last executing test programs: 12.969042038s ago: executing program 3 (id=447): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x54, 0x24, 0xd0f, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x9, 0xe, 0xfffffff0, 0x1, 0x1, 0x2}}, {0x4}}]}]}, 0x54}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, 0x0, 0x101100, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x59}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) close_range(r1, 0xffffffffffffffff, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = socket(0x10, 0x803, 0x0) r10 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) sendmsg$kcm(r9, &(0x7f0000000440)={&(0x7f00000004c0)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e21, @local}, 0x3, 0x2}}, 0x80, &(0x7f0000000100)=[{&(0x7f00000007c0)="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", 0x1000}], 0x1, &(0x7f00000017c0)=[{0x40, 0x10a, 0x4, "fd3af7daf0ede5fc6e68ee7b2d33ebb53bd386de3944de040b4951a7a1278e8443dd3d08e1348e2a5063c9d352442124"}, {0x110, 0x101, 0x9, "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"}, {0x20, 0x73a4eefc1a0b065c, 0x8, "c25c6d0c0cca2f4e2755bf"}, {0x10, 0x1, 0x7f}], 0x180}, 0x84) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r10, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) getpriority(0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc01000019000100000000000000000000000000000000000000ffff00000000ac1414bb00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1fc}}, 0x2000c044) ioctl$DRM_IOCTL_MODE_ATOMIC(r10, 0xc03864bc, &(0x7f0000000380)={0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$inet6(r0, &(0x7f0000000480)={&(0x7f00000001c0)={0xa, 0x0, 0xfffffffd, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=[@dontfrag={{0x0, 0x29, 0x3e, 0x1}}, @dontfrag={{0x14, 0x29, 0x3e, 0x809}}], 0x30}, 0x40080) 12.601874364s ago: executing program 3 (id=449): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000940)) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x2c, 0x0, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x7}, 0x0, 0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'cmac-aes-neon\x00'}, 0x58) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0xd, 0x0, 0x10, 0xfd, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11.096915317s ago: executing program 3 (id=453): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000002dc0)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, "488dc807"}, 0x1004, 0x2, {0x0}, 0x10000003}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x3) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x2e0e, 0x0, 0x0, 0xffffffffffffffa2) mkdirat(r2, 0x0, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000751000/0x2000)=nil}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r7, @ANYBLOB], 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001640)={&(0x7f0000000240)={0x13ec, 0x0, 0x24, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IE={0xdc, 0x2a, [@random={0x80, 0xc0, "b90a2bcb6afff0884ada91e38475f2ecde26589442ae22abae74d925507133e57c5fcdc84143055cc37aec7bae6bf8fd4bee1ca8164bb53711e170e865fbec1147b45cb42751bbb36beef0f304ded510958b6c43fe8f01c0ec08ebd949d9e5948bc9ec5f50d1cdf53a2c623e2490ea1bc4f04a2e3c05394449397da18aff26bde952ab56cf3b1151350854308fa8129b90b9a29ade624fa5794136f1fc79e6fbb98d51520f2124a2266bd8a1f16a5648de2d430ec61e27cde82b106b35453381"}, @cf={0x4, 0x6, {0x6, 0x6, 0x8001, 0x6}}, @peer_mgmt={0x75, 0x4, {0x1, 0x6, @void, @void, @void}}, @mesh_chsw={0x76, 0x6, {0x6, 0x8, 0x24, 0x5}}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x10001}, @NL80211_ATTR_SCAN_SUPP_RATES={0x12dc, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xf7, 0x1, "ff19e8ffeaa35b26bc482b687c33d3405baa5ae7f9723def16f842a8660e99e4cb22250bdbf228c0084f15031174248cd41702542dae055d1370cda374d44fee3cfe98966d9a36a51e7ddf12ecfd40e58209a39b6c834fcc60a225e200c716ac83d5acaf9c5aaddadd7f8c972c1f30faae3ff5aba089ec897ce2bdb51f2dde57b234301410f1856a136d6fc6145c685dc8fe9193b4cba3339cba4b5f9d391e67f127ce7d70726c789b59aec7a98eb766b7f636d91e15d20ea1ed8e43d9a7bf7afafc2a1c7a46d7dcfc5691fed198804e9c7bac814f478280aff49f3abf74b86f5cf20094442d711b2699531a5c8b7a4c18c360"}, @NL80211_BAND_2GHZ={0x3c, 0x0, "89511cc158bd8c60007a01bee28af160888a4841a93ab5edb2bc9ef50cae159097f8bbe88493d8838b546b8dce0fb7dc79bcb215fa64fd82"}, @NL80211_BAND_6GHZ={0xb, 0x3, "b9b5e6d2cebd1b"}, @NL80211_BAND_6GHZ={0x8e, 0x3, "9e073fe8e28863ba829b2de330ea214344e1745bf690b0c58e4cca0927c50e005fe76fca7bcb9b232defe3bfc2cf8ae3c07dca9540d86b9ddee17be521fffaa9168e79df8e5bb8cd4aaa9a22564135f00019dc5fb3ec520351de49c8ad9acc87cee02de2582ca467238e844ca4f66013c6aaf00e039b7f6cb1fb390e35f308870f2769029e490029d392"}, @NL80211_BAND_5GHZ={0x1004, 0x1, "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"}, @NL80211_BAND_2GHZ={0x67, 0x0, "28fbb4cd9d799d7c8b930eafc5cacb764aaebbc01bf86fae852f36a89bfc0b7c041e974f8a7140fb79b90b4cbcdde20234eca834ac8d19aa45798b1b1bc247badde666782595b96d9c498fb23ad0a380215d3a399e07156517e09a3aba3a17c8c84b01"}, @NL80211_BAND_2GHZ={0x44, 0x0, "e4f8ae59567894b859625ed3784402d8e1878a37ff84a11ddd54897df2b06bb826d63c77b03138569aa09b4cbd32fca8bb7faa65469dc3a728ecaee3895623e7"}, @NL80211_BAND_5GHZ={0x57, 0x1, "ea2ff18a67221353f83e6dbc702206442ce5ce4c67ee03544fc106d5dd42c89eecacf1ccca9d8026ca1778cdc6ba43e3a2eeeb97e055f8264fbde8f65e64c0744efc36709e05b7d103c5acfc098b4ee7bdd5ac"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x13ec}, 0x1, 0x0, 0x0, 0x5}, 0x4004000) dup(r5) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000080)='disBard', &(0x7f0000000200)='\x00', 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r4, 0xc0096616, &(0x7f0000000140)={0x4, [0x0, 0x0, 0x0, 0x0]}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 8.797093672s ago: executing program 3 (id=458): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000940), &(0x7f0000000700)='\x00', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r4, r4, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384\x00'}}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000000080)={0x0, @l2={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, @generic={0x5, "44754fb691a45892ca86c51f1cb7"}, @llc={0x1a, 0x50f, 0x8, 0x6, 0x47, 0x3, @remote}, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x3, 0x3}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_DIR={0x5, 0x3, 0x2}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_open_dev$dri(&(0x7f0000001340), 0x1, 0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = accept(0xffffffffffffffff, 0xfffffffffffffffd, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000001300)=0xfff, 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r8, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0xf47) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r8, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$P9_RREADLINK(r8, &(0x7f0000001280)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x31, 0x3, "91abc12404cf378042f26c43f91f68d8a90767c0bc71f60877974475de3d78ef670efff3f7311209fb8cc158fa"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xb0}}, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x0) 7.60701904s ago: executing program 2 (id=463): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001030000000904a800012d250c020905a102", @ANYRESHEX], 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="40000000100039042cbd7000eaffffff000003e4", @ANYRES32=r1, @ANYBLOB="830004000000000020001280080001007369740014000280050009002900000006000f0003e5"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_int(r2, 0x6, 0x24, &(0x7f0000000000)=0x5, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x8031, 0xffffffffffffffff, 0xee04c000) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f00000002c0)=0x18, 0x4) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x84000, 0x0) read$FUSE(r4, &(0x7f0000002d40)={0x2020}, 0xffffffffffffff37) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) syz_clone(0x40200400, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x5, 0x388, &(0x7f0000004f00)=ANY=[@ANYBLOB="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"], 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) sendmmsg(r4, &(0x7f00000001c0)=[{{&(0x7f0000000040)=@x25, 0x80, &(0x7f0000000400)=[{&(0x7f0000000300)="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", 0xfa}, {&(0x7f00000004c0)="eb97f468856dfbbcdaf557ae4cae3693c97e33e765c3e5eff40a37f06e1747f1b0326af1a921f8738690922f35b5b12de3bcb581c3b9ecf49761703abf4d18fe2892e5dad6a8c32fc37c0ad4e030d782f779c10946be61fafff556a1201f2173a6d1cab7656781be819bce9fb9ec0b08d196c213fa9dff3ef6a1a19791674db6a3a0bfa0fbd7ac6bfc89d66c29f4c34fc28a6373411256fbd6b34750d28733c29459ded84619ae2689534ac3479644747aa5dbe5d18b072d", 0xb8}, {&(0x7f0000000580)="792148c71717d10761476c3787b427a4e29380392d77c63c8c8b9ea4f3fbd67a098197d198d8bbe7e24c6475683f26eb7933254762c35cebea1fd709d821073b4ba3b35b5964182744eacbcc8534d955ffe992453b461c6016070d7e8e5188a49baa8881bff24a52421ac573fe4251c16644b2a84c319f4acdb292caab9b45b902916a6db7085caa60ed3b684b5ec9348a398e45235d34182f54551d69b7d6e61eeb6468cf62f28a5d67457b121e61dbb2219937dc73c8af77164f4d09e5ffa586aa6b08fe4661a68970988c56560165e37068cd729285d42f9888deef972f8cb74dfca887c8ca055a7c48df39abc8f2523eaee302b7659d", 0xf8}, {&(0x7f0000000180)="ba9e4a92a880317383cc936343e9e16766bd9828735bdb985270a7aa", 0x1c}, {&(0x7f0000000d00)="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", 0x1000}, {&(0x7f0000000240)="a217fb892ff8b3980a5f32ee4057c394602aeb35ef966378ec642629e6155b272f1e3438837a1ca6725baff5567eb23ea032eecfb93b88dde7ffa2520e0a50869ebcd1976cbbfdfbf8c0f0c1faf3", 0x4e}], 0x6, &(0x7f0000001d00)=[{0x1010, 0x84, 0xfffffff9, "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"}], 0x1010}}], 0x1, 0x4004080) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b80)=ANY=[@ANYBLOB="ec0000002100390d0000000000000000fe8000000000000000000000000000aae0000002000000000000000000000000000000000000fffc0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ff010000000000000000000000000001ffffffff000000000000000000000000ac1414aa000000000000000000000000ac141400000000800000000000000000000000000000000011000200ff010000000000000000000000000001"], 0xec}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000004ec0)={r4, 0xe0, &(0x7f0000004dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], 0x0, 0x56, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000c40), &(0x7f0000000c80), 0x8, 0x18, 0x8, 0x8, &(0x7f0000004d80)}}, 0x10) 7.231120752s ago: executing program 0 (id=465): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000940)) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x2c, 0x0, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x7}, 0x0, 0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'cmac-aes-neon\x00'}, 0x58) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0xd, 0x0, 0x10, 0xfd, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x4}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 6.47057164s ago: executing program 0 (id=467): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@bridge_dellink={0x24, 0x13, 0x5, 0x0, 0x25dfdbfd, {0x7, 0x0, 0x0, r2, 0x850}, [@IFLA_AF_SPEC={0x4}]}, 0x24}, 0x1, 0x300000000000000}, 0x0) 6.38775518s ago: executing program 0 (id=468): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000300)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r5, &(0x7f0000001400)=[{0x0, 0x3, 0x0, 0x0, @tick, {}, {0x8}, @connect={{0xfd, 0x4}, {0x2, 0x6}}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}], 0x38) read$snapshot(r5, 0x0, 0xffffffbf) read$snapshot(r5, &(0x7f0000000540)=""/150, 0x96) ioctl$BLKGETDISKSEQ(r5, 0x80081280, &(0x7f0000000340)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000040), 0x2, r3}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000380)={0x200, 0x1, &(0x7f0000000440)=[r3], &(0x7f0000000180)=[0x200007], &(0x7f0000000280)=[r6, r6], &(0x7f0000000040)=[0x0]}) r7 = socket$unix(0x1, 0x2, 0x0) connect$unix(r7, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f0000000480)) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x2, 0x0, &(0x7f0000000480)=0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) timer_settime(r9, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_delete(r9) r11 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000040)=0x9, 0x4) syz_usb_connect(0x6, 0x41, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000b766b6082b05111900010102030109022f0001960800000904f407f07679a505052406000105240006000d240f0190080000000007000706241a050011b8e098f7e1c777ca4b11a2e1c4f024d85adbaa5b9037bcd23bd1b7ec35bd86b4a5af9b16e5f47cd4c0f965055078bfc9d0a2d865366a8c6d60520d6b5c160b62904f07cc259e398936ad0fa0"], 0x0) 5.870927671s ago: executing program 2 (id=469): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="b7000000010003c3bfa30000000000000703000020feffff720af0fff8ffffff71a4f0ff0000000065040200000000ff2d400500000000003400000001ed00007b030000000000001d440000000000007a0a00fe00ffffffdb03000041000000b5000000000000009500000000000000023bc065b78111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e51815548000000000000000275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7f300c095199fe3ff3128e599b0eaebbdbd732c9cc00eec36574a8f6456e2ccae25ea21714eca8cf5d803e04d83b46e21557c0afc646cb7790b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2400000000000000800643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda8ebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987af1714e72ba7616536fd9aa58f2477184b6a89adaf17b0baf587aef370a2d426a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d64364c82770c8204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7d26b34381fcb59b854e9d5a17f4720082f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031ed3afa84c401f0ece6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d38df9ba60248d9a0d61282dfb15eb6841bb64a1b3045024a982f3c48153baae2c4e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c3560811ea6c3560a43364d402ccdd9069bd50b994fd6a34ee18022a579dfc0229cc0dc9881610270928eaeb883418f562ae00003ea96d10f172c0374d6eed826407000000000000004a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d851680f6f2f9a6a8906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f4ca2195234648e0a1ca50db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145eb6dc5f6a9037d2283c42efc54fa84323a3304f41ff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f928ba7554ba583fef3ec7932f5954f31a878e2fae6691df8b4b7ecd27ce82f7df3e7d1daac43738612e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e96735600000554f327a353511ccedde99493c31ac05a7b57f03ca91a01ba2c60ca99e8ebc15ecb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d40460780000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120968308c31db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd0000000069ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9e0600f86909bc90addb7b9aee813df534aac4b32fd691b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cdbef2662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a000000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca3f0a18ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa84feda91f3edb32231ec75300000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b88b5e7885e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db1829f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2744c46570e8f46da1ab990ca053cbfe801000000000000000000000000000000d55d7182af2ea5f8d0ad495e3eb9421963a5a683c3dcb2d300aa3b2cfe946d2348c35f5d67d68ac07c8f84b3679e77c2e629ecec7c12c35d6b6971b8ae13cc00956d2227db60c0a461ed2b3ecfb16d19037c8c88c91dda1f904fbbc864e95ad43d6dd6d5eadbcea25682ba4b91e14c3fbfdfd1d680aa1af102d97681656bf56ff0674237ce097d39008cc3257778de878bcd37467386f993be6d20c93a7791e7f2a155ce379b4cda2500108052aeb9bd03ff6d4c5dbda9ff485d6576a492d436d52edcd420e7deaa4343a0add3941ae7c5f58af43866ca64750f43e583ca1ceb3a805e46beef9dca77a4edcbb42aa0caf0bbd6cec72d85540293cb4849b0610800000000000000000000000000000000f9814d5f6c8673c143ff2f901e71b8818665b56f7a03afe3d900007656859db4cb06aaaf9f02cfab5b9e61cc00e8e19429921b8df4c4c53bddea4cc48737842952ff08aeac15685df194ca89da8cf6d29a2be9779181fd5d105af5786094d9130f5826b18b9667b971a994f3fd069629a1052f441e96884f90c91f4a974242aabfc8adbadc9ca27955b5c90f0bd9a46ed044272383d3768871a9c8cfd7948aea445c55684351002ed4a4af45341de8e5e1f33624bd2ec1591dd00bbe05000000f89a928662e9b9449db34394fc5e946fadaee576e28ac0feab4e3585ed43d206218f524083840a78b7236bb7f5e42b5376642f8ad4028d4ead407240e7467d1b37afe20690d7672c7e926fded95cf805516ad836eb730619a05af36fb28329d6feb33219cc9164461a8ba3afd5949b9a6046c53663df30a049414089c1ae8f3476236b05dde8dda4843a62c591f8d2b1a62d0db8dc826219bd87398b33e140792297d023ef52de2e75b9dbbfb8712ccc15c69cfb4c6c1bc2ae74621e536b9d3f09a15dada1561a8192d65cc59d7ed5a6bd61000000000000000000000000000000000000000000000000000000000000000000000000f637782e317d492b2392fd0ea81397a80227f271bad21d688af35a2bd02c15d20f3d62a50e20260642c25f304c8034a5f4d8e45e701dbd84294d1096e715662b8223e10e98c4c38451fc5c702084e3fa9b184e0d0fba44acf3ddfdb2043288fa6b67fa762c8b75d4478756ef240f2b314e4d77a3afb4fcec92248327004d1dac7ac87a6f8cb04d82acc307d60e4713bd9a8f29091d3048c669a5f5439e0a906ce098d177b9579882586511cfe6a23e57c44d1654899f077b5636e4181f3de6b814bedcac5290ad8018bbe4424edc6d9b0e61b404bb7a2d4883bbc200de8332029cbc04a0bc521718348071ec6288906347dcd62b75c72ce26424630ff7bb"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x1b, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xfffffffffffffee5, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x503, 0x70bd29, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x68315}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0xe}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x48}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)="5802009400140091d491323b473ac7050878b15418753629257f278925458db45602117fffefd7ff81000e226c1add024bf752e31ad096339c5e74a48d52a42b3ecbad9c50ff11025395f4", 0x4b}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r1]) userfaultfd(0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = io_uring_setup(0x1a8, &(0x7f0000000000)={0x0, 0xfca0, 0x2, 0x0, 0x274}) io_uring_register$IORING_REGISTER_RING_FDS(r5, 0x13, &(0x7f0000001bc0), 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) read$FUSE(r4, &(0x7f0000000940)={0x2020}, 0x2020) 5.672676078s ago: executing program 2 (id=471): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000220edf104c05c10687c2010203010902"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) recvmmsg(r5, &(0x7f0000006100), 0x49f, 0x0, 0x0) 5.402563209s ago: executing program 3 (id=474): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff25, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[], 0x1c0}, 0x1, 0x0, 0x0, 0x240080d4}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getdents64(0xffffffffffffffff, &(0x7f00000001c0)=""/23, 0x17) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000140)=0xfffffffb, 0x4) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x3f8, 0x2, 0x4070bd28}, 0x384}, 0x1, 0x0, 0x0, 0x40}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x2, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000500)) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000000c0)="48000000140081fb7059ae08060c040002ff0f03f1cd823010a7ce9000000000000ec000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a0200000046", 0x48}], 0x1}, 0x4000000) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r5 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r5]) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000080)={0x8, 0x1, 0x0, "9adf66552fb8af2b9f10f35681de96a590d25f2744e043cc1e70c317fd815cee", 0x3131354f}) syz_usb_connect$uac1(0x3, 0xd0, &(0x7f0000000540)=ANY=[], &(0x7f00000004c0)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x200, 0x7f, 0x1, 0x2, 0x40, 0xff}, 0x3b, &(0x7f0000000300)={0x5, 0xf, 0x3b, 0x6, [@generic={0x0, 0x10, 0xb, "587bccd8680f4ac8d23d8aa1103377f344c1c58fe80ac589bc4804627cd51c368872c648175b7452a75eb5fae00f8c175ba07d761f"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x1, 0xc, 0x9}, @ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x7fffffb, 0xf000, 0x1}, @ssp_cap={0x10, 0x10, 0xa, 0xb8, 0x1, 0x8, 0x1e00, 0x5, [0xf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x4, 0x0, 0x9}, @ptm_cap={0x3}]}, 0x1, [{0x1, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x42a}}]}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000060000000160a05ffeb00000000000000010000000900020073797a30000000000900010073797a300000000008000740000000032c00038008000240000000000800014000000000180003801400010073697430000000000000000000000000140000001000010000000000000000000000000a"], 0xa8}}, 0x0) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000040)={0x191, 0x140, 0xa0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa}) 3.591276886s ago: executing program 1 (id=477): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x0, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @multicast}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x14000047}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c0001800600060065580000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (fail_nth: 12) 2.665067332s ago: executing program 4 (id=478): syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000094037b40fd080200fdca010203010902120001000000000904"], 0x0) (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000001c0)={0x28, 0x5, r3, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) socket$packet(0x11, 0x2, 0x300) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x5) (async) r6 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1000003, 0x80032, 0xffffffffffffffff, 0x8000000) landlock_restrict_self(r6, 0x6) (async) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r7, 0x31, &(0x7f0000000ac0)={0x0, 0xc4, 0xff7ffffe}) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) (async) r9 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r9, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x3, {0x41}}, 0x10, 0x0}, 0x20000000) (async) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r4, r2, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r2}) 2.506418599s ago: executing program 0 (id=479): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0x0, 0x0, 0xff], [0x0, 0xff, 0xff000000], 'veth0_macvtap\x00', 'macvtap0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x3b, 0x0, 0x3}, 0x0, 0x258, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x400, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'pim6reg\x00', {0x5, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3, 0x8}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x14, 0x400, 0x3, 0x0, 'syz1\x00', 'syz1\x00', {0x10001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) syz_open_dev$vim2m(&(0x7f0000000080), 0xa, 0x2) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000010001fff0d00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c000014000280050009002900000008000100", @ANYRES32, @ANYBLOB="080004"], 0x4c}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x148, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x3502, 0x2}, [@offload={0xc, 0x1c, {r4}}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x148}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0c0100000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fc0000000000000000000000000000000c00028005000100000000003c0002800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa08000740000000007800068014000500fc0200000000000000000000000000010c000380060001000000000014000400fc0200000000000000000000000000002c0003"], 0x10c}}, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000500)={0x0, 0x80000001, 0xfffffa1e, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x9f0901, 0x7, '\x00', @value=0xffff8000}}) fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x1) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c) 2.500349708s ago: executing program 4 (id=480): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x29, 0x0, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00'}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r2) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0xf9fd, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="100a06000908010014001a80100004800c00068008"], 0x34}, 0x1, 0x0, 0x0, 0x200080d0}, 0x14) socket$can_j1939(0x1d, 0x2, 0x7) 2.472830434s ago: executing program 1 (id=481): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xfff5, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0xc, 0x3, "e35f2c3ccba5f58b"}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'pkttype\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}, 0x1, 0x0, 0x0, 0x801}, 0x0) 2.150390242s ago: executing program 1 (id=482): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000fc0)={0x0, 0x0, 0x200}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0xa, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0xd0f, 0x70ad26, 0x0, {0x60, 0x0, 0x0, r5, {}, {0x8, 0xa}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x80000004, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000240)=0x1) close_range(r1, 0xffffffffffffffff, 0x900) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) lseek(r6, 0x0, 0x2) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @private1, 0x9d}, 0x1c) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) fremovexattr(r7, &(0x7f0000000000)=@known='system.posix_acl_access\x00') r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r8, 0x84, 0xe, 0x0, &(0x7f0000000180)) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000b4321f00000000000a00630018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000100b706000014000600b703000000060000850000002f000000bf0900000000000006090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000001e40)=""/4096, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)="f7ac6def2fbc699706d9171f804f949887f79739efa217f1e2caf9f107b629ba9c75db3e95915603a4cadf3d3a0dff31aaeb2079166b6fa6316a07c2f9eb0fa1abeffcb1eb84d4d0a3ebe544f78f29e58feba44962d5807b6468424fc9d242c0106b784783d25285b82361357982ac4ed40022a43b595870be21e978207552818576dc4f3b30847549bee6c995e825c90172dd80826b8fcb78e949a2c75280b8696ed69c21c31f2cceb28d3727a42ba397d9ff3fec9aea117bd74fb92bf9c262d99d1a20688d41f6a1dc48407e75288a489bd89915bd0ddc556039cb8922b7b1", 0xe0, 0x0) 2.070117691s ago: executing program 4 (id=483): r0 = socket(0x2, 0x80805, 0x0) listen(r0, 0x1) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300005000000000084"], 0x30}], 0x1, 0x0) 2.046529361s ago: executing program 3 (id=484): unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) inotify_init() r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = epoll_create1(0x0) fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f00004d6000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f00001e2000/0x4000)=nil) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000240)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @multicast, @val={@void, {0x8100, 0x3, 0x0, 0x1}}, {@x25={0x805, {0x0, 0x8, 0xfb, "a2f1ff80114502115efa2edffe20909cab2da7c0ba8cc356fcdb59c3048b9ae94577115ca453482522b4556c46525a96e82073a9b6b5f9dba7f68e1ecd9b71d2615886c26b036bef2c5ce88ea55818abc98ace892033dfe821fa6263b648e2bd1fcc2e0f5a7088bd59ef54b91786f90f4626ddac800b260e2f6292f759b1c6d9"}}}}, &(0x7f00000000c0)={0x1, 0x1, [0xf74, 0x8bf, 0xe4b, 0xa20]}) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r3) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r1, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) fanotify_init(0x200, 0x40800) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@multiplanar_userptr={0x7, 0xa, 0x4, 0x0, 0xa, {}, {0x5, 0x8, 0xc1, 0x6b, 0x9, 0x2, 'pe3u'}, 0xffb, 0x2, {0x0}}) unshare(0xa020480) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.970628665s ago: executing program 0 (id=485): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001340)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd29, 0x8000, {0x0, 0x0, 0x0, r6, {0xfff3, 0x3}, {}, {0xa, 0xfff3}}}, 0x24}, 0x1, 0xfff2, 0x0, 0x22044028}, 0x0) 1.853584191s ago: executing program 1 (id=486): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000100)="aa484e243104000000f7c08bfcb8db0ea16957eabd8182904ba8c171e046bf9c6c70c4be22d311b2f9f445b7a4067a0689fff2a41c6630843d5edb070900", 0x3e}], 0x2) 1.699016811s ago: executing program 1 (id=487): ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) syz_emit_ethernet(0x77, &(0x7f0000000580)={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@val={0x88a8, 0x5, 0x0, 0x3}, {0x8100, 0x7, 0x1, 0x2}}, {@generic={0x201, "b882a6675ad4a6338cdb0f590db23024db9b1b4a67132fb03ae75bb0777cacf52bbeb17d6faa97daaae8e43cd4b8031821a372607be1f20a3772305dd169e8c9913ba38141d2fdd8f2e3eaf4ed7849f4bf83c0234cc77835556db1b682aa5fea1b"}}}, &(0x7f0000000000)={0x0, 0x3, [0xd80, 0x8fc, 0xaeb, 0x8a5]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000600)=ANY=[@ANYBLOB="010000000000000000040000010000000000000000000000020000001265000000000000000000000000000000000000000000000000000000dd28a8e975123d6bc9b5e41423ec45fa75f7dfabcc57882999dcb1e64e9350ab76c93ffa83"]) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r3, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300), 0x410000, 0x0) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r7 = accept4(r6, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f0000000380), &(0x7f0000000040)=0x8) connect$inet(r5, &(0x7f00000003c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) syz_emit_ethernet(0x6a, &(0x7f00000006c0)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x10, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xd, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x9a}, @empty, {[@lsrr={0x83, 0x17, 0x99, [@dev={0xac, 0x14, 0x14, 0x30}, @private=0xa010100, @private=0xa010102, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x3a}]}, @timestamp_prespec={0x44, 0x14, 0x82, 0x3, 0x1, [{@local, 0x2}, {@rand_addr=0x64010101, 0xc00000}]}]}}}}}}}, 0x0) 1.626370278s ago: executing program 0 (id=488): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff25, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[], 0x1c0}, 0x1, 0x0, 0x0, 0x240080d4}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getdents64(0xffffffffffffffff, &(0x7f00000001c0)=""/23, 0x17) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000140)=0xfffffffb, 0x4) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x2, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000500)) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000000c0)="48000000140081fb7059ae08060c040002ff0f03f1cd823010a7ce9000000000000ec000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a02000000", 0x47}], 0x1}, 0x4000000) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r5]) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x8, 0x1, 0x0, "9adf66552fb8af2b9f10f35681de96a590d25f2744e043cc1e70c317fd815cee", 0x3131354f}) syz_usb_connect$uac1(0x3, 0xd0, &(0x7f0000000540)=ANY=[], &(0x7f00000004c0)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x200, 0x7f, 0x1, 0x2, 0x40, 0xff}, 0x3b, &(0x7f0000000300)={0x5, 0xf, 0x3b, 0x6, [@generic={0x0, 0x10, 0xb, "587bccd8680f4ac8d23d8aa1103377f344c1c58fe80ac589bc4804627cd51c368872c648175b7452a75eb5fae00f8c175ba07d761f"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x1, 0xc, 0x9}, @ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x7fffffb, 0xf000, 0x1}, @ssp_cap={0x10, 0x10, 0xa, 0xb8, 0x1, 0x8, 0x1e00, 0x5, [0xf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x4, 0x0, 0x9}, @ptm_cap={0x3}]}, 0x1, [{0x1, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x42a}}]}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000060000000160a05ffeb00000000000000010000000900020073797a30000000000900010073797a300000000008000740000000032c00038008000240000000000800014000000000180003801400010073697430000000000000000000000000140000001000010000000000000000000000000a"], 0xa8}}, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000040)={0x191, 0x140, 0xa0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa}) 1.501740054s ago: executing program 2 (id=489): r0 = socket$nl_generic(0x11, 0x3, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000100)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x1, "80b07d73e4bf172c22db3523b45553a71b1bfa5dfb7ab577f6a3a44a3350931c", 0x3, 0x2, 0x9, 0x9}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@multicast2, @multicast2, 0x0, "a00349da3125700c8667f4c89c51829aa531b46bf4a7bb5aaa0fe73a5e46c452", 0xfffffffd, 0x0, 0x7fffffff, 0x9}, 0x3c) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000040)=0x1, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip_vs\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/139, 0x8b}], 0x1, 0x6, 0x8003) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f8035", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 1.443981005s ago: executing program 4 (id=490): r0 = syz_io_uring_setup(0x48be, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000000), &(0x7f0000001180)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x4000000, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) 1.058509962s ago: executing program 4 (id=491): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x3d1800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x983a, 0x2, 0x1003, 0xea}, &(0x7f0000000240), &(0x7f0000000540)) io_uring_enter(r4, 0x3058, 0xdf5e, 0x7, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r4, 0x12, 0x0, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, 0x0) (async) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) (async) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/bus/input/handlers\x00', 0x0, 0x0) (async) r7 = socket(0x2a, 0x5, 0xfffffffe) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket(0x10, 0x4, 0x7dcb) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) (async) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0x5820a61ca228651, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x3ff}}]}, 0x38}}, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000040)={0x9, r1, 0x80000}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) socket(0x1, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1a, 0x1, 0x3) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) 1.058178312s ago: executing program 2 (id=492): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000400)={0x6}, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc8800, 0x0) ioctl$TUNSETCARRIER(r7, 0x400454e2, &(0x7f0000000140)=0x1) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) pselect6(0x40, &(0x7f00000001c0)={0x9, 0x1, 0x9, 0x98, 0x9, 0x3, 0xfffffffffffff800, 0x4c3}, &(0x7f0000000200)={0x9, 0x6, 0x2, 0x816, 0x2, 0x7, 0x2, 0x6}, &(0x7f0000000280)={0x101, 0xe, 0xfffffffffffffff7, 0x1746, 0xddcb, 0x2, 0xb, 0xffffffffffffffff}, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000380)={&(0x7f0000000300)={[0x3]}, 0x8}) sendmsg$NL80211_CMD_GET_REG(r6, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="01fc25bd7000fedbdf251f0000000500920006000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8084) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x400000, 0x0) ioctl$SNDCTL_SEQ_RESET(r9, 0x5100) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00022dbd7000fbdbe02531000000060036000c0000000600360017000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044001) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r10, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4080000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x0, 0x9, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x100}}]}, 0x20}, 0x1, 0x0, 0x0, 0x2}, 0x20008094) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001300050000000000fddbdf2507000000", @ANYRES32=r2, @ANYBLOB="50030000000004138f2e0600000062fc4324e1a7000800290095440300"], 0x28}}, 0x0) 863.156851ms ago: executing program 2 (id=493): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) timer_create(0x2, &(0x7f0000000180)={0x0, 0x10, 0x4, @tid=0xffffffffffffffff}, &(0x7f00000001c0)=0x0) timer_settime(r1, 0x0, &(0x7f0000000200)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000440)) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x3b2, @time={0x65757100, 0x75653100}, 0x0, {0x3}, 0x0, 0x2}) r2 = syz_usb_connect(0x2, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x8000) sendmsg$netlink(r5, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x800) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x109e8, 0x805, 0x0, 0x6) recvmmsg(r3, &(0x7f0000005480)=[{{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f00000019c0)=""/240, 0xf0}, {&(0x7f0000001ac0)=""/154, 0x9a}, {&(0x7f0000001bc0)=""/177, 0xb1}], 0x3}, 0xb5}], 0x1, 0x10022, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000480), 0x0, 0x80000, 0x0, 0xffffffffffffffff}) accept$alg(r7, 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="1408007800fcdbdf251f04000000000000000000425ca73801461e80f1fdd9a2b6e589db0164fdb0c4a6eaefd2ac1e28"], 0x14}, 0x1, 0x0, 0x0, 0xc804}, 0x24001001) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) syz_usb_control_io$printer(r2, &(0x7f0000000140)={0x14, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00\f@\x00\x00\x00@\"'], 0x0}, 0x0) 141.184622ms ago: executing program 4 (id=494): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff25, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[], 0x1c0}, 0x1, 0x0, 0x0, 0x240080d4}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getdents64(0xffffffffffffffff, &(0x7f00000001c0)=""/23, 0x17) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000140)=0xfffffffb, 0x4) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x3f8, 0x2, 0x4070bd28}, 0x384}, 0x1, 0x0, 0x0, 0x40}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x2, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e09"], 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000500)) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000000c0)="48000000140081fb7059ae08060c040002ff0f03f1cd823010a7ce9000000000000ec000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a0200000046", 0x48}], 0x1}, 0x4000000) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r5 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r5]) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000080)={0x8, 0x1, 0x0, "9adf66552fb8af2b9f10f35681de96a590d25f2744e043cc1e70c317fd815cee", 0x3131354f}) syz_usb_connect$uac1(0x3, 0xd0, &(0x7f0000000540)=ANY=[], &(0x7f00000004c0)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x200, 0x7f, 0x1, 0x2, 0x40, 0xff}, 0x3b, &(0x7f0000000300)={0x5, 0xf, 0x3b, 0x6, [@generic={0x0, 0x10, 0xb, "587bccd8680f4ac8d23d8aa1103377f344c1c58fe80ac589bc4804627cd51c368872c648175b7452a75eb5fae00f8c175ba07d761f"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x1, 0xc, 0x9}, @ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x7fffffb, 0xf000, 0x1}, @ssp_cap={0x10, 0x10, 0xa, 0xb8, 0x1, 0x8, 0x1e00, 0x5, [0xf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x4, 0x0, 0x9}, @ptm_cap={0x3}]}, 0x1, [{0x1, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x42a}}]}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000060000000160a05ffeb00000000000000010000000900020073797a30000000000900010073797a300000000008000740000000032c00038008000240000000000800014000000000180003801400010073697430000000000000000000000000140000001000010000000000000000000000000a"], 0xa8}}, 0x0) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000040)={0x191, 0x140, 0xa0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa}) 0s ago: executing program 1 (id=495): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x1001}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r2, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r4, 0xc018aec0, &(0x7f0000000140)={0xae10906a41272cf9, 0x280, 0x100, 0x0}) socket(0x400000000010, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$packet(r5, &(0x7f0000000740)="565a92bd2ad96a4be42a5362d1118459ca318a12", 0x14, 0x2000c0c0, &(0x7f0000000000)={0x11, 0x6, 0x0, 0x1, 0x1, 0x6, @local}, 0x14) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) kernel console output (not intermixed with test programs): wMaxPacketSize 0 [ 126.460756][ T24] usb 1-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 126.526129][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 126.546694][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=c090, bcdDevice= 0.00 [ 126.566426][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.589200][ T24] usb 1-1: config 0 descriptor?? [ 127.102451][ T24] logitech-hidpp-device 0003:046D:C090.0001: unknown main item tag 0x0 [ 127.117668][ T24] logitech-hidpp-device 0003:046D:C090.0001: unknown main item tag 0x0 [ 127.168803][ T24] logitech-hidpp-device 0003:046D:C090.0001: unknown main item tag 0x0 [ 127.197977][ T24] logitech-hidpp-device 0003:046D:C090.0001: unknown main item tag 0x0 [ 127.256717][ T24] logitech-hidpp-device 0003:046D:C090.0001: unknown main item tag 0x0 [ 127.281150][ T24] logitech-hidpp-device 0003:046D:C090.0001: hidraw0: USB HID v0.00 Device [HID 046d:c090] on usb-dummy_hcd.0-1/input0 [ 127.375685][ T24] usb 1-1: USB disconnect, device number 11 [ 127.379339][ T5825] usb 5-1: USB disconnect, device number 4 [ 128.218438][ T6374] fido_id[6374]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 128.488923][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 128.678814][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 128.691822][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.715493][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.742353][ T24] usb 5-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 128.755369][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.770501][ T24] usb 5-1: config 0 descriptor?? [ 128.795949][ T92] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 128.969234][ T92] usb 1-1: Using ep0 maxpacket: 32 [ 128.977274][ T92] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 128.987044][ T92] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 128.998380][ T92] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 129.010057][ T92] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 129.078738][ T5978] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 129.176834][ T92] usb 1-1: config 0 interface 0 has no altsetting 0 [ 129.216901][ T92] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 129.237234][ T92] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 129.247050][ T92] usb 1-1: Product: syz [ 129.253700][ T92] usb 1-1: Manufacturer: syz [ 129.261808][ T92] usb 1-1: SerialNumber: syz [ 129.277978][ T92] usb 1-1: config 0 descriptor?? [ 129.294700][ T92] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 129.316457][ T92] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 129.324982][ T5978] usb 4-1: Using ep0 maxpacket: 16 [ 129.342814][ T5978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.364641][ T5978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.405973][ T5978] usb 4-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 129.441090][ T5978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.465354][ T5978] usb 4-1: config 0 descriptor?? [ 130.458715][ T5922] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 130.596231][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 130.607091][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 130.622945][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.665406][ T24] usb 5-1: USB disconnect, device number 5 [ 130.702342][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.747600][ T5922] usb 2-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 130.805633][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.852996][ T5922] usb 2-1: config 0 descriptor?? [ 130.886636][ T6406] loop6: detected capacity change from 0 to 524287999 [ 131.148505][ T6410] fuse: Unknown parameter 'group_id00000000000000000000' [ 131.314056][ T5922] uclogic 0003:5543:0042.0002: No inputs registered, leaving [ 131.337968][ T5922] uclogic 0003:5543:0042.0002: hidraw0: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.1-1/input0 [ 131.486545][ T5925] usb 2-1: USB disconnect, device number 5 [ 131.674507][ T5978] usbhid 4-1:0.0: can't add hid device: -71 [ 131.733607][ T5978] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 131.838922][ T5922] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 131.864755][ T5978] usb 4-1: USB disconnect, device number 4 [ 131.979295][ T24] usb 1-1: USB disconnect, device number 12 [ 132.069617][ T24] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 132.368976][ T5922] usb 3-1: config 0 has no interfaces? [ 132.441290][ T5922] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 132.504556][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.539451][ T5922] usb 3-1: Product: syz [ 132.543668][ T5922] usb 3-1: Manufacturer: syz [ 132.575930][ T5922] usb 3-1: SerialNumber: syz [ 132.657751][ T5922] usb 3-1: config 0 descriptor?? [ 132.698722][ T5925] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 132.880666][ T5925] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 132.963498][ T6417] program syz.2.110 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.972735][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.975203][ T6417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.002717][ T5925] usb 4-1: config 0 descriptor?? [ 133.092821][ T5925] gspca_main: spca508-2.14.0 probing 8086:0110 [ 133.102013][ T6417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.124164][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.132273][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.288525][ T5925] gspca_spca508: reg_read err -32 [ 133.398912][ T5978] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 133.538878][ T5978] usb 1-1: device descriptor read/64, error -71 [ 133.545878][ T5925] gspca_spca508: reg_read err -32 [ 133.568860][ T5925] gspca_spca508: reg_read err -32 [ 133.588781][ T5825] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 133.748855][ T5825] usb 5-1: Using ep0 maxpacket: 8 [ 133.763232][ T5825] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 133.772817][ T5825] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 133.787100][ T5825] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 133.804262][ T5825] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 133.822157][ T5978] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 133.824455][ T5825] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 133.842666][ T5825] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 133.858296][ T5825] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 133.871399][ T5825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.968723][ T5978] usb 1-1: device descriptor read/64, error -71 [ 134.092111][ T5925] gspca_spca508: reg write: error -110 [ 134.097723][ T5925] spca508 4-1:0.0: probe with driver spca508 failed with error -110 [ 134.112076][ T5978] usb usb1-port1: attempt power cycle [ 134.116259][ T5825] usb 5-1: GET_CAPABILITIES returned 0 [ 134.124948][ T5825] usbtmc 5-1:16.0: can't read capabilities [ 134.167596][ T6448] fuse: Unknown parameter 'group_id00000000000000000000' [ 134.355399][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 134.369945][ T6446] usbtmc 5-1:16.0: Unable to send data, error -71 [ 134.403422][ T6446] loop3: detected capacity change from 0 to 1 [ 134.412556][ T6446] Dev loop3: unable to read RDB block 1 [ 134.418272][ T6446] loop3: unable to read partition table [ 134.436062][ T6446] loop3: partition table beyond EOD, truncated [ 134.488786][ T6446] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 134.512068][ T5978] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 134.555313][ T5978] usb 1-1: device descriptor read/8, error -71 [ 134.583140][ T24] usb 3-1: USB disconnect, device number 5 [ 134.798756][ T5978] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 134.939462][ T5978] usb 1-1: device descriptor read/8, error -71 [ 135.048939][ T5925] usb 5-1: USB disconnect, device number 6 [ 135.070574][ T5978] usb usb1-port1: unable to enumerate USB device [ 135.138858][ T5825] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 135.421403][ T6432] syz.3.115 (6432) used greatest stack depth: 19416 bytes left [ 135.453835][ T5825] usb 3-1: config 0 has no interfaces? [ 135.469183][ T5825] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 135.501874][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.502099][ T5978] usb 4-1: USB disconnect, device number 5 [ 135.896947][ T5825] usb 3-1: Product: syz [ 135.901387][ T5825] usb 3-1: Manufacturer: syz [ 135.906104][ T5825] usb 3-1: SerialNumber: syz [ 136.039265][ T5825] usb 3-1: config 0 descriptor?? [ 136.408329][ T6475] loop6: detected capacity change from 0 to 524287999 [ 136.576796][ T6479] batman_adv: batadv0: Adding interface: dummy0 [ 136.583341][ T6479] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.641806][ T6479] batman_adv: batadv0: Interface activated: dummy0 [ 136.763306][ T6479] batadv0: mtu less than device minimum [ 136.780496][ T6479] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 136.791924][ T6479] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 136.803240][ T6479] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 136.814755][ T6479] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 136.826167][ T6479] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 136.837543][ T6479] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 136.848909][ T6479] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 136.860181][ T6479] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 136.871534][ T6479] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 136.958938][ T5917] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 137.108761][ T5917] usb 1-1: Using ep0 maxpacket: 32 [ 137.116518][ T5917] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 137.127972][ T5917] usb 1-1: can't read configurations, error -61 [ 137.330948][ T5917] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 137.679016][ T5917] usb 1-1: Using ep0 maxpacket: 32 [ 137.689524][ T5917] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 137.697130][ T5917] usb 1-1: can't read configurations, error -61 [ 137.712566][ T5917] usb usb1-port1: attempt power cycle [ 137.800132][ T5978] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 137.950111][ T5825] usb 3-1: USB disconnect, device number 6 [ 137.981214][ T5978] usb 4-1: Using ep0 maxpacket: 8 [ 138.007216][ T5978] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 138.037815][ T5978] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 138.049657][ T5925] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 138.088798][ T5917] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 138.089025][ T5978] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 138.130440][ T5978] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 138.154704][ T5978] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 138.157179][ T6492] fuse: Unknown parameter 'group_id00000000000000000000' [ 138.177950][ T5917] usb 1-1: Using ep0 maxpacket: 32 [ 138.204180][ T5978] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.220577][ T5925] usb 2-1: Using ep0 maxpacket: 16 [ 138.242572][ T5925] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 138.254511][ T5925] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 138.279090][ T5917] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 138.297046][ T5925] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 138.298659][ T5917] usb 1-1: can't read configurations, error -61 [ 138.319978][ T5978] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 138.347196][ T5978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.358543][ T5925] usb 2-1: config 1 interface 0 has no altsetting 0 [ 138.411144][ T5925] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 138.428198][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.471207][ T5917] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 138.481844][ T5925] usb 2-1: Product: syz [ 138.486149][ T5925] usb 2-1: Manufacturer: syz [ 138.503904][ T5925] usb 2-1: SerialNumber: syz [ 138.532758][ T5917] usb 1-1: Using ep0 maxpacket: 32 [ 138.559925][ T5917] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 138.568768][ T5917] usb 1-1: can't read configurations, error -61 [ 138.588740][ T5917] usb usb1-port1: unable to enumerate USB device [ 138.688297][ T5978] usb 4-1: GET_CAPABILITIES returned 0 [ 138.694018][ T5978] usbtmc 4-1:16.0: can't read capabilities [ 138.765131][ T5925] usblp 2-1:1.0: usblp1: USB Unidirectional printer dev 6 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 138.835012][ T6499] netlink: 148 bytes leftover after parsing attributes in process `syz.2.132'. [ 138.894146][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 138.908474][ T6487] usbtmc 4-1:16.0: Unable to send data, error -71 [ 138.990086][ T6487] loop3: detected capacity change from 0 to 1 [ 139.027583][ T10] usb 2-1: USB disconnect, device number 6 [ 139.043252][ T6487] Dev loop3: unable to read RDB block 1 [ 139.044081][ T10] usblp1: removed [ 139.049088][ T6487] loop3: unable to read partition table [ 139.049307][ T6487] loop3: partition table beyond EOD, truncated [ 139.099636][ T6487] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 139.210156][ T5978] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 139.375928][ T5978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 139.387535][ T5978] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 256 [ 139.401877][ T5978] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 139.412151][ T5978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.484183][ T5978] usb 3-1: config 0 descriptor?? [ 139.499224][ T6499] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 139.669553][ T24] usb 4-1: USB disconnect, device number 6 [ 139.723352][ T5978] ath6kl: Failed to submit usb control message: -71 [ 139.755522][ T5978] ath6kl: unable to send the bmi data to the device: -71 [ 139.807723][ T5978] ath6kl: Unable to send get target info: -71 [ 139.859324][ T5978] ath6kl: Failed to init ath6kl core: -71 [ 139.897155][ T5978] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 139.955405][ T5978] usb 3-1: USB disconnect, device number 7 [ 140.068846][ T5917] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 140.233610][ T5917] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 140.247566][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.292511][ T5917] usb 5-1: config 0 descriptor?? [ 140.296468][ T6516] batadv1: entered promiscuous mode [ 140.314500][ T5917] gspca_main: spca508-2.14.0 probing 8086:0110 [ 140.356995][ T6517] netlink: 'syz.0.137': attribute type 5 has an invalid length. [ 140.508153][ T5917] gspca_spca508: reg_read err -32 [ 140.767437][ T5917] gspca_spca508: reg_read err -32 [ 140.777884][ T5917] gspca_spca508: reg_read err -32 [ 140.825767][ T6526] loop6: detected capacity change from 0 to 524287999 [ 140.922791][ T6530] fuse: Bad value for 'user_id' [ 140.932840][ T6530] fuse: Bad value for 'user_id' [ 141.169965][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 141.299153][ T5917] gspca_spca508: reg write: error -110 [ 141.304836][ T5917] spca508 5-1:0.0: probe with driver spca508 failed with error -110 [ 141.391645][ T6537] batman_adv: batadv0: Interface deactivated: dummy0 [ 141.398516][ T6537] batman_adv: batadv0: Removing interface: dummy0 [ 141.473961][ T10] usb 3-1: device descriptor read/64, error -71 [ 141.768844][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 141.898750][ T10] usb 3-1: device descriptor read/64, error -71 [ 141.959199][ T5917] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 142.011259][ T10] usb usb3-port1: attempt power cycle [ 142.119776][ T5917] usb 1-1: Using ep0 maxpacket: 8 [ 142.138282][ T5917] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 142.165381][ T5917] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 142.188974][ T5917] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 142.204842][ T5917] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 142.225123][ T5917] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 142.237494][ T5917] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 142.252938][ T5917] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 142.263918][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.318912][ T92] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 142.348690][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 142.369494][ T10] usb 3-1: device descriptor read/8, error -71 [ 142.468657][ T92] usb 4-1: Using ep0 maxpacket: 16 [ 142.478500][ T92] usb 4-1: config 0 has no interfaces? [ 142.492509][ T5917] usb 1-1: GET_CAPABILITIES returned 0 [ 142.499086][ T5917] usbtmc 1-1:16.0: can't read capabilities [ 142.511911][ T92] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 142.521448][ T92] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.565383][ T92] usb 4-1: Product: syz [ 142.573168][ T92] usb 4-1: Manufacturer: syz [ 142.579839][ T92] usb 4-1: SerialNumber: syz [ 142.597982][ T92] usb 4-1: config 0 descriptor?? [ 142.629472][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 142.660570][ T10] usb 3-1: device descriptor read/8, error -71 [ 142.703070][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 142.714383][ T6546] usbtmc 1-1:16.0: Unable to send data, error -71 [ 142.742323][ T6546] loop3: detected capacity change from 0 to 1 [ 142.752923][ T6126] Dev loop3: unable to read RDB block 1 [ 142.761126][ T6126] loop3: unable to read partition table [ 142.786384][ T10] usb usb3-port1: unable to enumerate USB device [ 142.788934][ T6126] loop3: partition table beyond EOD, truncated [ 142.803037][ T6546] Dev loop3: unable to read RDB block 1 [ 142.837096][ T6546] loop3: unable to read partition table [ 142.854052][ T92] usb 5-1: USB disconnect, device number 7 [ 142.905266][ T6546] loop3: partition table beyond EOD, truncated [ 142.944373][ T6546] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 143.003261][ T6555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.071930][ T6555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.379820][ T10] IPVS: starting estimator thread 0... [ 143.469017][ T6560] IPVS: using max 27 ests per chain, 64800 per kthread [ 143.574095][ T92] usb 1-1: USB disconnect, device number 21 [ 143.656957][ T6562] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 143.664686][ T6562] IPv6: NLM_F_CREATE should be set when creating new route [ 143.754702][ T6566] lo: entered allmulticast mode [ 143.801622][ T6566] tunl0: entered allmulticast mode [ 143.834654][ T6566] gre0: entered allmulticast mode [ 143.931477][ T6570] fuse: Bad value for 'user_id' [ 143.936531][ T6570] fuse: Bad value for 'user_id' [ 143.980434][ T6566] gretap0: entered allmulticast mode [ 144.044540][ T6566] erspan0: entered allmulticast mode [ 144.086646][ T6566] ip_vti0: entered allmulticast mode [ 144.134124][ T6566] ip6_vti0: entered allmulticast mode [ 144.170622][ T6566] sit0: entered allmulticast mode [ 144.209814][ T6566] ip6tnl0: entered allmulticast mode [ 144.230890][ T6566] ip6gre0: entered allmulticast mode [ 144.253830][ T6566] syz_tun: entered allmulticast mode [ 144.401270][ T6566] ip6gretap0: entered allmulticast mode [ 144.509485][ T6566] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.517660][ T6566] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.544835][ T6566] bridge0: entered allmulticast mode [ 144.600621][ T6566] vcan0: entered allmulticast mode [ 144.647327][ T6566] bond0: entered allmulticast mode [ 144.688212][ T6566] bond_slave_0: entered allmulticast mode [ 144.742151][ T6566] bond_slave_1: entered allmulticast mode [ 144.808433][ T6566] team0: entered allmulticast mode [ 144.831430][ T6566] team_slave_0: entered allmulticast mode [ 144.848776][ T6566] team_slave_1: entered allmulticast mode [ 144.869996][ T6566] batman_adv: batadv0: Interface deactivated: dummy0 [ 144.895061][ T6566] dummy0: entered allmulticast mode [ 144.933893][ T6566] nlmon0: entered allmulticast mode [ 144.951666][ T6583] loop6: detected capacity change from 0 to 524287999 [ 144.980597][ T6566] caif0: entered allmulticast mode [ 145.004780][ T6566] batadv0: entered allmulticast mode [ 145.078824][ T6566] vxcan0: entered allmulticast mode [ 145.125176][ T6566] vxcan1: entered allmulticast mode [ 145.143096][ T6566] veth0: entered allmulticast mode [ 145.182304][ T5825] usb 4-1: USB disconnect, device number 7 [ 145.193430][ T6566] veth1: entered allmulticast mode [ 145.240033][ T6566] wg0: entered allmulticast mode [ 145.253367][ T6566] wg1: entered allmulticast mode [ 145.267677][ T6585] netlink: 104 bytes leftover after parsing attributes in process `syz.3.157'. [ 145.316408][ T6566] wg2: entered allmulticast mode [ 145.337313][ T6566] veth0_to_bridge: entered allmulticast mode [ 145.391761][ T6566] veth1_to_bridge: entered allmulticast mode [ 145.436783][ T6566] veth0_to_bond: entered allmulticast mode [ 145.457287][ T6566] veth1_to_bond: entered allmulticast mode [ 145.477295][ T6566] veth0_to_team: entered allmulticast mode [ 145.521841][ T6566] veth1_to_team: entered allmulticast mode [ 145.544619][ T6566] veth0_to_batadv: entered allmulticast mode [ 145.569192][ T6566] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.580309][ T6566] batadv_slave_0: entered allmulticast mode [ 145.620014][ T6566] veth1_to_batadv: entered allmulticast mode [ 145.641430][ T6566] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.659542][ T6566] batadv_slave_1: entered allmulticast mode [ 145.668359][ T6566] xfrm0: entered allmulticast mode [ 145.710484][ T6566] veth0_to_hsr: entered allmulticast mode [ 145.755525][ T6566] hsr_slave_0: entered allmulticast mode [ 145.764723][ T6566] veth1_to_hsr: entered allmulticast mode [ 145.776629][ T6566] hsr_slave_1: entered allmulticast mode [ 145.788356][ T6566] hsr0: entered allmulticast mode [ 145.797972][ T6566] veth1_virt_wifi: entered allmulticast mode [ 145.816561][ T6566] veth0_virt_wifi: entered allmulticast mode [ 145.827035][ T6566] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 145.835811][ T6566] veth1_vlan: entered allmulticast mode [ 145.870893][ T6566] veth0_vlan: entered allmulticast mode [ 145.932357][ T6566] vlan0: entered allmulticast mode [ 145.937725][ T6566] vlan1: entered allmulticast mode [ 145.961249][ T6566] macvlan0: entered allmulticast mode [ 145.987635][ T6566] macvlan1: entered allmulticast mode [ 146.007208][ T6566] ipvlan0: entered allmulticast mode [ 146.028986][ T6566] ipvlan1: entered allmulticast mode [ 146.035031][ T6566] veth1_macvtap: entered allmulticast mode [ 146.067271][ T6566] veth0_macvtap: entered allmulticast mode [ 146.102923][ T6566] macvtap0: entered allmulticast mode [ 146.113514][ T6566] macsec0: entered allmulticast mode [ 146.125973][ T6566] geneve0: entered allmulticast mode [ 146.158706][ T6566] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.167644][ T6566] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.198814][ T6566] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.209289][ T6588] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 146.218842][ T6566] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.233247][ T6566] geneve1: entered allmulticast mode [ 146.262432][ T6566] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 146.284990][ T6566] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 146.305110][ T6566] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 146.319458][ T6566] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 146.330603][ T6566] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 146.337886][ T6566] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 146.352595][ T6566] syzkaller1: entered allmulticast mode [ 146.382594][ T6588] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 146.402288][ T6588] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.434328][ T6588] usb 2-1: config 0 descriptor?? [ 146.460791][ T6588] gspca_main: spca508-2.14.0 probing 8086:0110 [ 146.664011][ T6588] gspca_spca508: reg_read err -32 [ 146.946576][ T6588] gspca_spca508: reg_read err -32 [ 146.964919][ T6588] gspca_spca508: reg_read err -32 [ 147.018713][ T10] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 147.038798][ T6595] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 147.057484][ T6625] netlink: 148 bytes leftover after parsing attributes in process `syz.4.167'. [ 147.179663][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 147.184923][ T6595] usb 3-1: device descriptor read/64, error -71 [ 147.193376][ T10] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 147.205312][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 147.217374][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 147.233160][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 147.244677][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 147.256026][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 147.271610][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 147.281588][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.338726][ T6600] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 147.428924][ T6595] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 147.480194][ T6588] gspca_spca508: reg write: error -110 [ 147.485810][ T6588] spca508 2-1:0.0: probe with driver spca508 failed with error -110 [ 147.496970][ T6600] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 147.510406][ T10] usb 1-1: GET_CAPABILITIES returned 0 [ 147.516012][ T6600] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 256 [ 147.526114][ T10] usbtmc 1-1:16.0: can't read capabilities [ 147.533992][ T6600] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 147.543357][ T6600] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.562204][ T6600] usb 5-1: config 0 descriptor?? [ 147.571606][ T6625] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 147.579125][ T6595] usb 3-1: device descriptor read/64, error -71 [ 147.699239][ T6595] usb usb3-port1: attempt power cycle [ 147.723368][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 147.736329][ T6613] usbtmc 1-1:16.0: Unable to send data, error -71 [ 147.749647][ T6613] loop3: detected capacity change from 0 to 1 [ 147.764062][ T6613] Dev loop3: unable to read RDB block 1 [ 147.771116][ T6613] loop3: unable to read partition table [ 147.777097][ T6613] loop3: partition table beyond EOD, truncated [ 147.784215][ T6613] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 147.809653][ T6600] ath6kl: Failed to submit usb control message: -71 [ 147.816373][ T6600] ath6kl: unable to send the bmi data to the device: -71 [ 147.825652][ T6600] ath6kl: Unable to send get target info: -71 [ 147.832791][ T6600] ath6kl: Failed to init ath6kl core: -71 [ 147.841360][ T6600] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 147.864166][ T6633] loop6: detected capacity change from 0 to 524287999 [ 147.879123][ T6600] usb 5-1: USB disconnect, device number 8 [ 148.048811][ T6595] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 148.079335][ T6595] usb 3-1: device descriptor read/8, error -71 [ 148.322041][ T6588] usb 1-1: USB disconnect, device number 22 [ 148.335186][ T6595] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 148.371243][ T6595] usb 3-1: device descriptor read/8, error -71 [ 148.499127][ T6595] usb usb3-port1: unable to enumerate USB device [ 148.607383][ T6638] netem: incorrect ge model size [ 148.628168][ T6638] netem: change failed [ 148.677440][ T6642] FAULT_INJECTION: forcing a failure. [ 148.677440][ T6642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.725535][ T6642] CPU: 0 UID: 0 PID: 6642 Comm: syz.4.172 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 148.725565][ T6642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 148.725577][ T6642] Call Trace: [ 148.725586][ T6642] [ 148.725596][ T6642] dump_stack_lvl+0x189/0x250 [ 148.725634][ T6642] ? __pfx____ratelimit+0x10/0x10 [ 148.725664][ T6642] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.725705][ T6642] ? __pfx__printk+0x10/0x10 [ 148.725725][ T6642] ? __might_fault+0xb0/0x130 [ 148.725753][ T6642] should_fail_ex+0x414/0x560 [ 148.725781][ T6642] _copy_from_user+0x2d/0xb0 [ 148.725800][ T6642] ___sys_sendmsg+0x158/0x2a0 [ 148.725825][ T6642] ? __pfx____sys_sendmsg+0x10/0x10 [ 148.725881][ T6642] ? __fget_files+0x2a/0x420 [ 148.725901][ T6642] ? __fget_files+0x3a0/0x420 [ 148.725931][ T6642] __x64_sys_sendmsg+0x19b/0x260 [ 148.725983][ T6642] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 148.726017][ T6642] ? __pfx_ksys_write+0x10/0x10 [ 148.726032][ T6642] ? rcu_is_watching+0x15/0xb0 [ 148.726067][ T6642] ? do_syscall_64+0xbe/0x3b0 [ 148.726089][ T6642] do_syscall_64+0xfa/0x3b0 [ 148.726104][ T6642] ? lockdep_hardirqs_on+0x9c/0x150 [ 148.726131][ T6642] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.726150][ T6642] ? clear_bhb_loop+0x60/0xb0 [ 148.726172][ T6642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.726191][ T6642] RIP: 0033:0x7f4c0f58e929 [ 148.726208][ T6642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.726225][ T6642] RSP: 002b:00007f4c10459038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.726245][ T6642] RAX: ffffffffffffffda RBX: 00007f4c0f7b5fa0 RCX: 00007f4c0f58e929 [ 148.726259][ T6642] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000003 [ 148.726271][ T6642] RBP: 00007f4c10459090 R08: 0000000000000000 R09: 0000000000000000 [ 148.726283][ T6642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.726294][ T6642] R13: 0000000000000000 R14: 00007f4c0f7b5fa0 R15: 00007f4c0f8dfa28 [ 148.726324][ T6642] [ 149.093714][ T6588] usb 2-1: USB disconnect, device number 7 [ 149.319298][ T6653] syzkaller1: left allmulticast mode [ 149.824186][ T6667] fuse: Bad value for 'fd' [ 149.993503][ T6673] loop6: detected capacity change from 0 to 524287999 [ 150.663065][ T6680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.184'. [ 151.828858][ T6573] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 151.981264][ T6573] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 152.000984][ T6573] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.034852][ T6573] usb 4-1: config 0 descriptor?? [ 152.066304][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.187'. [ 152.112954][ T6573] gspca_main: spca508-2.14.0 probing 8086:0110 [ 152.310921][ T6573] gspca_spca508: reg_read err -32 [ 152.584485][ T6573] gspca_spca508: reg_read err -32 [ 152.734188][ T6573] gspca_spca508: reg_read err -32 [ 153.249705][ T6573] gspca_spca508: reg write: error -110 [ 153.255403][ T6573] spca508 4-1:0.0: probe with driver spca508 failed with error -110 [ 153.369044][ T6703] netlink: 148 bytes leftover after parsing attributes in process `syz.1.192'. [ 153.438842][ T6588] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 153.520450][ T6712] fuse: Bad value for 'fd' [ 153.608838][ T6588] usb 3-1: Using ep0 maxpacket: 16 [ 153.625627][ T6588] usb 3-1: config 0 has no interfaces? [ 153.645746][ T6588] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 153.673244][ T6588] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 153.685401][ T6588] usb 3-1: Manufacturer: syz [ 153.704001][ T6588] usb 3-1: config 0 descriptor?? [ 153.718879][ T6573] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 153.892967][ T6573] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 153.929522][ T6573] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 153.970186][ T6573] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 153.991586][ T6718] loop6: detected capacity change from 0 to 524287999 [ 153.999040][ T6573] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.019720][ T6573] usb 2-1: config 0 descriptor?? [ 154.250539][ T6573] ath6kl: Failed to submit usb control message: -71 [ 154.276653][ T6573] ath6kl: unable to send the bmi data to the device: -71 [ 154.288340][ T6573] ath6kl: Unable to send get target info: -71 [ 154.295689][ T6573] ath6kl: Failed to init ath6kl core: -71 [ 154.303476][ T6573] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 154.335376][ T6573] usb 2-1: USB disconnect, device number 8 [ 154.411586][ T6588] usb 3-1: USB disconnect, device number 16 [ 154.643436][ T6575] usb 4-1: USB disconnect, device number 8 [ 155.418820][ T6575] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 155.460605][ T6588] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 155.678824][ T6588] usb 5-1: Using ep0 maxpacket: 16 [ 155.699328][ T6588] usb 5-1: config 0 has no interfaces? [ 155.709564][ T6575] usb 4-1: config 0 has no interfaces? [ 155.719511][ T6745] batman_adv: batadv0: Interface deactivated: dummy0 [ 155.726383][ T6745] batman_adv: batadv0: Removing interface: dummy0 [ 155.802593][ T6588] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 155.925355][ T6588] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.957916][ T6575] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 155.975980][ T6588] usb 5-1: Product: syz [ 156.051404][ T6750] fuse: Bad value for 'fd' [ 156.060581][ T6588] usb 5-1: Manufacturer: syz [ 156.065268][ T6588] usb 5-1: SerialNumber: syz [ 156.072150][ T6575] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.656527][ T6575] usb 4-1: Product: syz [ 156.824654][ T6588] usb 5-1: config 0 descriptor?? [ 156.832751][ T6575] usb 4-1: Manufacturer: syz [ 156.847156][ T6575] usb 4-1: SerialNumber: syz [ 156.868033][ T6575] usb 4-1: config 0 descriptor?? [ 156.979109][ T6573] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 157.058001][ T6756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.207'. [ 157.098651][ T6738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.108951][ T6738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.192267][ T6757] netlink: 24 bytes leftover after parsing attributes in process `syz.1.207'. [ 157.314069][ T6759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.334856][ T6573] usb 1-1: config 0 has no interfaces? [ 157.362152][ T6573] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 157.402614][ T6573] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.413160][ T6759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.448459][ T6573] usb 1-1: Product: syz [ 157.464625][ T6573] usb 1-1: Manufacturer: syz [ 157.476267][ T6761] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 157.487529][ T6573] usb 1-1: SerialNumber: syz [ 157.511373][ T6573] usb 1-1: config 0 descriptor?? [ 157.773432][ T6752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.783105][ T6752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.434211][ T6767] loop6: detected capacity change from 0 to 524287999 [ 158.502976][ T6575] usb 4-1: USB disconnect, device number 9 [ 159.801107][ T6600] usb 5-1: USB disconnect, device number 9 [ 160.154954][ T6575] usb 1-1: USB disconnect, device number 23 [ 161.097782][ T6802] netlink: 16 bytes leftover after parsing attributes in process `syz.3.219'. [ 161.125190][ T6804] syz_tun: entered allmulticast mode [ 161.301463][ T6595] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 161.469277][ T6595] usb 3-1: Using ep0 maxpacket: 16 [ 161.480282][ T6575] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 161.482165][ T6595] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 161.510810][ T6595] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 161.533047][ T6811] batman_adv: batadv0: Adding interface: dummy0 [ 161.549714][ T6595] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 161.563876][ T6811] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.589078][ C0] vkms_vblank_simulate: vblank timer overrun [ 161.615691][ T6595] usb 3-1: config 1 interface 0 has no altsetting 0 [ 161.633287][ T6811] batman_adv: batadv0: Interface activated: dummy0 [ 161.636439][ T6575] usb 5-1: config 0 has no interfaces? [ 161.683054][ T6595] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 161.692382][ T6595] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.709082][ T6595] usb 3-1: Product: syz [ 161.714024][ T6595] usb 3-1: Manufacturer: syz [ 161.724056][ T6595] usb 3-1: SerialNumber: syz [ 161.738786][ T6573] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 161.791240][ T6811] net_ratelimit: 10 callbacks suppressed [ 161.791254][ T6811] batadv0: mtu less than device minimum [ 161.804390][ T6575] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 161.816287][ T6575] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.825697][ T6575] usb 5-1: Product: syz [ 161.835115][ T6575] usb 5-1: Manufacturer: syz [ 161.840171][ T6811] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 161.856660][ T6811] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 161.868469][ T6811] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 161.880228][ T6811] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 161.891913][ T6811] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 161.903674][ T6811] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 161.915397][ T6811] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 161.927220][ T6811] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 161.939008][ T6811] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 161.956471][ T6595] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 161.974226][ T6575] usb 5-1: SerialNumber: syz [ 162.042486][ T6575] usb 5-1: config 0 descriptor?? [ 162.047985][ T6573] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 162.067335][ T6573] usb 1-1: config 1 has an invalid descriptor of length 142, skipping remainder of the config [ 162.098478][ T6573] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 162.122495][ T6573] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 149, changing to 11 [ 162.133789][ T6573] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16829, setting to 1024 [ 162.150354][ T6573] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 162.159489][ T6573] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 162.167500][ T6573] usb 1-1: Product: syz [ 162.173474][ T6573] usb 1-1: Manufacturer: syz [ 162.197550][ T6573] cdc_wdm 1-1:1.0: skipping garbage [ 162.203123][ T6573] cdc_wdm 1-1:1.0: skipping garbage [ 162.211584][ T6573] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 162.217613][ T6573] cdc_wdm 1-1:1.0: Unknown control protocol [ 162.410442][ T6798] usblp0:failed reading printer status (-71) [ 162.421480][ T6573] usb 3-1: USB disconnect, device number 17 [ 162.937768][ T10] usb 1-1: USB disconnect, device number 24 [ 163.214175][ T6820] loop6: detected capacity change from 0 to 524287999 [ 164.014928][ T6795] usblp0: removed [ 164.081665][ T5925] usb 5-1: USB disconnect, device number 10 [ 164.848934][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 165.087259][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 165.138735][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.182016][ T5917] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 165.297680][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.476239][ T10] usb 3-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 165.548812][ T5917] usb 4-1: Using ep0 maxpacket: 16 [ 165.554344][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.624881][ T5917] usb 4-1: config 0 has an invalid interface number: 68 but max is 0 [ 165.718691][ T5917] usb 4-1: config 0 has no interface number 0 [ 165.729914][ T10] usb 3-1: config 0 descriptor?? [ 165.851653][ T5917] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 165.913268][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.003194][ T5917] usb 4-1: Product: syz [ 166.007517][ T5917] usb 4-1: Manufacturer: syz [ 166.104503][ T5917] usb 4-1: SerialNumber: syz [ 166.126917][ T5917] usb 4-1: config 0 descriptor?? [ 166.159046][ T6588] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 166.176875][ T5917] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 166.247887][ T6868] loop6: detected capacity change from 0 to 524287999 [ 166.318819][ T6588] usb 5-1: Using ep0 maxpacket: 16 [ 166.326900][ T6588] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 166.339526][ T6588] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 166.372984][ T6588] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 166.387443][ T5917] usb 4-1: USB disconnect, device number 10 [ 166.393760][ T2975] usb 4-1: Failed to submit usb control message: -71 [ 166.429941][ T2975] usb 4-1: unable to send the bmi data to the device: -71 [ 166.447778][ T6588] usb 5-1: config 1 interface 0 has no altsetting 0 [ 166.454599][ T2975] usb 4-1: unable to get target info from device [ 166.454656][ T2975] usb 4-1: could not get target info (-71) [ 166.467943][ T2975] usb 4-1: could not probe fw (-71) [ 166.563432][ T6588] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 166.574099][ T6588] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.585246][ T6588] usb 5-1: Product: syz [ 166.624475][ T6588] usb 5-1: Manufacturer: syz [ 166.633354][ T6588] usb 5-1: SerialNumber: syz [ 167.016973][ T6588] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 167.318255][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 167.360546][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 167.385102][ T10] usb 3-1: USB disconnect, device number 18 [ 167.753240][ T6859] usblp0:failed reading printer status (-71) [ 167.763777][ T6588] usb 5-1: USB disconnect, device number 11 [ 167.868767][ T5917] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 168.063251][ T6573] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 168.119729][ T5917] usb 1-1: Using ep0 maxpacket: 16 [ 168.239082][ T5917] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 168.332319][ T6890] net_ratelimit: 10 callbacks suppressed [ 168.332333][ T6890] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 6a:4b:e4:2a:53:62 [ 168.352850][ T6575] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 168.360392][ T5917] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 168.371256][ T5917] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 168.385413][ T6573] usb 3-1: config 0 has no interfaces? [ 168.469531][ T6573] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 168.486902][ T6573] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.499827][ T6575] usb 2-1: device descriptor read/64, error -71 [ 168.519857][ T5917] usb 1-1: config 1 interface 0 has no altsetting 0 [ 168.551211][ T6573] usb 3-1: Product: syz [ 168.566560][ T6573] usb 3-1: Manufacturer: syz [ 168.575042][ T6573] usb 3-1: SerialNumber: syz [ 168.595179][ T5917] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 168.613092][ T6573] usb 3-1: config 0 descriptor?? [ 168.623034][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.643759][ T5917] usb 1-1: Product: syz [ 168.660164][ T5917] usb 1-1: Manufacturer: syz [ 168.672703][ T5917] usb 1-1: SerialNumber: syz [ 168.748902][ T6575] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 168.912535][ T6575] usb 2-1: device descriptor read/64, error -71 [ 169.030032][ T6575] usb usb2-port1: attempt power cycle [ 169.093844][ T5917] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 169.443550][ T6575] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 169.500639][ T6575] usb 2-1: device descriptor read/8, error -71 [ 169.562257][ T6893] usblp0:failed reading printer status (-71) [ 169.629377][ T6573] usb 1-1: USB disconnect, device number 25 [ 169.758668][ T6575] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 169.789327][ T6575] usb 2-1: device descriptor read/8, error -71 [ 169.900378][ T6575] usb usb2-port1: unable to enumerate USB device [ 169.995722][ T6859] usblp0: removed [ 170.647689][ T10] usb 3-1: USB disconnect, device number 19 [ 171.153826][ T6877] usblp0: removed [ 171.478753][ T10] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 171.490003][ T6915] xt_nfacct: accounting object `syz0' does not exists [ 171.748905][ T10] usb 2-1: config 0 has no interfaces? [ 171.763443][ T10] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 171.775130][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.787962][ T10] usb 2-1: Product: syz [ 171.795088][ T10] usb 2-1: Manufacturer: syz [ 171.800659][ T10] usb 2-1: SerialNumber: syz [ 171.855383][ T10] usb 2-1: config 0 descriptor?? [ 171.936910][ T6573] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 171.987741][ T6917] loop6: detected capacity change from 0 to 524287999 [ 172.199640][ T6573] usb 3-1: unable to get BOS descriptor or descriptor too short [ 172.282808][ T6573] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 172.348777][ T6910] program syz.1.243 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 172.378082][ T6573] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 172.429025][ T6573] usb 3-1: config 1 interface 0 has no altsetting 1 [ 172.548795][ T6573] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 172.558025][ T6573] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.578967][ T6573] usb 3-1: Product: syz [ 172.591567][ T6573] usb 3-1: Manufacturer: syz [ 172.596219][ T6573] usb 3-1: SerialNumber: syz [ 173.007278][ T6573] smsusb:smsusb_probe: board id=8, interface number 0 [ 173.068956][ T6910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.136507][ T6910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.218127][ T6915] Cannot find del_set index 0 as target [ 173.323149][ T6588] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 173.474287][ T6588] usb 1-1: config 0 has no interfaces? [ 173.481568][ T6588] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 173.481599][ T6588] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.481641][ T6588] usb 1-1: Product: syz [ 173.481656][ T6588] usb 1-1: Manufacturer: syz [ 173.481671][ T6588] usb 1-1: SerialNumber: syz [ 173.522763][ T6588] usb 1-1: config 0 descriptor?? [ 173.861321][ T6924] program syz.0.249 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.876180][ T6924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.904576][ T6924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.185287][ T6594] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 174.348782][ T6594] usb 4-1: Using ep0 maxpacket: 16 [ 174.365574][ T6594] usb 4-1: config 0 has no interfaces? [ 174.418345][ T6594] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 174.476045][ T6594] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.532612][ T6594] usb 4-1: Product: syz [ 174.542893][ T6594] usb 4-1: Manufacturer: syz [ 174.558529][ T6594] usb 4-1: SerialNumber: syz [ 174.582035][ T6594] usb 4-1: config 0 descriptor?? [ 175.000049][ T6941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.019955][ T6941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.714738][ T5978] usb 2-1: USB disconnect, device number 13 [ 175.788695][ T6594] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 175.853375][ T6573] smsusb:smsusb_probe: usb_set_interface failed, rc -71 [ 175.888888][ T6573] smsusb 3-1:1.0: probe with driver smsusb failed with error -71 [ 175.952249][ T6573] usb 3-1: USB disconnect, device number 20 [ 175.958859][ T6594] usb 5-1: device descriptor read/64, error -71 [ 176.248867][ T6594] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 176.419128][ T6594] usb 5-1: device descriptor read/64, error -71 [ 176.712026][ T5978] usb 1-1: USB disconnect, device number 26 [ 176.721527][ T6594] usb usb5-port1: attempt power cycle [ 176.818795][ T6573] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 177.014538][ T6957] batman_adv: batadv0: Adding interface: dummy0 [ 177.021541][ T6957] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.046961][ C1] vkms_vblank_simulate: vblank timer overrun [ 177.061107][ T6573] usb 3-1: Using ep0 maxpacket: 16 [ 177.071662][ T6594] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 177.080897][ T6573] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 177.092379][ T6573] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 177.111766][ T6573] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 177.139661][ T6594] usb 5-1: device descriptor read/8, error -71 [ 177.144467][ T5978] usb 4-1: USB disconnect, device number 11 [ 177.156068][ T6573] usb 3-1: config 1 interface 0 has no altsetting 0 [ 177.166587][ T6957] batman_adv: batadv0: Interface activated: dummy0 [ 177.184727][ T6958] batadv0: mtu less than device minimum [ 177.212321][ T6573] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 177.233358][ T6573] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.253602][ T6573] usb 3-1: Product: syz [ 177.257874][ T6573] usb 3-1: Manufacturer: syz [ 177.265185][ T6958] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 177.276688][ T6958] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 177.288785][ T6958] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 177.300845][ T6958] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 177.313019][ T6958] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 177.325223][ T6958] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 177.337293][ T6958] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 177.348878][ T6958] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 177.360309][ T6958] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 177.394449][ T6573] usb 3-1: SerialNumber: syz [ 177.469761][ T6594] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 177.495677][ T6960] loop6: detected capacity change from 0 to 524287999 [ 177.530010][ T6594] usb 5-1: device descriptor read/8, error -71 [ 177.651492][ T6573] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 177.663069][ T6594] usb usb5-port1: unable to enumerate USB device [ 178.092057][ T6954] usblp0:failed reading printer status (-71) [ 178.100161][ T6573] usb 3-1: USB disconnect, device number 21 [ 179.027170][ T6973] input: syz1 as /devices/virtual/input/input8 [ 179.538789][ T5917] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 179.642702][ T6952] usblp0: removed [ 179.728890][ T5917] usb 5-1: Using ep0 maxpacket: 8 [ 179.748153][ T5917] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 179.767094][ T5917] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 179.833860][ T5917] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 179.844764][ T5917] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 179.860049][ T5917] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 179.870816][ T5917] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 179.915595][ T5917] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 180.005521][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.260267][ T5917] usb 5-1: GET_CAPABILITIES returned 0 [ 180.275377][ T5917] usbtmc 5-1:16.0: can't read capabilities [ 180.338772][ T6594] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 180.402191][ T6991] loop6: detected capacity change from 0 to 524287999 [ 180.463861][ C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 180.474847][ T6977] usbtmc 5-1:16.0: Unable to send data, error -71 [ 180.483537][ T6977] loop3: detected capacity change from 0 to 1 [ 180.491456][ T6977] Dev loop3: unable to read RDB block 1 [ 180.499962][ T6594] usb 3-1: Using ep0 maxpacket: 16 [ 180.501441][ T6977] loop3: unable to read partition table [ 180.507841][ T6594] usb 3-1: config 0 has no interfaces? [ 180.511216][ T6977] loop3: partition table beyond EOD, truncated [ 180.529628][ T6594] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 180.543910][ T6977] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 180.548718][ T6594] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.578891][ T6594] usb 3-1: Product: syz [ 180.585751][ T5202] Dev loop3: unable to read RDB block 1 [ 180.592676][ T5202] loop3: unable to read partition table [ 180.598454][ T6594] usb 3-1: Manufacturer: syz [ 180.604094][ T5202] loop3: partition table beyond EOD, truncated [ 180.611357][ T6594] usb 3-1: SerialNumber: syz [ 180.622491][ T6594] usb 3-1: config 0 descriptor?? [ 180.718825][ T6575] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 180.762125][ T7001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.274'. [ 180.780559][ T7001] team_slave_0: entered promiscuous mode [ 180.786617][ T7001] team_slave_1: entered promiscuous mode [ 180.801584][ T7001] macvtap1: entered promiscuous mode [ 180.807139][ T7001] team0: entered promiscuous mode [ 180.816250][ T7001] macvtap1: entered allmulticast mode [ 180.825655][ T7001] team0: entered allmulticast mode [ 180.838312][ T7001] team_slave_0: entered allmulticast mode [ 180.844599][ T7001] team_slave_1: entered allmulticast mode [ 180.852865][ T7001] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 180.893033][ T6575] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 180.906297][ T6575] usb 2-1: config 1 has an invalid descriptor of length 142, skipping remainder of the config [ 180.996153][ T7006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.013925][ T6575] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 181.023700][ T6575] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 149, changing to 11 [ 181.035414][ T6575] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16829, setting to 1024 [ 181.037827][ T7006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.049382][ T6575] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 181.601477][ T6594] usb 5-1: USB disconnect, device number 16 [ 181.948687][ T6575] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 181.974812][ T6575] usb 2-1: Product: syz [ 181.992206][ T6575] usb 2-1: Manufacturer: syz [ 182.043055][ T6575] cdc_wdm 2-1:1.0: skipping garbage [ 182.059310][ T6575] cdc_wdm 2-1:1.0: skipping garbage [ 182.085257][ T6575] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 182.100680][ T6575] cdc_wdm 2-1:1.0: Unknown control protocol [ 182.789770][ T5925] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 182.958676][ T5925] usb 1-1: Using ep0 maxpacket: 16 [ 182.969651][ T5925] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 182.987031][ T5925] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 183.001581][ T5925] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 183.214767][ T5925] usb 1-1: config 1 interface 0 has no altsetting 0 [ 183.253473][ T5925] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 183.262677][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.273461][ T5925] usb 1-1: Product: syz [ 183.278907][ T5925] usb 1-1: Manufacturer: syz [ 183.372201][ T5925] usb 1-1: SerialNumber: syz [ 183.506330][ T6594] usb 3-1: USB disconnect, device number 22 [ 183.720991][ T5978] usb 2-1: USB disconnect, device number 14 [ 183.766768][ T5925] usblp 1-1:1.0: usblp1: USB Unidirectional printer dev 27 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 184.037663][ T5917] usb 1-1: USB disconnect, device number 27 [ 184.072850][ T5917] usblp1: removed [ 184.374694][ T7044] program syz.4.284 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 184.628680][ T6575] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 184.798660][ T6575] usb 5-1: device descriptor read/64, error -71 [ 185.049524][ T6575] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 185.178858][ T5925] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 185.199609][ T6575] usb 5-1: device descriptor read/64, error -71 [ 185.207714][ T7048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.286'. [ 185.241853][ T7048] team_slave_0: entered promiscuous mode [ 185.247626][ T7048] team_slave_1: entered promiscuous mode [ 185.274200][ T7048] macvtap1: entered promiscuous mode [ 185.284515][ T7048] team0: entered promiscuous mode [ 185.296846][ T7048] macvtap1: entered allmulticast mode [ 185.308973][ T6575] usb usb5-port1: attempt power cycle [ 185.338721][ T5925] usb 2-1: Using ep0 maxpacket: 8 [ 185.345836][ T5925] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 185.355364][ T5925] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 185.377936][ T7048] team0: entered allmulticast mode [ 185.388249][ T7048] team_slave_0: entered allmulticast mode [ 185.398687][ T7048] team_slave_1: entered allmulticast mode [ 185.406335][ T7048] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 185.458284][ T5925] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 185.582212][ T5925] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 185.614249][ T5925] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 185.658696][ T6575] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 185.690465][ T5925] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 185.724202][ T5925] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 185.740466][ T6575] usb 5-1: device descriptor read/8, error -71 [ 185.785160][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.018688][ T6575] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 186.027696][ T5925] usb 2-1: GET_CAPABILITIES returned 0 [ 186.047453][ T5925] usbtmc 2-1:16.0: can't read capabilities [ 186.057510][ T6575] usb 5-1: device descriptor read/8, error -71 [ 186.189162][ T6575] usb usb5-port1: unable to enumerate USB device [ 186.234800][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 186.244714][ T7046] usbtmc 2-1:16.0: Unable to send data, error -71 [ 186.253480][ T7046] loop3: detected capacity change from 0 to 1 [ 186.263631][ T7046] Dev loop3: unable to read RDB block 1 [ 186.269381][ T7046] loop3: unable to read partition table [ 186.317305][ T7046] loop3: partition table beyond EOD, truncated [ 186.523307][ T7046] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 186.737663][ T7067] netlink: 148 bytes leftover after parsing attributes in process `syz.2.291'. [ 186.896349][ T7071] netlink: 12 bytes leftover after parsing attributes in process `syz.0.292'. [ 186.946562][ T7071] FAULT_INJECTION: forcing a failure. [ 186.946562][ T7071] name failslab, interval 1, probability 0, space 0, times 0 [ 187.007593][ T7071] CPU: 0 UID: 0 PID: 7071 Comm: syz.0.292 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 187.007623][ T7071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 187.007635][ T7071] Call Trace: [ 187.007644][ T7071] [ 187.007653][ T7071] dump_stack_lvl+0x189/0x250 [ 187.007701][ T7071] ? __pfx____ratelimit+0x10/0x10 [ 187.007731][ T7071] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.007760][ T7071] ? __pfx__printk+0x10/0x10 [ 187.007785][ T7071] ? __pfx___might_resched+0x10/0x10 [ 187.007815][ T7071] ? fs_reclaim_acquire+0x7d/0x100 [ 187.007843][ T7071] should_fail_ex+0x414/0x560 [ 187.007874][ T7071] should_failslab+0xa8/0x100 [ 187.007897][ T7071] __kmalloc_cache_noprof+0x70/0x3d0 [ 187.007923][ T7071] ? alloc_netdev_mqs+0xc36/0x11e0 [ 187.007956][ T7071] alloc_netdev_mqs+0xc36/0x11e0 [ 187.007991][ T7071] rtnl_create_link+0x31f/0xd10 [ 187.008026][ T7071] rtnl_newlink_create+0x25c/0xb00 [ 187.008056][ T7071] ? __pfx_aa_get_newest_label+0x10/0x10 [ 187.008085][ T7071] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 187.008123][ T7071] ? rtnl_newlink+0x8db/0x1c70 [ 187.008146][ T7071] ? __pfx___mutex_lock+0x10/0x10 [ 187.008189][ T7071] ? ns_capable+0x8a/0xf0 [ 187.008223][ T7071] rtnl_newlink+0x16d6/0x1c70 [ 187.008258][ T7071] ? netlink_sendmsg+0x805/0xb30 [ 187.008294][ T7071] ? __pfx_rtnl_newlink+0x10/0x10 [ 187.008340][ T7071] ? kasan_quarantine_put+0xdd/0x220 [ 187.008368][ T7071] ? lockdep_hardirqs_on+0x9c/0x150 [ 187.008403][ T7071] ? nlmon_xmit+0xb0/0x100 [ 187.008430][ T7071] ? kmem_cache_free+0x18f/0x400 [ 187.008457][ T7071] ? __local_bh_enable_ip+0x12d/0x1c0 [ 187.008484][ T7071] ? lockdep_hardirqs_on+0x9c/0x150 [ 187.008513][ T7071] ? __local_bh_enable_ip+0x12d/0x1c0 [ 187.008542][ T7071] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 187.008579][ T7071] ? __dev_queue_xmit+0x27e/0x3a70 [ 187.008616][ T7071] ? __lock_acquire+0xab9/0xd20 [ 187.008668][ T7071] ? __pfx_rtnl_newlink+0x10/0x10 [ 187.008686][ T7071] rtnetlink_rcv_msg+0x7cc/0xb70 [ 187.008710][ T7071] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 187.008729][ T7071] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 187.008746][ T7071] ? ref_tracker_free+0x63a/0x7d0 [ 187.008768][ T7071] ? __copy_skb_header+0xa7/0x550 [ 187.008794][ T7071] ? __pfx_ref_tracker_free+0x10/0x10 [ 187.008816][ T7071] ? __skb_clone+0x63/0x7a0 [ 187.008839][ T7071] netlink_rcv_skb+0x208/0x470 [ 187.008855][ T7071] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 187.008872][ T7071] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 187.008897][ T7071] ? netlink_deliver_tap+0x2e/0x1b0 [ 187.008917][ T7071] ? netlink_deliver_tap+0x2e/0x1b0 [ 187.008937][ T7071] netlink_unicast+0x75b/0x8d0 [ 187.008959][ T7071] netlink_sendmsg+0x805/0xb30 [ 187.008982][ T7071] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.009001][ T7071] ? aa_sock_msg_perm+0x94/0x160 [ 187.009020][ T7071] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 187.009038][ T7071] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.009055][ T7071] __sock_sendmsg+0x219/0x270 [ 187.009079][ T7071] ____sys_sendmsg+0x505/0x830 [ 187.009101][ T7071] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.009125][ T7071] ? import_iovec+0x74/0xa0 [ 187.009141][ T7071] ___sys_sendmsg+0x21f/0x2a0 [ 187.009160][ T7071] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.009204][ T7071] ? __fget_files+0x2a/0x420 [ 187.009219][ T7071] ? __fget_files+0x3a0/0x420 [ 187.009242][ T7071] __x64_sys_sendmsg+0x19b/0x260 [ 187.009261][ T7071] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 187.009285][ T7071] ? __pfx_ksys_write+0x10/0x10 [ 187.009296][ T7071] ? rcu_is_watching+0x15/0xb0 [ 187.009322][ T7071] ? do_syscall_64+0xbe/0x3b0 [ 187.009337][ T7071] do_syscall_64+0xfa/0x3b0 [ 187.009348][ T7071] ? lockdep_hardirqs_on+0x9c/0x150 [ 187.009367][ T7071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.009381][ T7071] ? clear_bhb_loop+0x60/0xb0 [ 187.009398][ T7071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.009412][ T7071] RIP: 0033:0x7f945f38e929 [ 187.009429][ T7071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.009441][ T7071] RSP: 002b:00007f9460129038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.009456][ T7071] RAX: ffffffffffffffda RBX: 00007f945f5b5fa0 RCX: 00007f945f38e929 [ 187.009466][ T7071] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 187.009475][ T7071] RBP: 00007f9460129090 R08: 0000000000000000 R09: 0000000000000000 [ 187.009483][ T7071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 187.009491][ T7071] R13: 0000000000000000 R14: 00007f945f5b5fa0 R15: 00007f945f6dfa28 [ 187.009512][ T7071] [ 187.500923][ T6573] usb 2-1: USB disconnect, device number 15 [ 187.578671][ T5925] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 187.841978][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 187.873421][ T7076] fuse: Unknown parameter 'use00000000000000000000' [ 187.880240][ T5925] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 256 [ 187.933442][ T5925] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 187.983049][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.996217][ T5925] usb 3-1: config 0 descriptor?? [ 188.015548][ T7067] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 188.027755][ T7078] 8021q: adding VLAN 0 to HW filter on device bond1 [ 188.068755][ T6573] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 188.099382][ T7084] vlan2: entered allmulticast mode [ 188.104610][ T7084] geneve0: entered allmulticast mode [ 188.142944][ T7084] bond1: (slave vlan2): Error -34 calling dev_set_mtu [ 188.258445][ T6573] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 188.267796][ T6573] usb 2-1: config 1 has an invalid descriptor of length 142, skipping remainder of the config [ 188.287711][ T5925] ath6kl: Failed to submit usb control message: -71 [ 188.294583][ T6573] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 188.304035][ T5925] ath6kl: unable to send the bmi data to the device: -71 [ 188.311235][ T5925] ath6kl: Unable to send get target info: -71 [ 188.321495][ T6573] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 149, changing to 11 [ 188.345093][ T5925] ath6kl: Failed to init ath6kl core: -71 [ 188.361494][ T6573] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16829, setting to 1024 [ 188.375346][ T5925] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 188.418741][ T5978] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 188.506450][ T6573] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 188.522712][ T5925] usb 3-1: USB disconnect, device number 23 [ 188.535514][ T6573] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 188.591035][ T6573] usb 2-1: Product: syz [ 188.602668][ T6573] usb 2-1: Manufacturer: syz [ 188.624604][ T6573] cdc_wdm 2-1:1.0: skipping garbage [ 188.641198][ T5978] usb 1-1: config 0 has no interfaces? [ 188.648883][ T6573] cdc_wdm 2-1:1.0: skipping garbage [ 188.660428][ T6573] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 188.701800][ T5978] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 188.711419][ T5978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.720194][ T5978] usb 1-1: Product: syz [ 188.725747][ T6573] cdc_wdm 2-1:1.0: Unknown control protocol [ 188.742483][ T5978] usb 1-1: Manufacturer: syz [ 188.779741][ T5978] usb 1-1: SerialNumber: syz [ 188.900521][ T5978] usb 1-1: config 0 descriptor?? [ 189.078910][ T6573] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 189.300158][ T6573] usb 4-1: Using ep0 maxpacket: 16 [ 189.358431][ T6573] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 189.395852][ T6573] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 189.436991][ T7088] program syz.0.296 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 189.480394][ T6573] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 189.504944][ T7088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.553441][ T7088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.561840][ T7101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.299'. [ 189.626206][ T6573] usb 4-1: config 1 interface 0 has no altsetting 0 [ 189.695289][ T6573] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 189.716627][ T6573] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.826252][ T6573] usb 4-1: Product: syz [ 189.826818][ T7103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.300'. [ 189.874021][ T7103] macvtap2: entered promiscuous mode [ 189.894292][ T6573] usb 4-1: Manufacturer: syz [ 189.895750][ T7103] macvtap2: entered allmulticast mode [ 189.916516][ T6573] usb 4-1: SerialNumber: syz [ 189.989776][ T7103] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 190.217351][ T6573] usblp 4-1:1.0: usblp1: USB Unidirectional printer dev 12 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 190.436700][ T6594] usb 4-1: USB disconnect, device number 12 [ 190.446044][ T6594] usblp1: removed [ 191.149802][ T6573] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 191.424404][ T6594] usb 1-1: USB disconnect, device number 28 [ 191.438898][ T6573] usb 3-1: Using ep0 maxpacket: 8 [ 191.456690][ T6573] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 191.501232][ T6573] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 191.539495][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 191.541525][ T6574] usb 2-1: USB disconnect, device number 16 [ 191.546407][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 191.558183][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 191.567181][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.578512][ T6573] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 191.724189][ T6573] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 191.766529][ T6573] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 191.790940][ T6573] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 191.823203][ T6573] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 191.833495][ T6573] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.057720][ T6573] usb 3-1: GET_CAPABILITIES returned 0 [ 192.079811][ T6573] usbtmc 3-1:16.0: can't read capabilities [ 192.279717][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 192.289173][ T7117] usbtmc 3-1:16.0: Unable to send data, error -71 [ 192.297273][ T7117] loop3: detected capacity change from 0 to 1 [ 192.311183][ T7117] Dev loop3: unable to read RDB block 1 [ 192.331218][ T7117] loop3: unable to read partition table [ 192.347540][ T7117] loop3: partition table beyond EOD, truncated [ 192.355151][ T7117] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 192.460273][ T5202] Dev loop3: unable to read RDB block 1 [ 192.466029][ T5202] loop3: unable to read partition table [ 192.481183][ T5202] loop3: partition table beyond EOD, truncated [ 192.889035][ T6594] usb 3-1: USB disconnect, device number 24 [ 192.971258][ T7146] kvm: pic: non byte write [ 193.399359][ T6573] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 193.464588][ T6594] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 193.603711][ T6573] usb 1-1: config 0 has no interfaces? [ 193.622755][ T6573] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 193.659975][ T6573] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.668057][ T6573] usb 1-1: Product: syz [ 193.670974][ T6594] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 193.697485][ T6594] usb 3-1: config 1 has an invalid descriptor of length 142, skipping remainder of the config [ 193.741612][ T6573] usb 1-1: Manufacturer: syz [ 193.746292][ T6573] usb 1-1: SerialNumber: syz [ 193.764442][ T6594] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 193.806258][ T6594] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 149, changing to 11 [ 193.848862][ T6594] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16829, setting to 1024 [ 193.869635][ T6573] usb 1-1: config 0 descriptor?? [ 193.934827][ T6594] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 194.116882][ T6594] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 194.173623][ T7154] program syz.0.315 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 194.187653][ T7154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.197693][ T7154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.210875][ T7160] netlink: 'syz.1.319': attribute type 30 has an invalid length. [ 194.243503][ T6594] usb 3-1: Product: syz [ 194.243527][ T6594] usb 3-1: Manufacturer: syz [ 194.256775][ T6594] cdc_wdm 3-1:1.0: skipping garbage [ 194.256800][ T6594] cdc_wdm 3-1:1.0: skipping garbage [ 194.258518][ T6594] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 194.258535][ T6594] cdc_wdm 3-1:1.0: Unknown control protocol [ 194.504069][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.504170][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.668728][ T6594] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 195.728868][ T5925] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 195.838809][ T6594] usb 2-1: Using ep0 maxpacket: 16 [ 195.852012][ T6594] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.868723][ T6594] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.879318][ T6594] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 195.892860][ T6594] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 195.919757][ T6594] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.933717][ T5925] usb 5-1: config 0 has no interfaces? [ 195.947050][ T5925] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 195.957812][ T6594] usb 2-1: config 0 descriptor?? [ 195.977465][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.032144][ T5925] usb 5-1: Product: syz [ 196.047299][ T5925] usb 5-1: Manufacturer: syz [ 196.068638][ T5925] usb 5-1: SerialNumber: syz [ 196.125100][ T5925] usb 5-1: config 0 descriptor?? [ 196.136202][ T10] usb 3-1: USB disconnect, device number 25 [ 196.383748][ T7185] program syz.4.326 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 196.397704][ T7185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.407771][ T7185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.467583][ T6594] HID 045e:07da: Invalid code 65791 type 1 [ 196.484152][ T6594] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0003/input/input9 [ 196.575082][ T6594] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 196.681563][ T6594] usb 2-1: USB disconnect, device number 17 [ 196.794583][ T7196] fido_id[7196]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 196.981297][ T6574] usb 1-1: USB disconnect, device number 29 [ 198.379343][ T6594] usb 5-1: USB disconnect, device number 21 [ 198.818640][ T6594] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 198.868907][ T5917] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 198.990838][ T6594] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 199.009450][ T6594] usb 5-1: config 1 has an invalid descriptor of length 142, skipping remainder of the config [ 199.043808][ T7227] netlink: 12 bytes leftover after parsing attributes in process `syz.3.342'. [ 199.056067][ T5917] usb 3-1: device descriptor read/64, error -71 [ 199.056152][ T7227] netlink: 'syz.3.342': attribute type 1 has an invalid length. [ 199.079101][ T7227] netlink: 44 bytes leftover after parsing attributes in process `syz.3.342'. [ 199.094763][ T6594] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 199.122676][ T6594] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 149, changing to 11 [ 199.185823][ T6594] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16829, setting to 1024 [ 199.226740][ T6594] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 199.240515][ T6594] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 199.248993][ T6594] usb 5-1: Product: syz [ 199.254098][ T6594] usb 5-1: Manufacturer: syz [ 199.280692][ T6594] cdc_wdm 5-1:1.0: skipping garbage [ 199.300279][ T6594] cdc_wdm 5-1:1.0: skipping garbage [ 199.312909][ T6594] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 199.327168][ T6594] cdc_wdm 5-1:1.0: Unknown control protocol [ 199.358734][ T5917] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 199.402738][ T7233] tipc: Started in network mode [ 199.408128][ T7233] tipc: Node identity 4, cluster identity 4711 [ 199.428272][ T7233] tipc: Node number set to 4 [ 199.510163][ T5917] usb 3-1: device descriptor read/64, error -71 [ 199.674529][ T5925] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 199.749420][ T5917] usb usb3-port1: attempt power cycle [ 200.440366][ T5925] usb 4-1: config 0 has no interfaces? [ 200.464136][ T5925] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 200.473519][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.486901][ T5925] usb 4-1: Product: syz [ 200.495460][ T5925] usb 4-1: Manufacturer: syz [ 200.504882][ T5925] usb 4-1: SerialNumber: syz [ 200.519899][ T5925] usb 4-1: config 0 descriptor?? [ 200.705923][ T5917] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 200.780477][ T7231] program syz.3.343 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 200.793038][ T5917] usb 3-1: device descriptor read/8, error -71 [ 200.808826][ T6573] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 200.824695][ T7231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.837237][ T7231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.983718][ T6573] usb 2-1: Using ep0 maxpacket: 16 [ 200.986045][ T6573] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 200.986068][ T6573] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 200.986085][ T6573] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 200.986104][ T6573] usb 2-1: config 1 interface 0 has no altsetting 0 [ 200.988423][ T6573] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 200.988444][ T6573] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.988459][ T6573] usb 2-1: Product: syz [ 200.988470][ T6573] usb 2-1: Manufacturer: syz [ 200.988482][ T6573] usb 2-1: SerialNumber: syz [ 201.069994][ T5917] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 201.123087][ T5917] usb 3-1: device descriptor read/8, error -71 [ 201.195299][ T6573] usblp 2-1:1.0: usblp1: USB Unidirectional printer dev 18 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 201.244455][ T5917] usb usb3-port1: unable to enumerate USB device [ 201.397253][ T6573] usb 2-1: USB disconnect, device number 18 [ 201.406210][ T7259] process 'syz.0.353' launched './file2' with NULL argv: empty string added [ 201.435222][ T6573] usblp1: removed [ 201.582573][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 201.589268][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 201.595736][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 201.602375][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 201.608686][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 201.615299][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 201.621730][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 201.628340][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 201.634620][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 201.641230][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 201.647554][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 201.654193][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 201.660551][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 201.667167][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 201.673445][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 201.680052][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 201.686360][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 201.692973][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 201.699297][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 201.705935][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 201.773216][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 201.782058][ T5925] usb 5-1: USB disconnect, device number 22 [ 202.291018][ T7266] FAULT_INJECTION: forcing a failure. [ 202.291018][ T7266] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.310277][ T7266] CPU: 1 UID: 0 PID: 7266 Comm: syz.0.356 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 202.310309][ T7266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 202.310326][ T7266] Call Trace: [ 202.310333][ T7266] [ 202.310339][ T7266] dump_stack_lvl+0x189/0x250 [ 202.310367][ T7266] ? __pfx____ratelimit+0x10/0x10 [ 202.310389][ T7266] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.310412][ T7266] ? __pfx__printk+0x10/0x10 [ 202.310437][ T7266] should_fail_ex+0x414/0x560 [ 202.310459][ T7266] _copy_to_user+0x31/0xb0 [ 202.310475][ T7266] simple_read_from_buffer+0xe1/0x170 [ 202.310495][ T7266] proc_fail_nth_read+0x1df/0x250 [ 202.310515][ T7266] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 202.310535][ T7266] ? rw_verify_area+0x258/0x650 [ 202.310557][ T7266] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 202.310575][ T7266] vfs_read+0x200/0x980 [ 202.310601][ T7266] ? __pfx___mutex_lock+0x10/0x10 [ 202.310625][ T7266] ? __pfx_vfs_read+0x10/0x10 [ 202.310648][ T7266] ? __fget_files+0x2a/0x420 [ 202.310667][ T7266] ? __fget_files+0x3a0/0x420 [ 202.310682][ T7266] ? __fget_files+0x2a/0x420 [ 202.310704][ T7266] ksys_read+0x145/0x250 [ 202.310728][ T7266] ? __pfx_ksys_read+0x10/0x10 [ 202.310748][ T7266] ? rcu_is_watching+0x15/0xb0 [ 202.310775][ T7266] ? do_syscall_64+0xbe/0x3b0 [ 202.310790][ T7266] do_syscall_64+0xfa/0x3b0 [ 202.310802][ T7266] ? lockdep_hardirqs_on+0x9c/0x150 [ 202.310823][ T7266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.310837][ T7266] ? clear_bhb_loop+0x60/0xb0 [ 202.310854][ T7266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.310868][ T7266] RIP: 0033:0x7f945f38d33c [ 202.310881][ T7266] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 202.310893][ T7266] RSP: 002b:00007f9460129030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 202.310909][ T7266] RAX: ffffffffffffffda RBX: 00007f945f5b5fa0 RCX: 00007f945f38d33c [ 202.310919][ T7266] RDX: 000000000000000f RSI: 00007f94601290a0 RDI: 0000000000000004 [ 202.310928][ T7266] RBP: 00007f9460129090 R08: 0000000000000000 R09: 0000000000000000 [ 202.310937][ T7266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.310945][ T7266] R13: 0000000000000000 R14: 00007f945f5b5fa0 R15: 00007f945f6dfa28 [ 202.310967][ T7266] [ 202.908639][ T5925] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 202.932701][ T6574] usb 4-1: USB disconnect, device number 13 [ 203.125865][ T7277] net_ratelimit: 10 callbacks suppressed [ 203.125887][ T7277] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 6a:4b:e4:2a:53:62 [ 203.146278][ T5925] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 203.179160][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.309152][ T5925] usb 5-1: config 0 descriptor?? [ 203.360071][ T5925] gspca_main: spca508-2.14.0 probing 8086:0110 [ 203.560709][ T7286] program syz.3.361 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 203.678616][ T5925] gspca_spca508: reg_read err -32 [ 203.747700][ T5925] gspca_spca508: reg_read err -32 [ 203.797661][ T5925] gspca_spca508: reg_read err -32 [ 203.820694][ T5925] gspca_spca508: reg_read err -32 [ 203.928666][ T6573] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 204.060299][ T5925] gspca_spca508: reg write: error -71 [ 204.074846][ T5925] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 204.133047][ T6573] usb 4-1: device descriptor read/64, error -71 [ 204.155965][ T5925] usb 5-1: USB disconnect, device number 23 [ 204.728790][ T6573] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 204.918704][ T6573] usb 4-1: device descriptor read/64, error -71 [ 205.031592][ T6573] usb usb4-port1: attempt power cycle [ 205.505653][ T6573] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 205.555022][ T6573] usb 4-1: device descriptor read/8, error -71 [ 205.578664][ T5917] usb 5-1: new low-speed USB device number 24 using dummy_hcd [ 205.678898][ T6594] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 205.742655][ T5917] usb 5-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 205.820841][ T6573] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 205.828691][ T6594] usb 2-1: device descriptor read/64, error -71 [ 205.851014][ T6573] usb 4-1: device descriptor read/8, error -71 [ 205.859647][ T5917] usb 5-1: config 0 interface 0 has no altsetting 0 [ 205.880994][ T5917] usb 5-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 205.959456][ T6573] usb usb4-port1: unable to enumerate USB device [ 205.970423][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.034697][ T5917] usb 5-1: config 0 descriptor?? [ 206.078710][ T6594] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 206.118295][ T7298] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 206.398664][ T6594] usb 2-1: device descriptor read/64, error -71 [ 206.529280][ T6594] usb usb2-port1: attempt power cycle [ 206.626678][ T5917] lenovo 0003:17EF:60B5.0004: hidraw0: USB HID vff.ff Device [HID 17ef:60b5] on usb-dummy_hcd.4-1/input0 [ 206.889641][ T6594] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 206.939927][ T6594] usb 2-1: device descriptor read/8, error -71 [ 206.988638][ T5917] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 207.306908][ T6600] usb 5-1: USB disconnect, device number 24 [ 207.430717][ T6594] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 207.439831][ T5917] usb 3-1: config 0 has no interfaces? [ 207.488329][ T5917] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 207.512154][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.524763][ T6594] usb 2-1: device descriptor read/8, error -71 [ 207.536785][ T5917] usb 3-1: Product: syz [ 207.544571][ T5917] usb 3-1: Manufacturer: syz [ 207.597938][ T5917] usb 3-1: SerialNumber: syz [ 207.635314][ T5917] usb 3-1: config 0 descriptor?? [ 207.640693][ T6594] usb usb2-port1: unable to enumerate USB device [ 207.869502][ T7309] program syz.2.369 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 207.890281][ T7309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.348844][ T7309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.633825][ T7321] netlink: 52 bytes leftover after parsing attributes in process `syz.1.373'. [ 208.948695][ T5925] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 209.150580][ T5925] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 209.166312][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.216239][ T5925] usb 4-1: config 0 descriptor?? [ 209.244225][ T7329] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 209.276743][ T5925] gspca_main: spca508-2.14.0 probing 8086:0110 [ 209.474583][ T5925] gspca_spca508: reg_read err -32 [ 209.509025][ T5925] gspca_spca508: reg_read err -32 [ 209.529387][ T5925] gspca_spca508: reg_read err -32 [ 209.551131][ T5925] gspca_spca508: reg_read err -32 [ 209.554298][ T7335] netlink: 20 bytes leftover after parsing attributes in process `syz.1.377'. [ 209.783621][ T5925] gspca_spca508: reg write: error -71 [ 209.798767][ T5925] spca508 4-1:0.0: probe with driver spca508 failed with error -71 [ 209.852584][ T5925] usb 4-1: USB disconnect, device number 18 [ 210.286130][ T6574] usb 3-1: USB disconnect, device number 30 [ 210.676572][ T7354] netlink: 52 bytes leftover after parsing attributes in process `syz.2.385'. [ 210.830211][ T6574] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 210.945142][ T7356] netlink: 52 bytes leftover after parsing attributes in process `syz.2.386'. [ 210.978694][ T6574] usb 4-1: device descriptor read/64, error -71 [ 211.265994][ T6574] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 211.431125][ T6574] usb 4-1: device descriptor read/64, error -71 [ 211.544383][ T6574] usb usb4-port1: attempt power cycle [ 211.833136][ T5917] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 211.962280][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 211.965109][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 211.968856][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 211.974953][ T5837] Bluetooth: hci0: command 0x0406 tx timeout [ 211.981180][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 212.049038][ T6574] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 212.060395][ T5917] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 212.069727][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.095902][ T5917] usb 3-1: config 0 descriptor?? [ 212.114736][ T5917] gspca_main: spca508-2.14.0 probing 8086:0110 [ 212.121501][ T6574] usb 4-1: device descriptor read/8, error -71 [ 212.310021][ T5917] gspca_spca508: reg_read err -32 [ 212.375204][ T5917] gspca_spca508: reg_read err -32 [ 212.388793][ T6574] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 212.400227][ T5917] gspca_spca508: reg_read err -32 [ 212.412045][ T7370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.392'. [ 212.425836][ T5917] gspca_spca508: reg_read err -32 [ 212.429605][ T6574] usb 4-1: device descriptor read/8, error -71 [ 212.551478][ T6574] usb usb4-port1: unable to enumerate USB device [ 212.933931][ T7381] netlink: 52 bytes leftover after parsing attributes in process `syz.4.396'. [ 213.008895][ T5917] gspca_spca508: reg write: error -110 [ 213.021161][ T5917] spca508 3-1:0.0: probe with driver spca508 failed with error -110 [ 213.198838][ T6574] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 213.385457][ T6574] usb 1-1: config 0 has no interfaces? [ 213.395872][ T6574] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 213.410515][ T6574] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.434519][ T6574] usb 1-1: Product: syz [ 213.439177][ T6574] usb 1-1: Manufacturer: syz [ 213.443838][ T6574] usb 1-1: SerialNumber: syz [ 213.448781][ T5925] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 213.475262][ T6574] usb 1-1: config 0 descriptor?? [ 213.608654][ T5925] usb 5-1: Using ep0 maxpacket: 32 [ 213.623402][ T5925] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 213.637657][ T5925] usb 5-1: config 0 has no interface number 0 [ 213.654549][ T5925] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 213.669485][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.678202][ T5925] usb 5-1: Product: syz [ 213.683099][ T5925] usb 5-1: Manufacturer: syz [ 213.687839][ T5925] usb 5-1: SerialNumber: syz [ 213.698152][ T5925] usb 5-1: config 0 descriptor?? [ 213.736748][ T5925] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 213.746533][ T5925] usb 5-1: selecting invalid altsetting 1 [ 213.752713][ T5925] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 213.885880][ T5925] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 213.907143][ T5925] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 213.932781][ T7382] program syz.0.394 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 213.950939][ T7382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.968140][ T5925] usb 5-1: media controller created [ 213.981094][ T7382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.016450][ T7384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.026513][ T7384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.079213][ T7384] random: crng reseeded on system resumption [ 214.125617][ T5925] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 214.199870][ T5925] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 214.207112][ T5925] zl10353_read_register: readreg error (reg=127, ret==-71) [ 214.215377][ T5925] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 214.329190][ T5925] usb 5-1: USB disconnect, device number 25 [ 214.683232][ T6573] usb 3-1: USB disconnect, device number 31 [ 214.811515][ T7391] netlink: 52 bytes leftover after parsing attributes in process `syz.1.399'. [ 215.237647][ T7400] fuse: Bad value for 'fd' [ 215.841916][ T7407] netlink: 52 bytes leftover after parsing attributes in process `syz.4.407'. [ 215.989300][ T5978] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 216.149134][ T6573] usb 1-1: USB disconnect, device number 30 [ 216.248023][ T5978] usb 2-1: config 0 has no interfaces? [ 216.312465][ T5978] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 216.611610][ T7422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.411'. [ 216.646618][ T5978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.658888][ T5978] usb 2-1: Product: syz [ 216.671079][ T5978] usb 2-1: Manufacturer: syz [ 216.791481][ T7425] netlink: 12 bytes leftover after parsing attributes in process `syz.3.411'. [ 216.801765][ T5978] usb 2-1: SerialNumber: syz [ 216.817182][ T5978] usb 2-1: config 0 descriptor?? [ 217.039396][ T7432] netlink: 52 bytes leftover after parsing attributes in process `syz.2.414'. [ 217.075972][ T7430] netlink: 60 bytes leftover after parsing attributes in process `syz.0.413'. [ 217.162640][ T7433] netlink: 60 bytes leftover after parsing attributes in process `syz.0.413'. [ 217.424140][ T7436] fuse: Bad value for 'fd' [ 217.835812][ T7447] netlink: 16 bytes leftover after parsing attributes in process `syz.2.419'. [ 217.896461][ T7447] netlink: 12 bytes leftover after parsing attributes in process `syz.2.419'. [ 218.948191][ T6600] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 218.966395][ T5917] usb 2-1: USB disconnect, device number 23 [ 219.234768][ T6600] usb 3-1: config 0 has no interfaces? [ 219.269343][ T10] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 219.443434][ T6600] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 219.514286][ T10] usb 4-1: config 0 has no interfaces? [ 219.523786][ T6600] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.556379][ T10] usb 4-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 219.591591][ T6600] usb 3-1: Product: syz [ 219.598458][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.631213][ T6600] usb 3-1: Manufacturer: syz [ 219.674355][ T10] usb 4-1: Product: syz [ 219.690491][ T6600] usb 3-1: SerialNumber: syz [ 219.721455][ T10] usb 4-1: Manufacturer: syz [ 219.758386][ T6600] usb 3-1: config 0 descriptor?? [ 219.765158][ T10] usb 4-1: SerialNumber: syz [ 219.816494][ T10] usb 4-1: config 0 descriptor?? [ 220.028231][ T7452] program syz.2.420 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 220.039303][ T7452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.048162][ T7452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.222730][ T7469] netlink: 52 bytes leftover after parsing attributes in process `syz.4.426'. [ 220.636735][ T7476] sg_write: data in/out 1037/16 bytes for SCSI command 0x22-- guessing data in; [ 220.636735][ T7476] program syz.4.429 not setting count and/or reply_len properly [ 220.656738][ T6600] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 220.734126][ T6573] usb 4-1: USB disconnect, device number 23 [ 220.809165][ T6600] usb 2-1: Using ep0 maxpacket: 16 [ 220.826195][ T6600] usb 2-1: config 0 has no interfaces? [ 220.844938][ T6600] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 220.909882][ T6600] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.952555][ T6600] usb 2-1: Product: syz [ 220.968104][ T6600] usb 2-1: Manufacturer: syz [ 220.983838][ T6600] usb 2-1: SerialNumber: syz [ 221.012022][ T6600] usb 2-1: config 0 descriptor?? [ 221.448638][ T5978] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 221.458807][ T6573] usb 3-1: USB disconnect, device number 32 [ 221.608819][ T5978] usb 1-1: device descriptor read/64, error -71 [ 221.726468][ T7495] veth0: entered promiscuous mode [ 221.741267][ T7495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.436'. [ 221.851652][ T5978] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 222.081461][ T5978] usb 1-1: device descriptor read/64, error -71 [ 222.087885][ T6573] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 222.213355][ T5978] usb usb1-port1: attempt power cycle [ 222.228772][ T6573] usb 3-1: device descriptor read/64, error -71 [ 222.448219][ T7500] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 6a:4b:e4:2a:53:62 [ 222.478669][ T6573] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 222.558733][ T5978] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 222.579342][ T5978] usb 1-1: device descriptor read/8, error -71 [ 222.628774][ T6573] usb 3-1: device descriptor read/64, error -71 [ 222.739333][ T6573] usb usb3-port1: attempt power cycle [ 222.818862][ T5978] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 222.839165][ T5978] usb 1-1: device descriptor read/8, error -71 [ 222.949618][ T5978] usb usb1-port1: unable to enumerate USB device [ 223.088811][ T6573] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 223.130619][ T6573] usb 3-1: device descriptor read/8, error -71 [ 223.168316][ T7505] kvm: pic: non byte write [ 223.370121][ T6573] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 223.392949][ T6573] usb 3-1: device descriptor read/8, error -71 [ 223.413674][ T10] usb 2-1: USB disconnect, device number 24 [ 223.508927][ T7515] input: syz0 as /devices/virtual/input/input10 [ 223.529506][ T6573] usb usb3-port1: unable to enumerate USB device [ 224.298928][ T6573] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 224.395963][ T7533] netlink: 12 bytes leftover after parsing attributes in process `syz.0.448'. [ 224.453221][ T7531] hfs: unable to load iocharset "io#harset" [ 224.681238][ T6573] usb 5-1: config 0 has no interfaces? [ 224.716151][ T6573] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 224.725538][ T6573] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.763625][ T6573] usb 5-1: Product: syz [ 224.772645][ T6573] usb 5-1: Manufacturer: syz [ 224.781510][ T6573] usb 5-1: SerialNumber: syz [ 224.798289][ T6573] usb 5-1: config 0 descriptor?? [ 225.059583][ T7524] program syz.4.445 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.079970][ T7524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.090297][ T7524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.369449][ T6573] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 225.528672][ T6573] usb 3-1: Using ep0 maxpacket: 16 [ 225.541539][ T6573] usb 3-1: config 0 has no interfaces? [ 225.561708][ T6573] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 225.576341][ T6573] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.584648][ T6573] usb 3-1: Product: syz [ 225.593848][ T6573] usb 3-1: Manufacturer: syz [ 225.599650][ T6573] usb 3-1: SerialNumber: syz [ 225.607455][ T6573] usb 3-1: config 0 descriptor?? [ 225.943983][ T7549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.006021][ T7549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.558687][ T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 226.766037][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 226.777869][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 226.793221][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 226.804449][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 226.821766][ T10] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 226.833649][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.842450][ T10] usb 2-1: Product: syz [ 226.846963][ T10] usb 2-1: Manufacturer: syz [ 226.856129][ T10] usb 2-1: SerialNumber: syz [ 226.879982][ T10] usb 2-1: config 0 descriptor?? [ 226.894087][ T10] iguanair 2-1:0.0: failed to get version [ 226.900322][ T6573] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 226.900725][ T10] iguanair 2-1:0.0: probe with driver iguanair failed with error -90 [ 227.088902][ T6573] usb 1-1: device descriptor read/64, error -71 [ 227.328765][ T6573] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 227.588996][ T10] usb 5-1: USB disconnect, device number 26 [ 227.667210][ T6600] usb 2-1: USB disconnect, device number 25 [ 227.806145][ T6573] usb 1-1: device descriptor read/64, error -71 [ 227.930192][ T6573] usb usb1-port1: attempt power cycle [ 228.138682][ T6600] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 228.298748][ T6573] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 228.339240][ T6600] usb 2-1: device descriptor read/64, error -71 [ 228.452418][ T6573] usb 1-1: device descriptor read/8, error -71 [ 228.485810][ T6574] usb 3-1: USB disconnect, device number 37 [ 228.536249][ T7568] FAULT_INJECTION: forcing a failure. [ 228.536249][ T7568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.550113][ T5917] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 228.578158][ T7568] CPU: 0 UID: 0 PID: 7568 Comm: syz.4.460 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 228.578190][ T7568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 228.578203][ T7568] Call Trace: [ 228.578211][ T7568] [ 228.578220][ T7568] dump_stack_lvl+0x189/0x250 [ 228.578258][ T7568] ? __pfx____ratelimit+0x10/0x10 [ 228.578289][ T7568] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.578333][ T7568] ? __pfx__printk+0x10/0x10 [ 228.578354][ T7568] ? __might_fault+0xb0/0x130 [ 228.578394][ T7568] should_fail_ex+0x414/0x560 [ 228.578423][ T7568] _copy_from_iter+0x1db/0x16f0 [ 228.578456][ T7568] ? rcu_is_watching+0x15/0xb0 [ 228.578487][ T7568] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 228.578508][ T7568] ? __pfx__copy_from_iter+0x10/0x10 [ 228.578543][ T7568] ? __build_skb_around+0x257/0x3e0 [ 228.578567][ T7568] ? netlink_sendmsg+0x642/0xb30 [ 228.578589][ T7568] ? skb_put+0x11b/0x210 [ 228.578615][ T7568] netlink_sendmsg+0x6b2/0xb30 [ 228.578648][ T7568] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.578674][ T7568] ? aa_sock_msg_perm+0x94/0x160 [ 228.578701][ T7568] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 228.578726][ T7568] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.578748][ T7568] __sock_sendmsg+0x219/0x270 [ 228.578782][ T7568] ____sys_sendmsg+0x505/0x830 [ 228.578812][ T7568] ? __pfx_____sys_sendmsg+0x10/0x10 [ 228.578845][ T7568] ? import_iovec+0x74/0xa0 [ 228.578884][ T7568] ___sys_sendmsg+0x21f/0x2a0 [ 228.578912][ T7568] ? __pfx____sys_sendmsg+0x10/0x10 [ 228.578974][ T7568] ? __fget_files+0x2a/0x420 [ 228.578996][ T7568] ? __fget_files+0x3a0/0x420 [ 228.579030][ T7568] __x64_sys_sendmsg+0x19b/0x260 [ 228.579058][ T7568] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 228.579094][ T7568] ? __pfx_ksys_write+0x10/0x10 [ 228.579111][ T7568] ? rcu_is_watching+0x15/0xb0 [ 228.579147][ T7568] ? do_syscall_64+0xbe/0x3b0 [ 228.579170][ T7568] do_syscall_64+0xfa/0x3b0 [ 228.579186][ T7568] ? lockdep_hardirqs_on+0x9c/0x150 [ 228.579215][ T7568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.579235][ T7568] ? clear_bhb_loop+0x60/0xb0 [ 228.579260][ T7568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.579279][ T7568] RIP: 0033:0x7f4c0f58e929 [ 228.579298][ T7568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.579316][ T7568] RSP: 002b:00007f4c10459038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.579338][ T7568] RAX: ffffffffffffffda RBX: 00007f4c0f7b5fa0 RCX: 00007f4c0f58e929 [ 228.579353][ T7568] RDX: 0000000004000080 RSI: 0000200000000000 RDI: 0000000000000003 [ 228.579367][ T7568] RBP: 00007f4c10459090 R08: 0000000000000000 R09: 0000000000000000 [ 228.579392][ T7568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.579404][ T7568] R13: 0000000000000000 R14: 00007f4c0f7b5fa0 R15: 00007f4c0f8dfa28 [ 228.579436][ T7568] [ 228.862428][ C0] vkms_vblank_simulate: vblank timer overrun [ 228.992681][ T6600] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 229.038859][ T6573] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 229.048680][ T5917] usb 4-1: device descriptor read/64, error -71 [ 229.117525][ T6573] usb 1-1: device descriptor read/8, error -71 [ 229.128989][ T6600] usb 2-1: device descriptor read/64, error -71 [ 229.238948][ T6600] usb usb2-port1: attempt power cycle [ 229.248875][ T6573] usb usb1-port1: unable to enumerate USB device [ 229.288683][ T5917] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 229.327646][ T7575] loop6: detected capacity change from 0 to 524287999 [ 229.448636][ T5917] usb 4-1: device descriptor read/64, error -71 [ 229.471391][ T5978] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 229.581586][ T5917] usb usb4-port1: attempt power cycle [ 229.598789][ T6600] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 229.621642][ T6600] usb 2-1: device descriptor read/8, error -71 [ 229.670564][ T5978] usb 3-1: config 3 has an invalid interface number: 168 but max is 0 [ 229.679062][ T5978] usb 3-1: config 3 has no interface number 0 [ 229.685300][ T5978] usb 3-1: config 3 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 229.697654][ T5978] usb 3-1: config 3 interface 168 altsetting 0 endpoint 0x81 has invalid maxpacket 30768, setting to 1024 [ 229.709144][ T5978] usb 3-1: config 3 interface 168 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 229.719665][ T5978] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 229.728811][ T5978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.746392][ T7574] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 229.858818][ T6600] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 229.889824][ T6600] usb 2-1: device descriptor read/8, error -71 [ 229.929726][ T5917] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 229.960773][ T5917] usb 4-1: device descriptor read/8, error -71 [ 230.008674][ T6600] usb usb2-port1: unable to enumerate USB device [ 230.202515][ T5917] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 230.230296][ T5917] usb 4-1: device descriptor read/8, error -71 [ 230.346172][ T5917] usb usb4-port1: unable to enumerate USB device [ 230.383990][ T5978] usb 3-1: string descriptor 0 read error: -71 [ 230.476009][ T5978] keyspan 3-1:3.168: Keyspan 2 port adapter converter detected [ 230.506983][ T5978] keyspan 3-1:3.168: found no endpoint descriptor for endpoint 1 [ 230.545149][ T5978] keyspan 3-1:3.168: found no endpoint descriptor for endpoint 84 [ 230.601296][ T7592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.468'. [ 230.610641][ T5978] keyspan 3-1:3.168: found no endpoint descriptor for endpoint 2 [ 230.619751][ T5925] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 230.642394][ T5978] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 230.663602][ T5978] keyspan 3-1:3.168: found no endpoint descriptor for endpoint 88 [ 230.672192][ T5978] keyspan 3-1:3.168: found no endpoint descriptor for endpoint 6 [ 230.691549][ T5978] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 230.732487][ T5978] usb 3-1: USB disconnect, device number 38 [ 230.771137][ T5978] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 230.795345][ T5978] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 230.813917][ T5978] keyspan 3-1:3.168: device disconnected [ 231.035155][ T7594] program syz.2.469 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 231.079459][ T5925] usb 5-1: config 0 has no interfaces? [ 231.112422][ T5925] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 231.163065][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.201442][ T5925] usb 5-1: Product: syz [ 231.210240][ T5925] usb 5-1: Manufacturer: syz [ 231.221624][ T5925] usb 5-1: SerialNumber: syz [ 231.237651][ T5925] usb 5-1: config 0 descriptor?? [ 231.474164][ T7589] program syz.4.466 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 231.495103][ T7589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.538843][ T5925] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 231.574580][ T7589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.798899][ T5925] usb 3-1: Using ep0 maxpacket: 16 [ 231.807237][ T5925] usb 3-1: config 0 has no interfaces? [ 231.818028][ T5925] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 231.828785][ T6600] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 231.841949][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.866723][ T5925] usb 3-1: Product: syz [ 231.882972][ T5925] usb 3-1: Manufacturer: syz [ 231.896277][ T5925] usb 3-1: SerialNumber: syz [ 231.959067][ T6600] usb 4-1: device descriptor read/64, error -71 [ 232.004352][ T5925] usb 3-1: config 0 descriptor?? [ 232.208791][ T6600] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 232.321829][ T7616] loop6: detected capacity change from 0 to 524287999 [ 232.368831][ T6600] usb 4-1: device descriptor read/64, error -71 [ 232.398359][ T7617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.453966][ T7617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.479099][ T6600] usb usb4-port1: attempt power cycle [ 233.188660][ T6600] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 233.228494][ T7620] FAULT_INJECTION: forcing a failure. [ 233.228494][ T7620] name failslab, interval 1, probability 0, space 0, times 0 [ 233.256576][ T7620] CPU: 1 UID: 0 PID: 7620 Comm: syz.1.477 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 233.256599][ T7620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 233.256609][ T7620] Call Trace: [ 233.256615][ T7620] [ 233.256622][ T7620] dump_stack_lvl+0x189/0x250 [ 233.256650][ T7620] ? __pfx____ratelimit+0x10/0x10 [ 233.256671][ T7620] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.256693][ T7620] ? __pfx__printk+0x10/0x10 [ 233.256716][ T7620] ? __pfx___might_resched+0x10/0x10 [ 233.256737][ T7620] ? fs_reclaim_acquire+0x7d/0x100 [ 233.256758][ T7620] should_fail_ex+0x414/0x560 [ 233.256779][ T7620] should_failslab+0xa8/0x100 [ 233.256796][ T7620] __kmalloc_noprof+0xcb/0x4f0 [ 233.256809][ T7620] ? __kasan_kmalloc+0x93/0xb0 [ 233.256820][ T7620] ? ovs_nla_copy_actions+0x68/0x3d0 [ 233.256840][ T7620] ovs_nla_copy_actions+0x68/0x3d0 [ 233.256855][ T7620] ? __asan_memcpy+0x40/0x70 [ 233.256885][ T7620] ovs_flow_cmd_new+0x528/0xd80 [ 233.256913][ T7620] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 233.256975][ T7620] ? __nla_parse+0x40/0x60 [ 233.256997][ T7620] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 233.257025][ T7620] genl_family_rcv_msg_doit+0x212/0x300 [ 233.257051][ T7620] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 233.257081][ T7620] ? bpf_lsm_capable+0x9/0x20 [ 233.257093][ T7620] ? security_capable+0x7e/0x2e0 [ 233.257118][ T7620] genl_rcv_msg+0x60e/0x790 [ 233.257143][ T7620] ? __pfx_genl_rcv_msg+0x10/0x10 [ 233.257161][ T7620] ? ref_tracker_free+0x63a/0x7d0 [ 233.257179][ T7620] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 233.257200][ T7620] ? __pfx_ref_tracker_free+0x10/0x10 [ 233.257226][ T7620] netlink_rcv_skb+0x208/0x470 [ 233.257243][ T7620] ? __pfx_genl_rcv_msg+0x10/0x10 [ 233.257264][ T7620] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 233.257292][ T7620] ? down_read+0x1ad/0x2e0 [ 233.257307][ T7620] genl_rcv+0x28/0x40 [ 233.257326][ T7620] netlink_unicast+0x75b/0x8d0 [ 233.257347][ T7620] netlink_sendmsg+0x805/0xb30 [ 233.257371][ T7620] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.257389][ T7620] ? aa_sock_msg_perm+0x94/0x160 [ 233.257408][ T7620] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 233.257426][ T7620] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.257443][ T7620] __sock_sendmsg+0x219/0x270 [ 233.257467][ T7620] ____sys_sendmsg+0x505/0x830 [ 233.257489][ T7620] ? __pfx_____sys_sendmsg+0x10/0x10 [ 233.257513][ T7620] ? import_iovec+0x74/0xa0 [ 233.257529][ T7620] ___sys_sendmsg+0x21f/0x2a0 [ 233.257547][ T7620] ? __pfx____sys_sendmsg+0x10/0x10 [ 233.257590][ T7620] ? __fget_files+0x2a/0x420 [ 233.257605][ T7620] ? __fget_files+0x3a0/0x420 [ 233.257640][ T7620] __x64_sys_sendmsg+0x19b/0x260 [ 233.257658][ T7620] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 233.257680][ T7620] ? __pfx_ksys_write+0x10/0x10 [ 233.257691][ T7620] ? rcu_is_watching+0x15/0xb0 [ 233.257715][ T7620] ? do_syscall_64+0xbe/0x3b0 [ 233.257729][ T7620] do_syscall_64+0xfa/0x3b0 [ 233.257740][ T7620] ? lockdep_hardirqs_on+0x9c/0x150 [ 233.257759][ T7620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.257772][ T7620] ? clear_bhb_loop+0x60/0xb0 [ 233.257789][ T7620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.257802][ T7620] RIP: 0033:0x7f317878e929 [ 233.257814][ T7620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.257825][ T7620] RSP: 002b:00007f317964d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.257839][ T7620] RAX: ffffffffffffffda RBX: 00007f31789b5fa0 RCX: 00007f317878e929 [ 233.257849][ T7620] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 233.257858][ T7620] RBP: 00007f317964d090 R08: 0000000000000000 R09: 0000000000000000 [ 233.257871][ T7620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 233.257878][ T7620] R13: 0000000000000000 R14: 00007f31789b5fa0 R15: 00007f3178adfa28 [ 233.257898][ T7620] [ 233.728072][ T6600] usb 4-1: device descriptor read/8, error -71 [ 233.738646][ T7620] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.094694][ T5925] usb 5-1: USB disconnect, device number 27 [ 234.184885][ T7624] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 234.349355][ T6600] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 234.399416][ T7629] ======================================================= [ 234.399416][ T7629] WARNING: The mand mount option has been deprecated and [ 234.399416][ T7629] and is ignored by this kernel. Remove the mand [ 234.399416][ T7629] option from the mount to silence this warning. [ 234.399416][ T7629] ======================================================= [ 234.400494][ T6600] usb 4-1: device descriptor read/8, error -71 [ 234.434376][ C0] vkms_vblank_simulate: vblank timer overrun [ 234.533726][ T7627] netlink: 20 bytes leftover after parsing attributes in process `syz.0.479'. [ 234.544347][ T7634] 8021q: VLANs not supported on nlmon0 [ 234.618681][ T7627] netlink: 40 bytes leftover after parsing attributes in process `syz.0.479'. [ 234.759082][ T6600] usb usb4-port1: unable to enumerate USB device [ 235.235649][ T6600] usb 3-1: USB disconnect, device number 39 [ 235.241653][ T5978] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 235.418169][ T7654] loop6: detected capacity change from 0 to 524287999 [ 235.448818][ T5978] usb 4-1: Using ep0 maxpacket: 16 [ 235.458193][ T5978] usb 4-1: config 0 has no interfaces? [ 235.477983][ T5978] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 235.503040][ T5978] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 235.535923][ T5978] usb 4-1: Manufacturer: syz [ 235.555467][ T5978] usb 4-1: config 0 descriptor?? [ 235.608784][ T10] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 235.925892][ T10] usb 1-1: config 0 has no interfaces? [ 235.942946][ T10] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 235.952391][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.978688][ T10] usb 1-1: Product: syz [ 236.188950][ T10] usb 1-1: Manufacturer: syz [ 236.200336][ T10] usb 1-1: SerialNumber: syz [ 236.292626][ T10] usb 1-1: config 0 descriptor?? [ 236.524990][ T7672] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 236.570664][ T6588] usb 4-1: USB disconnect, device number 32 [ 236.596921][ T7658] program syz.0.488 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 236.612703][ T7658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.627035][ T7658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.798122][ T7658] ------------[ cut here ]------------ [ 236.798218][ T7658] WARNING: CPU: 1 PID: 7658 at drivers/gpu/drm/vkms/vkms_crtc.c:97 vkms_get_vblank_timestamp+0x137/0x160 [ 236.798273][ T7658] Modules linked in: [ 236.798363][ T7658] CPU: 1 UID: 0 PID: 7658 Comm: syz.0.488 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 236.798392][ T7658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 236.798408][ T7658] RIP: 0010:vkms_get_vblank_timestamp+0x137/0x160 [ 236.798445][ T7658] Code: 42 80 3c 28 00 74 08 48 89 df e8 54 8b 34 fc 4c 89 33 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d e9 00 3d 7a 05 cc e8 7a 07 d1 fb 90 <0f> 0b 90 eb e3 44 89 e1 80 e1 07 38 c1 0f 8c ff fe ff ff 4c 89 e7 [ 236.798467][ T7658] RSP: 0018:ffffc90003cbf268 EFLAGS: 00010287 [ 236.798503][ T7658] RAX: ffffffff85ef45a6 RBX: ffffc90003cbf3e0 RCX: 0000000000080000 [ 236.800746][ T7658] RDX: ffffc9000f165000 RSI: 0000000000002f9e RDI: 0000000000002f9f [ 236.800767][ T7658] RBP: 1ffff92000797e7c R08: ffffc90003479000 R09: 0000000000000000 [ 236.800785][ T7658] R10: ffffc90003479000 R11: ffffffff85ef4470 R12: 000000371fe39b19 [ 236.800803][ T7658] R13: dffffc0000000000 R14: ffff888141708028 R15: 000000371fe39b19 [ 236.800822][ T7658] FS: 00007f945d1d56c0(0000) GS:ffff888125d51000(0000) knlGS:0000000000000000 [ 236.800843][ T7658] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 236.800860][ T7658] CR2: 00007f31787b66c0 CR3: 00000000782aa000 CR4: 00000000003526f0 [ 236.800880][ T7658] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 236.800895][ T7658] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 236.800910][ T7658] Call Trace: [ 236.800920][ T7658] [ 236.800931][ T7658] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 236.800972][ T7658] drm_crtc_next_vblank_start+0x223/0x470 [ 236.801007][ T7658] ? __pfx_drm_crtc_next_vblank_start+0x10/0x10 [ 236.801037][ T7658] ? drm_gem_fb_vmap+0x230/0x8d0 [ 236.801073][ T7658] drm_atomic_helper_wait_for_fences+0x265/0x8c0 [ 236.801108][ T7658] ? __pfx_drm_atomic_helper_wait_for_fences+0x10/0x10 [ 236.801134][ T7658] ? drm_atomic_helper_prepare_planes+0x670/0xb60 [ 236.801175][ T7658] drm_atomic_helper_commit+0x5c7/0xb10 [ 236.801210][ T7658] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 236.801236][ T7658] drm_atomic_commit+0x262/0x2c0 [ 236.801263][ T7658] ? __pfx_drm_atomic_commit+0x10/0x10 [ 236.801286][ T7658] ? __pfx___drm_printfn_info+0x10/0x10 [ 236.801319][ T7658] ? drm_client_rotation+0x47c/0x5b0 [ 236.801357][ T7658] drm_client_modeset_commit_atomic+0x620/0x760 [ 236.801408][ T7658] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 236.801466][ T7658] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 236.801516][ T7658] drm_client_modeset_commit_locked+0xcb/0x4d0 [ 236.801562][ T7658] drm_fb_helper_pan_display+0x3e7/0xbd0 [ 236.801608][ T7658] fb_pan_display+0x39b/0x680 [ 236.801631][ T7658] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 236.801665][ T7658] bit_update_start+0x4d/0x1e0 [ 236.801694][ T7658] fbcon_switch+0x1568/0x2040 [ 236.801744][ T7658] ? __pfx_fbcon_switch+0x10/0x10 [ 236.801797][ T7658] ? __pfx_hide_cursor+0x10/0x10 [ 236.801832][ T7658] ? is_console_locked+0x9/0x20 [ 236.801854][ T7658] ? set_origin+0x346/0x480 [ 236.801887][ T7658] redraw_screen+0x56a/0xe90 [ 236.801916][ T7658] ? fbcon_set_palette+0x6cb/0x860 [ 236.801957][ T7658] ? __pfx_redraw_screen+0x10/0x10 [ 236.802001][ T7658] do_fb_ioctl+0x6fd/0x750 [ 236.802032][ T7658] ? __pfx_do_fb_ioctl+0x10/0x10 [ 236.802105][ T7658] ? __fget_files+0x2a/0x420 [ 236.802137][ T7658] ? __fget_files+0x3a0/0x420 [ 236.802161][ T7658] ? __fget_files+0x2a/0x420 [ 236.802190][ T7658] ? bpf_lsm_file_ioctl+0x9/0x20 [ 236.802222][ T7658] ? __pfx_fb_ioctl+0x10/0x10 [ 236.802249][ T7658] __se_sys_ioctl+0xf9/0x170 [ 236.802285][ T7658] do_syscall_64+0xfa/0x3b0 [ 236.802308][ T7658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.802330][ T7658] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 236.802352][ T7658] ? clear_bhb_loop+0x60/0xb0 [ 236.802380][ T7658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.802403][ T7658] RIP: 0033:0x7f945f38e929 [ 236.802423][ T7658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.802444][ T7658] RSP: 002b:00007f945d1d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 236.802470][ T7658] RAX: ffffffffffffffda RBX: 00007f945f5b6160 RCX: 00007f945f38e929 [ 236.802488][ T7658] RDX: 0000200000000040 RSI: 0000000000004601 RDI: 000000000000000d [ 236.802503][ T7658] RBP: 00007f945f410b39 R08: 0000000000000000 R09: 0000000000000000 [ 236.802518][ T7658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.802539][ T7658] R13: 0000000000000000 R14: 00007f945f5b6160 R15: 00007f945f6dfa28 [ 236.802577][ T7658] [ 236.802598][ T7658] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 236.802615][ T7658] CPU: 1 UID: 0 PID: 7658 Comm: syz.0.488 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 236.802641][ T7658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 236.802654][ T7658] Call Trace: [ 236.802663][ T7658] [ 236.802673][ T7658] dump_stack_lvl+0x99/0x250 [ 236.802706][ T7658] ? __asan_memcpy+0x40/0x70 [ 236.802737][ T7658] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.802770][ T7658] ? __pfx__printk+0x10/0x10 [ 236.802810][ T7658] panic+0x2db/0x790 [ 236.802850][ T7658] ? __pfx_panic+0x10/0x10 [ 236.802877][ T7658] ? show_trace_log_lvl+0x4fb/0x550 [ 236.802933][ T7658] __warn+0x31b/0x4b0 [ 236.802962][ T7658] ? vkms_get_vblank_timestamp+0x137/0x160 [ 236.802999][ T7658] ? vkms_get_vblank_timestamp+0x137/0x160 [ 236.803032][ T7658] report_bug+0x2be/0x4f0 [ 236.803060][ T7658] ? vkms_get_vblank_timestamp+0x137/0x160 [ 236.803094][ T7658] ? vkms_get_vblank_timestamp+0x137/0x160 [ 236.803126][ T7658] ? vkms_get_vblank_timestamp+0x139/0x160 [ 236.803159][ T7658] handle_bug+0x84/0x160 [ 236.803181][ T7658] exc_invalid_op+0x1a/0x50 [ 236.803202][ T7658] asm_exc_invalid_op+0x1a/0x20 [ 236.803222][ T7658] RIP: 0010:vkms_get_vblank_timestamp+0x137/0x160 [ 236.803255][ T7658] Code: 42 80 3c 28 00 74 08 48 89 df e8 54 8b 34 fc 4c 89 33 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d e9 00 3d 7a 05 cc e8 7a 07 d1 fb 90 <0f> 0b 90 eb e3 44 89 e1 80 e1 07 38 c1 0f 8c ff fe ff ff 4c 89 e7 [ 236.803273][ T7658] RSP: 0018:ffffc90003cbf268 EFLAGS: 00010287 [ 236.803292][ T7658] RAX: ffffffff85ef45a6 RBX: ffffc90003cbf3e0 RCX: 0000000000080000 [ 236.803308][ T7658] RDX: ffffc9000f165000 RSI: 0000000000002f9e RDI: 0000000000002f9f [ 236.803323][ T7658] RBP: 1ffff92000797e7c R08: ffffc90003479000 R09: 0000000000000000 [ 236.803338][ T7658] R10: ffffc90003479000 R11: ffffffff85ef4470 R12: 000000371fe39b19 [ 236.803354][ T7658] R13: dffffc0000000000 R14: ffff888141708028 R15: 000000371fe39b19 [ 236.803376][ T7658] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 236.803420][ T7658] ? vkms_get_vblank_timestamp+0x136/0x160 [ 236.803458][ T7658] ? vkms_get_vblank_timestamp+0x136/0x160 [ 236.803486][ T7658] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 236.803520][ T7658] drm_crtc_next_vblank_start+0x223/0x470 [ 236.803558][ T7658] ? __pfx_drm_crtc_next_vblank_start+0x10/0x10 [ 236.803584][ T7658] ? drm_gem_fb_vmap+0x230/0x8d0 [ 236.803615][ T7658] drm_atomic_helper_wait_for_fences+0x265/0x8c0 [ 236.803648][ T7658] ? __pfx_drm_atomic_helper_wait_for_fences+0x10/0x10 [ 236.803671][ T7658] ? drm_atomic_helper_prepare_planes+0x670/0xb60 [ 236.803709][ T7658] drm_atomic_helper_commit+0x5c7/0xb10 [ 236.803739][ T7658] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 236.803762][ T7658] drm_atomic_commit+0x262/0x2c0 [ 236.803787][ T7658] ? __pfx_drm_atomic_commit+0x10/0x10 [ 236.803806][ T7658] ? __pfx___drm_printfn_info+0x10/0x10 [ 236.803835][ T7658] ? drm_client_rotation+0x47c/0x5b0 [ 236.803870][ T7658] drm_client_modeset_commit_atomic+0x620/0x760 [ 236.803915][ T7658] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 236.803969][ T7658] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 236.804012][ T7658] drm_client_modeset_commit_locked+0xcb/0x4d0 [ 236.804049][ T7658] drm_fb_helper_pan_display+0x3e7/0xbd0 [ 236.804106][ T7658] fb_pan_display+0x39b/0x680 [ 236.804128][ T7658] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 236.804178][ T7658] bit_update_start+0x4d/0x1e0 [ 236.804204][ T7658] fbcon_switch+0x1568/0x2040 [ 236.804254][ T7658] ? __pfx_fbcon_switch+0x10/0x10 [ 236.804307][ T7658] ? __pfx_hide_cursor+0x10/0x10 [ 236.804342][ T7658] ? is_console_locked+0x9/0x20 [ 236.804363][ T7658] ? set_origin+0x346/0x480 [ 236.804396][ T7658] redraw_screen+0x56a/0xe90 [ 236.804424][ T7658] ? fbcon_set_palette+0x6cb/0x860 [ 236.804466][ T7658] ? __pfx_redraw_screen+0x10/0x10 [ 236.804513][ T7658] do_fb_ioctl+0x6fd/0x750 [ 236.804550][ T7658] ? __pfx_do_fb_ioctl+0x10/0x10 [ 236.804624][ T7658] ? __fget_files+0x2a/0x420 [ 236.804655][ T7658] ? __fget_files+0x3a0/0x420 [ 236.804678][ T7658] ? __fget_files+0x2a/0x420 [ 236.804707][ T7658] ? bpf_lsm_file_ioctl+0x9/0x20 [ 236.804738][ T7658] ? __pfx_fb_ioctl+0x10/0x10 [ 236.804765][ T7658] __se_sys_ioctl+0xf9/0x170 [ 236.804801][ T7658] do_syscall_64+0xfa/0x3b0 [ 236.804823][ T7658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.804844][ T7658] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 236.804865][ T7658] ? clear_bhb_loop+0x60/0xb0 [ 236.804893][ T7658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.804915][ T7658] RIP: 0033:0x7f945f38e929 [ 236.804933][ T7658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.804952][ T7658] RSP: 002b:00007f945d1d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 236.804975][ T7658] RAX: ffffffffffffffda RBX: 00007f945f5b6160 RCX: 00007f945f38e929 [ 236.804991][ T7658] RDX: 0000200000000040 RSI: 0000000000004601 RDI: 000000000000000d [ 236.805006][ T7658] RBP: 00007f945f410b39 R08: 0000000000000000 R09: 0000000000000000 [ 236.805020][ T7658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.805033][ T7658] R13: 0000000000000000 R14: 00007f945f5b6160 R15: 00007f945f6dfa28 [ 236.805071][ T7658] [ 236.805328][ T7658] Kernel Offset: disabled