19f45eb98c983412ee60adcd8b72fe478be404d70fbbc39ca727cb27c4a13eeb70babf06f21f6f95c4882efc43abf4290c1ea506323a84cf7afe554d1901521cb33d2c9ff4a2189eb7d6e64730da46654dfbccfaa61d2a501858a0b193150fce68fcb06f118bbcc61c452eae43fc4f765bd218df710658c2c02adccb233abef81adc5a92886634f5bb990"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0xf9}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x1}}) syz_usb_control_io$printer(r0, &(0x7f0000000640)={0xc, &(0x7f0000000440)={0x40, 0x21, 0x7d, {0x7d, 0x10, "167e3f0cf5c3132e0519ab71f46fa8387e8b9b2274a57423df19291746c22d7a885e9c95c2d9bf783424b7361478eebf1c6104c547e06a5c8bf6df1f102ed5505342084985013fe1aab163a5cfaea6cfe3e369e33c1cbdfb419dd2474becd8be13e5fb30f89c25053da334958451ab71c850029c8690a5220ff148"}}, &(0x7f0000000600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x411}}}, &(0x7f0000000900)={0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="200e1f000000fb014087e0ba299d55a265db6bcd3d803b0125a9d4137f823f6ff328b0edf2"], &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000740)={0x20, 0x0, 0x95, {0x93, "7bb69f582d14d9e4da698bf12ea0d6dfa4b2b9b04825fae86beb0a7fe5a862e670fd90a5724d7ede6cf81bd65eac44871cc06d4e449ff54f1b9bfa89798e622b2f615df60400fa81e82bd6f22bd9a648c18e96dc248b26fa5480c56fadee3c8eaf8d6688edb4a5997d5475d1fdae64bdd4e2a90fb4e1ddf68ea602362af7089ccd2ed6748b082ae1d2c8402a27226ad020db46"}}, &(0x7f0000000880)={0x20, 0x1, 0x1, 0x5}, &(0x7f00000008c0)={0x20, 0x0, 0x1, 0x6b}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 761.707407ms ago: executing program 3 (id=1027): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x5, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r1, 0x20000005) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) write$nbd(r3, &(0x7f0000000440)=ANY=[], 0xd6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x4d) close_range(r0, 0xffffffffffffffff, 0x0) 695.200522ms ago: executing program 3 (id=1028): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000}) r3 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0x40000014}) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8417f, 0x0) socket$inet(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x40082) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, 0x0, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r4, 0x80045518, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r7 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x670, 0x5, 0x35c, 0xa4, 0x16c, 0xfeffffff, 0x0, 0xa4, 0x2c8, 0x2c8, 0xffffffff, 0x2c8, 0x2c8, 0x5, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0x0, '\x00', 'geneve0\x00'}, 0x0, 0x70, 0xa4}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @gre_key}}}}, {{@ip={@private, @broadcast, 0x0, 0x0, 'pimreg0\x00', 'syzkaller0\x00'}, 0x0, 0xa4, 0xc8, 0x0, {0x0, 0x7}, [@common=@unspec=@devgroup={{0x34}, {0x1}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0x210}}, {{@uncond, 0x0, 0x70, 0xa4}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x0, @loopback, @local, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x94, 0xb8, 0x0, {}, [@common=@ttl={{0x24}}]}, @common=@inet=@TCPMSS={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0xffeb) r9 = openat$adsp1(0xffffff9c, &(0x7f0000000000), 0x125000, 0x0) write$dsp(r9, &(0x7f0000000240)="046002263d307baa6bca7e42fdac287004a66159755c4cdf97cf4d1443d63728e884d79438634ff1fbc20c102e3ddfdc200de8fe794e8d95030001b1d61e233ce8472a17be806fa7764487c1282c6bdb3333077b4639c3e30e98ac49d84371c8cc0d2ae83bc45e85670804b3874772f2c6afe4aefbee0fea0e89dae179dd667846baa6a40ded101b38c0149a48c5ddc6422e7e5c24cb595a17fd1fb46af4277249aea06bb904", 0xa6) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r7, 0x0, 0x0) 503.532884ms ago: executing program 1 (id=1029): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$IORING_OFF_SQ_RING(&(0x7f000005a000/0x4000)=nil, 0x4000, 0x200000c, 0x1010, r0, 0x0) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x60600, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000200)="66b97208000066b8d04a000066ba000000000f30da4300bad004edb8dd008ed0650f0199009867362ea5752f2e0f73d399ba2100ec0f20e06635040000000f22e0", 0x41}], 0x1, 0x10, 0x0, 0x2e) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) vmsplice(r1, &(0x7f0000000000), 0x0, 0x1) madvise(&(0x7f0000810000/0x4000)=nil, 0x4000, 0x15) 104.408451ms ago: executing program 0 (id=1030): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) memfd_secret(0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) 94.692939ms ago: executing program 4 (id=1031): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000001c0)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000e40)={0x1, 0x0, [{0x0, 0xf3, &(0x7f00000008c0)=""/243}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x100000}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x13, @void, @value}, 0x94) unshare(0x64000600) write(0xffffffffffffffff, &(0x7f0000000100)="8f2a072d", 0x4) r3 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x8fc0, 0xc}) 0s ago: executing program 1 (id=1032): socket(0x848000000015, 0x805, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='X\x00', @ANYRES16=r1], 0x58}}, 0x4000000) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket(0x1e, 0x805, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e000000040002800800", @ANYRES64=r2], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) kernel console output (not intermixed with test programs): nt 0x83 has an invalid bInterval 0, changing to 7 [ 468.779902][ T5845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 468.799665][ T5845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 468.821847][ T5845] usb 2-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f [ 468.847906][ T5845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.867193][ T5845] usb 2-1: Product: syz [ 468.873849][ T5845] usb 2-1: Manufacturer: syz [ 468.878635][ T5845] usb 2-1: SerialNumber: syz [ 468.901944][ T5845] usb 2-1: config 0 descriptor?? [ 468.921276][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 468.940986][ T10] usb 4-1: too many configurations: 106, using maximum allowed: 8 [ 468.944178][ T5845] usbtouchscreen 2-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 468.964970][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 468.973569][ T10] usb 4-1: can't read configurations, error -61 [ 469.048167][ T10] usb usb4-port1: attempt power cycle [ 469.150052][ T5900] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 469.199533][ T9] usb 2-1: USB disconnect, device number 81 [ 469.287989][ T8980] warn_alloc: 1 callbacks suppressed [ 469.288005][ T8980] syz.4.826: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 469.310442][ T8980] CPU: 0 UID: 0 PID: 8980 Comm: syz.4.826 Not tainted 6.15.0-rc1-syzkaller-00301-g3bde70a2c827 #0 PREEMPT(full) [ 469.310479][ T8980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 469.310494][ T8980] Call Trace: [ 469.310500][ T8980] [ 469.310507][ T8980] dump_stack_lvl+0x241/0x360 [ 469.310535][ T8980] ? __pfx_dump_stack_lvl+0x10/0x10 [ 469.310558][ T8980] ? __pfx__printk+0x10/0x10 [ 469.310579][ T8980] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 469.310605][ T8980] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 469.310626][ T8980] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 469.310650][ T8980] warn_alloc+0x27c/0x410 [ 469.310665][ T8980] ? is_mmconf_reserved+0x3a1/0x3f0 [ 469.310682][ T8980] ? __vmalloc_node_range_noprof+0x108/0x1390 [ 469.310698][ T8980] ? __pfx_warn_alloc+0x10/0x10 [ 469.310714][ T8980] ? kasan_save_track+0x3f/0x80 [ 469.310729][ T8980] ? __kasan_kmalloc+0x9d/0xb0 [ 469.310747][ T8980] ? xsk_setsockopt+0x449/0x840 [ 469.310762][ T8980] ? do_sock_setsockopt+0x3b1/0x710 [ 469.310776][ T8980] ? __ia32_sys_setsockopt+0x1f2/0x280 [ 469.310791][ T8980] ? __do_fast_syscall_32+0xb4/0x110 [ 469.310809][ T8980] ? do_fast_syscall_32+0x34/0x80 [ 469.310827][ T8980] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 469.310851][ T8980] __vmalloc_node_range_noprof+0x128/0x1390 [ 469.310887][ T8980] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 469.310905][ T8980] ? __kasan_kmalloc+0x9d/0xb0 [ 469.310927][ T8980] vmalloc_user_noprof+0x74/0x80 [ 469.310941][ T8980] ? xskq_create+0xb6/0x170 [ 469.310956][ T8980] xskq_create+0xb6/0x170 [ 469.310974][ T8980] xsk_init_queue+0xa1/0x100 [ 469.310991][ T8980] xsk_setsockopt+0x449/0x840 [ 469.311009][ T8980] ? __pfx_xsk_setsockopt+0x10/0x10 [ 469.311022][ T8980] ? __lock_acquire+0xad5/0xd80 [ 469.311038][ T8980] ? __pfx_aa_sk_perm+0x10/0x10 [ 469.311058][ T8980] ? __lock_acquire+0xad5/0xd80 [ 469.311073][ T8980] ? aa_sock_opt_perm+0x79/0x120 [ 469.311098][ T8980] ? __pfx_xsk_setsockopt+0x10/0x10 [ 469.311113][ T8980] do_sock_setsockopt+0x3b1/0x710 [ 469.311133][ T8980] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 469.311147][ T8980] ? __fget_files+0x2a/0x420 [ 469.311162][ T8980] ? __fget_files+0x39d/0x420 [ 469.311174][ T8980] ? __fget_files+0x2a/0x420 [ 469.311193][ T8980] __ia32_sys_setsockopt+0x1f2/0x280 [ 469.311213][ T8980] __do_fast_syscall_32+0xb4/0x110 [ 469.311232][ T8980] ? exc_page_fault+0x5f8/0x920 [ 469.311253][ T8980] do_fast_syscall_32+0x34/0x80 [ 469.311281][ T8980] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 469.311306][ T8980] RIP: 0023:0xf7f63579 [ 469.311324][ T8980] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 469.311343][ T8980] RSP: 002b:00000000f508655c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 469.311373][ T8980] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000011b [ 469.311387][ T8980] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000052 [ 469.311397][ T8980] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 469.311406][ T8980] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 469.311415][ T8980] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 469.311436][ T8980] [ 469.311443][ T8980] Mem-Info: [ 469.361966][ T5900] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 469.373281][ T8980] active_anon:8419 inactive_anon:0 isolated_anon:0 [ 469.373281][ T8980] active_file:11457 inactive_file:38467 isolated_file:0 [ 469.373281][ T8980] unevictable:768 dirty:258 writeback:0 [ 469.373281][ T8980] slab_reclaimable:9767 slab_unreclaimable:98745 [ 469.373281][ T8980] mapped:32811 shmem:4310 pagetables:952 [ 469.373281][ T8980] sec_pagetables:0 bounce:0 [ 469.373281][ T8980] kernel_misc_reclaimable:0 [ 469.373281][ T8980] free:1323036 free_pcp:1417 free_cma:0 [ 469.400975][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.541115][ T5900] usb 1-1: config 0 descriptor?? [ 469.546948][ T10] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 469.695634][ C0] vkms_vblank_simulate: vblank timer overrun [ 469.712008][ T5900] cp210x 1-1:0.0: cp210x converter detected [ 469.721304][ T8980] Node 0 active_anon:33684kB inactive_anon:0kB active_file:45828kB inactive_file:153752kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:131220kB dirty:1020kB writeback:0kB shmem:15720kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11372kB pagetables:3848kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 469.763665][ C0] vkms_vblank_simulate: vblank timer overrun [ 469.770065][ T6584] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 469.774195][ T5896] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 469.779355][ T8980] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:116kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:40kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 469.816619][ C0] vkms_vblank_simulate: vblank timer overrun [ 469.829744][ T8980] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 469.861352][ T8980] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 469.867185][ T8980] Node 0 DMA32 free:1371060kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:33676kB inactive_anon:0kB active_file:45828kB inactive_file:153652kB unevictable:1536kB writepending:1020kB present:3129332kB managed:2547232kB mlocked:0kB bounce:0kB free_pcp:5632kB local_pcp:5224kB free_cma:0kB [ 469.897689][ C0] vkms_vblank_simulate: vblank timer overrun [ 469.905491][ T8980] lowmem_reserve[]: 0 0 0 0 0 [ 469.910381][ T8980] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 469.941034][ T8980] lowmem_reserve[]: 0 0 0 0 0 [ 469.945963][ T8980] Node 1 Normal free:3905668kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:116kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 469.974788][ C0] vkms_vblank_simulate: vblank timer overrun [ 469.981255][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 469.986642][ T8980] lowmem_reserve[]: 0 0 0 0 0 [ 469.986970][ T5896] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 469.991504][ T8980] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB [ 470.004131][ T10] usb 4-1: too many configurations: 106, using maximum allowed: 8 [ 470.009414][ T5896] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 60463, setting to 1024 [ 470.012695][ T6584] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 470.022364][ T5896] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 470.054461][ T5896] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 470.064435][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.099856][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 470.116254][ T10] usb 4-1: can't read configurations, error -61 [ 470.134991][ T6584] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.144440][ T8981] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 470.152966][ T8980] 0*512kB 1*1024kB (U) 1*2048kB (M) [ 470.153771][ T6584] usb 3-1: config 0 descriptor?? [ 470.168859][ T5896] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 470.176108][ T8980] 3*4096kB (M) = 15360kB [ 470.405971][ T10] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 470.513004][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 470.519055][ T10] usb 4-1: too many configurations: 106, using maximum allowed: 8 [ 470.535113][ T8980] Node 0 DMA32: 711*4kB (UME) 815*8kB (UME) 395*16kB (UME) 318*32kB (UME) 280*64kB (UME) 197*128kB (UME) 81*256kB (UME) 30*512kB (UM) 10*1024kB (UME) 7*2048kB (UME) 304*4096kB (UM) = 1374852kB [ 470.627843][ T6584] cp210x 3-1:0.0: cp210x converter detected [ 470.640903][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 470.658270][ T10] usb 4-1: can't read configurations, error -61 [ 470.695274][ T10] usb usb4-port1: unable to enumerate USB device [ 470.719542][ T8980] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 470.737753][ T8980] Node 1 Normal: 259*4kB (U) 67*8kB (UME) 40*16kB (UE) 221*32kB (UE) 107*64kB (UME) 33*128kB (UME) 15*256kB (UME) 7*512kB (UM) 3*1024kB (UM) 2*2048kB (UM) 945*4096kB (ME) = 3905668kB [ 470.769520][ T8980] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 470.785896][ T8980] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 470.796590][ T8980] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 470.811098][ T8980] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 470.825090][ T8980] 54217 total pagecache pages [ 470.841652][ T8980] 0 pages in swap cache [ 470.846168][ T8980] Free swap = 124996kB [ 470.861047][ T8980] Total swap = 124996kB [ 470.865669][ T8980] 2097051 pages RAM [ 470.874828][ T8980] 0 pages HighMem/MovableOnly [ 470.881480][ T8980] 428585 pages reserved [ 470.886037][ T8980] 0 pages cma reserved [ 471.070170][ T5896] usb 5-1: USB disconnect, device number 86 [ 472.219740][ T5845] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 472.569827][ T48] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 472.632483][ T5845] usb 4-1: config 0 has no interfaces? [ 472.660843][ T5845] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 472.670289][ T5845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.693197][ T5845] usb 4-1: Product: syz [ 472.721233][ T5845] usb 4-1: Manufacturer: syz [ 472.743297][ T5845] usb 4-1: SerialNumber: syz [ 472.782006][ T48] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 472.791481][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.803670][ T5845] usb 4-1: config 0 descriptor?? [ 472.909362][ T5900] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 472.954767][ T48] usb 5-1: config 0 descriptor?? [ 472.975441][ T5900] cp210x 1-1:0.0: querying part number failed [ 473.033606][ T48] cp210x 5-1:0.0: cp210x converter detected [ 473.171307][ T5900] usb 1-1: cp210x converter now attached to ttyUSB0 [ 473.206071][ T30] audit: type=1400 audit(1744460739.668:113): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=8991 comm="syz.3.828" [ 473.240905][ T5900] usb 1-1: USB disconnect, device number 77 [ 473.292132][ T5900] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 473.337538][ T5900] cp210x 1-1:0.0: device disconnected [ 474.019729][ T9] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 474.199762][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 474.210172][ T9] usb 2-1: config 0 has no interfaces? [ 474.227784][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 474.240424][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.258505][ T9] usb 2-1: Product: syz [ 474.276154][ T9] usb 2-1: Manufacturer: 謲熥௣䫩匼ᆤ៾ꤩ璶蔘뛿嫐쌆⽖우涕ࡼ㖑폩鯇銈᪩簅鲧楪펚榷朅丒⛮ᑳ揓ᦽꨳ鈉떄쟞穴匡睉ೠ㯸♁ⱡ䫈忒챌쾀每廏櫪 [ 474.318190][ T9] usb 2-1: SerialNumber: syz [ 474.427073][ T9] usb 2-1: config 0 descriptor?? [ 474.508400][ T6584] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 474.523813][ T6584] cp210x 3-1:0.0: querying part number failed [ 474.538598][ T6584] usb 3-1: cp210x converter now attached to ttyUSB0 [ 474.618719][ T6584] usb 3-1: USB disconnect, device number 84 [ 474.699718][ T5896] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 474.718523][ T10] usb 2-1: USB disconnect, device number 82 [ 474.787124][ T6584] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 474.930481][ T6584] cp210x 3-1:0.0: device disconnected [ 474.941812][ T5896] usb 1-1: Using ep0 maxpacket: 16 [ 474.951188][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 474.975115][ T5896] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 475.004420][ T5896] usb 1-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 475.023696][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.261106][ T5896] usb 1-1: config 0 descriptor?? [ 475.523781][ T5845] usb 4-1: USB disconnect, device number 87 [ 475.713732][ T9019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.743033][ T9019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.856900][ T48] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 475.889772][ T10] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 475.899331][ T48] cp210x 5-1:0.0: querying part number failed [ 475.931184][ T48] usb 5-1: cp210x converter now attached to ttyUSB0 [ 475.961017][ T48] usb 5-1: USB disconnect, device number 87 [ 475.987684][ T48] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 476.003710][ T48] cp210x 5-1:0.0: device disconnected [ 476.010396][ T5896] waltop 0003:172F:0034.0029: hidraw0: USB HID v67.1b Device [HID 172f:0034] on usb-dummy_hcd.0-1/input0 [ 476.051523][ T10] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 476.065302][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.153868][ T10] usb 2-1: config 0 descriptor?? [ 476.185287][ T9038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.838'. [ 476.211302][ T9019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.219940][ T10] cp210x 2-1:0.0: cp210x converter detected [ 476.246981][ T9038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.838'. [ 476.258482][ T9019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.459702][ T48] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 477.469108][ T48] usb 5-1: config 0 has no interfaces? [ 477.519161][ T48] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 477.531906][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.582380][ T48] usb 5-1: Product: syz [ 477.614597][ T48] usb 5-1: Manufacturer: syz [ 477.637200][ T5900] usb 1-1: USB disconnect, device number 78 [ 477.649682][ T48] usb 5-1: SerialNumber: syz [ 477.745657][ T5894] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 477.812334][ T48] usb 5-1: config 0 descriptor?? [ 477.909741][ T5894] usb 4-1: Using ep0 maxpacket: 16 [ 477.919549][ T5894] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 477.930915][ T5894] usb 4-1: config 0 has no interface number 0 [ 477.943358][ T5894] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 477.960811][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.018958][ T5894] usb 4-1: Product: syz [ 478.046807][ T5894] usb 4-1: Manufacturer: syz [ 478.061353][ T5894] usb 4-1: SerialNumber: syz [ 478.115615][ T30] audit: type=1400 audit(1744460744.558:114): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=9033 comm="syz.4.840" [ 478.167760][ T5894] usb 4-1: config 0 descriptor?? [ 478.763791][ T9045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.795186][ T9045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.843706][ T5894] usb 4-1: selecting invalid altsetting 1 [ 478.924306][ T5894] speedtch 4-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 478.953362][ T5894] speedtch 4-1:0.1: usbatm_usb_probe: bind failed: -22! [ 478.975920][ T5894] speedtch 4-1:0.1: probe with driver speedtch failed with error -22 [ 479.005860][ T9055] bond0: entered promiscuous mode [ 479.016726][ T9055] bond_slave_0: entered promiscuous mode [ 479.025791][ T5894] usb 4-1: USB disconnect, device number 88 [ 479.032300][ T9055] bond_slave_1: entered promiscuous mode [ 479.050681][ T9055] batadv0: entered promiscuous mode [ 479.073273][ T9055] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 479.144832][ T10] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 479.155504][ T9055] bond0: left promiscuous mode [ 479.161124][ T9055] bond_slave_0: left promiscuous mode [ 479.167626][ T9055] bond_slave_1: left promiscuous mode [ 479.173246][ T48] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 479.183739][ T10] cp210x 2-1:0.0: querying part number failed [ 479.194994][ T9055] batadv0: left promiscuous mode [ 479.208424][ T10] usb 2-1: cp210x converter now attached to ttyUSB0 [ 479.250298][ T10] usb 2-1: USB disconnect, device number 83 [ 479.274038][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 479.286987][ T10] cp210x 2-1:0.0: device disconnected [ 479.341880][ T48] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 479.360775][ T48] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.404455][ T48] usb 1-1: config 0 descriptor?? [ 479.444471][ T48] cp210x 1-1:0.0: cp210x converter detected [ 479.789911][ T10] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 480.039925][ T10] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 480.056118][ T10] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 480.075865][ T10] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 480.087509][ T10] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 480.255478][ T5900] usb 5-1: USB disconnect, device number 88 [ 480.297049][ T10] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 480.398652][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 480.427946][ T10] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 480.442774][ T10] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 480.468656][ T10] usb 3-1: Product: syz [ 480.486188][ T10] usb 3-1: Manufacturer: syz [ 480.501431][ T10] usb 3-1: SerialNumber: syz [ 480.536330][ T10] usb 3-1: config 0 descriptor?? [ 480.555140][ T9062] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 480.573940][ T10] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 480.628678][ T10] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 480.709988][ T5900] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 480.879294][ T5900] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 480.895335][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.903948][ T5900] usb 5-1: Product: syz [ 480.908259][ T5900] usb 5-1: Manufacturer: syz [ 480.928067][ T5900] usb 5-1: SerialNumber: syz [ 481.040076][ T5896] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 481.070281][ T5900] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 481.092346][ T5845] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 481.172973][ T5896] usb 2-1: device descriptor read/64, error -71 [ 481.353415][ T9070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.402474][ T9070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.459970][ T5896] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 481.600942][ T5896] usb 2-1: device descriptor read/64, error -71 [ 481.720456][ T5896] usb usb2-port1: attempt power cycle [ 482.089771][ T5896] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 482.141500][ T5896] usb 2-1: device descriptor read/8, error -71 [ 482.165765][ T9079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.272802][ T9079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.440022][ T5845] usb 5-1: Service connection timeout for: 256 [ 482.488039][ T5896] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 482.559322][ T5845] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 482.601256][ T48] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 482.632386][ T48] cp210x 1-1:0.0: querying part number failed [ 482.642957][ T5896] usb 2-1: device descriptor read/8, error -71 [ 482.656976][ T48] usb 1-1: cp210x converter now attached to ttyUSB0 [ 482.676125][ T5845] ath9k_htc: Failed to initialize the device [ 482.687635][ T5845] usb 5-1: ath9k_htc: USB layer deinitialized [ 482.694660][ T48] usb 1-1: USB disconnect, device number 79 [ 482.704867][ T48] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 482.725365][ T48] cp210x 1-1:0.0: device disconnected [ 482.733603][ T5900] usb 3-1: USB disconnect, device number 85 [ 482.750016][ T5896] usb usb2-port1: unable to enumerate USB device [ 482.784563][ T5900] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 483.100886][ T9086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.187533][ T9086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.202456][ T5894] usb 5-1: USB disconnect, device number 89 [ 483.319760][ T5900] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 483.481741][ T5900] usb 3-1: config 0 has an invalid interface number: 22 but max is 0 [ 483.494216][ T5900] usb 3-1: config 0 has no interface number 0 [ 483.506277][ T5900] usb 3-1: New USB device found, idVendor=10b8, idProduct=1fa8, bcdDevice=d4.21 [ 483.529376][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.539763][ T5900] usb 3-1: Product: syz [ 483.544059][ T5900] usb 3-1: Manufacturer: syz [ 483.549986][ T5900] usb 3-1: SerialNumber: syz [ 483.559350][ T5900] usb 3-1: config 0 descriptor?? [ 483.729736][ T5894] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 483.768273][ T5900] dvb-usb: found a 'DiBcom NIM8096MD reference design' in cold state, will try to load a firmware [ 483.861026][ T5900] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 483.887561][ T5900] dib0700: firmware download failed at 7 with -22 [ 483.904558][ T5894] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.915565][ T5900] usb 3-1: USB disconnect, device number 86 [ 483.925441][ T5894] usb 4-1: config 0 interface 0 has no altsetting 0 [ 483.945443][ T5894] usb 4-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 484.010565][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.036516][ T5894] usb 4-1: config 0 descriptor?? [ 484.045753][ T9102] netlink: 4 bytes leftover after parsing attributes in process `syz.4.858'. [ 484.267071][ T9093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.285218][ T9093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.314166][ T9093] IPv6: NLM_F_REPLACE set, but no existing node found! [ 484.321324][ T10] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 484.606108][ T10] usb 2-1: config 0 has no interfaces? [ 484.618942][ T10] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 484.646160][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.705677][ T10] usb 2-1: Product: syz [ 484.722710][ T5894] usbhid 4-1:0.0: can't add hid device: -71 [ 484.797888][ T10] usb 2-1: Manufacturer: syz [ 484.820007][ T5894] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 484.857536][ T10] usb 2-1: SerialNumber: syz [ 484.870935][ T5894] usb 4-1: USB disconnect, device number 89 [ 484.900525][ T10] usb 2-1: config 0 descriptor?? [ 485.138495][ T30] audit: type=1400 audit(1744460751.598:115): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=9099 comm="syz.1.859" [ 486.159850][ T10] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 486.319650][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 486.353096][ T10] usb 5-1: config 4 has an invalid interface number: 128 but max is 0 [ 486.365193][ T5894] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 486.378178][ T10] usb 5-1: config 4 has no interface number 0 [ 486.399759][ T10] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.466380][ T10] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.494181][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 486.513623][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.539940][ T5894] usb 4-1: Using ep0 maxpacket: 8 [ 486.570215][ T5894] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 486.594972][ T10] hub 5-1:4.128: USB hub found [ 486.602061][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.622014][ T5894] usb 4-1: Product: syz [ 486.630722][ T5894] usb 4-1: Manufacturer: syz [ 486.651620][ T5894] usb 4-1: SerialNumber: syz [ 486.677336][ T5894] usb 4-1: config 0 descriptor?? [ 486.697563][ T5894] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 486.795571][ T10] hub 5-1:4.128: 2 ports detected [ 486.800930][ T10] hub 5-1:4.128: Using single TT (err -22) [ 487.141907][ T5896] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 487.222997][ T9119] netlink: 'syz.4.864': attribute type 1 has an invalid length. [ 487.250743][ T9] hid (null): unknown global tag 0xe [ 487.262436][ T9] hid-generic 0008:0004:0000.002A: unknown main item tag 0x0 [ 487.270571][ T9] hid-generic 0008:0004:0000.002A: reserved main item tag 0xe [ 487.278110][ T9] hid-generic 0008:0004:0000.002A: unknown main item tag 0x1 [ 487.285613][ T9] hid-generic 0008:0004:0000.002A: ignoring exceeding usage max [ 487.295024][ T9] hid-generic 0008:0004:0000.002A: unknown main item tag 0x3 [ 487.302949][ T9] hid-generic 0008:0004:0000.002A: unknown global tag 0xe [ 487.309721][ T5896] usb 1-1: Using ep0 maxpacket: 16 [ 487.310232][ T9] hid-generic 0008:0004:0000.002A: item 0 0 1 14 parsing failed [ 487.319338][ T5896] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 487.323989][ T9] hid-generic 0008:0004:0000.002A: probe with driver hid-generic failed with error -22 [ 487.350090][ T5896] usb 1-1: config 0 has no interface number 0 [ 487.359501][ T5896] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 487.374412][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.387127][ T5896] usb 1-1: Product: syz [ 487.394885][ T5896] usb 1-1: Manufacturer: syz [ 487.400680][ T5896] usb 1-1: SerialNumber: syz [ 487.419039][ T5896] usb 1-1: config 0 descriptor?? [ 487.419347][ T10] usb 5-1: USB disconnect, device number 90 [ 487.641100][ T9129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.651108][ T9129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.669890][ T5896] usb 1-1: selecting invalid altsetting 1 [ 487.701548][ T5896] speedtch 1-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 487.724420][ T5896] speedtch 1-1:0.1: usbatm_usb_probe: bind failed: -22! [ 487.738336][ T5896] speedtch 1-1:0.1: probe with driver speedtch failed with error -22 [ 487.753279][ T5896] usb 1-1: USB disconnect, device number 80 [ 487.779145][ T5845] usb 2-1: USB disconnect, device number 88 [ 488.031416][ T9139] FAULT_INJECTION: forcing a failure. [ 488.031416][ T9139] name failslab, interval 1, probability 0, space 0, times 0 [ 488.045652][ T9139] CPU: 1 UID: 0 PID: 9139 Comm: syz.4.872 Not tainted 6.15.0-rc1-syzkaller-00301-g3bde70a2c827 #0 PREEMPT(full) [ 488.045681][ T9139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 488.045695][ T9139] Call Trace: [ 488.045703][ T9139] [ 488.045712][ T9139] dump_stack_lvl+0x241/0x360 [ 488.045750][ T9139] ? __pfx_dump_stack_lvl+0x10/0x10 [ 488.045782][ T9139] ? __pfx__printk+0x10/0x10 [ 488.045815][ T9139] ? __pfx___might_resched+0x10/0x10 [ 488.045845][ T9139] should_fail_ex+0x424/0x570 [ 488.045872][ T9139] should_failslab+0xac/0x100 [ 488.045904][ T9139] __kmalloc_noprof+0xdf/0x4d0 [ 488.045932][ T9139] ? tomoyo_encode+0x26f/0x540 [ 488.045969][ T9139] tomoyo_encode+0x26f/0x540 [ 488.046006][ T9139] tomoyo_realpath_from_path+0x59e/0x5e0 [ 488.046069][ T9139] tomoyo_path_number_perm+0x245/0x790 [ 488.046113][ T9139] ? __lock_acquire+0xad5/0xd80 [ 488.046139][ T9139] ? tomoyo_path_number_perm+0x215/0x790 [ 488.046170][ T9139] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 488.046241][ T9139] ? __fget_files+0x2a/0x420 [ 488.046260][ T9139] ? __fget_files+0x2a/0x420 [ 488.046283][ T9139] ? __fget_files+0x2a/0x420 [ 488.046308][ T9139] security_file_ioctl_compat+0xc6/0x2a0 [ 488.046338][ T9139] __se_compat_sys_ioctl+0xd8/0xc30 [ 488.046365][ T9139] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 488.046400][ T9139] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 488.046427][ T9139] ? __fget_files+0x2a/0x420 [ 488.046453][ T9139] ? fput+0x9b/0xd0 [ 488.046473][ T9139] ? ksys_write+0x275/0x2d0 [ 488.046507][ T9139] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 488.046533][ T9139] ? lockdep_hardirqs_on+0x9d/0x150 [ 488.046562][ T9139] __do_fast_syscall_32+0xb4/0x110 [ 488.046588][ T9139] ? exc_page_fault+0x5f8/0x920 [ 488.046620][ T9139] do_fast_syscall_32+0x34/0x80 [ 488.046648][ T9139] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 488.046674][ T9139] RIP: 0023:0xf7f63579 [ 488.046693][ T9139] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 488.046711][ T9139] RSP: 002b:00000000f508655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 488.046733][ T9139] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c06864a2 [ 488.046749][ T9139] RDX: 0000000080000500 RSI: 0000000000000000 RDI: 0000000000000000 [ 488.046762][ T9139] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 488.046775][ T9139] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 488.046788][ T9139] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 488.046819][ T9139] [ 488.047667][ T9139] ERROR: Out of memory at tomoyo_realpath_from_path. [ 488.266168][ T9] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 488.410363][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 488.419029][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 488.442036][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 488.455082][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 488.459729][ T5845] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 488.476151][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 488.486639][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 488.496893][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 488.507030][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 488.523889][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 488.533200][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.541547][ T5894] gspca_sonixj: reg_r err -32 [ 488.546408][ T9] usb 3-1: Product: syz [ 488.551986][ T9] usb 3-1: Manufacturer: syz [ 488.556770][ T9] usb 3-1: SerialNumber: syz [ 488.567362][ T9] usb 3-1: config 0 descriptor?? [ 488.574767][ T9138] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 488.592395][ T5894] sonixj 4-1:0.0: probe with driver sonixj failed with error -32 [ 488.609747][ T5896] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 488.631789][ T5845] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 488.643803][ T5845] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 60463, setting to 1024 [ 488.669786][ T5845] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 488.680931][ T5845] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 488.693589][ T5845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.714984][ T9135] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 488.731002][ T5845] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 488.759660][ T5896] usb 1-1: Using ep0 maxpacket: 8 [ 488.773429][ T5896] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 488.786274][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.811178][ T9] hdpvr 3-1:0.0: unexpected answer of status request, len -71 [ 488.816121][ T5896] usb 1-1: Product: syz [ 488.828657][ T9] hdpvr 3-1:0.0: device init failed [ 488.835192][ T5896] usb 1-1: Manufacturer: syz [ 488.844726][ T9] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 488.851631][ T5896] usb 1-1: SerialNumber: syz [ 488.866745][ T9] usb 3-1: USB disconnect, device number 87 [ 488.905714][ T5896] usb 1-1: config 0 descriptor?? [ 488.949153][ T5896] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 489.009905][ T48] usb 5-1: new full-speed USB device number 91 using dummy_hcd [ 489.026624][ T5894] usb 2-1: USB disconnect, device number 89 [ 489.173489][ T48] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.184828][ T48] usb 5-1: config 0 interface 0 has no altsetting 0 [ 489.192125][ T48] usb 5-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 489.201272][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.212789][ T48] usb 5-1: config 0 descriptor?? [ 489.430651][ T9149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.439404][ T9149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.455026][ T9149] IPv6: NLM_F_REPLACE set, but no existing node found! [ 489.589513][ T5845] usb 4-1: USB disconnect, device number 90 [ 489.690731][ T48] usbhid 5-1:0.0: can't add hid device: -71 [ 489.704344][ T48] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 489.708480][ T9156] netlink: 28 bytes leftover after parsing attributes in process `syz.3.878'. [ 489.728842][ T48] usb 5-1: USB disconnect, device number 91 [ 489.760273][ T5896] gspca_sonixj: reg_r err -32 [ 489.765062][ T5896] sonixj 1-1:0.0: probe with driver sonixj failed with error -32 [ 490.419793][ T10] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 490.429973][ T9] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 490.542520][ T5894] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 490.559691][ T48] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 490.571297][ T10] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 490.580703][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 490.585851][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.597191][ T10] usb 4-1: config 0 descriptor?? [ 490.605704][ T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 490.616347][ T10] cp210x 4-1:0.0: cp210x converter detected [ 490.624782][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.633038][ T9] usb 2-1: Product: syz [ 490.637632][ T9] usb 2-1: Manufacturer: syz [ 490.642357][ T9] usb 2-1: SerialNumber: syz [ 490.649712][ T9] usb 2-1: config 0 descriptor?? [ 490.657924][ T9] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 490.713005][ T48] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 490.719829][ T5894] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 490.723527][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.740051][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.743706][ T48] usb 5-1: config 0 descriptor?? [ 490.752360][ T5894] usb 3-1: config 0 descriptor?? [ 490.762485][ T5894] cp210x 3-1:0.0: cp210x converter detected [ 490.766264][ T48] cp210x 5-1:0.0: cp210x converter detected [ 491.856016][ T6584] usb 1-1: USB disconnect, device number 81 [ 494.139690][ T9] gspca_sonixj: i2c_w8 err -71 [ 494.179957][ T9] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 494.192182][ T9] usb 2-1: USB disconnect, device number 90 [ 494.273162][ T10] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 494.324249][ T10] cp210x 4-1:0.0: querying part number failed [ 494.393138][ T10] usb 4-1: cp210x converter now attached to ttyUSB0 [ 494.429174][ T10] usb 4-1: USB disconnect, device number 91 [ 494.442163][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 494.457687][ T48] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 494.463190][ T10] cp210x 4-1:0.0: device disconnected [ 494.627385][ T48] cp210x 5-1:0.0: querying part number failed [ 494.653960][ T48] usb 5-1: cp210x converter now attached to ttyUSB0 [ 494.709770][ T9] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 494.764358][ T48] usb 5-1: USB disconnect, device number 92 [ 494.785832][ T5894] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 494.800454][ T48] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 494.841231][ T48] cp210x 5-1:0.0: device disconnected [ 494.846549][ T5894] cp210x 3-1:0.0: querying part number failed [ 494.877404][ T5894] usb 3-1: cp210x converter now attached to ttyUSB0 [ 494.900062][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 494.906739][ T9204] netlink: 28 bytes leftover after parsing attributes in process `syz.1.891'. [ 494.925321][ T5894] usb 3-1: USB disconnect, device number 88 [ 494.945864][ T9] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 494.965201][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.974298][ T5894] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 494.983991][ T9] usb 1-1: Product: syz [ 494.988198][ T9] usb 1-1: Manufacturer: syz [ 494.997117][ T5894] cp210x 3-1:0.0: device disconnected [ 495.008741][ T9] usb 1-1: SerialNumber: syz [ 495.024862][ T9] usb 1-1: config 0 descriptor?? [ 495.044832][ T9] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 495.189660][ T48] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 495.352745][ T48] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 495.377151][ T48] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 60463, setting to 1024 [ 495.402374][ T48] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 495.418529][ T48] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 495.438251][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.462075][ T9202] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 495.473435][ T48] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 495.650443][ T5845] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 495.694331][ T9218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.895'. [ 495.697086][ T48] usb 5-1: USB disconnect, device number 93 [ 495.705180][ T9218] netlink: 24 bytes leftover after parsing attributes in process `syz.1.895'. [ 495.779856][ T5894] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 495.803449][ T5845] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.813420][ T5845] usb 3-1: config 0 interface 0 has no altsetting 0 [ 495.820152][ T5845] usb 3-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 495.829208][ T5845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.841948][ T5845] usb 3-1: config 0 descriptor?? [ 495.949951][ T5894] usb 4-1: Using ep0 maxpacket: 8 [ 495.960589][ T5894] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 495.971664][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.979861][ T5894] usb 4-1: Product: syz [ 495.987262][ T5894] usb 4-1: Manufacturer: syz [ 495.991943][ T5894] usb 4-1: SerialNumber: syz [ 496.003188][ T5894] usb 4-1: config 0 descriptor?? [ 496.011863][ T5894] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 496.053700][ T9221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.062716][ T9221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.076214][ T9221] IPv6: NLM_F_REPLACE set, but no existing node found! [ 496.274340][ T9229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.898'. [ 496.299849][ T5845] usbhid 3-1:0.0: can't add hid device: -71 [ 496.312292][ T5845] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 496.326782][ T5845] usb 3-1: USB disconnect, device number 89 [ 496.709716][ T10] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 496.779676][ T5845] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 496.852322][ T5894] gspca_sonixj: reg_r err -32 [ 496.857094][ T5894] sonixj 4-1:0.0: probe with driver sonixj failed with error -32 [ 496.883591][ T10] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 496.893049][ T9] gspca_sonixj: reg_r err -32 [ 496.909484][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.929878][ T5845] usb 5-1: Using ep0 maxpacket: 8 [ 496.929901][ T9] sonixj 1-1:0.0: probe with driver sonixj failed with error -32 [ 496.945082][ T5845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 496.945243][ T10] usb 2-1: config 0 descriptor?? [ 496.963850][ T5845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 496.970904][ T10] cp210x 2-1:0.0: cp210x converter detected [ 496.985761][ T5845] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 497.013137][ T5845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 497.026294][ T5845] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 497.038778][ T5845] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 497.049185][ T5845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.070252][ T5845] usb 5-1: config 0 descriptor?? [ 497.077346][ T9234] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 497.269175][ T9243] netlink: 28 bytes leftover after parsing attributes in process `syz.2.903'. [ 497.478513][ T5152] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 497.479364][ T919] usb 5-1: USB disconnect, device number 94 [ 497.937920][ T5845] usb 1-1: USB disconnect, device number 82 [ 497.961785][ T5894] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 498.169763][ T5894] usb 3-1: Using ep0 maxpacket: 16 [ 498.178477][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 498.194075][ T5894] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 498.287717][ T5894] usb 3-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 498.313307][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.357521][ T5894] usb 3-1: config 0 descriptor?? [ 498.640478][ T5845] usb 4-1: USB disconnect, device number 92 [ 498.774763][ T9252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.788328][ T9266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.909'. [ 498.807022][ T9252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.939967][ T9] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 499.099864][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 499.116929][ T9] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 499.126522][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.144165][ T5894] waltop 0003:172F:0034.002B: hidraw0: USB HID v67.1b Device [HID 172f:0034] on usb-dummy_hcd.2-1/input0 [ 499.164872][ T9] usb 5-1: Product: syz [ 499.206747][ T9] usb 5-1: Manufacturer: syz [ 499.220158][ T9] usb 5-1: SerialNumber: syz [ 499.240054][ T9] usb 5-1: config 0 descriptor?? [ 499.250083][ T9] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 499.261056][ T9252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.298150][ T5845] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 499.306506][ T9252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.610435][ T10] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 499.612232][ T5845] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 499.617992][ T10] cp210x 2-1:0.0: querying part number failed [ 499.659846][ T5845] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 60463, setting to 1024 [ 499.672458][ T5845] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 499.683284][ T5845] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 499.692879][ T10] usb 2-1: cp210x converter now attached to ttyUSB0 [ 499.693916][ T5845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.725407][ T9269] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 499.735112][ T10] usb 2-1: USB disconnect, device number 91 [ 499.747545][ T5845] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 499.795213][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 499.805810][ T10] cp210x 2-1:0.0: device disconnected [ 499.886930][ T9275] netlink: zone id is out of range [ 499.892960][ T9275] netlink: zone id is out of range [ 499.905001][ T9275] netlink: zone id is out of range [ 499.911455][ T9275] netlink: zone id is out of range [ 499.916703][ T9275] netlink: zone id is out of range [ 499.926121][ T9275] netlink: zone id is out of range [ 499.933666][ T9275] netlink: zone id is out of range [ 499.938824][ T9275] netlink: zone id is out of range [ 499.949004][ T9275] netlink: zone id is out of range [ 499.954522][ T9275] netlink: zone id is out of range [ 499.957461][ T5845] usb 4-1: USB disconnect, device number 93 [ 500.109864][ T10] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 500.263376][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 500.270731][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.281727][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.292232][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 500.309404][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 500.318639][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.344479][ T10] usb 2-1: config 0 descriptor?? [ 500.575700][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 500.581810][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 500.595725][ T10] usb 2-1: USB disconnect, device number 92 [ 500.630149][ T5845] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 500.713959][ T48] usb 3-1: USB disconnect, device number 90 [ 500.800052][ T5845] usb 1-1: Using ep0 maxpacket: 16 [ 500.811248][ T5845] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 500.824601][ T5845] usb 1-1: config 0 has no interface number 0 [ 500.831759][ T5845] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 500.849348][ T5845] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 500.868930][ T5845] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 500.885998][ T5845] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.893188][ T9287] FAULT_INJECTION: forcing a failure. [ 500.893188][ T9287] name failslab, interval 1, probability 0, space 0, times 0 [ 500.894669][ T5845] usb 1-1: Product: syz [ 500.907176][ T9287] CPU: 0 UID: 0 PID: 9287 Comm: syz.2.916 Not tainted 6.15.0-rc1-syzkaller-00301-g3bde70a2c827 #0 PREEMPT(full) [ 500.907206][ T9287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 500.907226][ T9287] Call Trace: [ 500.907235][ T9287] [ 500.907244][ T9287] dump_stack_lvl+0x241/0x360 [ 500.907282][ T9287] ? __pfx_dump_stack_lvl+0x10/0x10 [ 500.907313][ T9287] ? __pfx__printk+0x10/0x10 [ 500.907347][ T9287] ? __pfx___might_resched+0x10/0x10 [ 500.907380][ T9287] should_fail_ex+0x424/0x570 [ 500.907407][ T9287] should_failslab+0xac/0x100 [ 500.907437][ T9287] __kmalloc_cache_noprof+0x73/0x370 [ 500.907465][ T9287] ? vhost_task_create+0x15d/0x320 [ 500.907500][ T9287] vhost_task_create+0x15d/0x320 [ 500.907527][ T9287] ? is_bpf_text_address+0x288/0x2a0 [ 500.907550][ T9287] ? is_bpf_text_address+0x26/0x2a0 [ 500.907572][ T9287] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 500.907597][ T9287] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 500.907623][ T9287] ? __pfx_vhost_task_create+0x10/0x10 [ 500.907660][ T9287] ? __pfx_vhost_task_fn+0x10/0x10 [ 500.907703][ T9287] ? stack_trace_save+0x11a/0x1d0 [ 500.907737][ T9287] kvm_mmu_post_init_vm+0x14e/0x2c0 [ 500.907767][ T9287] kvm_arch_vcpu_ioctl_run+0xed/0x1910 [ 500.907802][ T9287] ? __lock_acquire+0xad5/0xd80 [ 500.907828][ T9287] ? __mutex_trylock_common+0x184/0x2e0 [ 500.907877][ T9287] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 500.907911][ T9287] ? __pfx___mutex_trylock_common+0x10/0x10 [ 500.907946][ T9287] ? rcu_is_watching+0x15/0xb0 [ 500.907975][ T9287] ? look_up_lock_class+0x7b/0x170 [ 500.908006][ T9287] ? register_lock_class+0x54/0x330 [ 500.908035][ T9287] ? __lock_acquire+0xad5/0xd80 [ 500.908065][ T9287] ? do_raw_write_lock+0x14a/0x4f0 [ 500.908119][ T9287] kvm_vcpu_ioctl+0xa24/0x1030 [ 500.908157][ T9287] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 500.908186][ T9287] ? tomoyo_path_number_perm+0x215/0x790 [ 500.908230][ T9287] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 500.908302][ T9287] kvm_vcpu_compat_ioctl+0x241/0x450 [ 500.908331][ T9287] ? __fget_files+0x2a/0x420 [ 500.908354][ T9287] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 500.908387][ T9287] ? __fget_files+0x2a/0x420 [ 500.908418][ T9287] __se_compat_sys_ioctl+0x50e/0xc30 [ 500.908449][ T9287] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 500.908521][ T9287] ? __fget_files+0x2a/0x420 [ 500.908555][ T9287] ? fput+0x9b/0xd0 [ 500.908578][ T9287] ? ksys_write+0x275/0x2d0 [ 500.908615][ T9287] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 500.908645][ T9287] ? lockdep_hardirqs_on+0x9d/0x150 [ 500.908676][ T9287] __do_fast_syscall_32+0xb4/0x110 [ 500.908705][ T9287] ? exc_page_fault+0x5f8/0x920 [ 500.908737][ T9287] do_fast_syscall_32+0x34/0x80 [ 500.908766][ T9287] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 500.908793][ T9287] RIP: 0023:0xf7fd1579 [ 500.908813][ T9287] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 500.908831][ T9287] RSP: 002b:00000000f50f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 500.908855][ T9287] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 000000000000ae80 [ 500.908871][ T9287] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 500.908884][ T9287] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 500.908897][ T9287] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 500.908910][ T9287] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 500.908943][ T9287] [ 500.955243][ T6584] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 500.960873][ T5845] usb 1-1: Manufacturer: syz [ 501.109854][ T6584] usb 4-1: Using ep0 maxpacket: 8 [ 501.117740][ T5845] usb 1-1: SerialNumber: syz [ 501.153629][ T6584] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 501.183444][ T5845] usb 1-1: config 0 descriptor?? [ 501.239727][ T6584] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.285256][ T9283] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 501.317975][ T6584] usb 4-1: Product: syz [ 501.341221][ T6584] usb 4-1: Manufacturer: syz [ 501.346430][ T6584] usb 4-1: SerialNumber: syz [ 501.371299][ T9283] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 501.381511][ T6584] usb 4-1: config 0 descriptor?? [ 501.396425][ T6584] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 501.545027][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.551704][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.616030][ T9283] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 501.624017][ T9283] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 501.879842][ T48] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 502.043892][ T48] usb 2-1: config 0 has no interfaces? [ 502.092967][ T48] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 502.104507][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.114097][ T48] usb 2-1: Product: syz [ 502.118536][ T48] usb 2-1: Manufacturer: syz [ 502.124051][ T48] usb 2-1: SerialNumber: syz [ 502.138719][ T48] usb 2-1: config 0 descriptor?? [ 502.303269][ T5845] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 502.320002][ T9] gspca_sonixj: i2c_w8 err -71 [ 502.360040][ T9] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 502.379189][ T9] usb 5-1: USB disconnect, device number 95 [ 502.408016][ T5845] asix 1-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 502.480462][ T30] audit: type=1400 audit(1744460768.938:116): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=9292 comm="syz.1.919" [ 502.609299][ T5845] asix 1-1:0.251: probe with driver asix failed with error -71 [ 502.647161][ T5845] usb 1-1: USB disconnect, device number 83 [ 503.468727][ T9306] pim6reg: entered allmulticast mode [ 503.481452][ T9306] team0: entered allmulticast mode [ 503.485197][ T9306] pim6reg: left allmulticast mode [ 503.489828][ T10] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 503.493553][ T9306] team0: left allmulticast mode [ 503.505826][ T6584] gspca_sonixj: reg_r err -32 [ 503.549766][ T6584] sonixj 4-1:0.0: probe with driver sonixj failed with error -32 [ 503.676776][ T10] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 503.686676][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.699544][ T10] usb 5-1: config 0 descriptor?? [ 503.709330][ T10] cp210x 5-1:0.0: cp210x converter detected [ 503.839871][ T6584] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 503.999922][ T6584] usb 3-1: Using ep0 maxpacket: 8 [ 504.034640][ T6584] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 504.059083][ T6584] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 504.092348][ T6584] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 504.119335][ T6584] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 504.184639][ T6584] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 504.279682][ T6584] usb 3-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f [ 504.306067][ T6584] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.315514][ T6584] usb 3-1: Product: syz [ 504.320052][ T6584] usb 3-1: Manufacturer: syz [ 504.324919][ T6584] usb 3-1: SerialNumber: syz [ 504.335590][ T6584] usb 3-1: config 0 descriptor?? [ 504.347016][ T6584] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 504.529017][ T6584] usb 2-1: USB disconnect, device number 93 [ 504.582028][ T919] usb 3-1: USB disconnect, device number 91 [ 504.682496][ T5900] usb 4-1: USB disconnect, device number 94 [ 505.060217][ T5845] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 505.179836][ T5900] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 505.269891][ T48] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 505.406376][ T5900] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 505.421809][ T5900] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 505.434115][ T5900] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 505.446770][ T5845] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 505.466151][ T5845] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 60463, setting to 1024 [ 505.486588][ T5900] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 505.513174][ T5845] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 505.527030][ T5900] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 505.578162][ T48] usb 4-1: Using ep0 maxpacket: 16 [ 505.587156][ T5845] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 505.599484][ T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 505.619696][ T5900] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 505.637812][ T48] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 505.653990][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 505.669066][ T5845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.708982][ T5900] usb 1-1: Product: syz [ 505.715307][ T48] usb 4-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 505.731000][ T5900] usb 1-1: Manufacturer: syz [ 505.741010][ T9323] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 505.754201][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.770724][ T5900] cdc_wdm 1-1:1.0: skipping garbage [ 505.787399][ T5845] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 505.803635][ T5900] cdc_wdm 1-1:1.0: skipping garbage [ 505.822551][ T5900] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 505.830080][ T48] usb 4-1: config 0 descriptor?? [ 505.852843][ T5900] cdc_wdm 1-1:1.0: Unknown control protocol [ 505.862995][ T9333] program syz.2.928 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 506.002415][ T5845] usb 2-1: USB disconnect, device number 94 [ 506.066739][ T9329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.077043][ T9329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.141071][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 506.147995][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 506.154288][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 506.160907][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 506.167958][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 506.174582][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 506.188798][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 506.195516][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 506.210196][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 506.216841][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 506.223500][ T5900] usb 1-1: USB disconnect, device number 84 [ 506.230115][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 506.236751][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 506.242858][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 506.402844][ T48] waltop 0003:172F:0034.002C: hidraw0: USB HID v67.1b Device [HID 172f:0034] on usb-dummy_hcd.3-1/input0 [ 506.464311][ T10] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 506.500564][ T10] cp210x 5-1:0.0: querying part number failed [ 506.510675][ T9329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.523129][ T9329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.540220][ T10] usb 5-1: cp210x converter now attached to ttyUSB0 [ 506.569243][ T10] usb 5-1: USB disconnect, device number 96 [ 506.591846][ T6918] udevd[6918]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 506.630449][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 506.638775][ T10] cp210x 5-1:0.0: device disconnected [ 506.963621][ T10] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 507.019779][ T5900] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 507.109688][ T919] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 507.119668][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 507.128292][ T10] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 507.142789][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.150885][ T10] usb 5-1: Product: syz [ 507.155098][ T10] usb 5-1: Manufacturer: syz [ 507.162482][ T10] usb 5-1: SerialNumber: syz [ 507.169431][ T10] usb 5-1: config 0 descriptor?? [ 507.177291][ T10] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 507.189840][ T6584] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 507.192600][ T5900] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 507.211632][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.223648][ T5900] usb 3-1: config 0 descriptor?? [ 507.231446][ T5900] cp210x 3-1:0.0: cp210x converter detected [ 507.264091][ T919] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 507.273207][ T919] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 507.284625][ T919] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 507.296212][ T919] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 507.309177][ T919] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 507.322817][ T919] usb 2-1: config 0 interface 0 has no altsetting 0 [ 507.333088][ T919] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 507.342330][ T919] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 507.351371][ T919] usb 2-1: Product: syz [ 507.355905][ T919] usb 2-1: Manufacturer: syz [ 507.360690][ T919] usb 2-1: SerialNumber: syz [ 507.366267][ T6584] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 507.377442][ T6584] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.387407][ T919] usb 2-1: config 0 descriptor?? [ 507.393414][ T9348] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 507.407606][ T919] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 507.419399][ T6584] usb 1-1: config 0 descriptor?? [ 507.427875][ T6584] cp210x 1-1:0.0: cp210x converter detected [ 507.435786][ T919] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 508.865286][ T48] usb 4-1: USB disconnect, device number 95 [ 510.176247][ T919] usb 2-1: USB disconnect, device number 95 [ 510.252695][ T919] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 510.359891][ T6584] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 510.367528][ T6584] cp210x 1-1:0.0: querying part number failed [ 510.445021][ T6584] usb 1-1: cp210x converter now attached to ttyUSB0 [ 510.484594][ T6584] usb 1-1: USB disconnect, device number 85 [ 510.529044][ T6584] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 510.566575][ T6584] cp210x 1-1:0.0: device disconnected [ 510.728858][ T919] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 510.759755][ T10] gspca_sonixj: i2c_w8 err -71 [ 510.799823][ T10] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 510.910026][ T10] usb 5-1: USB disconnect, device number 97 [ 510.954488][ T919] usb 2-1: Using ep0 maxpacket: 8 [ 511.000167][ T919] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 511.019782][ T5900] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 511.038001][ T919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.046920][ T5900] cp210x 3-1:0.0: querying part number failed [ 511.063872][ T919] usb 2-1: Product: syz [ 511.094639][ T6584] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 511.107471][ T919] usb 2-1: Manufacturer: syz [ 511.124257][ T919] usb 2-1: SerialNumber: syz [ 511.136021][ T5900] usb 3-1: cp210x converter now attached to ttyUSB0 [ 511.188946][ T919] usb 2-1: config 0 descriptor?? [ 511.214062][ T919] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 511.255737][ T6584] usb 1-1: config 0 has no interfaces? [ 511.280075][ T5900] usb 3-1: USB disconnect, device number 92 [ 511.338679][ T6584] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 511.363779][ T6584] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.394507][ T6584] usb 1-1: Product: syz [ 511.416872][ T6584] usb 1-1: Manufacturer: syz [ 511.436923][ T6584] usb 1-1: SerialNumber: syz [ 511.453285][ T6584] usb 1-1: config 0 descriptor?? [ 511.470051][ T5900] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 511.532270][ T5900] cp210x 3-1:0.0: device disconnected [ 511.752557][ T6584] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 511.928719][ T30] audit: type=1400 audit(1744460778.348:117): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=9369 comm="syz.0.937" [ 512.018634][ T6584] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 512.030048][ T919] gspca_sonixj: reg_r err -32 [ 512.034817][ T919] sonixj 2-1:0.0: probe with driver sonixj failed with error -32 [ 512.045732][ T6584] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.086936][ T6584] usb 5-1: config 0 descriptor?? [ 512.106940][ T6584] cp210x 5-1:0.0: cp210x converter detected [ 512.805623][ T9394] syz.3.943: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 512.890746][ T9394] CPU: 1 UID: 0 PID: 9394 Comm: syz.3.943 Not tainted 6.15.0-rc1-syzkaller-00301-g3bde70a2c827 #0 PREEMPT(full) [ 512.890780][ T9394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 512.890795][ T9394] Call Trace: [ 512.890804][ T9394] [ 512.890814][ T9394] dump_stack_lvl+0x241/0x360 [ 512.890856][ T9394] ? __pfx_dump_stack_lvl+0x10/0x10 [ 512.890888][ T9394] ? __pfx__printk+0x10/0x10 [ 512.890919][ T9394] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 512.890954][ T9394] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 512.890985][ T9394] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 512.891020][ T9394] warn_alloc+0x27c/0x410 [ 512.891041][ T9394] ? is_mmconf_reserved+0x3a1/0x3f0 [ 512.891067][ T9394] ? __vmalloc_node_range_noprof+0x108/0x1390 [ 512.891090][ T9394] ? __pfx_warn_alloc+0x10/0x10 [ 512.891112][ T9394] ? kasan_save_track+0x3f/0x80 [ 512.891135][ T9394] ? __kasan_kmalloc+0x9d/0xb0 [ 512.891162][ T9394] ? xsk_setsockopt+0x449/0x840 [ 512.891183][ T9394] ? do_sock_setsockopt+0x3b1/0x710 [ 512.891204][ T9394] ? __ia32_sys_setsockopt+0x1f2/0x280 [ 512.891224][ T9394] ? __do_fast_syscall_32+0xb4/0x110 [ 512.891250][ T9394] ? do_fast_syscall_32+0x34/0x80 [ 512.891276][ T9394] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 512.891311][ T9394] __vmalloc_node_range_noprof+0x128/0x1390 [ 512.891364][ T9394] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 512.891393][ T9394] ? __kasan_kmalloc+0x9d/0xb0 [ 512.891433][ T9394] vmalloc_user_noprof+0x74/0x80 [ 512.891456][ T9394] ? xskq_create+0xb6/0x170 [ 512.891479][ T9394] xskq_create+0xb6/0x170 [ 512.891505][ T9394] xsk_init_queue+0xa1/0x100 [ 512.891532][ T9394] xsk_setsockopt+0x449/0x840 [ 512.891558][ T9394] ? __pfx_xsk_setsockopt+0x10/0x10 [ 512.891576][ T9394] ? __lock_acquire+0xad5/0xd80 [ 512.891598][ T9394] ? __pfx_aa_sk_perm+0x10/0x10 [ 512.891627][ T9394] ? __lock_acquire+0xad5/0xd80 [ 512.891651][ T9394] ? aa_sock_opt_perm+0x79/0x120 [ 512.891687][ T9394] ? __pfx_xsk_setsockopt+0x10/0x10 [ 512.891708][ T9394] do_sock_setsockopt+0x3b1/0x710 [ 512.891737][ T9394] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 512.891759][ T9394] ? __fget_files+0x2a/0x420 [ 512.891781][ T9394] ? __fget_files+0x39d/0x420 [ 512.891799][ T9394] ? __fget_files+0x2a/0x420 [ 512.891827][ T9394] __ia32_sys_setsockopt+0x1f2/0x280 [ 512.891857][ T9394] __do_fast_syscall_32+0xb4/0x110 [ 512.891885][ T9394] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 512.891908][ T9394] ? lockdep_hardirqs_on+0x9d/0x150 [ 512.891948][ T9394] do_fast_syscall_32+0x34/0x80 [ 512.891977][ T9394] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 512.892002][ T9394] RIP: 0023:0xf741d579 [ 512.892020][ T9394] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 512.892039][ T9394] RSP: 002b:00000000f50a655c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 512.892061][ T9394] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000011b [ 512.892076][ T9394] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000052 [ 512.892090][ T9394] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 512.892102][ T9394] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 512.892115][ T9394] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 512.892146][ T9394] [ 513.391186][ T9394] Mem-Info: [ 513.409109][ T919] usb 2-1: USB disconnect, device number 96 [ 513.492608][ T9394] active_anon:9119 inactive_anon:0 isolated_anon:0 [ 513.492608][ T9394] active_file:11582 inactive_file:38492 isolated_file:0 [ 513.492608][ T9394] unevictable:768 dirty:389 writeback:0 [ 513.492608][ T9394] slab_reclaimable:9890 slab_unreclaimable:98995 [ 513.492608][ T9394] mapped:38106 shmem:4271 pagetables:986 [ 513.492608][ T9394] sec_pagetables:0 bounce:0 [ 513.492608][ T9394] kernel_misc_reclaimable:0 [ 513.492608][ T9394] free:1320512 free_pcp:2314 free_cma:0 [ 513.539794][ T9394] Node 0 active_anon:36676kB inactive_anon:0kB active_file:46328kB inactive_file:153852kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:152384kB dirty:1556kB writeback:0kB shmem:15548kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11384kB pagetables:3944kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 513.574224][ T9394] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:116kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:40kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 513.648299][ T9401] netlink: 'syz.1.944': attribute type 36 has an invalid length. [ 513.688262][ T9394] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 513.874353][ T9394] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 513.916823][ T9394] Node 0 DMA32 free:1363344kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:37168kB inactive_anon:0kB active_file:46328kB inactive_file:153752kB unevictable:1536kB writepending:1556kB present:3129332kB managed:2547232kB mlocked:0kB bounce:0kB free_pcp:6912kB local_pcp:6256kB free_cma:0kB [ 513.947562][ T10] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 514.033503][ T5845] usb 1-1: USB disconnect, device number 86 [ 514.149038][ T9394] lowmem_reserve[]: 0 0 0 0 0 [ 514.191618][ T9394] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 514.288988][ T9394] lowmem_reserve[]: 0 0 0 0 0 [ 514.330937][ T9394] Node 1 Normal free:3905704kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:116kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 514.441411][ T9394] lowmem_reserve[]: 0 0 0 0 0 [ 514.447076][ T10] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 514.459883][ T10] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 60463, setting to 1024 [ 514.472746][ T9394] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 514.486026][ T10] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 514.496516][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 514.505941][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.580574][ T9396] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 514.615825][ T9394] Node 0 DMA32: 68*4kB (UM) 504*8kB (UME) 399*16kB (UME) 306*32kB (UME) 325*64kB (UME) 184*128kB (UME) 82*256kB (UME) 35*512kB (UM) 11*1024kB (UME) 9*2048kB (UME) 302*4096kB (UM) = 1370432kB [ 514.652404][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 514.728259][ T9394] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 514.789720][ T5894] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 514.829859][ T9394] Node 1 Normal: 262*4kB (U) 70*8kB (UME) 40*16kB (UE) 221*32kB (UE) 107*64kB (UME) 33*128kB (UME) 15*256kB (UME) 7*512kB (UM) 3*1024kB (UM) 2*2048kB (UM) 945*4096kB (ME) = 3905704kB [ 514.848703][ T9394] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 514.858568][ T9394] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 514.894733][ T6584] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 514.933162][ T9394] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 514.958017][ T9394] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 514.967747][ T6584] cp210x 5-1:0.0: querying part number failed [ 514.972753][ T9394] 54346 total pagecache pages [ 514.978664][ T9394] 0 pages in swap cache [ 515.079983][ T6584] usb 5-1: cp210x converter now attached to ttyUSB0 [ 515.090683][ T9394] Free swap = 124996kB [ 515.094878][ T9394] Total swap = 124996kB [ 515.099466][ T10] usb 4-1: USB disconnect, device number 96 [ 515.125999][ T5894] usb 2-1: config 0 has no interfaces? [ 515.161030][ T5894] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 515.168287][ T9394] 2097051 pages RAM [ 515.182109][ T6584] usb 5-1: USB disconnect, device number 98 [ 515.182476][ T9394] 0 pages HighMem/MovableOnly [ 515.206317][ T9394] 428585 pages reserved [ 515.233132][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.243706][ T9394] 0 pages cma reserved [ 515.285486][ T5894] usb 2-1: Product: syz [ 515.361096][ T5894] usb 2-1: Manufacturer: syz [ 515.374990][ T5894] usb 2-1: SerialNumber: syz [ 515.388798][ T6584] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 515.456842][ T5894] usb 2-1: config 0 descriptor?? [ 515.479314][ T6584] cp210x 5-1:0.0: device disconnected [ 515.653724][ T6262] udevd[6262]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 515.679972][ T5900] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 515.800392][ T30] audit: type=1400 audit(1744460782.268:118): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=9403 comm="syz.1.945" [ 515.872486][ T5900] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 515.889971][ T6584] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 516.231228][ T5900] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 516.252119][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.260294][ T5845] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 516.294864][ T6584] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 516.304531][ T6584] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.319008][ T5900] usb 3-1: Product: syz [ 516.328483][ T5900] usb 3-1: Manufacturer: syz [ 516.329548][ T6584] usb 5-1: config 0 descriptor?? [ 516.344805][ T6584] cp210x 5-1:0.0: cp210x converter detected [ 516.358259][ T5900] usb 3-1: SerialNumber: syz [ 516.773001][ T5845] usb 1-1: config 0 has no interfaces? [ 516.919667][ T48] usb 4-1: new full-speed USB device number 97 using dummy_hcd [ 517.129166][ T5845] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 517.217415][ T5845] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.231401][ T5845] usb 1-1: Product: syz [ 517.236329][ T5845] usb 1-1: Manufacturer: syz [ 517.250779][ T5845] usb 1-1: SerialNumber: syz [ 517.261297][ T5845] usb 1-1: config 0 descriptor?? [ 517.378230][ T48] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.418913][ T48] usb 4-1: config 0 interface 0 has no altsetting 0 [ 517.439387][ T48] usb 4-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 517.610074][ T30] audit: type=1400 audit(1744460784.008:119): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=9421 comm="syz.0.950" [ 517.667604][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.771884][ T9] usb 2-1: USB disconnect, device number 97 [ 517.807060][ T48] usb 4-1: config 0 descriptor?? [ 518.064624][ T9432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.150072][ T9432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.382620][ T9432] IPv6: NLM_F_REPLACE set, but no existing node found! [ 518.407173][ T48] hid-alps 0003:044E:120B.002D: hidraw0: USB HID v0.00 Device [HID 044e:120b] on usb-dummy_hcd.3-1/input0 [ 518.586928][ T5900] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 93 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 518.607658][ T48] usb 4-1: USB disconnect, device number 97 [ 518.700438][ T5900] usb 3-1: USB disconnect, device number 93 [ 518.729956][ T5900] usblp0: removed [ 519.479726][ T10] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 519.507494][ T6584] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 519.537487][ T6584] cp210x 5-1:0.0: querying part number failed [ 519.571190][ T6584] usb 5-1: cp210x converter now attached to ttyUSB0 [ 519.613502][ T919] usb 1-1: USB disconnect, device number 87 [ 519.622048][ T6584] usb 5-1: USB disconnect, device number 99 [ 519.683602][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 519.729706][ T5894] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 519.740276][ T10] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 519.753508][ T6584] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 519.781272][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.801207][ T6584] cp210x 5-1:0.0: device disconnected [ 519.836917][ T10] usb 2-1: Product: syz [ 519.841391][ T9] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 519.863376][ T10] usb 2-1: Manufacturer: syz [ 519.870604][ T10] usb 2-1: SerialNumber: syz [ 519.880641][ T10] usb 2-1: config 0 descriptor?? [ 519.893458][ T10] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 519.931734][ T5894] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 519.941774][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.954846][ T5894] usb 3-1: config 0 descriptor?? [ 519.962749][ T5894] cp210x 3-1:0.0: cp210x converter detected [ 520.026040][ T9] usb 4-1: config 0 has no interfaces? [ 520.041782][ T9] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 520.051714][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.060160][ T9] usb 4-1: Product: syz [ 520.064633][ T9] usb 4-1: Manufacturer: syz [ 520.069337][ T9] usb 4-1: SerialNumber: syz [ 520.082651][ T9] usb 4-1: config 0 descriptor?? [ 520.129775][ T919] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 520.347399][ T919] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 520.360027][ T919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.391053][ T919] usb 1-1: config 0 descriptor?? [ 520.400721][ T919] cp210x 1-1:0.0: cp210x converter detected [ 520.441302][ T30] audit: type=1400 audit(1744460786.888:120): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=9447 comm="syz.3.955" [ 520.770644][ T10] gspca_sonixj: reg_r err -32 [ 520.775520][ T10] sonixj 2-1:0.0: probe with driver sonixj failed with error -32 [ 521.496664][ T9467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.959'. [ 521.513619][ T9467] netlink: 40 bytes leftover after parsing attributes in process `syz.4.959'. [ 522.509701][ T48] usb 4-1: USB disconnect, device number 98 [ 522.608935][ T10] usb 2-1: USB disconnect, device number 98 [ 522.880752][ T48] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 523.019990][ T5894] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 523.044629][ T48] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 523.045164][ T5894] cp210x 3-1:0.0: querying part number failed [ 523.075857][ T5894] usb 3-1: cp210x converter now attached to ttyUSB0 [ 523.106407][ T48] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 60463, setting to 1024 [ 523.106729][ T5894] usb 3-1: USB disconnect, device number 94 [ 523.167303][ T5894] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 523.184359][ T48] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 523.216245][ T919] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 523.224469][ T919] cp210x 1-1:0.0: querying part number failed [ 523.236615][ T5894] cp210x 3-1:0.0: device disconnected [ 523.249962][ T919] usb 1-1: cp210x converter now attached to ttyUSB0 [ 523.274647][ T48] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 523.296847][ T919] usb 1-1: USB disconnect, device number 88 [ 523.302395][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.324819][ T919] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 523.337717][ T9475] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 523.369235][ T48] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 523.456385][ T919] cp210x 1-1:0.0: device disconnected [ 523.568058][ T48] usb 4-1: USB disconnect, device number 99 [ 523.771557][ T6262] udevd[6262]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 524.029766][ T48] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 524.037471][ T5900] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 524.195748][ T5894] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 524.255198][ T5900] usb 5-1: Using ep0 maxpacket: 8 [ 524.263393][ T48] usb 3-1: Using ep0 maxpacket: 16 [ 524.273633][ T5900] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 524.298330][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.308353][ T5900] usb 5-1: Product: syz [ 524.315917][ T5900] usb 5-1: Manufacturer: syz [ 524.321821][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.332788][ T5900] usb 5-1: SerialNumber: syz [ 524.339093][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.353837][ T5900] usb 5-1: config 0 descriptor?? [ 524.361708][ T48] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 524.362972][ T5894] usb 2-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice= 3.90 [ 524.377485][ T5900] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 524.411657][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.433456][ T48] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 524.443093][ T5894] usb 2-1: config 0 descriptor?? [ 524.468800][ T5894] bfusb 2-1:0.0: probe with driver bfusb failed with error -5 [ 524.488929][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.509754][ T48] usb 3-1: config 0 descriptor?? [ 524.686750][ T9497] bridge0: entered promiscuous mode [ 524.692162][ T919] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 524.701263][ T9497] batadv0: entered promiscuous mode [ 524.891124][ T919] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 524.907975][ T919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.924077][ T919] usb 4-1: config 0 descriptor?? [ 524.945159][ T919] cp210x 4-1:0.0: cp210x converter detected [ 525.093036][ T9500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.105876][ T9500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.285071][ T5894] usb 2-1: USB disconnect, device number 99 [ 526.159750][ T5894] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 526.461914][ T5894] usb 1-1: Using ep0 maxpacket: 8 [ 526.478066][ T5894] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 526.493818][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.502544][ T5894] usb 1-1: Product: syz [ 526.506970][ T5894] usb 1-1: Manufacturer: syz [ 526.512030][ T5894] usb 1-1: SerialNumber: syz [ 526.539192][ T5894] usb 1-1: config 0 descriptor?? [ 526.566981][ T5894] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 526.879825][ T48] usbhid 3-1:0.0: can't add hid device: -71 [ 526.942975][ T48] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 527.038792][ T48] usb 3-1: USB disconnect, device number 95 [ 527.359916][ T48] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 527.375121][ T5894] gspca_sonixj: reg_r err -32 [ 527.380821][ T5894] sonixj 1-1:0.0: probe with driver sonixj failed with error -32 [ 527.559718][ T5900] gspca_sonixj: i2c_w8 err -71 [ 527.600967][ T5900] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 527.621707][ T919] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 527.628802][ T5900] usb 5-1: USB disconnect, device number 100 [ 527.629648][ T919] cp210x 4-1:0.0: querying part number failed [ 527.693946][ T919] usb 4-1: cp210x converter now attached to ttyUSB0 [ 527.718953][ T48] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 527.735059][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.742156][ T919] usb 4-1: USB disconnect, device number 100 [ 527.755070][ T48] usb 3-1: config 0 descriptor?? [ 527.766348][ T919] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 527.776914][ T919] cp210x 4-1:0.0: device disconnected [ 527.780235][ T48] cp210x 3-1:0.0: cp210x converter detected [ 528.090652][ T919] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 528.511514][ T919] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 528.522803][ T919] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 528.535255][ T919] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 528.549345][ T919] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 528.561852][ T919] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 528.575875][ T919] usb 4-1: config 0 interface 0 has no altsetting 0 [ 528.587555][ T919] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 528.597776][ T919] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 528.617678][ T919] usb 4-1: Product: syz [ 528.622223][ T5894] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 528.632171][ T919] usb 4-1: Manufacturer: syz [ 528.637667][ T919] usb 4-1: SerialNumber: syz [ 528.646944][ T919] usb 4-1: config 0 descriptor?? [ 528.654032][ T9529] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 528.733327][ T919] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 528.747263][ T919] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 528.798109][ T5894] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 528.812547][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.824248][ T5894] usb 5-1: Product: syz [ 528.828464][ T5894] usb 5-1: Manufacturer: syz [ 528.839503][ T5894] usb 5-1: SerialNumber: syz [ 528.916868][ T919] usb 1-1: USB disconnect, device number 89 [ 528.925354][ T5894] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 528.971820][ T9] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 529.194653][ T9542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.257540][ T9542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.377435][ T9550] netlink: 64 bytes leftover after parsing attributes in process `syz.1.982'. [ 529.387871][ T9550] netlink: 60 bytes leftover after parsing attributes in process `syz.1.982'. [ 529.535604][ T9550] unsupported nlmsg_type 40 [ 529.605171][ T9550] netlink: 57 bytes leftover after parsing attributes in process `syz.1.982'. [ 529.615795][ T9550] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.623194][ T9550] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.045467][ T48] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 530.189888][ T48] cp210x 3-1:0.0: querying part number failed [ 530.228046][ T48] usb 3-1: cp210x converter now attached to ttyUSB0 [ 530.303132][ T48] usb 3-1: USB disconnect, device number 96 [ 530.354930][ T9552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.385534][ T48] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 530.420385][ T9] usb 5-1: Service connection timeout for: 256 [ 530.448152][ T48] cp210x 3-1:0.0: device disconnected [ 530.464045][ T9] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 530.466520][ T9552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.617498][ T9] ath9k_htc: Failed to initialize the device [ 530.696874][ T9] usb 5-1: ath9k_htc: USB layer deinitialized [ 530.789456][ T5894] usb 4-1: USB disconnect, device number 101 [ 530.799755][ T5894] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 530.965265][ T9] usb 5-1: USB disconnect, device number 101 [ 530.969757][ T48] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 531.121643][ T48] usb 2-1: Using ep0 maxpacket: 16 [ 531.128378][ T48] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 531.145865][ T48] usb 2-1: config 0 has no interface number 0 [ 531.157134][ T48] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 531.173665][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.183897][ T48] usb 2-1: Product: syz [ 531.188669][ T48] usb 2-1: Manufacturer: syz [ 531.196960][ T48] usb 2-1: SerialNumber: syz [ 531.206950][ T48] usb 2-1: config 0 descriptor?? [ 531.309895][ T5894] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 531.390756][ T919] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 531.431725][ T9560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.443369][ T9560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.471481][ T48] usb 2-1: selecting invalid altsetting 1 [ 531.477290][ T48] speedtch 2-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 531.482516][ T5894] usb 1-1: Using ep0 maxpacket: 8 [ 531.501445][ T5894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 531.504898][ T48] speedtch 2-1:0.1: usbatm_usb_probe: bind failed: -22! [ 531.618299][ T5894] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 531.630241][ T919] usb 4-1: Using ep0 maxpacket: 16 [ 531.651056][ T919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 531.679715][ T48] speedtch 2-1:0.1: probe with driver speedtch failed with error -22 [ 531.681205][ T919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 531.698037][ T5894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 531.724159][ T5894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 531.740973][ T919] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 531.764431][ T5894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 531.769963][ T48] usb 2-1: USB disconnect, device number 100 [ 531.807403][ T919] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 531.830794][ T5894] usb 1-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f [ 531.991280][ T919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.007888][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.021871][ T919] usb 4-1: config 0 descriptor?? [ 532.027575][ T5894] usb 1-1: Product: syz [ 532.034489][ T5894] usb 1-1: Manufacturer: syz [ 532.054448][ T5894] usb 1-1: SerialNumber: syz [ 532.386748][ T5894] usb 1-1: config 0 descriptor?? [ 532.587937][ T5894] usb 1-1: can't set config #0, error -71 [ 532.682596][ T5894] usb 1-1: USB disconnect, device number 90 [ 532.959682][ T10] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 533.109860][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 533.121988][ T10] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 533.131276][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.144282][ T10] usb 2-1: Product: syz [ 533.152374][ T10] usb 2-1: Manufacturer: syz [ 533.160275][ T10] usb 2-1: SerialNumber: syz [ 533.173685][ T10] usb 2-1: config 0 descriptor?? [ 533.293468][ T10] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 533.562394][ T9589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.993'. [ 533.620158][ T5894] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 533.628762][ T10] gspca_sonixj: reg_r err -32 [ 533.640714][ T10] sonixj 2-1:0.0: probe with driver sonixj failed with error -32 [ 533.780280][ T5894] usb 3-1: Using ep0 maxpacket: 8 [ 533.797765][ T5894] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 533.807283][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.818165][ T5894] usb 3-1: Product: syz [ 533.823035][ T5894] usb 3-1: Manufacturer: syz [ 533.829928][ T5894] usb 3-1: SerialNumber: syz [ 533.850963][ T9] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 533.865717][ T5894] usb 3-1: config 0 descriptor?? [ 533.894394][ T5894] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 533.904126][ T9593] warn_alloc: 1 callbacks suppressed [ 533.904146][ T9593] syz.0.994: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 533.924954][ T9593] CPU: 1 UID: 0 PID: 9593 Comm: syz.0.994 Not tainted 6.15.0-rc1-syzkaller-00301-g3bde70a2c827 #0 PREEMPT(full) [ 533.924982][ T9593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 533.924995][ T9593] Call Trace: [ 533.925013][ T9593] [ 533.925022][ T9593] dump_stack_lvl+0x241/0x360 [ 533.925059][ T9593] ? __pfx_dump_stack_lvl+0x10/0x10 [ 533.925088][ T9593] ? __pfx__printk+0x10/0x10 [ 533.925114][ T9593] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 533.925153][ T9593] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 533.925173][ T9593] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 533.925205][ T9593] warn_alloc+0x27c/0x410 [ 533.925226][ T9593] ? is_mmconf_reserved+0x3a1/0x3f0 [ 533.925248][ T9593] ? __vmalloc_node_range_noprof+0x108/0x1390 [ 533.925268][ T9593] ? __pfx_warn_alloc+0x10/0x10 [ 533.925288][ T9593] ? kasan_save_track+0x3f/0x80 [ 533.925303][ T9593] ? __kasan_kmalloc+0x9d/0xb0 [ 533.925320][ T9593] ? xsk_setsockopt+0x449/0x840 [ 533.925332][ T9593] ? do_sock_setsockopt+0x3b1/0x710 [ 533.925353][ T9593] ? __ia32_sys_setsockopt+0x1f2/0x280 [ 533.925372][ T9593] ? __do_fast_syscall_32+0xb4/0x110 [ 533.925396][ T9593] ? do_fast_syscall_32+0x34/0x80 [ 533.925418][ T9593] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 533.925447][ T9593] __vmalloc_node_range_noprof+0x128/0x1390 [ 533.925481][ T9593] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 533.925507][ T9593] ? __kasan_kmalloc+0x9d/0xb0 [ 533.925536][ T9593] vmalloc_user_noprof+0x74/0x80 [ 533.925554][ T9593] ? xskq_create+0xb6/0x170 [ 533.925573][ T9593] xskq_create+0xb6/0x170 [ 533.925594][ T9593] xsk_init_queue+0xa1/0x100 [ 533.925611][ T9593] xsk_setsockopt+0x449/0x840 [ 533.925627][ T9593] ? __pfx_xsk_setsockopt+0x10/0x10 [ 533.925641][ T9593] ? __lock_acquire+0xad5/0xd80 [ 533.925664][ T9593] ? __pfx_aa_sk_perm+0x10/0x10 [ 533.925690][ T9593] ? __lock_acquire+0xad5/0xd80 [ 533.925710][ T9593] ? aa_sock_opt_perm+0x79/0x120 [ 533.925741][ T9593] ? __pfx_xsk_setsockopt+0x10/0x10 [ 533.925755][ T9593] do_sock_setsockopt+0x3b1/0x710 [ 533.925773][ T9593] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 533.925788][ T9593] ? __fget_files+0x2a/0x420 [ 533.925810][ T9593] ? __fget_files+0x39d/0x420 [ 533.925828][ T9593] ? __fget_files+0x2a/0x420 [ 533.925854][ T9593] __ia32_sys_setsockopt+0x1f2/0x280 [ 533.925879][ T9593] __do_fast_syscall_32+0xb4/0x110 [ 533.925901][ T9593] ? exc_page_fault+0x5f8/0x920 [ 533.925921][ T9593] do_fast_syscall_32+0x34/0x80 [ 533.925939][ T9593] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 533.925969][ T9593] RIP: 0023:0xf745d579 [ 533.925988][ T9593] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 533.926010][ T9593] RSP: 002b:00000000f50e655c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 533.926030][ T9593] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000011b [ 533.926044][ T9593] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000052 [ 533.926054][ T9593] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 533.926062][ T9593] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 533.926071][ T9593] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 533.926091][ T9593] [ 533.927083][ T9593] Mem-Info: [ 533.989712][ T9] usb 5-1: device descriptor read/64, error -71 [ 534.003806][ T9593] active_anon:6075 inactive_anon:0 isolated_anon:0 [ 534.003806][ T9593] active_file:11582 inactive_file:38500 isolated_file:0 [ 534.003806][ T9593] unevictable:7711 dirty:204 writeback:0 [ 534.003806][ T9593] slab_reclaimable:9768 slab_unreclaimable:99125 [ 534.003806][ T9593] mapped:31153 shmem:1413 pagetables:971 [ 534.003806][ T9593] sec_pagetables:0 bounce:0 [ 534.003806][ T9593] kernel_misc_reclaimable:0 [ 534.003806][ T9593] free:1318200 free_pcp:335 free_cma:0 [ 534.320367][ T9593] Node 0 active_anon:24300kB inactive_anon:0kB active_file:46328kB inactive_file:153884kB unevictable:29308kB isolated(anon):0kB isolated(file):0kB mapped:124572kB dirty:816kB writeback:0kB shmem:4116kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10920kB pagetables:3884kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 534.353865][ C0] vkms_vblank_simulate: vblank timer overrun [ 534.367674][ T9593] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:116kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:40kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 534.399076][ C0] vkms_vblank_simulate: vblank timer overrun [ 534.406246][ T919] usbhid 4-1:0.0: can't add hid device: -71 [ 534.412415][ T919] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 534.446608][ T919] usb 4-1: USB disconnect, device number 102 [ 534.452863][ T9593] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 534.460237][ T5900] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 534.487265][ C0] vkms_vblank_simulate: vblank timer overrun [ 534.532100][ T9593] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 534.538062][ T9593] Node 0 DMA32 free:1352100kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:22464kB inactive_anon:0kB active_file:46328kB inactive_file:153784kB unevictable:29308kB writepending:816kB present:3129332kB managed:2547232kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:292kB free_cma:0kB [ 534.569970][ T9] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 534.587860][ T9593] lowmem_reserve[]: 0 0 0 0 0 [ 534.600116][ T9593] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 534.626756][ C0] vkms_vblank_simulate: vblank timer overrun [ 534.633627][ T9593] lowmem_reserve[]: 0 0 0 0 0 [ 534.638410][ T9593] Node 1 Normal free:3905704kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:116kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 534.672032][ T9593] lowmem_reserve[]: 0 0 0 0 0 [ 534.676903][ T9593] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 534.692754][ T9593] Node 0 DMA32: 282*4kB (UM) 501*8kB (ME) 355*16kB (ME) 246*32kB (UME) 177*64kB (UME) 136*128kB (UME) 82*256kB (UME) 35*512kB (UM) 11*1024kB (UME) 9*2048kB (UME) 302*4096kB (UM) = 1353024kB [ 534.712206][ T9593] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 534.725313][ T9593] Node 1 Normal: 262*4kB (U) 70*8kB (UME) 40*16kB (UE) 221*32kB (UE) 107*64kB (UME) 33*128kB (UME) 15*256kB (UME) 7*512kB (UM) 3*1024kB (UM) 2*2048kB (UM) 945*4096kB (ME) = 3905704kB [ 534.729842][ T9] usb 5-1: device descriptor read/64, error -71 [ 534.748801][ T9593] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 534.767306][ T9593] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 534.777517][ T9593] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 534.792725][ T9593] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 534.805750][ T9593] 58440 total pagecache pages [ 534.810832][ T9593] 0 pages in swap cache [ 534.815044][ T9593] Free swap = 124996kB [ 534.819421][ T9593] Total swap = 124996kB [ 534.826401][ T9593] 2097051 pages RAM [ 534.830690][ T9593] 0 pages HighMem/MovableOnly [ 534.835434][ T9593] 428585 pages reserved [ 534.843773][ T9593] 0 pages cma reserved [ 534.865338][ T5900] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 534.876666][ T5900] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 60463, setting to 1024 [ 534.879973][ T9] usb usb5-port1: attempt power cycle [ 534.898283][ T5900] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 534.918747][ T5900] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 534.925185][ T5894] gspca_sonixj: reg_r err -32 [ 534.931468][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.935393][ T5894] sonixj 3-1:0.0: probe with driver sonixj failed with error -32 [ 534.965171][ T9595] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 534.977591][ T5900] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 535.239700][ T9] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 535.270329][ T9] usb 5-1: device descriptor read/8, error -71 [ 535.286236][ T5894] usb 1-1: USB disconnect, device number 91 [ 535.520016][ T9] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 535.552418][ T9] usb 5-1: device descriptor read/8, error -71 [ 535.753823][ T9] usb usb5-port1: unable to enumerate USB device [ 535.773985][ T48] usb 2-1: USB disconnect, device number 101 [ 536.435038][ T9] usb 3-1: USB disconnect, device number 97 [ 536.649917][ T48] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 536.901763][ T48] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 537.028017][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.058517][ T48] usb 4-1: config 0 descriptor?? [ 537.066139][ T48] cp210x 4-1:0.0: cp210x converter detected [ 537.445336][ T9637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1004'. [ 538.029845][ T5845] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 538.187957][ T5898] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 538.222492][ T5845] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 538.234056][ T5845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.249820][ T9] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 538.251016][ T5845] usb 5-1: config 0 descriptor?? [ 538.278159][ T5845] cp210x 5-1:0.0: cp210x converter detected [ 538.369718][ T5898] usb 2-1: Using ep0 maxpacket: 8 [ 538.381805][ T5898] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 538.391057][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.399150][ T5898] usb 2-1: Product: syz [ 538.403493][ T5898] usb 2-1: Manufacturer: syz [ 538.408244][ T5898] usb 2-1: SerialNumber: syz [ 538.409842][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 538.425229][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 538.435810][ T5898] usb 2-1: config 0 descriptor?? [ 538.441204][ T9] usb 1-1: config 0 has no interface number 0 [ 538.475512][ T5898] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 538.501277][ T9] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 538.510551][ T6584] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 538.522517][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.544355][ T9] usb 1-1: Product: syz [ 538.552612][ T9] usb 1-1: Manufacturer: syz [ 538.563213][ T9] usb 1-1: SerialNumber: syz [ 538.583935][ T9] usb 1-1: config 0 descriptor?? [ 538.673446][ T6584] usb 3-1: Using ep0 maxpacket: 8 [ 538.698938][ T6584] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 538.709107][ T6584] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.719942][ T6584] usb 3-1: Product: syz [ 538.724167][ T6584] usb 3-1: Manufacturer: syz [ 538.756654][ T6584] usb 3-1: SerialNumber: syz [ 538.880523][ T9] usb 1-1: selecting invalid altsetting 1 [ 538.886939][ T5898] gspca_sonixj: reg_r err -32 [ 538.891826][ T5898] sonixj 2-1:0.0: probe with driver sonixj failed with error -32 [ 538.899707][ T9] speedtch 1-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 539.000857][ T9] speedtch 1-1:0.1: usbatm_usb_probe: bind failed: -22! [ 539.008733][ T9] speedtch 1-1:0.1: probe with driver speedtch failed with error -22 [ 539.021785][ T6584] usb 3-1: config 0 descriptor?? [ 539.029537][ T9] usb 1-1: USB disconnect, device number 92 [ 539.039007][ T6584] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 539.909486][ T6584] gspca_sonixj: reg_r err -32 [ 539.914439][ T6584] sonixj 3-1:0.0: probe with driver sonixj failed with error -32 [ 539.940596][ T48] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 539.954818][ T48] cp210x 4-1:0.0: querying part number failed [ 539.984419][ T48] usb 4-1: cp210x converter now attached to ttyUSB0 [ 540.014432][ T48] usb 4-1: USB disconnect, device number 103 [ 540.064317][ T48] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 540.075133][ T48] cp210x 4-1:0.0: device disconnected [ 540.577419][ T9670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1014'. [ 540.599684][ T6584] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 540.621484][ T9670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1014'. [ 540.647648][ T9670] FAULT_INJECTION: forcing a failure. [ 540.647648][ T9670] name failslab, interval 1, probability 0, space 0, times 0 [ 540.660411][ T9670] CPU: 0 UID: 0 PID: 9670 Comm: syz.0.1014 Not tainted 6.15.0-rc1-syzkaller-00301-g3bde70a2c827 #0 PREEMPT(full) [ 540.660442][ T9670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 540.660456][ T9670] Call Trace: [ 540.660466][ T9670] [ 540.660476][ T9670] dump_stack_lvl+0x241/0x360 [ 540.660516][ T9670] ? __pfx_dump_stack_lvl+0x10/0x10 [ 540.660550][ T9670] ? __pfx__printk+0x10/0x10 [ 540.660579][ T9670] ? do_raw_spin_unlock+0x13c/0x8b0 [ 540.660617][ T9670] should_fail_ex+0x424/0x570 [ 540.660644][ T9670] should_failslab+0xac/0x100 [ 540.660677][ T9670] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 540.660708][ T9670] ? __alloc_skb+0x1c2/0x480 [ 540.660733][ T9670] __alloc_skb+0x1c2/0x480 [ 540.660753][ T9670] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 540.660779][ T9670] ? __pfx___alloc_skb+0x10/0x10 [ 540.660797][ T9670] ? enqueue_timer+0x221/0x570 [ 540.660830][ T9670] xfrm_send_policy_notify+0x292/0x1a70 [ 540.660870][ T9670] ? __lock_acquire+0xad5/0xd80 [ 540.660897][ T9670] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 540.660941][ T9670] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 540.660972][ T9670] km_policy_notify+0x126/0x210 [ 540.660999][ T9670] ? km_policy_notify+0x2e/0x210 [ 540.661031][ T9670] xfrm_add_policy+0x550/0x930 [ 540.661068][ T9670] ? __pfx_xfrm_add_policy+0x10/0x10 [ 540.661108][ T9670] ? __nla_parse+0x40/0x60 [ 540.661140][ T9670] xfrm_user_rcv_msg+0x9c3/0xca0 [ 540.661177][ T9670] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 540.661247][ T9670] ? __mutex_trylock_common+0x184/0x2e0 [ 540.661283][ T9670] ? __pfx___mutex_trylock_common+0x10/0x10 [ 540.661325][ T9670] netlink_rcv_skb+0x208/0x480 [ 540.661359][ T9670] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 540.661402][ T9670] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 540.661455][ T9670] ? netlink_deliver_tap+0x2e/0x1b0 [ 540.661491][ T9670] xfrm_netlink_rcv+0x79/0x90 [ 540.661520][ T9670] netlink_unicast+0x7f8/0x9a0 [ 540.661557][ T9670] ? __pfx_netlink_unicast+0x10/0x10 [ 540.661587][ T9670] ? skb_put+0x114/0x1f0 [ 540.661612][ T9670] netlink_sendmsg+0x8c3/0xcd0 [ 540.661657][ T9670] ? __pfx_netlink_sendmsg+0x10/0x10 [ 540.661692][ T9670] ? __import_iovec+0x585/0x830 [ 540.661722][ T9670] ? aa_sock_msg_perm+0x91/0x160 [ 540.661758][ T9670] ? __pfx_netlink_sendmsg+0x10/0x10 [ 540.661786][ T9670] __sock_sendmsg+0x221/0x270 [ 540.661820][ T9670] ____sys_sendmsg+0x523/0x860 [ 540.661860][ T9670] ? __pfx_____sys_sendmsg+0x10/0x10 [ 540.661902][ T9670] __sys_sendmsg+0x271/0x360 [ 540.661931][ T9670] ? __pfx___sys_sendmsg+0x10/0x10 [ 540.662010][ T9670] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 540.662037][ T9670] ? lockdep_hardirqs_on+0x9d/0x150 [ 540.662066][ T9670] __do_fast_syscall_32+0xb4/0x110 [ 540.662093][ T9670] ? exc_page_fault+0x5f8/0x920 [ 540.662124][ T9670] do_fast_syscall_32+0x34/0x80 [ 540.662151][ T9670] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 540.662207][ T9670] RIP: 0023:0xf745d579 [ 540.662226][ T9670] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 540.662243][ T9670] RSP: 002b:00000000f50e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 540.662264][ T9670] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000180 [ 540.662279][ T9670] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 540.662292][ T9670] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 540.662305][ T9670] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 540.662318][ T9670] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 540.662349][ T9670] [ 541.091123][ T919] usb 2-1: USB disconnect, device number 102 [ 541.119672][ T6584] usb 4-1: Using ep0 maxpacket: 8 [ 541.126476][ T6584] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 541.138100][ T6584] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 541.149363][ T6584] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 541.163275][ T6584] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 541.172380][ T6584] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.180420][ T6584] usb 4-1: Product: syz [ 541.184614][ T6584] usb 4-1: Manufacturer: syz [ 541.189208][ T6584] usb 4-1: SerialNumber: syz [ 541.196406][ T6584] usb 4-1: config 0 descriptor?? [ 541.203448][ T9665] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 541.623225][ T919] usb 3-1: USB disconnect, device number 98 [ 541.683337][ T5845] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 541.703716][ T5845] cp210x 5-1:0.0: querying part number failed [ 541.740098][ T6584] rc_core: IR keymap rc-streamzap not found [ 541.748876][ T6584] Registered IR keymap rc-empty [ 541.750434][ T5845] usb 5-1: cp210x converter now attached to ttyUSB0 [ 541.795211][ T6584] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 541.828958][ T5845] usb 5-1: USB disconnect, device number 106 [ 541.868412][ T5845] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 541.870703][ T6584] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input42 [ 541.906138][ T5845] cp210x 5-1:0.0: device disconnected [ 541.937091][ T9685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1018'. [ 542.486535][ T9691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1020'. [ 542.503681][ T9693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1021'. [ 542.513282][ T6584] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 542.679777][ T6584] usb 3-1: Using ep0 maxpacket: 16 [ 542.702359][ T6584] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 542.723384][ T6584] usb 3-1: config 0 has no interface number 0 [ 542.768250][ T6584] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 542.787129][ T6584] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.798749][ T6584] usb 3-1: Product: syz [ 542.808319][ T6584] usb 3-1: Manufacturer: syz [ 542.818172][ T6584] usb 3-1: SerialNumber: syz [ 542.846457][ T6584] usb 3-1: config 0 descriptor?? [ 543.072878][ T9689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.092813][ T9689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.119851][ T5894] usb 2-1: new full-speed USB device number 103 using dummy_hcd [ 543.158852][ T6584] usb 3-1: selecting invalid altsetting 1 [ 543.173316][ T6584] speedtch 3-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 543.183129][ T6584] speedtch 3-1:0.1: usbatm_usb_probe: bind failed: -22! [ 543.197146][ T6584] speedtch 3-1:0.1: probe with driver speedtch failed with error -22 [ 543.262907][ T6584] usb 3-1: USB disconnect, device number 99 [ 543.272624][ T48] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 543.302679][ T5894] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 543.313042][ T5894] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 543.324835][ T919] usb 4-1: USB disconnect, device number 104 [ 543.344921][ T5894] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 543.369015][ T5894] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 543.392603][ T5894] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 543.408033][ T5894] usb 2-1: config 0 interface 0 has no altsetting 0 [ 543.420592][ T5894] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 543.433618][ T5894] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 543.442545][ T5894] usb 2-1: Product: syz [ 543.465006][ T5894] usb 2-1: Manufacturer: syz [ 543.470351][ T5894] usb 2-1: SerialNumber: syz [ 543.486705][ T5894] usb 2-1: config 0 descriptor?? [ 543.492165][ T48] usb 5-1: Using ep0 maxpacket: 8 [ 543.493901][ T9699] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 543.500801][ T48] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 543.516945][ T5894] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 543.521891][ T48] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 543.531559][ T5894] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 543.540321][ T48] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.570583][ T48] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 543.581966][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.615524][ T48] hub 5-1:1.0: bad descriptor, ignoring hub [ 543.627442][ T48] hub 5-1:1.0: probe with driver hub failed with error -5 [ 543.635655][ T48] cdc_wdm 5-1:1.0: skipping garbage [ 543.641335][ T48] cdc_wdm 5-1:1.0: skipping garbage [ 543.646626][ T48] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 543.719673][ T5845] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 543.869688][ T5845] usb 1-1: Using ep0 maxpacket: 8 [ 543.881565][ T5845] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 543.901661][ T5845] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 543.911304][ T5845] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.923192][ T5845] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 543.933199][ T5845] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.956307][ T5845] hub 1-1:1.0: bad descriptor, ignoring hub [ 543.969735][ T5845] hub 1-1:1.0: probe with driver hub failed with error -5 [ 543.980846][ T5845] cdc_wdm 1-1:1.0: skipping garbage [ 543.986194][ T5845] cdc_wdm 1-1:1.0: skipping garbage [ 544.000186][ T5845] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 544.029515][ T5898] usb 2-1: USB disconnect, device number 103 [ 544.045044][ T5898] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 544.092350][ T48] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 544.259927][ T48] usb 3-1: Using ep0 maxpacket: 8 [ 544.272950][ T48] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 544.289898][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.297909][ T48] usb 3-1: Product: syz [ 544.303151][ T48] usb 3-1: Manufacturer: syz [ 544.309378][ T48] usb 3-1: SerialNumber: syz [ 544.320576][ T48] usb 3-1: config 0 descriptor?? [ 544.328898][ T48] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 544.411918][ T5898] usb 5-1: USB disconnect, device number 107 [ 544.519866][ T919] usb 1-1: USB disconnect, device number 93 [ 544.639793][ T5894] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 544.736495][ T48] gspca_sonixj: reg_r err -32 [ 544.745477][ T48] sonixj 3-1:0.0: probe with driver sonixj failed with error -32 [ 544.811658][ T5894] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 544.825951][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.837643][ T5894] usb 4-1: config 0 descriptor?? [ 544.848473][ T5894] cp210x 4-1:0.0: cp210x converter detected [ 545.538061][ T9732] netlink: 'syz.1.1032': attribute type 16 has an invalid length. [ 545.560683][ T9732] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000055: 0000 [#1] SMP KASAN PTI [ 545.572612][ T9732] KASAN: null-ptr-deref in range [0x00000000000002a8-0x00000000000002af] [ 545.581057][ T9732] CPU: 0 UID: 0 PID: 9732 Comm: syz.1.1032 Not tainted 6.15.0-rc1-syzkaller-00301-g3bde70a2c827 #0 PREEMPT(full) [ 545.593066][ T9732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 545.603164][ T9732] RIP: 0010:rtnl_create_link+0x6af/0xea0 [ 545.608853][ T9732] Code: 24 20 42 80 3c 28 00 74 08 48 89 df e8 aa fe 3a f8 4c 89 64 24 28 bd a8 02 00 00 48 89 5c 24 08 48 03 2b 48 89 e8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 ef e8 82 fe 3a f8 45 31 e4 48 83 7d 00 [ 545.628499][ T9732] RSP: 0018:ffffc9000e9dee50 EFLAGS: 00010206 [ 545.634613][ T9732] RAX: 0000000000000055 RBX: ffff88802ab50008 RCX: 0000000000080000 [ 545.642648][ T9732] RDX: ffffc9000c251000 RSI: 000000000000251a RDI: 000000000000251b [ 545.650666][ T9732] RBP: 00000000000002a8 R08: ffffffff89f27da9 R09: 1ffff92001d3bdf6 [ 545.658670][ T9732] R10: dffffc0000000000 R11: fffff52001d3bdf7 R12: ffff88807da56080 [ 545.666680][ T9732] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88802ab50000 [ 545.674688][ T9732] FS: 0000000000000000(0000) GS:ffff888124f94000(0063) knlGS:00000000f50e6b40 [ 545.683649][ T9732] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 545.690267][ T9732] CR2: 000000000c2c4a91 CR3: 000000007c4e0000 CR4: 00000000003526f0 [ 545.698314][ T9732] Call Trace: [ 545.701625][ T9732] [ 545.704603][ T9732] rtnl_newlink_create+0x2f2/0xcb0 [ 545.709766][ T9732] ? __mutex_lock+0xbe3/0x10c0 [ 545.714594][ T9732] ? __mutex_lock+0x5f3/0x10c0 [ 545.719416][ T9732] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 545.725103][ T9732] ? __pfx___mutex_lock+0x10/0x10 [ 545.730182][ T9732] ? ns_capable+0x8a/0xf0 [ 545.734543][ T9732] rtnl_newlink+0x18b0/0x1fe0 [ 545.739276][ T9732] ? stack_depot_save_flags+0x44/0x940 [ 545.744792][ T9732] ? __pfx_rtnl_newlink+0x10/0x10 [ 545.749873][ T9732] ? __netlink_deliver_tap+0x561/0x7f0 [ 545.755376][ T9732] ? netlink_deliver_tap+0x19d/0x1b0 [ 545.760710][ T9732] ? netlink_unicast+0x7c6/0x9a0 [ 545.765703][ T9732] ? netlink_sendmsg+0x8c3/0xcd0 [ 545.770698][ T9732] ? __sock_sendmsg+0x221/0x270 [ 545.775599][ T9732] ? ____sys_sendmsg+0x523/0x860 [ 545.780581][ T9732] ? __sys_sendmsg+0x271/0x360 [ 545.785392][ T9732] ? __do_fast_syscall_32+0xb4/0x110 [ 545.790725][ T9732] ? do_fast_syscall_32+0x34/0x80 [ 545.795793][ T9732] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 545.802362][ T9732] ? kasan_quarantine_put+0xdc/0x230 [ 545.807699][ T9732] ? lockdep_hardirqs_on+0x9d/0x150 [ 545.812952][ T9732] ? nlmon_xmit+0xaf/0x100 [ 545.817435][ T9732] ? __local_bh_enable_ip+0x168/0x200 [ 545.822947][ T9732] ? lockdep_hardirqs_on+0x9d/0x150 [ 545.828194][ T9732] ? aa_get_newest_label+0x101/0x6f0 [ 545.833545][ T9732] ? __lock_acquire+0xad5/0xd80 [ 545.838458][ T9732] ? __pfx_rtnl_newlink+0x10/0x10 [ 545.843548][ T9732] rtnetlink_rcv_msg+0x80f/0xd70 [ 545.848617][ T9732] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 545.853784][ T9732] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 545.859305][ T9732] ? ref_tracker_free+0x63e/0x7e0 [ 545.864399][ T9732] netlink_rcv_skb+0x208/0x480 [ 545.869233][ T9732] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 545.874736][ T9732] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 545.880057][ T9732] ? netlink_deliver_tap+0x2e/0x1b0 [ 545.885303][ T9732] ? netlink_deliver_tap+0x2e/0x1b0 [ 545.890555][ T9732] netlink_unicast+0x7f8/0x9a0 [ 545.895350][ T9732] ? __pfx_netlink_unicast+0x10/0x10 [ 545.900679][ T9732] ? skb_put+0x114/0x1f0 [ 545.904935][ T9732] netlink_sendmsg+0x8c3/0xcd0 [ 545.909722][ T9732] ? __pfx_netlink_sendmsg+0x10/0x10 [ 545.915024][ T9732] ? __import_iovec+0x585/0x830 [ 545.919880][ T9732] ? aa_sock_msg_perm+0x91/0x160 [ 545.924833][ T9732] ? __pfx_netlink_sendmsg+0x10/0x10 [ 545.930139][ T9732] __sock_sendmsg+0x221/0x270 [ 545.934838][ T9732] ____sys_sendmsg+0x523/0x860 [ 545.939627][ T9732] ? __pfx_____sys_sendmsg+0x10/0x10 [ 545.944936][ T9732] __sys_sendmsg+0x271/0x360 [ 545.949522][ T9732] ? __pfx_futex_wake+0x10/0x10 [ 545.954374][ T9732] ? __pfx___sys_sendmsg+0x10/0x10 [ 545.959499][ T9732] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 545.966099][ T9732] ? lockdep_hardirqs_on+0x9d/0x150 [ 545.971311][ T9732] __do_fast_syscall_32+0xb4/0x110 [ 545.976423][ T9732] ? exc_page_fault+0x5f8/0x920 [ 545.981287][ T9732] do_fast_syscall_32+0x34/0x80 [ 545.986142][ T9732] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 545.992472][ T9732] RIP: 0023:0xf745d579 [ 545.996535][ T9732] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 546.016140][ T9732] RSP: 002b:00000000f50e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 546.024564][ T9732] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000800000c0 [ 546.032539][ T9732] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 546.040501][ T9732] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 546.048467][ T9732] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 546.056451][ T9732] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 546.064426][ T9732] [ 546.067470][ T9732] Modules linked in: [ 546.072452][ T9732] ---[ end trace 0000000000000000 ]--- [ 546.101817][ T9732] RIP: 0010:rtnl_create_link+0x6af/0xea0 [ 546.122230][ T9732] Code: 24 20 42 80 3c 28 00 74 08 48 89 df e8 aa fe 3a f8 4c 89 64 24 28 bd a8 02 00 00 48 89 5c 24 08 48 03 2b 48 89 e8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 ef e8 82 fe 3a f8 45 31 e4 48 83 7d 00 [ 546.166067][ T9732] RSP: 0018:ffffc9000e9dee50 EFLAGS: 00010206 [ 546.182651][ T9732] RAX: 0000000000000055 RBX: ffff88802ab50008 RCX: 0000000000080000 [ 546.203502][ T9732] RDX: ffffc9000c251000 RSI: 000000000000251a RDI: 000000000000251b [ 546.219191][ T9732] RBP: 00000000000002a8 R08: ffffffff89f27da9 R09: 1ffff92001d3bdf6 [ 546.233420][ T9732] R10: dffffc0000000000 R11: fffff52001d3bdf7 R12: ffff88807da56080 [ 546.257039][ T9732] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88802ab50000 [ 546.268379][ T9732] FS: 0000000000000000(0000) GS:ffff888124f94000(0063) knlGS:00000000f50e6b40 [ 546.292740][ T9732] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 546.301198][ T9732] CR2: 0000000030c0affc CR3: 000000007c4e0000 CR4: 00000000003526f0 [ 546.327689][ T9732] Kernel panic - not syncing: Fatal exception [ 546.334157][ T9732] Kernel Offset: disabled [ 546.338485][ T9732] Rebooting in 86400 seconds..