last executing test programs: 16.894233096s ago: executing program 3 (id=980): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800500"], 0x80}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="000086dd0000120000000000000060fc0300004800fe8000003a00000000000000000000aaff0200000000000000000000000000013a00000005"], 0x7e) 16.741738746s ago: executing program 3 (id=982): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r2, &(0x7f0000000200), 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x6, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0xfffffffa, 0xffff2d33, 0x1dd2, 0x6, 0x7, 0x0, 0x80000000, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x3, 0x3, 0x107fff, 0x4c74, 0xfbf5, 0x0, 0xb, 0xa, 0x0, 0x71, 0x7, 0x2000007, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0x6, 0x3, 0x4, 0x4, 0x8, 0x0, 0x7f, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0x8, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0xfffff000, 0xfffffffe, 0x8, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x0, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x801, 0x8, 0x4, 0x0, 0x106, 0x2, 0x8, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x83, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xd, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x387d, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x80002, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x20005, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x2000008, 0x2], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce5, 0x1fd, 0x6, 0x5, 0x5, 0x40000003, 0x100, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x5, 0xffffffff, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffb, 0x5, 0x8, 0xc8, 0x3, 0x3, 0x80ffff, 0x200003, 0x5, 0x80000000, 0x9602, 0xa, 0x2, 0x4, 0x10, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x3, 0x8, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x918) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000180)={0x1d, r4}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000280)=ANY=[@ANYBLOB="38010000100001050000000700000000fc01000000000000000000000000000100000000000000000000000000000000000000002000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="e0000002000000000000000000000000000000046c000000fe8000000000000000000000000000bb02000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000050000000000000004000000000000000a000000000000000a00000000000000000000000004000000000000fcffffff000000000a0002062000000000000000480003"], 0x138}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x29) ioctl$KVM_CAP_MAX_VCPU_ID(r6, 0x4068aea3, &(0x7f0000000140)) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000000)=[{}], &(0x7f0000000040)=0x8) 16.614128679s ago: executing program 3 (id=983): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="60a1d64594cb4f3f000000", @ANYRES16=r1, @ANYBLOB="00042dbd7000ffdbdf25030000002400070073797374656d5f753a6f626a6563745f723a7373685f657865635f743a7330001400060076657468305f766972745f7769666900140006007369743000"/90], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x40000) (async) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r0) sendmsg$NET_DM_CMD_START(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x14, r2, 0x1, 0x70bd2b}, 0x14}}, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x101, 0x0) write$FUSE_DIRENT(r4, &(0x7f00000001c0)=ANY=[@ANYRESOCT], 0x200001d0) (async) write$cgroup_subtree(r4, &(0x7f00000000c0)={[{0x2d, 'blkio'}, {0x2b, 'freezer'}, {0x2d, 'memory'}]}, 0x18) r5 = syz_open_dev$vbi(&(0x7f00000000c0), 0x3, 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000580)=""/174, 0xff56) (async) ioctl$VIDIOC_G_SLICED_VBI_CAP(r5, 0xc0745645, &(0x7f0000000200)={0x0, [], 0x5}) (async) syz_usb_control_io(r3, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000400)=ANY=[@ANYBLOB="601300000000c45c42b64b3c212ef7cddd6f925443fa7c145b3dae466e57e8d5df8baa1e76f0b40c9ceb97f67b03cdd7824873a5b61d0d4536006bcbf743c8f4f46b34955c41c7f8d9503fe1fe73daeca09634e0e416f1faea49a4b47260af5808cc5ced95a961d0362c86a0cedf1718acbdd142d1f32a333c214c792c58923dedad2d1733c95d70fa6e3adf33ad189db05976458bec27bdb36a3cde2c59462d8868cf048703614d6db3d0599d142419444a83e848ec97b518d15e0426a37881943dbacd7b17e4127e00218d20246cf0ca986eda4a84886be2dbab"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002abd7000fbdbdf250d0000000c000600030000000300000008000300", @ANYRES32=0x0, @ANYBLOB="080001000000000008000300ce005f697280000000eccc13cdc5121f42c44f0b26626d7d494cc8b3d06513793d5bc670", @ANYRES32=r8, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x4000) 15.434094867s ago: executing program 3 (id=990): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800500"], 0x80}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="000086dd0000120000000000000060fc0300004800fe8000003b00000000000000000000aaff0200000000000000000000000000013a00000005"], 0x7e) 15.294993932s ago: executing program 3 (id=991): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r0, 0xffffffffffffffff, 0x3) readlinkat(r0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)=""/87, 0x57) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r2, r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) setpgid(0x0, r2) setxattr$incfs_metadata(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, 0x0, 0x2) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000080)='configfs\x00', 0x200, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000000080605000000b88100000000010000062b23a7732b1f5d6f680900020073797a30000000000500010007000000"], 0x28}}, 0x0) 15.218678291s ago: executing program 3 (id=992): r0 = socket$inet(0x2, 0x4, 0x3) r1 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) lseek(r1, 0x9, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000280)="08001efbb07d5a6e", 0x8}], 0x1, &(0x7f0000000840)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4, 0xb3, 0x3, 0x4}]}}}], 0x18}, 0x4840) 7.826611049s ago: executing program 2 (id=1031): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000000)=0x2) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000040b404b1070000000000010902240001000040b109040000020300010009210101000122050009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="200a05"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) preadv2(r0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/227, 0xe3}, {&(0x7f0000000280)=""/48, 0x30}], 0x2, 0x4, 0x0, 0x3bb0bbe3e43d56e6) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000002c0)) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x109080, 0x0) ioctl$SNDRV_PCM_IOCTL_XRUN(r3, 0x4148, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) 7.592543692s ago: executing program 1 (id=1033): r0 = socket(0xa, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000480)={0x10, 0x0, 0x25dfdbfb, 0x808b9027}, 0xc) r2 = socket(0x18, 0x1, 0x1) getsockopt$inet_int(r2, 0x111, 0x32, 0x0, &(0x7f0000000380)) recvfrom$phonet(r2, &(0x7f0000000340)=""/181, 0xb5, 0x142, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, &(0x7f0000000040)='\x00', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xfffffffc}, 0x1c) 7.523809s ago: executing program 1 (id=1034): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) accept$inet6(r1, 0x0, 0x0) get_mempolicy(0x0, 0xfffffffffffffffe, 0x80, &(0x7f0000ffb000/0x3000)=nil, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x3c, r4, 0x1, 0x70ad2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x3c}}, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r5, &(0x7f0000000000)={&(0x7f0000000780)=@in={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, &(0x7f0000000500)=[{&(0x7f00000000c0)='5', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) shutdown(r5, 0x1) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000180)={r7}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={r7, 0x7, 0x17}, &(0x7f0000000100)=0x8) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r0, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002a2b8d240bb2170200b87010203010902240001a00800040904c81e010103f70909050803ff030406090221072501"], 0x0) 6.227382001s ago: executing program 1 (id=1035): r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x22826, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(streebog512-generic,ecb-twofish-avx)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c582", 0x5) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r4, 0x4068aea3, &(0x7f0000000000)={0xda, 0x0, 0x1}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x72, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYRES8=r0, @ANYBLOB="6bbf0e5f670aba51402490c53029b74db787054e6ee15a94f25d1105307d368708b3df90758fd31dd6d810a5f810be95eda9edda9ac5263dc386db8235208c5b3087db8e43dcba60fe4255b2e33af91a324d9d6cab322a439e17a1e957d62eea2d4bb97f311ae975c1e522d6857af6996e8e74bee90c35fce89973dde21da51b8fea1f0e20b2c0"], 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r6, 0x800248a0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000180)=@arm64) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140), 0x8802, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_user}]}}) 6.116660978s ago: executing program 2 (id=1036): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_usb_control_io$printer(r0, 0x0, 0x0) (rerun: 64) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0x1) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'team0\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) (async, rerun: 32) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000"]) (async, rerun: 32) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x10a880, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) (async) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async, rerun: 64) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x547b, 0x1035, 0x200000000006, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0xbf4, 0xfff, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) (async) ioctl$KVM_NMI(r5, 0xae9a) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) r9 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x80802, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) 5.119951073s ago: executing program 2 (id=1037): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800500"], 0x80}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="000086dd0000120000000000000060fc0300004800fe8000000040000000000000000000aaff0200000000000000000000000000013a00000005"], 0x7e) 4.994648244s ago: executing program 2 (id=1038): syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315f9b10102030109026100010000000009040001"], 0x0) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x56a, 0xc6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xf0, 0x60, 0x81, [{{0x9, 0x4, 0x0, 0xff, 0x1, 0x3, 0x1, 0x1, 0x5, {0x9, 0x21, 0x200, 0x2, 0x1, {0x22, 0xd67}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x1, 0xc, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x0, 0x5, 0x5}}]}}}]}}]}}, &(0x7f00000000c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x5, 0x7, 0x88, 0x40, 0x8}, 0xf, &(0x7f0000000100)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x1, 0x5, 0x2}, @ptm_cap={0x3}]}}) 3.962424921s ago: executing program 0 (id=1042): mprotect(&(0x7f0000ffb000/0x3000)=nil, 0xffffffffdf004fff, 0x0) r0 = socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x4000042, 0x83f}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x200000000000000) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x50, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x5}, {0x6, 0x24, 0x1a, 0x2, 0x30}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xdf}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x14, 0xc}}}}}}}]}}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x94, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x0) io_submit(0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r6, &(0x7f0000004280)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000003c0)="b1", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000800)="f6b328c40d4cc969a0513b8ffd72381d4ef4a89954104d4a81db2fa3c0f906a33482e2821787ac54c0c62da54d1c77255c322358d0e272be2ccacf8f689f0115afd7305a1ce39e8b54734910fd9257fc4d3d2f910d5b9965f73440df67940c76ddc3df03db0d78c28fc030a88d5060290aa8ec", 0x73}, {&(0x7f0000000000)="20c048210440d8394cdcb9ee88a6b7584a3f07b1b1d67f42b2dda515bffbb8de861e60d4ee6dad6649b7628fdf1055f9a1", 0x31}, {&(0x7f00000002c0)="ee41e16fcc123e48fa04ef6edfc0fe23b7a87e1e837f1d1104d11ab1934265fd5cfbca479a17e7420ec938e84ad449c00288b126e26d", 0x36}], 0x3}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="03", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000001280)="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", 0x52e}], 0x1}}], 0x4, 0x48090) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r6, &(0x7f0000000580)="17", 0x501, 0x10008095, 0x0, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000280)={r4, r4, 0x1, 0x0, 0x0, 0x9, 0x8, 0x2, 0x5508, 0xc338, 0x1, 0x7, 'syz0\x00'}) 3.812443537s ago: executing program 0 (id=1043): syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x28802, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close(r2) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000340)=ANY=[@ANYRES16=r0, @ANYRES32=r0]) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r3) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) socket$can_bcm(0x1d, 0x2, 0x2) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r8, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) close(r9) socket(0x10, 0x803, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.718815554s ago: executing program 2 (id=1044): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) fsetxattr$security_ima(r0, &(0x7f0000000000), &(0x7f0000000080)=ANY=[@ANYBLOB='\n'], 0x1, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYRES16=r0], 0x0) 3.214026449s ago: executing program 0 (id=1045): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x5902}) preadv2(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/65, 0x41}], 0x1, 0xb54, 0xa, 0xd) r1 = socket$tipc(0x1e, 0x5, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000040)=0x2fff) r2 = syz_usb_connect(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000180), 0x9, 0x244000) ioctl$SIOCX25GDTEFACILITIES(r3, 0x89ea, &(0x7f00000001c0)) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000340)={0x14, &(0x7f0000000280)={0x40, 0x23, 0x97, {0x97, 0x6, "fc7d950dc06adcf30f0fb8afa6c7098392aa3f449b4f39d9a3602f0016b26a188a33a84aae7fcfe227435c9a6a46ca37b3d4fb5925defcb2f50f90f5d93fcc842a9c1be3169257b13cf64ee8d6dbd7dae03675f5cfa89efa88e754c3ac3be0af23c7b84e308c3392e084f5e919a75ef8534fdbe5dbb165a18cc319c8627363fa07a3b83f6d6cf4b050ef57923009e04212d55262a2"}}, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000005c0)={0x44, &(0x7f0000000380)={0x20, 0xb, 0x7, "059301969082cf"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x11}, &(0x7f0000000480)={0x20, 0x80, 0x1c, {0x5, 0x2, 0x1, 0x7, 0x5, 0x9, 0x1, 0xd, 0x7f, 0x0, 0x3, 0x1ff}}, &(0x7f00000004c0)={0x20, 0x85, 0x4, 0x1000}, &(0x7f0000000500)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000540)={0x20, 0x87, 0x2, 0x2a}, &(0x7f0000000580)={0x20, 0x89, 0x2}}) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x105000, 0x0) ioctl$SNDCTL_DSP_POST(r5, 0x5008, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) close(r4) 3.112459719s ago: executing program 1 (id=1046): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800500"], 0x80}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="000086dd0000120000000000000060fc0300004800fe8000000000000100000000000000aaff0200000000000000000000000000013a00000005"], 0x7e) 3.058338985s ago: executing program 1 (id=1047): r0 = socket(0x25, 0x5, 0x0) getsockname$packet(r0, 0x0, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r2) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000229bd7000fedbdf0000004c0008804800008024000100000000e6ffe21468c7d607000000000000000000000000000000000000000000200004000a004e2400000009fc020000000000000000000000000001ff7f00000f449f5f7073c66573ad8054"], 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4888) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd70000000e6005e06000600884700"/34, @ANYBLOB="6e0718dae2e7eeabc9a9766778b83299b2be68d993c5c9b83da4a3e55c84af07d011b0fe8b7ca3c605bc699f6a0e8e25147e502b3fd2e8567ed048bd75eb8a3e446776ae20f2626e5e6ebe9df7455eaba671855d3dde9a35527d5f2f9dfea64696e25bccc667ccbdb89c1531a84acf152435a21c2ad8c2ea6a27d0b9392e6cdb6b65a5fddda4fe90d68f200b1332552a327efa3c4b6b63d07ae314203d44c430ee154ff91c631597867c0f90692df2b0582cf5195e3768155fe432183886d6ae70174c7e80c60d7a2f6e7114393c5288c7d8b076a3c46c33c771e529f91c454e65ee21fdae386c51e3b6e082fe6f4d5e65dfccf6cb54aff11025fdc41965dd10ff745f0936def4b935791bccfe5f0984bc1b51a874598c17534d23e00cefa073c83544f8a107369d5bd8bc4b1bf898767e8ce1592e309d6e2e9f15098509a81bbad5ef3877f2c00a4ee5c9ed61cbd80b6e809347117395835e6a52f1b222c8260ef4bffb6777c0510772db3554632697b00ec11feb6e51812a766b39f4fb88a2ea01f6525762dca4c34f32080f4bbdabe701cad278e12e6dd8a27ed88a53debc925a3278074aca5355ec94133409ad0e52a3cf38507699c40a03899aed5f3da2e63a1d07b752523b34977e27a009b806391a6d97cdc0e798b3b760be6da9396387249c468ce3c183616319e4cb482160dd17341d13632c95f8acea7548fe118e5a97d8a51f39feb97bd8fc599a29a97d706fe8266ea98b740d52751693669766ec16e70fc824df66fe7ec2031eb8b67eb1e4596228951c8200435531295b74d18a18740bcb383974d1a23a302f22477edf30f725b96030abbe1013462e90ec4713865a762fff1f5f2cd4d2caaae4bc7ae476cd52c03030fef5ab5737ba046bf6a8610d4d9c8e35563e9315d54783219d213a2d352440b95b740c0ca7f39a8901135db0eac5da508cdc963f761de8fe842d18b87056a17f1dd1b51c3111db4f43f0ad6f969f1c345161203432e4bd7461d8885647e07a3dbd620451b8560de4236cde184a3ccc51be27d3c274f1c2d36ce18261e7b1f0b33c66768357298f790f762c10508129fab211083c54a33aae69bb50b136dd874e5e9dadf035e070d71994bced69ec7b24bae37f66af53e5ee5f3f9c8c8ad33558a6d7e4a7bc2063061c6dd3e1079b95e60039e0c553a077bad9b1560e3f5f7b2a4a99ce6754950c3246f33f3a2e03ad196524dadd11a63815a962642ecfd0bc1672ac50b5dfba4a5884b0296f6e5af7cd8cd7b1f67230527ae98289ba3b7d39fc63f6539d9bdfef9fdb721073a428e54a08403df96e73cca5f781a7a4c15d5a5daef72e87f298e50e0c78ec1320e717f2878faceb719538720051b2cc5b04f09e5ec8cc5a292e6d605f63cedaaea9bc1e000c950c610313b8cc2536b1902c6a392960a6ab4dc7cf7f66c714fa68317c430928fb8ab860d69ecbb3456561c71aee05b69ba22ab3e0dd94a4d85768892fc382f61cd4913f987710340254bb29d414d871443dd3588d487683dbe3196d95b8ba0af1c8720441c4e433a1f1f56bc72adfac24560e51b105147089fc2e785e34a5229627017d3e89a2b5db65a8d78e2226b79af170783e9e01bf4a73f7f4af2215f16f53d39771c90969098b97037779cecf2de320cea4230502f7958674b7aece063183ccbd266d7f0c6a352c0458900918548328fe6014b97edc1dd4c17dba8a82caf931d65560f383463fd4501816e832e7e4a575012e1a625fff68e93947dcf2dea2a1ad4f0a819a9003ffee6317930c183cfffb8c14cc29d521766b7cf716c0a01cc936c654ac7f8084510ab09a15be452c9b93b0198e7823db057dfb6c5025eace86e82741b61dfb1f37e3c6ec258647d42a9e23bbe4ef4c4c90877a933bac34b82f962cfa29f9e5c3950921d11f318e48f1027d513a1144f2721f667a3ce7e978fa49001bc16421bfd9b6c7bdd25213cc077255581e5fa3445224fc4906a51e4a4455669dde9e4cd5472d4d55f9f9982b73379e8d36dd4b11262cea77b2af95808397887dd45c1137f5019e01479c6d8518d8f06c60be469839da1ebeb5e4f6662a601409771dadacee90d7ef66da37a9b37c2ed9101cf2b49acb1da4ee99295a14f8f0eab1a41d9a7da2e69d3d2f907982914c2b7d920d352ce4396b58d00686b0cca1849673cd967fd0c92aef444892b5ae44d3cd9993a06c69fd3729c1a9b6c2d305b16b41457ee0f61c5a351c8014fcf34986a484f8aac9f401c6f8ba92a8d73e57efe11aa0dd79fac1a3f3e2578280ff1593c13ef44ef4114c2afa1abb46a9c7a148047f76a5b98d0e6b30d789132bda2695c099bc8a4809794ab3ee27a50ba0ea668d20b35e6d2738d4bb4ae3f2a2d29edd21ba816543dde50860eac20b2fb5fb82c1d8ce407cee57c924d605a3d2359d9dee5e583fb054364424dec46f02576293223c24ee70c8fc447550d566de68ff16c8c191a5a09db3ede0d62e0b412445384319a889b81244ec741b7d4928b91cf6eda939a40f3450b4a36eb35c36a8ffcb37e7c8393a84744384ac542e8510e05a037291a258fc8b53adba3e79680a0e385713d967f08580e56a10a64f2cc3022013ca41ae68193df84d13bf21c14bfecb213588f7992c0c94d311f792a464522419b63b1648f5f2d76494fe21b84753c21341c34559a5ab62e93f4757d959e130c1275b7c23b5fa5e911ba610fc521cddb2bbb9f46d0ff59fd1fac252442e5cce55da6d43e5e8ba7480f0021288cfccc8d6067d166e64ae0539ee33b30ead06369306ca4060e26893b00d4effecd3515e01101e32f67711089638aacce258b081f2c58077136c1102e9949a1abc4505ddb41496d9d2eef3ace77901a242dfb27c158e2bcfb6a38af79b0a9b01e1b036f052fee02fa5ae36985111f3cb352615608a7e7f0113584229287a127f8e991a5778b01e803230ebf12de564f2f697e41f5549c874320e2a6e7f936abb471dadb4c43165be504eb77a28dd8c41b30d767b5d2e6bb4dbd3986465d998a85f45e9e898e74dbae71220e11cac26b4cffd1b205ca6e22faf56ddd52493f6092adf0b4d7106a53b723f0f2f7b112fa20346d9c161ab6682e86ed6ee5a64a39a909c1e3de9f6b7e63ea68cae56d87283119d628e06ca557228bb8ea91ff434dc7baff60ab50aac84ce6e4d996b3a217ada136812f8be9a663b70c2c4f6beddb56cccbe3ea1a523ee9e4b41cd4dcc863ded5a2226973579d9b6b7f65397a98531573e627455e3cea7bd0e6caecea1ad6e367f4d254fab3e9083dbf25a771680f62398b9389caf6df0ca109db879fde1f0e78eafe2180a55bf1de51dcbc85bf0a5163bd02739fdd3808677fa9e89fcdd937463139b5dfed575f2a1035ae9db3ac2eab3d9ae632668a63950171c10ba081eb93fa0ec5b2a89a5b77265cd9b5a268fbede367234350dd2b52f3b48e6cae222cc2dff1f17b2b40e55af385d423a33f0ee0211fbf7eaa2ffaff403a90052f747ffe2c038f3250c00dc317df04255f92bca656075d0c910af18d41d78e8664b0e365ddfb7321186d039c8ccdfb4114a1ecdf6f01bcdb1b20775310f93bfb91022e4c89b13180fe908d658c0c2bd50df0e0cb922f92d154ce73d65bd2f42cb5d93de5e74f57b20242f8926a21dbc1da19a4188de4f356ddd340895e4899321e2624fd419abfd1d26805ddb13864c14189d35ec6b64f7afe327ae11920445c9fd3385c9b8e5b564cc8a23106f96a825fdbf44aa5466993d2e7b23283a546bdca76fe90014632de3277bff7b7a3f96233997b8d396189c79aabbd5a26492b2ff4c1c27a2fd8bbbfca93fe1df9ebadc51852a3f7ae1c4507d70055c0c2a603bce7ce7fe657d6f29629f7ed24759698399fa568de8cb581f41e0f312fc129a9c6909c928e686bc1cb2f9c005f6a9410bdf7076ee41aa51bdd84cf80f49f747f0e4b44e64a6b752c634349a764c1f69f76354a0be0305840ad0f528af6206169b30d3f1ac6f4829c4838774a3cc0edc2477a7d943d4682a0028a4f29dd7c00d57de977bada99ad60ecfd318a4ca5adb4770d64e2f0d12bb51200bc4cc9fa96053d25105f75813039971889adfa4652aaecafa5572e73e0dc9840b8a9890bf3d375694343e91d0a311d8ceb2571583b16aecd3cb07a238b1139ad3f28c9c34f33c7713212568b5af23f139c8a1f26e2ceea3a56358f7c936898f7c30b7dc7e27b7b9e4fa8d52153ec326f263a76066133c7591679ad714e1959109d8cfe96369248cb7b3952dd42682a8e6976678caaef4c3f9c8a85e58baf12985aeef403e900ced013ca3ed61c20372e6a1a847a63a8224d4a25075a1ae3c6933e38f7af520bbeeab53837e3bf9a916d1d2592d52496c955b9e560ce518f2d432a048c044f7436f86dd36228c9b3b86f8ddbb6ab7741fa1fc64719ec56888c0d74949b45d19945792bb17ca212aca3b29e21d8c6166b032e15dbf1a514118e659c6ff9cd4a8f50b5dd9b3e7ddb92dedb395b13aae7c5bd8f0d5bd1ce10510ee0dd6473b9e16d34d4f229f214e35ce391b30cd9f2380085515490d90ccad5e0719e7d934f7b3f6ecd72a2d10dd7f9a5519a0412672274db47828a5e2b8af7cf2a1168ce2b5d2f0e3e47a67ae3b41c4bd0d09544928fa8c5d236f862c4671a02c64bb3acb0b7dae41e0206ba6ea13b69b69668d8dfb1ae1921841b685b2b13f747842aed2a8e109fe0bd307cee5cb11dbe8062ae8e379b9b644383b4fd75a3a8a0ae4ce6cc7efb2765e8484dcc901caeb953796f2024fd6b3e5741fe0734a73887f0826b3b1a859d4ef600b29f08b9cbc5b4e95691e557de8f850be1d4f2bfbc064d94423a3fd9784238ecc074316c5a05afc920e79f81f9ce4a0ae1c11dde2d1e0506d7148065af3539e7f57f3efd5e407b2a1a116e687aa9c7e30b1dca056dafee7cf77ff7753595a0ca12194661ee7a1f88c3f5ea67df14149126b1ea603a6e0b2310164a97de1e9b7ba7586ca874aa4f82c0f941fbfc4aeec1da0604edb97af99a5883d6572a07e48d73cdc6963d9f506aea8f7f92054a5381834dc73a233cc21420bb5b3d4c68ca694ccc476d832d81fa314e6e4569a66a6aa1caf7a5d1bb4b7f08e520705716ada66107559032121715c991abcb3ac3e07e3dc96bb2b509a8478d4830e3dd8f0896280a377bc592a2850cded34cc2d7640d6add82df5d0a0eac88b89d944283b7bcff916f942cc92bd06976c0f92f2227a9bb21f36ebf740a3bcd705bc68a57a1bc33ab74d64daaf9cbb24e668a85658c53c45c07bb0ad2e5166ffbbab3d1a65b34951dca6dc80bc1b7431ddb0a935b61927f363ac4c77ada19460e753b2dbcaf430ef254c94b73b91ecdf7dc0816eb7a6d39c7b96b89521eb34cb26676d0ee74d0d6bd62e88f7c87d39c90945ba87e98cd9a3ea3b717cc1ce3aa65cede5f87ed349f5b477c9bcd40d47b43302674dee31884d7b41687949640258e7d6c83b15cd55e65d73386a2408001989de6528e0f107ac81158667dd5b3c6716c9fe93cda9adcdf04d5695b6271274ef64a1551aa60f1432e3ec359cd8fbf8aff733d7007e0ebb78ea09ddd6cbd3ac044390896077caa65451834cb1612acd871f85f177a75664b3ea22802fd796bf27dc704d1999fc37842ad6e4e3d64f6ccc3f3c98b764ef2dd05c380bfbc4ba84543994366b23d1987dd7664059013e172e7434cdc483206a0a284ca77340af0e5906f0967c781042cd081d7508a90335e5d7b3d50d36fec68c507b", @ANYBLOB="8d4bb1ad11098d17ffe90c2d0986de98f439405c9e15948bae6d09082212754d0e984cdade2641913f689cb81ea96e050fac5eb0e45104a9a60e17038b0c7275739677a69a7628326eb535390be804ca903d7efb7fe471b82de316e5ef7b6e8b043360371da3cce5de8941938023b6f933c827c42a2dfbae73d38b0a16c4543fede1dd0691997dab9abe36d605bd94c65a25b40ab4fa64c78740005872a4bd0dfa45893acbc4f85a84ed1fde3bbc05a8ac19ce64b560d77b199faf4184000c33a33d", @ANYRES8=r3], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000) syz_open_dev$I2C(&(0x7f0000000000), 0x1000000000000001, 0x402) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x101802) read(r1, 0x0, 0xfffffffffffffdd1) r4 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x6) fcntl$setsig(r4, 0xa, 0x21) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000300), &(0x7f0000000340)=0x4) fcntl$setlease(r4, 0x400, 0x1) ioctl$EVIOCSABS2F(r4, 0x401845ef, &(0x7f0000000200)={0x3, 0xc, 0x151, 0x8, 0x9, 0x38}) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x2b, 0x80801, 0x1) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x10020, @empty}, 0x1c) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(ecb(aes-fixed-time),tgr160-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 2.584665773s ago: executing program 0 (id=1048): ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x38, @mcast2, 0x6}, 0x1c) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCFLSH(r1, 0x540b, 0x2) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="5e54e574da93883e8c628a60eb17cbe584d2e73c68141965f3fbcf0e16db6e759d420151c6c57504", 0x28}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="24000000000000002900000032000000fe0100e5ff0000000000000000000800000060"], 0x28}}], 0x2, 0x40084) syz_usb_connect(0x1, 0x36, &(0x7f0000000100)=ANY=[@ANYRES32=r1], 0x0) 1.988769196s ago: executing program 0 (id=1049): capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000000)={0x200000, 0x200000, 0xb, 0xfffffffe, 0x0, 0xea2}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @mcast2, 0x8}, 0x1c) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000140)={0x5, 0x1, 0xc, 0x2, @vifc_lcl_addr=@rand_addr=0x64010102, @broadcast}, 0x10) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000340)=0x8, 0x4) 1.987419422s ago: executing program 0 (id=1050): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000000)=r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f}, './file0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)=0x7) socket$kcm(0xa, 0x3, 0x87) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120005000000140000006000000800008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r8, 0xc0884113, &(0x7f0000000080)={0x1, 0x7, 0x0, 0x8, 0x8000, 0x0, 0x1, 0x0, 0xfffffffffffffffc, 0x1, 0xfffffffe, 0x2}) syz_usb_connect(0x3, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000f01b7b088602001f863601020301090212000196fd000009043b0700a3088305"], 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r8, 0x40084149, &(0x7f0000000200)=0xffffffffffffff4c) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r9, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r9, 0x84, 0x21, &(0x7f0000000000)=0x4, 0x4) recvmmsg(r9, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x267, 0x40000023, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='lp', 0x2) 679.683822ms ago: executing program 2 (id=1051): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0xd) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x1}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x11, r3, 0x80fa0000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') name_to_handle_at(r6, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) mq_unlink(&(0x7f0000000340)='}$\x00') sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000015c0)={0x1c, r5, 0x1, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) socketpair(0x22, 0x2, 0x22, &(0x7f0000000000)) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x14, r8, 0x1, 0x40123, 0x234}, 0x14}}, 0x44004) r9 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x101000) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001200"], 0x1c}], 0x1}, 0x0) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r11, &(0x7f0000000180)={0xa, 0x4001, 0xfffffffd, @local, 0x1}, 0x1c) ppoll(&(0x7f0000000000)=[{r11, 0x1003}], 0x1, &(0x7f0000000080), 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$int_in(r9, 0x5452, &(0x7f00000001c0)=0x1) r12 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x88001, 0x0) close(r12) bind$netlink(r12, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r5, 0x100, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x440c0}, 0xc0) 22.425876ms ago: executing program 1 (id=1052): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x8, 0x0, 0x0, 0xea2}) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="66696c7465f984d896b901b5d30000000000000000000000000000000000000004"], 0x68) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000080), 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) userfaultfd(0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) write$P9_RLINK(r3, &(0x7f0000002100)={0x7, 0x47, 0x2}, 0x7) r4 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r6, 0x4068aea3, &(0x7f0000000200)) vmsplice(r4, &(0x7f0000000040)=[{&(0x7f0000000200)='-', 0xfffffe77}], 0x1, 0xa) r7 = open(&(0x7f0000000100)='./bus\x00', 0x103200, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) io_submit(r9, 0x2, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x8, 0x1, 0x0, r8, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x4c, 0x2}]) vmsplice(r7, &(0x7f0000000340)=[{&(0x7f00000034c0)="b2", 0x1}], 0x1, 0x6) r10 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r10, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @ipv4={'\x00', '\xff\xff', @remote}, 0xa3c}, {0xa, 0xfffe, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}, 0x4}, 0x1001, {[0x8, 0x4, 0xfffffffc, 0xfffffef9, 0x0, 0x0, 0x101]}}, 0x5c) read$FUSE(r3, &(0x7f0000000080)={0x2020}, 0xfffffffffffffcbd) r11 = socket$netlink(0x10, 0x3, 0x6) writev(r11, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71033000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 0s ago: executing program 32 (id=992): r0 = socket$inet(0x2, 0x4, 0x3) r1 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) lseek(r1, 0x9, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000280)="08001efbb07d5a6e", 0x8}], 0x1, &(0x7f0000000840)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4, 0xb3, 0x3, 0x4}]}}}], 0x18}, 0x4840) kernel console output (not intermixed with test programs): vailable UDC or it's busy [ 171.121465][ T7664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.334456][ T5924] usbhid 4-1:0.0: can't add hid device: -71 [ 171.344654][ T5925] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 171.352434][ T5924] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 171.373455][ T5924] usb 4-1: USB disconnect, device number 56 [ 171.379514][ T5925] usb 2-1: device descriptor read/8, error -71 [ 171.493184][ T5925] usb usb2-port1: unable to enumerate USB device [ 171.677888][ T7705] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 171.872645][ T5924] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 171.977173][ T7709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.986888][ T7714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.988833][ T7709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.003675][ T7714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.022547][ T5924] usb 3-1: Using ep0 maxpacket: 8 [ 172.043752][ T5924] usb 3-1: unable to get BOS descriptor or descriptor too short [ 172.067017][ T5924] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.078439][ T5924] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 172.090154][ T5924] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 172.107548][ T7709] sctp: [Deprecated]: syz.0.507 (pid 7709) Use of int in maxseg socket option. [ 172.107548][ T7709] Use struct sctp_assoc_value instead [ 172.142989][ T5924] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 172.152303][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.163795][ T5924] usb 3-1: Product: syz [ 172.167998][ T5924] usb 3-1: Manufacturer: syz [ 172.173201][ T5924] usb 3-1: SerialNumber: syz [ 172.396476][ T5925] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 172.413954][ T5924] cdc_ncm 3-1:1.0: skipping garbage [ 172.419212][ T5924] cdc_ncm 3-1:1.0: invalid descriptor buffer length [ 172.425963][ T5924] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 172.432790][ T5924] cdc_ncm 3-1:1.0: bind() failure [ 172.441400][ T5924] usb 3-1: USB disconnect, device number 51 [ 172.574376][ T5925] usb 4-1: unable to get BOS descriptor or descriptor too short [ 172.583047][ T5925] usb 4-1: not running at top speed; connect to a high speed hub [ 172.591673][ T5925] usb 4-1: config 129 has an invalid interface number: 135 but max is 0 [ 172.600351][ T5925] usb 4-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 172.609498][ T5925] usb 4-1: config 129 has no interface number 1 [ 172.616560][ T5925] usb 4-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 172.630073][ T5925] usb 4-1: config 129 interface 135 has no altsetting 0 [ 172.639678][ T5925] usb 4-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 172.648759][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.656782][ T5925] usb 4-1: Product: syz [ 172.660936][ T5925] usb 4-1: Manufacturer: syz [ 172.665551][ T5925] usb 4-1: SerialNumber: syz [ 172.904442][ T5925] au0828: au0828: Device initialization failed. [ 172.911186][ T5925] au0828: au0828: Device must be connected to a high-speed USB 2.0 port. [ 172.927695][ T7728] openvswitch: netlink: Unknown nsh attribute 0 [ 172.935124][ T7728] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.941335][ T5925] usb 4-1: USB disconnect, device number 57 [ 173.098483][ T7737] syzkaller1: entered promiscuous mode [ 173.104995][ T7737] syzkaller1: entered allmulticast mode [ 173.186168][ T7742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.196017][ T7742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.662633][ T5825] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 173.816122][ T5825] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 173.824430][ T5825] usb 4-1: config 0 has no interface number 0 [ 173.830537][ T5825] usb 4-1: too many endpoints for config 0 interface 126 altsetting 83: 90, using maximum allowed: 30 [ 173.841580][ T5825] usb 4-1: config 0 interface 126 altsetting 83 has 0 endpoint descriptors, different from the interface descriptor's value: 90 [ 173.856020][ T5825] usb 4-1: config 0 interface 126 has no altsetting 0 [ 173.864825][ T5825] usb 4-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 173.873947][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.881962][ T5825] usb 4-1: Product: syz [ 173.886177][ T5825] usb 4-1: Manufacturer: syz [ 173.890765][ T5825] usb 4-1: SerialNumber: syz [ 173.898624][ T5825] usb 4-1: config 0 descriptor?? [ 173.962755][ T5924] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 174.134969][ T5924] usb 3-1: Using ep0 maxpacket: 32 [ 174.135307][ T5825] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 174.149246][ T5924] usb 3-1: config 0 has an invalid interface number: 172 but max is 0 [ 174.163990][ T5825] sonixb 4-1:0.126: Error reading register 00: -71 [ 174.177612][ T5924] usb 3-1: config 0 has no interface number 0 [ 174.186614][ T5825] usb 4-1: USB disconnect, device number 58 [ 174.194937][ T5924] usb 3-1: config 0 interface 172 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 174.198323][ T7757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.225935][ T5924] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 174.242590][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.246521][ T7757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.259602][ T5924] usb 3-1: Product: syz [ 174.267497][ T5924] usb 3-1: Manufacturer: syz [ 174.272106][ T5924] usb 3-1: SerialNumber: syz [ 174.283846][ T5924] usb 3-1: config 0 descriptor?? [ 174.295729][ T5924] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 174.674593][ T7767] syzkaller1: entered promiscuous mode [ 174.680181][ T7767] syzkaller1: entered allmulticast mode [ 174.907217][ T5924] input: gspca_pac7302 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input31 [ 175.122590][ T5825] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 175.284833][ T5825] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 175.302525][ T5825] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 175.323648][ T5825] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 175.334485][ T5825] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 175.346149][ T5825] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 175.360111][ T5825] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 175.369501][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 175.378478][ T5825] usb 4-1: Product: syz [ 175.384926][ T5825] usb 4-1: Manufacturer: syz [ 175.396609][ T5825] cdc_wdm 4-1:1.0: skipping garbage [ 175.401839][ T5825] cdc_wdm 4-1:1.0: skipping garbage [ 175.407050][ T7794] syzkaller1: entered promiscuous mode [ 175.407384][ T7794] syzkaller1: entered allmulticast mode [ 175.419802][ T5825] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 175.425997][ T5825] cdc_wdm 4-1:1.0: Unknown control protocol [ 175.470656][ T5925] usb 3-1: USB disconnect, device number 52 [ 175.560604][ T7800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.575404][ T7800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.072556][ T5925] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 176.162573][ T5825] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 176.222581][ T5925] usb 3-1: Using ep0 maxpacket: 16 [ 176.233822][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 176.242019][ T7825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.247468][ T5925] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 176.255927][ T7825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.275575][ T7774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.530'. [ 176.280859][ T7825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.285987][ T7774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.530'. [ 176.297115][ T7825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.303717][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.321963][ T5925] usb 3-1: config 0 descriptor?? [ 176.328775][ T5825] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 176.338636][ T5825] usb 2-1: config 0 has no interface number 0 [ 176.346352][ T5825] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.357861][ T5825] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.368362][ T5825] usb 2-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 176.381403][ T5825] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 176.390512][ T5825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.401432][ T5825] usb 2-1: config 0 descriptor?? [ 176.544753][ T7808] netlink: 'syz.2.541': attribute type 1 has an invalid length. [ 176.552532][ T7808] netlink: 'syz.2.541': attribute type 1 has an invalid length. [ 176.560186][ T7808] netlink: 9172 bytes leftover after parsing attributes in process `syz.2.541'. [ 176.617780][ T30] audit: type=1326 audit(1762910653.433:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7806 comm="syz.2.541" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbd4e38f6c9 code=0x0 [ 176.993879][ T7832] syzkaller1: left promiscuous mode [ 176.999233][ T7832] syzkaller1: left allmulticast mode [ 177.026390][ T5825] usbhid 2-1:0.4: can't add hid device: -71 [ 177.032387][ T5825] usbhid 2-1:0.4: probe with driver usbhid failed with error -71 [ 177.058303][ T5825] usb 2-1: USB disconnect, device number 56 [ 177.264810][ T7843] overlayfs: failed to resolve './bus': -2 [ 177.570149][ T7851] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.010335][ T10] usb 4-1: USB disconnect, device number 59 [ 178.173114][ T7856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.186562][ T7856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.203505][ T7859] syzkaller1: entered promiscuous mode [ 178.209052][ T7859] syzkaller1: entered allmulticast mode [ 178.260292][ T7865] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 178.314695][ T7867] syzkaller1: entered promiscuous mode [ 178.320189][ T7867] syzkaller1: entered allmulticast mode [ 178.732691][ T5924] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 178.896978][ T5924] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 178.929370][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.966399][ T5924] usb 2-1: config 0 descriptor?? [ 178.995069][ T5924] cp210x 2-1:0.0: cp210x converter detected [ 179.029287][ T5925] usbhid 3-1:0.0: can't add hid device: -71 [ 179.035035][ T7884] loop4: detected capacity change from 0 to 524287936 [ 179.049522][ T5925] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 179.067386][ T5925] usb 3-1: USB disconnect, device number 53 [ 179.120641][ T7887] pim6reg: entered allmulticast mode [ 179.247153][ T7893] syzkaller1: entered promiscuous mode [ 179.254460][ T7893] syzkaller1: entered allmulticast mode [ 179.273710][ T5924] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 179.302871][ T5924] cp210x 2-1:0.0: querying part number failed [ 179.334695][ T5924] usb 2-1: cp210x converter now attached to ttyUSB0 [ 179.348080][ T5924] usb 2-1: USB disconnect, device number 57 [ 179.387410][ T5924] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 179.423134][ T5924] cp210x 2-1:0.0: device disconnected [ 179.462652][ T5925] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 179.622563][ T5925] usb 4-1: Using ep0 maxpacket: 8 [ 179.644115][ T5925] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 179.652234][ T5925] usb 4-1: config 0 has no interface number 0 [ 179.689927][ T5925] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 179.714431][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.722820][ T5925] usb 4-1: Product: syz [ 179.726998][ T5925] usb 4-1: Manufacturer: syz [ 179.747293][ T5925] usb 4-1: SerialNumber: syz [ 179.772811][ T7919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.781869][ T5925] usb 4-1: config 0 descriptor?? [ 179.798104][ T7919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.013134][ T5925] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 180.020468][ T5925] uvcvideo 4-1:0.31: No valid video chain found. [ 180.048556][ T5925] usb 4-1: USB disconnect, device number 60 [ 180.088331][ T7926] syzkaller1: entered promiscuous mode [ 180.096534][ T7926] syzkaller1: entered allmulticast mode [ 180.209293][ T7928] overlayfs: failed to resolve './file1': -2 [ 180.616766][ T5825] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 180.747648][ T7943] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 180.782828][ T7944] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 180.795268][ T5825] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 180.804623][ T5825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.828739][ T5825] usb 2-1: config 0 descriptor?? [ 180.883914][ T7952] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 180.890453][ T7952] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 180.898321][ T7952] vhci_hcd vhci_hcd.0: Device attached [ 180.900508][ T7950] syzkaller1: entered promiscuous mode [ 180.905698][ T7953] vhci_hcd: cannot find the pending unlink 2 [ 180.909520][ T7950] syzkaller1: entered allmulticast mode [ 180.975505][ T7953] vhci_hcd: connection closed [ 180.975971][ T36] vhci_hcd vhci_hcd.2: stop threads [ 180.989721][ T36] vhci_hcd vhci_hcd.2: release socket [ 180.996154][ T36] vhci_hcd vhci_hcd.2: disconnect device [ 181.045320][ T7963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.056949][ T7963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.070186][ T7963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.594'. [ 181.106469][ T5877] usb 2-1: USB disconnect, device number 58 [ 181.177339][ T7966] netlink: 64 bytes leftover after parsing attributes in process `syz.0.595'. [ 181.261149][ T7971] overlayfs: failed to get inode (-116) [ 181.267378][ T7970] overlayfs: failed to get inode (-116) [ 181.272589][ T5908] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 181.275400][ T7970] overlayfs: failed to get inode (-116) [ 181.287002][ T7971] overlayfs: failed to get inode (-116) [ 181.293153][ T7970] overlayfs: failed to get inode (-116) [ 181.298988][ T7971] overlayfs: failed to get inode (-116) [ 181.305602][ T7971] overlayfs: failed to get inode (-116) [ 181.311599][ T7970] overlayfs: failed to get inode (-116) [ 181.413452][ T5908] usb 4-1: device descriptor read/64, error -71 [ 181.429146][ T7975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.438033][ T7975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.655451][ T5908] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 181.693916][ T7983] syzkaller1: entered promiscuous mode [ 181.699482][ T7983] syzkaller1: entered allmulticast mode [ 181.792579][ T5908] usb 4-1: device descriptor read/64, error -71 [ 181.799766][ T5825] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 181.912998][ T5908] usb usb4-port1: attempt power cycle [ 181.942579][ T5825] usb 3-1: device descriptor read/64, error -71 [ 182.000613][ T30] audit: type=1326 audit(1762910658.813:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7986 comm="syz.0.604" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3b5d8f6c9 code=0x0 [ 182.082601][ T5877] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 182.182595][ T5825] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 182.242577][ T5877] usb 2-1: Using ep0 maxpacket: 16 [ 182.249720][ T5877] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 182.252587][ T5908] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 182.259388][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.276501][ T5877] usb 2-1: config 0 descriptor?? [ 182.283385][ T5908] usb 4-1: device descriptor read/8, error -71 [ 182.285145][ T5877] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 182.322931][ T5825] usb 3-1: device descriptor read/64, error -71 [ 182.432873][ T5825] usb usb3-port1: attempt power cycle [ 182.522564][ T5908] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 182.544382][ T5908] usb 4-1: device descriptor read/8, error -71 [ 182.652792][ T5908] usb usb4-port1: unable to enumerate USB device [ 182.772608][ T5825] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 182.793192][ T5825] usb 3-1: device descriptor read/8, error -71 [ 182.910781][ T7992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.919878][ T7992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.032566][ T5825] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 183.053094][ T5825] usb 3-1: device descriptor read/8, error -71 [ 183.165299][ T5825] usb usb3-port1: unable to enumerate USB device [ 183.513848][ T7996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.522852][ T7996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.537037][ T7996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.546100][ T7996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.151906][ T8003] syzkaller1: entered promiscuous mode [ 184.157929][ T8003] syzkaller1: entered allmulticast mode [ 184.202205][ T8005] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 184.420163][ T8014] syzkaller1: left promiscuous mode [ 184.425644][ T8014] syzkaller1: left allmulticast mode [ 184.453817][ T5825] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 184.504256][ T8018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.515138][ T8018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.614963][ T5825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.626606][ T5825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.636552][ T5825] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 184.649646][ T5825] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 184.658890][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.669830][ T5825] usb 4-1: config 0 descriptor?? [ 184.698847][ T7985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.709460][ T7985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.718584][ T5877] gspca_sonixj: reg_w1 err -71 [ 184.725504][ T5877] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 184.736445][ T5877] usb 2-1: USB disconnect, device number 59 [ 184.962559][ T5924] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 185.067139][ T8022] tipc: Can't bind to reserved service type 0 [ 185.106262][ T7998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.117727][ T7998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.123758][ T5924] usb 3-1: Using ep0 maxpacket: 16 [ 185.139215][ T5924] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.149931][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 185.159751][ T5825] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 185.163495][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 185.184995][ T5924] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 185.195514][ T5924] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 185.209720][ T8026] syzkaller1: entered promiscuous mode [ 185.216798][ T8026] syzkaller1: entered allmulticast mode [ 185.226369][ T5924] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 185.255810][ T5924] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 185.272617][ T5924] usb 3-1: Manufacturer: syz [ 185.298656][ T5924] usb 3-1: config 0 descriptor?? [ 185.425392][ T8038] syzkaller1: left promiscuous mode [ 185.430764][ T8038] syzkaller1: left allmulticast mode [ 185.582540][ T5924] rc_core: IR keymap rc-hauppauge not found [ 185.588467][ T5924] Registered IR keymap rc-empty [ 185.594244][ T5924] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 185.595309][ T5909] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 185.612880][ T5924] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 185.635061][ T5924] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 185.649115][ T5924] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input32 [ 185.664952][ T5924] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 185.692674][ T5924] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 185.722739][ T5924] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 185.744307][ T5924] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 185.754957][ T5909] usb 2-1: Using ep0 maxpacket: 16 [ 185.762227][ T5909] usb 2-1: config 0 has an invalid interface number: 53 but max is 0 [ 185.771658][ T5909] usb 2-1: config 0 has no interface number 0 [ 185.777896][ T5924] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 185.790234][ T5909] usb 2-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=ed.e2 [ 185.803864][ T5924] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 185.807801][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.819823][ T5909] usb 2-1: Product: syz [ 185.824467][ T5909] usb 2-1: Manufacturer: syz [ 185.831011][ T5909] usb 2-1: SerialNumber: syz [ 185.844697][ T5924] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 185.860084][ T5909] usb 2-1: config 0 descriptor?? [ 185.872907][ T5924] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 185.914377][ T5924] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 185.922777][ T8059] syzkaller1: entered promiscuous mode [ 185.929289][ T8059] syzkaller1: entered allmulticast mode [ 185.935304][ T5924] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 185.965488][ T5924] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 185.974840][ T5924] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 185.990933][ T5924] usb 3-1: USB disconnect, device number 58 [ 186.077314][ T8031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.090561][ T8031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.124256][ T5909] usb 2-1: USB disconnect, device number 60 [ 186.432839][ C0] plantronics 0003:047F:FFFF.0011: usb_submit_urb(ctrl) failed: -1 [ 186.541748][ T8064] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 186.554449][ T8064] netlink: 16 bytes leftover after parsing attributes in process `syz.2.631'. [ 186.842630][ T5825] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 186.910039][ T8072] syzkaller1: left promiscuous mode [ 186.915429][ T5877] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 186.916328][ T8072] syzkaller1: left allmulticast mode [ 187.012335][ T5825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.021233][ T8076] netlink: 104 bytes leftover after parsing attributes in process `syz.3.637'. [ 187.023616][ T5825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.044729][ T5825] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 187.074965][ T5877] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 187.084416][ T5825] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 187.084444][ T5825] usb 3-1: Manufacturer: syz [ 187.087954][ T5825] usb 3-1: config 0 descriptor?? [ 187.109230][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.140437][ T5877] usb 2-1: config 0 descriptor?? [ 187.153173][ T8079] syzkaller1: entered promiscuous mode [ 187.163084][ T8079] syzkaller1: entered allmulticast mode [ 187.199598][ T8082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.210129][ T8082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.221394][ T24] usb 4-1: USB disconnect, device number 65 [ 187.313354][ T5825] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 187.320685][ T5825] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 187.329399][ T5825] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 187.340070][ T5825] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 187.348085][ T5825] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 187.356873][ T5825] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 187.366150][ T5825] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 187.375250][ T5825] pyra 0003:1E7D:2CF6.0012: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 187.386427][ T5825] pyra 0003:1E7D:2CF6.0012: couldn't init struct pyra_device [ 187.394973][ T5825] pyra 0003:1E7D:2CF6.0012: couldn't install mouse [ 187.404514][ T5825] pyra 0003:1E7D:2CF6.0012: probe with driver pyra failed with error -32 [ 187.448161][ T5825] usb 3-1: USB disconnect, device number 59 [ 187.556596][ T8099] fido_id[8099]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 187.600423][ T8068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.627131][ T8068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.650279][ T5877] ath6kl: Failed to read usb control message: -71 [ 187.662866][ T5877] ath6kl: Unable to read the bmi data from the device: -71 [ 187.675063][ T5877] ath6kl: Unable to recv target info: -71 [ 187.691086][ T5877] ath6kl: Failed to init ath6kl core: -71 [ 187.712027][ T5877] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 187.725082][ T5877] usb 2-1: USB disconnect, device number 61 [ 187.827038][ T8105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.838179][ T8105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.936079][ T8113] syzkaller1: entered promiscuous mode [ 187.941745][ T8113] syzkaller1: entered allmulticast mode [ 188.053193][ T13] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 188.492598][ T10] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 188.642818][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 188.650526][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 188.651192][ T8148] usb usb8: usbfs: process 8148 (syz.2.658) did not claim interface 0 before use [ 188.662816][ T10] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 188.683615][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.701674][ T10] usb 2-1: config 0 descriptor?? [ 188.990355][ T8134] netlink: 256 bytes leftover after parsing attributes in process `syz.1.654'. [ 189.025780][ T5825] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 189.056996][ T8153] syzkaller1: entered promiscuous mode [ 189.072592][ T8153] syzkaller1: entered allmulticast mode [ 189.188380][ T8157] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 189.209672][ T5825] usb 3-1: config 5 has an invalid interface number: 123 but max is 0 [ 189.209766][ T8157] tmpfs: Bad value for 'mpol' [ 189.233341][ T5825] usb 3-1: config 5 has no interface number 0 [ 189.239563][ T5825] usb 3-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 189.242687][ T8157] sp0: Synchronizing with TNC [ 189.258995][ T5825] usb 3-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 189.283220][ T10] corsair-cpro 0003:1B1C:0C10.0013: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 189.302949][ T5825] usb 3-1: config 5 interface 123 has no altsetting 0 [ 189.320728][ T5825] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 189.340199][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.363927][ T5825] usb 3-1: Product: syz [ 189.368150][ T5825] usb 3-1: Manufacturer: syz [ 189.376660][ T5825] usb 3-1: SerialNumber: syz [ 189.433768][ T5877] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 189.476376][ T8134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.489595][ T8134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.605021][ T5877] usb 4-1: not running at top speed; connect to a high speed hub [ 189.613479][ T5825] ni6501 3-1:5.123: driver 'ni6501' failed to auto-configure device. [ 189.630199][ T5877] usb 4-1: config 95 has an invalid interface number: 1 but max is 0 [ 189.649960][ T5877] usb 4-1: config 95 has no interface number 0 [ 189.652285][ T5825] usb 3-1: USB disconnect, device number 60 [ 189.673001][ T5877] usb 4-1: config 95 interface 1 has no altsetting 0 [ 189.684694][ T5877] usb 4-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 189.693940][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.702409][ T5877] usb 4-1: Product: syz [ 189.707213][ T5877] usb 4-1: Manufacturer: syz [ 189.711829][ T5877] usb 4-1: SerialNumber: syz [ 189.912621][ T10] corsair-cpro 0003:1B1C:0C10.0013: probe with driver corsair-cpro failed with error -71 [ 189.928461][ T10] usb 2-1: USB disconnect, device number 62 [ 189.935608][ T8163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.949248][ T8163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.011628][ T5877] usb 4-1: USB disconnect, device number 66 [ 190.081329][ T6584] udevd[6584]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.214801][ T8168] syzkaller1: left promiscuous mode [ 190.220013][ T8168] syzkaller1: left allmulticast mode [ 190.297980][ T8172] netlink: 28 bytes leftover after parsing attributes in process `syz.2.667'. [ 190.355114][ T8173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.366696][ T8173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.378414][ T8170] random: crng reseeded on system resumption [ 190.626476][ T8187] syzkaller1: entered promiscuous mode [ 190.632064][ T8187] syzkaller1: entered allmulticast mode [ 190.666885][ T8189] syzkaller1: entered promiscuous mode [ 190.672356][ T8189] syzkaller1: entered allmulticast mode [ 190.679787][ T8189] FAULT_INJECTION: forcing a failure. [ 190.679787][ T8189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.695154][ T8189] CPU: 0 UID: 0 PID: 8189 Comm: syz.3.673 Not tainted syzkaller #0 PREEMPT(full) [ 190.695179][ T8189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 190.695191][ T8189] Call Trace: [ 190.695199][ T8189] [ 190.695205][ T8189] dump_stack_lvl+0x189/0x250 [ 190.695239][ T8189] ? __pfx____ratelimit+0x10/0x10 [ 190.695264][ T8189] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.695285][ T8189] ? __pfx__printk+0x10/0x10 [ 190.695304][ T8189] ? __might_fault+0xb0/0x130 [ 190.695332][ T8189] should_fail_ex+0x414/0x560 [ 190.695361][ T8189] _copy_from_iter+0x1de/0x1790 [ 190.695390][ T8189] ? __pfx__copy_from_iter+0x10/0x10 [ 190.695405][ T8189] ? is_bpf_text_address+0x26/0x2b0 [ 190.695431][ T8189] ? __lock_acquire+0xab9/0xd20 [ 190.695454][ T8189] tun_get_user+0x219/0x3e90 [ 190.695482][ T8189] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 190.695508][ T8189] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 190.695530][ T8189] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 190.695552][ T8189] ? aa_file_perm+0x44c/0x1540 [ 190.695573][ T8189] ? __pfx_tun_get_user+0x10/0x10 [ 190.695597][ T8189] ? save_netdev_trace_buffer+0x4a0/0x5a0 [ 190.695624][ T8189] ? ref_tracker_alloc+0x318/0x460 [ 190.695638][ T8189] ? tun_get+0x157/0x2f0 [ 190.695654][ T8189] ? tun_chr_write_iter+0x60/0x210 [ 190.695672][ T8189] ? ksys_write+0x145/0x250 [ 190.695687][ T8189] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 190.695707][ T8189] ? tun_get+0x1c/0x2f0 [ 190.695729][ T8189] ? tun_get+0x1c/0x2f0 [ 190.695747][ T8189] ? tun_get+0x1c/0x2f0 [ 190.695769][ T8189] tun_chr_write_iter+0x113/0x210 [ 190.695790][ T8189] vfs_write+0x5c9/0xb30 [ 190.695808][ T8189] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 190.695827][ T8189] ? __pfx_vfs_write+0x10/0x10 [ 190.695851][ T8189] ? __fget_files+0x2a/0x420 [ 190.695876][ T8189] ksys_write+0x145/0x250 [ 190.695893][ T8189] ? __pfx_ksys_write+0x10/0x10 [ 190.695911][ T8189] ? do_syscall_64+0xbe/0xfa0 [ 190.695929][ T8189] do_syscall_64+0xfa/0xfa0 [ 190.695944][ T8189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.695960][ T8189] ? clear_bhb_loop+0x60/0xb0 [ 190.695995][ T8189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.696015][ T8189] RIP: 0033:0x7f381538f6c9 [ 190.696033][ T8189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.696047][ T8189] RSP: 002b:00007f3816279038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 190.696070][ T8189] RAX: ffffffffffffffda RBX: 00007f38155e5fa0 RCX: 00007f381538f6c9 [ 190.696082][ T8189] RDX: 0000000000000044 RSI: 0000200000000240 RDI: 0000000000000003 [ 190.696093][ T8189] RBP: 00007f3816279090 R08: 0000000000000000 R09: 0000000000000000 [ 190.696103][ T8189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.696112][ T8189] R13: 00007f38155e6038 R14: 00007f38155e5fa0 R15: 00007fffb35d1de8 [ 190.696138][ T8189] [ 191.011603][ T5825] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 191.122841][ T5924] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 191.152587][ T5825] usb 2-1: device descriptor read/64, error -71 [ 191.294845][ T5924] usb 3-1: Using ep0 maxpacket: 16 [ 191.315821][ T5924] usb 3-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config [ 191.337369][ T5924] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 191.373362][ T5924] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 191.383559][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=64 [ 191.392597][ T5825] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 191.392929][ T5924] usb 3-1: SerialNumber: syz [ 191.429635][ T5924] usb 3-1: config 0 descriptor?? [ 191.483202][ T8219] syzkaller1: entered promiscuous mode [ 191.489136][ T8219] syzkaller1: entered allmulticast mode [ 191.523180][ T5825] usb 2-1: device descriptor read/64, error -71 [ 191.637081][ T5825] usb usb2-port1: attempt power cycle [ 191.711849][ T8231] syzkaller1: entered promiscuous mode [ 191.719500][ T8231] syzkaller1: entered allmulticast mode [ 191.727398][ T8231] FAULT_INJECTION: forcing a failure. [ 191.727398][ T8231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.740781][ T8231] CPU: 1 UID: 0 PID: 8231 Comm: syz.3.686 Not tainted syzkaller #0 PREEMPT(full) [ 191.740808][ T8231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 191.740819][ T8231] Call Trace: [ 191.740827][ T8231] [ 191.740835][ T8231] dump_stack_lvl+0x189/0x250 [ 191.740863][ T8231] ? __pfx____ratelimit+0x10/0x10 [ 191.740889][ T8231] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.740910][ T8231] ? __pfx__printk+0x10/0x10 [ 191.740937][ T8231] ? __might_fault+0xb0/0x130 [ 191.740970][ T8231] should_fail_ex+0x414/0x560 [ 191.740998][ T8231] _copy_from_iter+0x1de/0x1790 [ 191.741031][ T8231] ? __pfx__copy_from_iter+0x10/0x10 [ 191.741045][ T8231] ? is_bpf_text_address+0x26/0x2b0 [ 191.741063][ T8231] ? __lock_acquire+0xab9/0xd20 [ 191.741078][ T8231] tun_get_user+0x488/0x3e90 [ 191.741099][ T8231] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 191.741115][ T8231] ? aa_file_perm+0x44c/0x1540 [ 191.741130][ T8231] ? __pfx_tun_get_user+0x10/0x10 [ 191.741141][ T8231] ? xfd_validate_state+0x6d/0x150 [ 191.741160][ T8231] ? save_netdev_trace_buffer+0x4a0/0x5a0 [ 191.741177][ T8231] ? ref_tracker_alloc+0x318/0x460 [ 191.741186][ T8231] ? tun_get+0x157/0x2f0 [ 191.741196][ T8231] ? tun_chr_write_iter+0x60/0x210 [ 191.741207][ T8231] ? ksys_write+0x145/0x250 [ 191.741217][ T8231] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 191.741230][ T8231] ? tun_get+0x1c/0x2f0 [ 191.741244][ T8231] ? tun_get+0x1c/0x2f0 [ 191.741256][ T8231] ? tun_get+0x1c/0x2f0 [ 191.741270][ T8231] tun_chr_write_iter+0x113/0x210 [ 191.741283][ T8231] vfs_write+0x5c9/0xb30 [ 191.741295][ T8231] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 191.741307][ T8231] ? __pfx_vfs_write+0x10/0x10 [ 191.741322][ T8231] ? __fget_files+0x2a/0x420 [ 191.741338][ T8231] ksys_write+0x145/0x250 [ 191.741349][ T8231] ? __pfx_ksys_write+0x10/0x10 [ 191.741357][ T8231] ? rcu_is_watching+0x15/0xb0 [ 191.741372][ T8231] ? do_syscall_64+0xbe/0xfa0 [ 191.741384][ T8231] do_syscall_64+0xfa/0xfa0 [ 191.741393][ T8231] ? irqentry_exit+0x10f/0x640 [ 191.741402][ T8231] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.741412][ T8231] ? clear_bhb_loop+0x60/0xb0 [ 191.741424][ T8231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.741434][ T8231] RIP: 0033:0x7f381538f6c9 [ 191.741444][ T8231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.741453][ T8231] RSP: 002b:00007f3816279038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 191.741464][ T8231] RAX: ffffffffffffffda RBX: 00007f38155e5fa0 RCX: 00007f381538f6c9 [ 191.741473][ T8231] RDX: 0000000000000044 RSI: 0000200000000240 RDI: 0000000000000003 [ 191.741479][ T8231] RBP: 00007f3816279090 R08: 0000000000000000 R09: 0000000000000000 [ 191.741485][ T8231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.741491][ T8231] R13: 00007f38155e6038 R14: 00007f38155e5fa0 R15: 00007fffb35d1de8 [ 191.741508][ T8231] [ 191.748026][ T8191] ceph: No mds server is up or the cluster is laggy [ 192.089780][ T5924] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 192.102892][ T5825] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 192.104248][ T5924] usb 3-1: USB disconnect, device number 61 [ 192.123512][ T5825] usb 2-1: device descriptor read/8, error -71 [ 192.210511][ T8237] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 192.347178][ T8243] netlink: 165 bytes leftover after parsing attributes in process `syz.2.691'. [ 192.373049][ T5825] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 192.426336][ T5825] usb 2-1: device descriptor read/8, error -71 [ 192.543987][ T5825] usb usb2-port1: unable to enumerate USB device [ 192.670987][ T8251] sctp: [Deprecated]: syz.3.694 (pid 8251) Use of int in maxseg socket option. [ 192.670987][ T8251] Use struct sctp_assoc_value instead [ 192.735828][ T8253] 9p: Bad value for 'wfdno' [ 193.101080][ T8268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.111507][ T8268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.242604][ T5825] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 193.392468][ T5825] usb 4-1: device descriptor read/64, error -71 [ 193.516627][ T8277] syzkaller1: entered promiscuous mode [ 193.522128][ T8277] syzkaller1: entered allmulticast mode [ 193.556635][ T8279] netlink: 288 bytes leftover after parsing attributes in process `syz.1.704'. [ 193.632580][ T5825] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 193.697024][ T8283] tmpfs: User quota inode hardlimit too large. [ 193.755189][ T8287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.707'. [ 193.786312][ T8287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.795337][ T5825] usb 4-1: device descriptor read/64, error -71 [ 193.805447][ T8287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.902744][ T5825] usb usb4-port1: attempt power cycle [ 193.987070][ T8287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.015775][ T8287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.230086][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.239800][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.293306][ T5825] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 194.316104][ T5825] usb 4-1: device descriptor read/8, error -71 [ 194.528137][ T8317] random: crng reseeded on system resumption [ 194.624253][ T5825] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 194.680230][ T5825] usb 4-1: device descriptor read/8, error -71 [ 194.792199][ T5825] usb usb4-port1: unable to enumerate USB device [ 194.930633][ T8332] netlink: 'syz.0.716': attribute type 3 has an invalid length. [ 194.939458][ T8332] netlink: 3 bytes leftover after parsing attributes in process `syz.0.716'. [ 194.993072][ T8333] syzkaller1: entered promiscuous mode [ 194.998566][ T8333] syzkaller1: entered allmulticast mode [ 195.101850][ T5825] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 195.261538][ T5825] usb 3-1: Using ep0 maxpacket: 8 [ 195.271357][ T5825] usb 3-1: unable to get BOS descriptor or descriptor too short [ 195.284694][ T5825] usb 3-1: config 8 interface 0 altsetting 7 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 195.296150][ T5825] usb 3-1: config 8 interface 0 has no altsetting 0 [ 195.305825][ T5825] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 195.315338][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.323477][ T5825] usb 3-1: Product: syz [ 195.327709][ T5825] usb 3-1: Manufacturer: syz [ 195.332771][ T5825] usb 3-1: SerialNumber: syz [ 195.411479][ T10] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 195.548303][ T5825] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 195.557048][ T5825] usb 3-1: selecting invalid altsetting 0 [ 195.571989][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 195.586417][ T10] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 195.598330][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.607591][ T5825] usb 3-1: USB disconnect, device number 62 [ 195.621780][ T10] usb 2-1: Product: syz [ 195.625974][ T10] usb 2-1: Manufacturer: syz [ 195.636777][ T10] usb 2-1: SerialNumber: syz [ 195.668763][ T10] usb 2-1: config 0 descriptor?? [ 195.686526][ T10] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 196.010895][ T8361] /dev/nullb0: Can't open blockdev [ 196.300966][ T5144] Bluetooth: hci2: command 0x0401 tx timeout [ 196.307038][ T5144] Bluetooth: hci1: command 0x0406 tx timeout [ 196.313130][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 197.340157][ T10] gspca_ov534_9: reg_r err -71 [ 197.642263][ T8383] netlink: 'syz.3.728': attribute type 83 has an invalid length. [ 197.810355][ T10] gspca_ov534_9: Unknown sensor 0000 [ 197.810454][ T10] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 197.842173][ T10] usb 2-1: USB disconnect, device number 67 [ 198.082908][ T8405] program syz.1.733 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 198.134224][ T8407] syzkaller1: left promiscuous mode [ 198.139512][ T8407] syzkaller1: left allmulticast mode [ 198.160170][ T5908] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 198.183367][ T8409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.192065][ T8409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.258932][ T8413] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.300615][ T5908] usb 3-1: device descriptor read/64, error -71 [ 198.337398][ T8413] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.406235][ T8413] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.495171][ T8413] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.499582][ T8425] netlink: 28 bytes leftover after parsing attributes in process `syz.0.740'. [ 198.516964][ T8425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.526044][ T8425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.537713][ T8426] netlink: 28 bytes leftover after parsing attributes in process `syz.0.740'. [ 198.549941][ T5908] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 198.602238][ T154] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.604641][ T8430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.624576][ T8430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.630352][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.656467][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.671510][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.710033][ T5908] usb 3-1: device descriptor read/64, error -71 [ 198.830023][ T5908] usb usb3-port1: attempt power cycle [ 198.969684][ T5924] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 199.119580][ T5924] usb 2-1: Using ep0 maxpacket: 8 [ 199.126424][ T5924] usb 2-1: unable to get BOS descriptor or descriptor too short [ 199.136382][ T5924] usb 2-1: config 8 has an invalid interface number: 255 but max is 0 [ 199.144596][ T5924] usb 2-1: config 8 has no interface number 0 [ 199.150721][ T5924] usb 2-1: config 8 interface 255 has no altsetting 0 [ 199.159449][ T5924] usb 2-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 199.168563][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.176582][ T5924] usb 2-1: Product: syz [ 199.179620][ T5908] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 199.180762][ T5924] usb 2-1: Manufacturer: syz [ 199.192910][ T5924] usb 2-1: SerialNumber: syz [ 199.210970][ T5908] usb 3-1: device descriptor read/8, error -71 [ 199.269996][ T8436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.278742][ T8436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.297419][ T8436] overlayfs: failed to get inode (-116) [ 199.303934][ T8436] overlayfs: failed to get inode (-116) [ 199.311356][ T8436] overlayfs: failed to get inode (-116) [ 199.318319][ T8436] overlayfs: failed to get inode (-116) [ 199.324627][ T8436] overlayfs: failed to get inode (-116) [ 199.402930][ T8434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.411878][ T8434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.435300][ T5924] catc 2-1:8.255: Can't set altsetting 1. [ 199.441160][ T5924] catc 2-1:8.255: probe with driver catc failed with error -5 [ 199.452816][ T5924] usb 2-1: USB disconnect, device number 68 [ 199.459481][ T5908] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 199.479903][ T5908] usb 3-1: device descriptor read/8, error -71 [ 199.589638][ T5908] usb usb3-port1: unable to enumerate USB device [ 199.925256][ T5835] Bluetooth: Frame is too long (len 53, expected len 20) [ 200.049358][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 200.229037][ T24] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 200.381464][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.392493][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.403266][ T24] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 200.412516][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.422359][ T24] usb 2-1: config 0 descriptor?? [ 200.636728][ T8442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.651211][ T8442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.867600][ T24] keytouch 0003:0926:3333.0014: fixing up Keytouch IEC report descriptor [ 200.906476][ T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0014/input/input34 [ 201.045469][ T24] keytouch 0003:0926:3333.0014: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 201.101490][ T8454] tipc: Started in network mode [ 201.108667][ T8454] tipc: Node identity 7e1e87ef6099, cluster identity 4711 [ 201.116059][ T8454] tipc: Enabled bearer , priority 0 [ 201.159743][ T8458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.188862][ T24] usb 2-1: USB disconnect, device number 69 [ 201.218533][ T8458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.255155][ T8460] tipc: Disabling bearer [ 201.256934][ T8461] fido_id[8461]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 201.422744][ T8465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.501624][ T8465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.690911][ T8471] fuse: Bad value for 'user_id' [ 201.696180][ T8471] fuse: Bad value for 'user_id' [ 201.863805][ T8477] syzkaller1: entered promiscuous mode [ 201.869361][ T8477] syzkaller1: entered allmulticast mode [ 201.921593][ T8444] kexec: Could not allocate control_code_buffer [ 201.968346][ T5909] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 202.075245][ T8488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.087100][ T8488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.108597][ T5909] usb 3-1: device descriptor read/64, error -71 [ 202.348127][ T5909] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 202.477974][ T5909] usb 3-1: device descriptor read/64, error -71 [ 202.596989][ T5909] usb usb3-port1: attempt power cycle [ 202.656008][ T8505] FAULT_INJECTION: forcing a failure. [ 202.656008][ T8505] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.670192][ T8505] CPU: 1 UID: 0 PID: 8505 Comm: syz.0.768 Not tainted syzkaller #0 PREEMPT(full) [ 202.670219][ T8505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 202.670231][ T8505] Call Trace: [ 202.670238][ T8505] [ 202.670246][ T8505] dump_stack_lvl+0x189/0x250 [ 202.670275][ T8505] ? __pfx____ratelimit+0x10/0x10 [ 202.670303][ T8505] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.670327][ T8505] ? __pfx__printk+0x10/0x10 [ 202.670361][ T8505] should_fail_ex+0x414/0x560 [ 202.670393][ T8505] _copy_to_user+0x31/0xb0 [ 202.670420][ T8505] simple_read_from_buffer+0xe1/0x170 [ 202.670444][ T8505] proc_fail_nth_read+0x1b3/0x220 [ 202.670480][ T8505] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 202.670510][ T8505] ? rw_verify_area+0x2a6/0x4d0 [ 202.670541][ T8505] ? __lock_acquire+0xab9/0xd20 [ 202.670559][ T8505] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 202.670589][ T8505] vfs_read+0x200/0xa30 [ 202.670606][ T8505] ? fdget_pos+0x247/0x320 [ 202.670632][ T8505] ? __pfx___mutex_lock+0x10/0x10 [ 202.670652][ T8505] ? __pfx_vfs_read+0x10/0x10 [ 202.670672][ T8505] ? __fget_files+0x2a/0x420 [ 202.670705][ T8505] ? __fget_files+0x3a0/0x420 [ 202.670726][ T8505] ? __fget_files+0x2a/0x420 [ 202.670756][ T8505] ksys_read+0x145/0x250 [ 202.670777][ T8505] ? __pfx_ksys_read+0x10/0x10 [ 202.670799][ T8505] ? do_syscall_64+0xbe/0xfa0 [ 202.670821][ T8505] do_syscall_64+0xfa/0xfa0 [ 202.670841][ T8505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.670860][ T8505] ? clear_bhb_loop+0x60/0xb0 [ 202.670884][ T8505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.670902][ T8505] RIP: 0033:0x7fe3b5d8e0dc [ 202.670919][ T8505] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 202.670936][ T8505] RSP: 002b:00007fe3b6bf7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 202.670956][ T8505] RAX: ffffffffffffffda RBX: 00007fe3b5fe5fa0 RCX: 00007fe3b5d8e0dc [ 202.670970][ T8505] RDX: 000000000000000f RSI: 00007fe3b6bf70a0 RDI: 0000000000000004 [ 202.670983][ T8505] RBP: 00007fe3b6bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 202.670995][ T8505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.671007][ T8505] R13: 00007fe3b5fe6038 R14: 00007fe3b5fe5fa0 R15: 00007ffe6a1e7a68 [ 202.671040][ T8505] [ 202.718143][ T10] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 202.977728][ T5909] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 202.989147][ T8514] QAT: Invalid ioctl 1075883590 [ 202.995233][ T8514] QAT: Invalid ioctl 1075883590 [ 203.001404][ T5909] usb 3-1: device descriptor read/8, error -71 [ 203.007917][ T8514] QAT: Invalid ioctl 1075883590 [ 203.013143][ T8514] QAT: Invalid ioctl 1075883590 [ 203.019307][ T8514] QAT: Invalid ioctl 1075883590 [ 203.026591][ T8514] QAT: Invalid ioctl 1075883590 [ 203.032100][ T8514] QAT: Invalid ioctl 1075883590 [ 203.037246][ T8514] QAT: Invalid ioctl 1075883590 [ 203.043422][ T8514] QAT: Invalid ioctl 1075883590 [ 203.049070][ T8514] QAT: Invalid ioctl 1075883590 [ 203.064417][ T8514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.080592][ T8514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.099845][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.111702][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.123064][ T10] usb 4-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 203.135426][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.153502][ T10] usb 4-1: config 0 descriptor?? [ 203.247719][ T5909] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 203.268145][ T5909] usb 3-1: device descriptor read/8, error -71 [ 203.300667][ T5823] Bluetooth: hci0: command 0x0405 tx timeout [ 203.377967][ T5909] usb usb3-port1: unable to enumerate USB device [ 203.572723][ T10] monterey 0003:0566:3004.0015: unknown main item tag 0x0 [ 203.586571][ T10] monterey 0003:0566:3004.0015: unknown main item tag 0x0 [ 203.594221][ T10] monterey 0003:0566:3004.0015: unknown main item tag 0x0 [ 203.602030][ T10] monterey 0003:0566:3004.0015: unknown main item tag 0x0 [ 203.609855][ T10] monterey 0003:0566:3004.0015: unknown main item tag 0x0 [ 203.617063][ T10] monterey 0003:0566:3004.0015: unknown main item tag 0x0 [ 203.624825][ T10] monterey 0003:0566:3004.0015: unknown main item tag 0x0 [ 203.632315][ T10] monterey 0003:0566:3004.0015: unknown main item tag 0x0 [ 203.642766][ T10] monterey 0003:0566:3004.0015: unknown main item tag 0x0 [ 203.690166][ T10] monterey 0003:0566:3004.0015: unknown main item tag 0x0 [ 203.731552][ T10] monterey 0003:0566:3004.0015: hidraw0: USB HID v0.49 Device [HID 0566:3004] on usb-dummy_hcd.3-1/input0 [ 203.800545][ T10] usb 4-1: USB disconnect, device number 71 [ 203.845118][ T8519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.884746][ T8519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.916217][ T8519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.929222][ T8517] fido_id[8517]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 203.944620][ T8519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.321457][ T8525] delete_channel: no stack [ 204.326028][ T8525] delete_channel: no stack [ 204.368713][ T10] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 204.524635][ T8528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.535626][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 204.544942][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.557739][ T8528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.566849][ T5925] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 204.567723][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 204.586957][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 204.599005][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 204.609433][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 204.624903][ T10] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 204.634455][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 204.643344][ T10] usb 2-1: Product: syz [ 204.647921][ T10] usb 2-1: Manufacturer: syz [ 204.652518][ T10] usb 2-1: SerialNumber: syz [ 204.680139][ T10] usb 2-1: config 0 descriptor?? [ 204.747282][ T5925] usb 4-1: Using ep0 maxpacket: 8 [ 204.754482][ T5925] usb 4-1: config 0 has no interfaces? [ 204.765344][ T5925] usb 4-1: New USB device found, idVendor=19d2, idProduct=fff3, bcdDevice=60.8b [ 204.776772][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.794789][ T5925] usb 4-1: Product: syz [ 204.814749][ T5925] usb 4-1: Manufacturer: syz [ 204.826787][ T5925] usb 4-1: SerialNumber: syz [ 204.840002][ T5925] usb 4-1: config 0 descriptor?? [ 204.893294][ T10] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 204.900546][ T10] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 205.048475][ T5925] usb 4-1: USB disconnect, device number 72 [ 205.066950][ T5924] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 205.100938][ T10] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 205.110028][ T10] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 205.122575][ T10] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 205.217382][ T5924] usb 3-1: Using ep0 maxpacket: 8 [ 205.224595][ T5924] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 205.232866][ T5924] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 205.242675][ T5924] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 205.252617][ T5924] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 205.262564][ T5924] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 205.276003][ T5924] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 205.285149][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.305913][ T10] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 205.497999][ T5924] usb 3-1: usb_control_msg returned -32 [ 205.503659][ T5924] usbtmc 3-1:16.0: can't read capabilities [ 205.836203][ T5909] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 205.987963][ T5909] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 205.997976][ T5909] usb 4-1: config 0 has no interface number 0 [ 206.004154][ T5909] usb 4-1: New USB device found, idVendor=0733, idProduct=0401, bcdDevice=ad.7d [ 206.013331][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.023645][ T5909] usb 4-1: config 0 descriptor?? [ 206.033774][ T5909] gspca_main: spca501-2.14.0 probing 0733:0401 [ 206.231495][ T5909] gspca_spca501: reg write: error -71 [ 206.250721][ T5909] spca501 4-1:0.255: Reg write failed for 0x00,0xaa,0x00 [ 206.268965][ T5909] spca501 4-1:0.255: probe with driver spca501 failed with error -22 [ 206.286317][ T8549] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 206.287202][ T5909] usb 4-1: USB disconnect, device number 73 [ 206.316148][ T8523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.333402][ T8523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.384121][ T8548] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 206.543706][ T10] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 206.553443][ T10] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 206.571791][ T10] usb 2-1: USB disconnect, device number 70 [ 207.184582][ T30] audit: type=1326 audit(6054312983.010:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8564 comm="syz.1.787" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f95da98f6c9 code=0x0 [ 207.565393][ T5877] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 207.607520][ T8572] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.790'. [ 207.665564][ T8574] netlink: 'syz.3.791': attribute type 1 has an invalid length. [ 207.673312][ T8574] netlink: 'syz.3.791': attribute type 3 has an invalid length. [ 207.681645][ T8574] netlink: 172 bytes leftover after parsing attributes in process `syz.3.791'. [ 207.691211][ T8574] NCSI netlink: No device for ifindex 813332851 [ 207.745256][ T5877] usb 2-1: Using ep0 maxpacket: 8 [ 207.765183][ T5877] usb 2-1: config 1 interface 0 altsetting 246 bulk endpoint 0x1 has invalid maxpacket 8 [ 207.775134][ T5877] usb 2-1: config 1 interface 0 altsetting 246 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 207.788431][ T5877] usb 2-1: config 1 interface 0 has no altsetting 0 [ 207.798939][ T5877] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 207.811260][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.819339][ T5877] usb 2-1: Product: ఁ [ 207.823528][ T5877] usb 2-1: Manufacturer: Б [ 207.828089][ T5877] usb 2-1: SerialNumber: ᰁ [ 207.845566][ T8568] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 207.852845][ T8568] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 208.276314][ T5877] usb 2-1: USB disconnect, device number 71 [ 208.432906][ T8582] netlink: 'syz.3.794': attribute type 2 has an invalid length. [ 208.610615][ T8591] tmpfs: Unknown parameter '' [ 209.014653][ T5924] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 209.174558][ T5924] usb 4-1: Using ep0 maxpacket: 16 [ 209.181854][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.193600][ T5924] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 209.203060][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.219628][ T5924] usb 4-1: config 0 descriptor?? [ 209.334323][ T8610] netlink: 16 bytes leftover after parsing attributes in process `syz.1.803'. [ 209.633245][ T5924] hkems 0003:2006:0118.0016: item fetching failed at offset 3/5 [ 209.641540][ T5924] hkems 0003:2006:0118.0016: parse failed [ 209.647476][ T5924] hkems 0003:2006:0118.0016: probe with driver hkems failed with error -22 [ 209.835184][ T10] usb 4-1: USB disconnect, device number 74 [ 210.239584][ T8616] netlink: 'syz.1.804': attribute type 4 has an invalid length. [ 210.240446][ T8617] netlink: 'syz.1.804': attribute type 4 has an invalid length. [ 210.329576][ T8621] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 210.383219][ T8623] netlink: 64 bytes leftover after parsing attributes in process `syz.3.806'. [ 210.559221][ T8629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.808'. [ 210.593826][ T5924] usb 2-1: new low-speed USB device number 72 using dummy_hcd [ 210.754162][ T5924] usb 2-1: Invalid ep0 maxpacket: 64 [ 210.823712][ T5877] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 210.893763][ T5924] usb 2-1: new low-speed USB device number 73 using dummy_hcd [ 210.973852][ T5877] usb 4-1: Using ep0 maxpacket: 16 [ 210.979655][ T5877] usb 4-1: too many configurations: 60, using maximum allowed: 8 [ 210.995611][ T5877] usb 4-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 211.004935][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 211.013346][ T5877] usb 4-1: Product: syz [ 211.017625][ T5877] usb 4-1: Manufacturer: syz [ 211.022236][ T5877] usb 4-1: SerialNumber: syz [ 211.029131][ T5877] usb 4-1: config 0 descriptor?? [ 211.036054][ T5877] hub 4-1:0.0: Invalid hub with more than one config or interface [ 211.043950][ T5877] hub 4-1:0.0: probe with driver hub failed with error -22 [ 211.052177][ T5877] pwc: Philips SPC 880NC USB webcam detected. [ 211.058329][ T5924] usb 2-1: Invalid ep0 maxpacket: 64 [ 211.064180][ T5924] usb usb2-port1: attempt power cycle [ 211.242695][ T5877] pwc: Warning: more than 1 configuration available. [ 211.253947][ T5877] pwc: Failed to set LED on/off time (-71) [ 211.260216][ T5877] pwc: send_video_command error -71 [ 211.265562][ T5877] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 211.273149][ T5877] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 211.291909][ T5877] usb 4-1: USB disconnect, device number 75 [ 211.321754][ T8634] syzkaller1: entered promiscuous mode [ 211.327499][ T8634] syzkaller1: entered allmulticast mode [ 211.403614][ T8550] usbtmc 3-1:16.0: usb_control_msg returned -110 [ 211.411507][ T5825] usb 3-1: USB disconnect, device number 71 [ 211.413456][ T5924] usb 2-1: new low-speed USB device number 74 using dummy_hcd [ 211.471243][ T5924] usb 2-1: Invalid ep0 maxpacket: 64 [ 211.552425][ T8636] netlink: 'syz.3.810': attribute type 22 has an invalid length. [ 211.563375][ T8636] netlink: 14380 bytes leftover after parsing attributes in process `syz.3.810'. [ 211.613725][ T5924] usb 2-1: new low-speed USB device number 75 using dummy_hcd [ 211.646826][ T5924] usb 2-1: Invalid ep0 maxpacket: 64 [ 211.652428][ T5924] usb usb2-port1: unable to enumerate USB device [ 212.273011][ T5825] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 212.422912][ T5825] usb 4-1: Using ep0 maxpacket: 16 [ 212.429532][ T5825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.441895][ T5825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.451840][ T5825] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 212.461213][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.474707][ T5825] usb 4-1: config 0 descriptor?? [ 212.533276][ T10] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 212.616626][ T8673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.625457][ T8673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.637601][ T8673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.646945][ T8673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.695181][ T10] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 212.706214][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 212.712870][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 212.721929][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.732285][ T10] usb 3-1: config 0 descriptor?? [ 212.737993][ T8669] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 212.889271][ T5825] hid-multitouch 0003:1FD2:6007.0017: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 213.084926][ T5825] usb 4-1: USB disconnect, device number 76 [ 213.154663][ T8669] netlink: 'syz.2.820': attribute type 11 has an invalid length. [ 213.197028][ T10] logitech 0003:046D:C50C.0018: hidraw0: USB HID v1.01 Device [HID 046d:c50c] on usb-dummy_hcd.2-1/input0 [ 213.365372][ T8680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.389188][ T8669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.411463][ T8680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.413631][ T8669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.471410][ T8682] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 213.499193][ T8682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.509022][ T8682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.595949][ T10] usb 3-1: USB disconnect, device number 72 [ 213.792246][ T30] audit: type=1400 audit(6054312989.613:9): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A21D01A0B978D2F2F262D2A83D1 pid=8690 comm="syz.3.827" [ 214.072163][ T5877] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 214.205709][ T8698] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 214.243692][ T5877] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 214.252364][ T5877] usb 2-1: config 0 has no interface number 0 [ 214.261359][ T5877] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 214.272063][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.280069][ T5877] usb 2-1: Product: syz [ 214.286533][ T5877] usb 2-1: Manufacturer: syz [ 214.291153][ T5877] usb 2-1: SerialNumber: syz [ 214.303114][ T5877] usb 2-1: config 0 descriptor?? [ 214.421952][ T5825] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 214.535194][ T5877] uvcvideo 2-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 214.552350][ T5877] uvcvideo 2-1:0.64: No valid video chain found. [ 214.568120][ T5877] usb 2-1: USB disconnect, device number 76 [ 214.574524][ T5825] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 214.588207][ T5825] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 214.603797][ T10] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 214.614945][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.623774][ T5825] usb 4-1: Product: syz [ 214.630261][ T8710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.631848][ T5825] usb 4-1: Manufacturer: syz [ 214.643405][ T5825] usb 4-1: SerialNumber: syz [ 214.644141][ T8710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.654227][ T5825] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 214.667456][ T8711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.678487][ T8711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.763842][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 214.773354][ T10] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 214.784094][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 214.793375][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 214.806841][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 214.820747][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 214.830145][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 214.839351][ T10] usb 3-1: Product: syz [ 214.844268][ T10] usb 3-1: Manufacturer: syz [ 214.869665][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 214.875149][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 214.891704][ T10] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 214.899691][ T10] cdc_wdm 3-1:1.0: Unknown control protocol [ 215.064946][ T5825] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 215.082241][ T5825] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 215.103659][ T5825] usb 4-1: media controller created [ 215.140420][ T5825] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 215.190981][ T8716] netlink: 'syz.3.836': attribute type 11 has an invalid length. [ 215.253734][ T8716] /dev/nullb0: Can't open blockdev [ 215.292256][ T5924] usb 3-1: USB disconnect, device number 73 [ 215.299986][ T5825] usb 4-1: USB disconnect, device number 77 [ 215.451576][ T8729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.464658][ T8729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.853195][ T8747] syzkaller1: entered promiscuous mode [ 215.858690][ T8747] syzkaller1: entered allmulticast mode [ 216.031149][ T10] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 216.135839][ T8754] netlink: 'syz.0.848': attribute type 10 has an invalid length. [ 216.143951][ T8754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.156564][ T8754] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.174584][ T8754] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 216.183832][ T10] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 216.183863][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.189746][ T10] usb 4-1: config 0 descriptor?? [ 216.212072][ T8756] netlink: 24 bytes leftover after parsing attributes in process `syz.2.849'. [ 216.224405][ T10] cp210x 4-1:0.0: cp210x converter detected [ 216.272428][ T8759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.286971][ T8759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.301823][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 216.308195][ T8756] Bluetooth: hci4: Frame reassembly failed (-84) [ 216.652997][ T8745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.661899][ T8745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.678966][ T10] cp210x 4-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 216.697534][ T10] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 216.733007][ T10] usb 4-1: cp210x converter now attached to ttyUSB0 [ 216.773661][ T10] usb 4-1: USB disconnect, device number 78 [ 216.794606][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 216.824382][ T10] cp210x 4-1:0.0: device disconnected [ 216.829165][ T8787] /dev/nullb0: Can't open blockdev [ 216.849492][ T8785] /dev/nullb0: Can't open blockdev [ 216.989822][ T8797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.017153][ T8797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.034614][ T8797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.069674][ T8797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.080405][ T8797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.101962][ T8797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.122628][ T8797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.143214][ T8797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.158516][ T8797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.176855][ T8797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.189877][ T8797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.202319][ T8797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.176616][ T8825] netlink: 10 bytes leftover after parsing attributes in process `syz.0.862'. [ 218.360001][ T5835] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 218.360338][ T5831] Bluetooth: hci4: command 0x1003 tx timeout [ 218.436339][ T8835] syzkaller1: entered promiscuous mode [ 218.444084][ T8835] syzkaller1: entered allmulticast mode [ 218.601189][ T8844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.617972][ T8844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.661921][ T5908] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 218.719893][ T10] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 218.819750][ T5908] usb 4-1: Using ep0 maxpacket: 32 [ 218.826975][ T5908] usb 4-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 64 [ 218.837010][ T5908] usb 4-1: config 1 interface 0 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 218.850221][ T5908] usb 4-1: config 1 interface 0 has no altsetting 0 [ 218.857400][ T5908] usb 4-1: language id specifier not provided by device, defaulting to English [ 218.868346][ T5908] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 218.877509][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 218.882688][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.891961][ T5908] usb 4-1: Product: 랓⡲瓡ᘒࡨ纕ꛘ旉╓ମ闇ⶽỦ鮀¢쫓膬栅㵥⠮珇㷕ꠂ㹎笹쮴⋯୚﵀쏽儸모쉓热龇澥⯀湒ᖧ懲䤬恑Ṛꕜ뭦쥴벡﫥঴⸧／璫䌄령盵殽Ψ햎鱖㤁ݧࡹ춧秷皓銼ዞ쁞瀁빴펤醇쥰഑尸⥮嚝鎁퇖⑺윏핈贴ት푿䟂 [ 218.919919][ T5823] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 218.920000][ T5835] Bluetooth: hci5: command 0x1003 tx timeout [ 218.934965][ T5908] usb 4-1: Manufacturer: င [ 218.939779][ T10] usb 3-1: config 2 has an invalid interface number: 88 but max is 0 [ 218.947885][ T5908] usb 4-1: SerialNumber: syz [ 218.952563][ T10] usb 3-1: config 2 has no interface number 0 [ 218.958676][ T10] usb 3-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 218.971847][ T10] usb 3-1: config 2 interface 88 has no altsetting 0 [ 218.979080][ T8839] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 218.988904][ T8839] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 218.998579][ T10] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 219.008950][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.019262][ T10] usb 3-1: Product: syz [ 219.023583][ T10] usb 3-1: Manufacturer: syz [ 219.028210][ T10] usb 3-1: SerialNumber: syz [ 219.038354][ T8842] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 219.210638][ T8839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.221777][ T8839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.267532][ T8842] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 219.272490][ T5908] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 219.309915][ T5908] usb 4-1: USB disconnect, device number 79 [ 219.338466][ T8855] netlink: 16 bytes leftover after parsing attributes in process `syz.0.874'. [ 219.347543][ T8855] netlink: 16 bytes leftover after parsing attributes in process `syz.0.874'. [ 220.097389][ T8852] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 220.104579][ T8852] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 220.115737][ T8852] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 220.125405][ T8852] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 220.135575][ T8852] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 220.143040][ T8852] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 220.149522][ T8852] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 220.157757][ T8852] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 220.177196][ T8858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.207065][ T8858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.412229][ T5908] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 220.431014][ T5924] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 220.568916][ T5908] usb 2-1: Using ep0 maxpacket: 32 [ 220.577200][ T5908] usb 2-1: config 10 has an invalid interface number: 171 but max is 0 [ 220.586292][ T5908] usb 2-1: config 10 has no interface number 0 [ 220.588897][ T5924] usb 4-1: Using ep0 maxpacket: 32 [ 220.593052][ T5908] usb 2-1: config 10 interface 171 has no altsetting 0 [ 220.608932][ T5908] usb 2-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=d0.8f [ 220.609472][ T5924] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 220.618366][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.642922][ T5908] usb 2-1: Product: syz [ 220.647275][ T5908] usb 2-1: Manufacturer: syz [ 220.651025][ T5924] usb 4-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.40 [ 220.652669][ T5908] usb 2-1: SerialNumber: syz [ 220.661232][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.678667][ T5924] usb 4-1: Product: syz [ 220.683098][ T5924] usb 4-1: Manufacturer: syz [ 220.700654][ T5924] usb 4-1: SerialNumber: syz [ 220.716527][ T5924] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input35 [ 220.945287][ T8854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.958516][ T8854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.058749][ T5179] bcm5974 4-1:1.0: could not read from device [ 221.083344][ T5179] bcm5974 4-1:1.0: could not read from device [ 221.102926][ T5924] usb 4-1: USB disconnect, device number 80 [ 221.108745][ T5179] bcm5974 4-1:1.0: could not read from device [ 221.398569][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 221.471903][ T8874] syzkaller1: left promiscuous mode [ 221.477243][ T8874] syzkaller1: left allmulticast mode [ 221.511886][ T10] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 221.524518][ T10] asix 3-1:2.88: probe with driver asix failed with error -71 [ 221.541672][ T10] usb 3-1: USB disconnect, device number 74 [ 221.704050][ T8877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.723232][ T8877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.899888][ T10] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 222.038215][ T10] usb 3-1: device descriptor read/64, error -71 [ 222.044596][ T9] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 222.118097][ T5835] Bluetooth: hci2: command 0x0401 tx timeout [ 222.198231][ T5823] Bluetooth: hci3: command 0x0406 tx timeout [ 222.199702][ T5835] Bluetooth: hci0: command 0x0405 tx timeout [ 222.204317][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 222.217295][ T9] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 222.227526][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.240191][ T9] usb 4-1: config 0 descriptor?? [ 222.249514][ T9] gspca_main: sq930x-2.14.0 probing 041e:403c [ 222.287985][ T10] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 222.334212][ T5908] s2255 2-1:10.171: Could not find bulk-in endpoint [ 222.342653][ T5908] Sensoray 2255 driver load failed: 0xfffffff4 [ 222.348961][ T5908] s2255 2-1:10.171: probe with driver s2255 failed with error -12 [ 222.371958][ T5908] usb 2-1: USB disconnect, device number 77 [ 222.420793][ T10] usb 3-1: device descriptor read/64, error -71 [ 222.528109][ T10] usb usb3-port1: attempt power cycle [ 222.558644][ T8890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.567444][ T8890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.580782][ T8890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.589969][ T8890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.727796][ T5908] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 222.867739][ T10] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 222.877795][ T5908] usb 2-1: Using ep0 maxpacket: 32 [ 222.886848][ T5908] usb 2-1: unable to get BOS descriptor or descriptor too short [ 222.895808][ T10] usb 3-1: device descriptor read/8, error -71 [ 222.902160][ T5908] usb 2-1: config 4 has an invalid interface number: 101 but max is 0 [ 222.910386][ T5908] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 222.920603][ T5908] usb 2-1: config 4 has no interface number 0 [ 222.926708][ T5908] usb 2-1: config 4 interface 101 has no altsetting 0 [ 222.935900][ T5908] usb 2-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=a5.52 [ 222.945091][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.953126][ T5908] usb 2-1: Product: syz [ 222.957298][ T5908] usb 2-1: Manufacturer: syz [ 222.962034][ T5908] usb 2-1: SerialNumber: syz [ 222.966717][ T9] gspca_sq930x: ucbus_write failed -110 [ 222.973325][ T9] sq930x 4-1:0.0: probe with driver sq930x failed with error -110 [ 223.139718][ T8892] syzkaller1: entered promiscuous mode [ 223.145297][ T8892] syzkaller1: entered allmulticast mode [ 223.149108][ T10] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 223.178210][ T10] usb 3-1: device descriptor read/8, error -71 [ 223.203080][ T8895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.213147][ T8895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.297712][ T10] usb usb3-port1: unable to enumerate USB device [ 223.477441][ T5823] Bluetooth: hci1: command 0x0406 tx timeout [ 223.731678][ T5908] ttusbir 2-1:4.101: cannot find expected altsetting [ 223.741261][ T5908] usb 2-1: USB disconnect, device number 78 [ 224.197056][ T5823] Bluetooth: hci2: command 0x0401 tx timeout [ 224.277157][ T5835] Bluetooth: hci0: command 0x0405 tx timeout [ 224.496875][ T5877] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 224.666991][ T5877] usb 2-1: Using ep0 maxpacket: 8 [ 224.675417][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.687887][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.697919][ T5877] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 224.716798][ T5877] usb 2-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 224.736982][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.752763][ T24] usb 4-1: USB disconnect, device number 81 [ 224.767762][ T5877] usb 2-1: config 0 descriptor?? [ 225.178574][ T5877] hid (null): report_id 918307361 is invalid [ 225.187697][ T5877] nzxt-kraken2 0003:1E71:170E.0019: report_id 918307361 is invalid [ 225.195642][ T5877] nzxt-kraken2 0003:1E71:170E.0019: item 0 4 1 8 parsing failed [ 225.203602][ T24] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 225.211914][ T5877] nzxt-kraken2 0003:1E71:170E.0019: hid parse failed with -22 [ 225.219738][ T5877] nzxt-kraken2 0003:1E71:170E.0019: probe with driver nzxt-kraken2 failed with error -22 [ 225.356476][ T24] usb 3-1: device descriptor read/64, error -71 [ 225.528687][ T5877] usb 2-1: USB disconnect, device number 79 [ 225.616393][ T24] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 225.756313][ T24] usb 3-1: device descriptor read/64, error -71 [ 225.767222][ T8916] syzkaller1: entered promiscuous mode [ 225.772793][ T8916] syzkaller1: entered allmulticast mode [ 225.866488][ T24] usb usb3-port1: attempt power cycle [ 226.027148][ T8930] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 226.226073][ T24] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 226.255855][ T30] audit: type=1400 audit(6054313002.090:10): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=8936 comm="syz.0.904" [ 226.292438][ T24] usb 3-1: device descriptor read/8, error -71 [ 226.331172][ T8941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.340439][ T5924] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 226.351344][ T8941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.359595][ T5835] Bluetooth: hci0: command 0x0405 tx timeout [ 226.497869][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.508983][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.519317][ T5924] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 226.528883][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.537063][ T24] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 226.549170][ T5924] usb 4-1: config 0 descriptor?? [ 226.566862][ T24] usb 3-1: device descriptor read/8, error -71 [ 226.676282][ T24] usb usb3-port1: unable to enumerate USB device [ 226.865722][ T5908] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 226.914289][ T8956] input: syz1 as /devices/virtual/input/input37 [ 227.028844][ T5908] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 227.038152][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 227.039605][ T8960] syzkaller1: left promiscuous mode [ 227.047895][ T5908] usb 2-1: Product: syz [ 227.056031][ T5908] usb 2-1: SerialNumber: syz [ 227.063454][ T5908] usb 2-1: config 0 descriptor?? [ 227.073544][ T8960] 9p: Bad value for 'wfdno' [ 227.132839][ T8962] trusted_key: syz.0.914 sent an empty control message without MSG_MORE. [ 227.273459][ T5908] hso 2-1:0.0: Failed to find BULK IN ep [ 227.475013][ T5908] usb 2-1: USB disconnect, device number 80 [ 228.102937][ T8970] syzkaller1: left allmulticast mode [ 228.218224][ T8978] syzkaller1: entered promiscuous mode [ 228.223730][ T8978] syzkaller1: entered allmulticast mode [ 228.272898][ T8980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.281852][ T8980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.290715][ T5835] Bluetooth: hci3: unexpected event for opcode 0x203b [ 228.357139][ T8982] netlink: 'syz.2.922': attribute type 10 has an invalid length. [ 228.365761][ T8982] macvlan0: entered promiscuous mode [ 228.375577][ T5908] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 228.381723][ T8982] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 228.524878][ T5908] usb 2-1: Using ep0 maxpacket: 32 [ 228.531806][ T5908] usb 2-1: config 0 has an invalid interface number: 111 but max is 1 [ 228.540154][ T5908] usb 2-1: config 0 has no interface number 1 [ 228.548445][ T5908] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 228.557623][ T5908] usb 2-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 228.565836][ T5908] usb 2-1: Product: syz [ 228.570002][ T5908] usb 2-1: Manufacturer: syz [ 228.574585][ T5908] usb 2-1: SerialNumber: syz [ 228.581874][ T5908] usb 2-1: config 0 descriptor?? [ 228.797739][ T8974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.809539][ T8974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.821245][ T5908] snd-usb-6fire 2-1:0.111: unable to receive device firmware state. [ 228.836360][ T5908] snd-usb-6fire 2-1:0.111: probe with driver snd-usb-6fire failed with error -71 [ 228.855384][ T5908] usb 2-1: USB disconnect, device number 81 [ 229.059376][ T5924] usbhid 4-1:0.0: can't add hid device: -71 [ 229.072912][ T5924] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 229.090274][ T5924] usb 4-1: USB disconnect, device number 82 [ 229.204701][ T9002] adf_ctl_ioctl: 15 callbacks suppressed [ 229.204719][ T9002] QAT: Invalid ioctl -2146921448 [ 229.218366][ T9001] QAT: Invalid ioctl 1074304022 [ 229.271455][ T9003] QAT: Invalid ioctl 37729 [ 229.356008][ T9005] syzkaller1: entered promiscuous mode [ 229.384583][ T9005] syzkaller1: entered allmulticast mode [ 229.404487][ T5925] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 229.574342][ T5925] usb 3-1: Using ep0 maxpacket: 8 [ 229.582200][ T5925] usb 3-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=a8.17 [ 229.591952][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.600407][ T5925] usb 3-1: Product: syz [ 229.604625][ T5925] usb 3-1: Manufacturer: syz [ 229.609234][ T5925] usb 3-1: SerialNumber: syz [ 229.616188][ T5925] usb 3-1: config 0 descriptor?? [ 229.622654][ T5925] hub 3-1:0.0: bad descriptor, ignoring hub [ 229.628634][ T5925] hub 3-1:0.0: probe with driver hub failed with error -5 [ 229.637167][ T5925] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 229.674332][ T9] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 229.804231][ T5908] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 229.826574][ T9] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 229.828196][ T5925] usb 3-1: USB disconnect, device number 83 [ 229.834814][ T9] usb 2-1: config 0 has no interface number 0 [ 229.859808][ T9] usb 2-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=93.2f [ 229.869146][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.877398][ T9] usb 2-1: Product: syz [ 229.881587][ T9] usb 2-1: Manufacturer: syz [ 229.888100][ T9] usb 2-1: SerialNumber: syz [ 229.895899][ T9] usb 2-1: config 0 descriptor?? [ 229.902795][ T9] usb 2-1: active config #0 != 1 ?? [ 229.964672][ T5908] usb 4-1: Using ep0 maxpacket: 32 [ 229.971212][ T5908] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 229.979470][ T5908] usb 4-1: config 0 has no interface number 0 [ 229.985625][ T5908] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 229.997534][ T5908] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 230.006709][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.014741][ T5908] usb 4-1: Product: syz [ 230.018901][ T5908] usb 4-1: Manufacturer: syz [ 230.023485][ T5908] usb 4-1: SerialNumber: syz [ 230.030215][ T5908] usb 4-1: config 0 descriptor?? [ 230.039718][ T5908] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 230.051708][ T5908] em28xx 4-1:0.132: Video interface 132 found: [ 230.108791][ T10] usb 2-1: USB disconnect, device number 82 [ 230.395602][ T9014] netlink: 56 bytes leftover after parsing attributes in process `syz.2.934'. [ 230.414582][ T9014] veth0_to_team: entered promiscuous mode [ 230.439521][ T5908] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 230.666777][ T5908] em28xx 4-1:0.132: failed to get i2c transfer status from bridge register (error=-5) [ 230.677405][ T5908] em28xx 4-1:0.132: board has no eeprom [ 230.713870][ T10] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 230.753816][ T5908] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 230.763221][ T5908] em28xx 4-1:0.132: analog set to bulk mode. [ 230.769963][ T9] em28xx 4-1:0.132: Registering V4L2 extension [ 230.865382][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 230.877111][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 4 [ 230.889711][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 65280, setting to 1023 [ 230.893686][ T5925] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 230.903463][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 230.918779][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.927291][ T10] usb 3-1: Product: syz [ 230.931615][ T10] usb 3-1: Manufacturer: syz [ 230.936360][ T10] usb 3-1: SerialNumber: syz [ 230.943235][ T10] usb 3-1: config 0 descriptor?? [ 230.951043][ T10] em28xx 3-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0) [ 230.960417][ T10] em28xx 3-1:0.0: Device initialization failed. [ 230.967535][ T10] em28xx 3-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 231.063567][ T5925] usb 2-1: Using ep0 maxpacket: 16 [ 231.070924][ T5925] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 231.087234][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 231.102054][ T5925] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 231.111176][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.119221][ T5925] usb 2-1: Product: syz [ 231.123413][ T5925] usb 2-1: Manufacturer: syz [ 231.128151][ T5925] usb 2-1: SerialNumber: syz [ 231.135161][ T5925] usb 2-1: config 0 descriptor?? [ 231.143131][ T5925] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 231.152557][ T5925] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 231.175706][ T9] em28xx 4-1:0.132: reading from i2c device at 0x4a failed: couldn't get the received message from the bridge (error=-5) [ 231.176131][ T5924] usb 4-1: USB disconnect, device number 83 [ 231.189085][ T9] em28xx 4-1:0.132: failed to trigger read from i2c address 0x48 (error=-19) [ 231.197429][ T5924] em28xx 4-1:0.132: Disconnecting em28xx [ 231.258900][ T9] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 231.266503][ T9] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 231.275519][ T9] em28xx 4-1:0.132: No AC97 audio processor [ 231.289710][ T9] usb 4-1: Decoder not found [ 231.294441][ T9] em28xx 4-1:0.132: failed to create media graph [ 231.300992][ T9] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 231.314138][ T9] em28xx 4-1:0.132: Remote control support is not available for this card. [ 231.323656][ T5924] em28xx 4-1:0.132: Closing input extension [ 231.338820][ T5924] em28xx 4-1:0.132: Freeing device [ 231.732553][ T9028] binder: 9025:9028 ioctl c0306201 200000000500 returned -14 [ 231.745247][ T9028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.755404][ T5925] em28xx 2-1:0.0: chip ID is em2874 [ 231.764814][ T9028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.868050][ T9030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.876790][ T9030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.960702][ T10] usb 2-1: USB disconnect, device number 83 [ 231.968816][ T10] em28xx 2-1:0.0: Disconnecting em28xx [ 231.978954][ T10] em28xx 2-1:0.0: Freeing device [ 231.984926][ T9] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 232.133114][ T9] usb 4-1: device descriptor read/64, error -71 [ 232.196584][ T9037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.205821][ T9037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.215582][ T9037] batadv_slave_0: entered promiscuous mode [ 232.222570][ T9036] batadv_slave_0: left promiscuous mode [ 232.372941][ T9] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 232.502913][ T9] usb 4-1: device descriptor read/64, error -71 [ 232.506806][ T9040] syzkaller1: entered promiscuous mode [ 232.516354][ T9040] syzkaller1: entered allmulticast mode [ 232.623088][ T9] usb usb4-port1: attempt power cycle [ 232.862749][ T10] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 232.878759][ T9051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.887690][ T9051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.917935][ T9051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.926697][ T9051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.972706][ T9] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 232.993356][ T9] usb 4-1: device descriptor read/8, error -71 [ 233.022695][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 233.029687][ T10] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 233.038052][ T10] usb 2-1: config 179 has no interface number 0 [ 233.044634][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 233.055772][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 233.067096][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 233.078302][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 233.089745][ T10] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 233.103038][ T10] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 233.112091][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.124658][ T9042] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 233.242772][ T9] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 233.262995][ T9] usb 4-1: device descriptor read/8, error -71 [ 233.344156][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input38 [ 233.372909][ T9] usb usb4-port1: unable to enumerate USB device [ 233.515564][ T5924] usb 3-1: USB disconnect, device number 84 [ 233.590765][ T9059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.603024][ T9059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.898211][ T9064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.907246][ T9064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.916550][ T9064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.925726][ T9064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.982298][ T9] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 234.157485][ T9] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 234.161119][ T9066] syzkaller1: entered promiscuous mode [ 234.168247][ T9] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 234.174945][ T9066] syzkaller1: entered allmulticast mode [ 234.183130][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 234.202006][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 234.213626][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.221773][ T9] usb 3-1: Product: syz [ 234.226301][ T9] usb 3-1: Manufacturer: syz [ 234.231022][ T9] usb 3-1: SerialNumber: syz [ 234.351418][ T5835] Bluetooth: hci3: unexpected event 0x2f length: 1017 > 260 [ 234.353722][ T9070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.370256][ T9070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.446479][ T9070] kvm: kvm [9069]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 234.455618][ T9070] kvm: kvm [9069]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 234.487357][ T9] usb 3-1: 0:2 : does not exist [ 234.537536][ T9] usb 3-1: USB disconnect, device number 85 [ 235.061445][ T30] audit: type=1326 audit(6054313010.894:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9084 comm="syz.2.958" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbd4e38f6c9 code=0x0 [ 235.110859][ T9086] netlink: 'syz.2.958': attribute type 40 has an invalid length. [ 235.120825][ T9086] netlink: 'syz.2.958': attribute type 21 has an invalid length. [ 235.130614][ T9086] netlink: 156 bytes leftover after parsing attributes in process `syz.2.958'. [ 235.141675][ T9086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.958'. [ 235.681152][ T5877] usb 2-1: USB disconnect, device number 84 [ 235.681298][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 235.696274][ C0] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 236.549818][ T9] hid_parser_main: 154 callbacks suppressed [ 236.549841][ T9] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 236.589585][ T9] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 236.631094][ T5877] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 236.690852][ T5924] usb 4-1: new low-speed USB device number 88 using dummy_hcd [ 236.821996][ T5877] usb 3-1: config 0 has no interfaces? [ 236.827527][ T5877] usb 3-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 236.850761][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.864756][ T5924] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt [ 236.875459][ T5877] usb 3-1: config 0 descriptor?? [ 236.889024][ T5924] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x3 is Bulk; changing to Interrupt [ 236.903542][ T5924] usb 4-1: config 1 interface 0 has no altsetting 0 [ 236.931112][ T5924] usb 4-1: string descriptor 0 read error: -22 [ 236.933423][ T9148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.974'. [ 236.937448][ T5924] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 236.970619][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.982370][ T9144] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 236.999017][ T9144] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 237.025129][ T5924] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 237.109170][ T5924] usb 3-1: USB disconnect, device number 86 [ 237.218660][ T5877] usb 4-1: USB disconnect, device number 88 [ 237.343972][ T9151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.377527][ T9151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.400010][ T9151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.411778][ T9151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.451151][ T9163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.624109][ T9151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.639540][ T9151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.670352][ T5825] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 237.831215][ T5825] usb 3-1: Using ep0 maxpacket: 32 [ 237.842398][ T5825] usb 3-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 237.860594][ T5825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.886988][ T5825] usb 3-1: config 0 descriptor?? [ 238.119728][ T9161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.138901][ T9161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.290029][ T10] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 238.449904][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 238.467084][ T10] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.489968][ T9] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 238.499046][ T5825] aquacomputer_d5next 0003:0C70:F00B.001B: hidraw0: USB HID v1.01 Device [HID 0c70:f00b] on usb-dummy_hcd.2-1/input0 [ 238.521236][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 238.527905][ T10] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 238.554776][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.574463][ T10] usb 2-1: config 0 descriptor?? [ 238.628228][ T9196] netlink: 40 bytes leftover after parsing attributes in process `syz.0.985'. [ 238.637421][ T9196] tipc: Invalid UDP bearer configuration [ 238.637481][ T9196] tipc: Enabling of bearer rejected, failed to enable media [ 238.700643][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 238.709412][ T9199] netlink: 20 bytes leftover after parsing attributes in process `syz.0.986'. [ 238.711921][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 238.722786][ T5877] usb 3-1: USB disconnect, device number 87 [ 238.730714][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 238.758088][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 238.770325][ T9199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.779231][ T9199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.806612][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.824074][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 238.833269][ T9] usb 4-1: Product: syz [ 238.837460][ T9] usb 4-1: Manufacturer: syz [ 238.845229][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 238.864570][ T9] usb 4-1: SerialNumber: syz [ 238.886458][ T10] usb 2-1: USB disconnect, device number 85 [ 238.895861][ T9] usb 4-1: config 0 descriptor?? [ 238.917743][ T9] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 238.935028][ T9] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 239.269516][ T10] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 239.281632][ T9211] syzkaller1: entered promiscuous mode [ 239.287139][ T9211] syzkaller1: entered allmulticast mode [ 239.316871][ T9181] overlayfs: overlapping lowerdir path [ 239.324910][ T9181] overlayfs: overlapping lowerdir path [ 239.345550][ T9] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 239.359809][ T9] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 239.367097][ T9] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 239.374724][ T9] em28xx 4-1:0.0: No AC97 audio processor [ 239.391407][ T9] usb 4-1: USB disconnect, device number 89 [ 239.409295][ T9] em28xx 4-1:0.0: Disconnecting em28xx [ 239.420604][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 239.426332][ T9] em28xx 4-1:0.0: Freeing device [ 239.436405][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 239.450325][ T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 5: 69, using maximum allowed: 30 [ 239.462622][ T10] usb 2-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 69 [ 239.476501][ T10] usb 2-1: config 0 interface 0 has no altsetting 1 [ 239.484033][ T10] usb 2-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 239.493336][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 239.501810][ T10] usb 2-1: SerialNumber: syz [ 239.509887][ T10] usb 2-1: config 0 descriptor?? [ 239.517747][ T10] usb-storage 2-1:0.0: USB Mass Storage device detected [ 239.527734][ T10] usb-storage 2-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 239.576397][ T9221] netlink: 20 bytes leftover after parsing attributes in process `syz.3.991'. [ 239.716745][ T9] usb 2-1: USB disconnect, device number 86 [ 239.783318][ T9224] netlink: 16 bytes leftover after parsing attributes in process `syz.0.993'. [ 239.821597][ T9226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.830541][ T9226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.389284][ T9] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 240.578901][ T5877] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 240.613730][ T9240] syzkaller1: left promiscuous mode [ 240.619356][ T9240] syzkaller1: left allmulticast mode [ 240.761155][ T5877] usb 2-1: Using ep0 maxpacket: 32 [ 240.773258][ T5877] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 240.784975][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.794782][ T5877] usb 2-1: Product: syz [ 240.799349][ T5877] usb 2-1: Manufacturer: syz [ 240.804020][ T5877] usb 2-1: SerialNumber: syz [ 240.814021][ T5877] usb 2-1: config 0 descriptor?? [ 240.826605][ T5877] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 242.230720][ T5877] gspca_topro: Sensor cx0342 [ 242.433342][ T5877] usb 2-1: USB disconnect, device number 87 [ 243.215502][ T9285] vxcan0: tx address claim with different name [ 243.225017][ T9287] vxcan0: tx address claim with different name [ 243.232490][ T9285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1012'. [ 243.255535][ T5835] Bluetooth: hci1: unexpected cc 0x2012 length: 3 > 1 [ 243.262451][ T5835] Bluetooth: hci1: unexpected event for opcode 0x2012 [ 243.265428][ T9285] dvmrp0: entered allmulticast mode [ 243.347467][ T10] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 243.519082][ T10] usb 2-1: too many configurations: 214, using maximum allowed: 8 [ 243.529830][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 243.538377][ T10] usb 2-1: can't read configurations, error -61 [ 243.667745][ T10] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 243.828736][ T10] usb 2-1: too many configurations: 214, using maximum allowed: 8 [ 243.848897][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 243.856721][ T10] usb 2-1: can't read configurations, error -61 [ 243.867806][ T10] usb usb2-port1: attempt power cycle [ 243.968235][ T9307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.977935][ T9] usb 3-1: device descriptor read/64, error -71 [ 243.994294][ T9307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.015402][ T9307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.025180][ T9307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.207268][ T10] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 244.217165][ T9] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 244.238870][ T10] usb 2-1: too many configurations: 214, using maximum allowed: 8 [ 244.249212][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 244.256797][ T10] usb 2-1: can't read configurations, error -61 [ 244.367700][ T9] usb 3-1: no configurations [ 244.372328][ T9] usb 3-1: can't read configurations, error -22 [ 244.381857][ T9] usb usb3-port1: attempt power cycle [ 244.387632][ T10] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 244.408276][ T10] usb 2-1: too many configurations: 214, using maximum allowed: 8 [ 244.418125][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 244.425714][ T10] usb 2-1: can't read configurations, error -61 [ 244.433759][ T10] usb usb2-port1: unable to enumerate USB device [ 244.725445][ T9316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.727423][ T9] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 244.734354][ T9316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.758528][ T9] usb 3-1: no configurations [ 244.763188][ T9] usb 3-1: can't read configurations, error -22 [ 244.896681][ T9] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 244.917626][ T9] usb 3-1: no configurations [ 244.922242][ T9] usb 3-1: can't read configurations, error -22 [ 244.928945][ T9] usb usb3-port1: unable to enumerate USB device [ 245.334047][ T9320] /dev/nullb0: Can't open blockdev [ 245.401244][ T9320] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1020'. [ 245.474364][ T9323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.483574][ T9323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.210090][ T9356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.220137][ T9356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.233628][ T9356] 9p: Bad value for 'rfdno' [ 247.298602][ T10] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 247.468034][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 247.480813][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.491661][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 247.505000][ T10] usb 3-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 247.514418][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.526435][ T10] usb 3-1: config 0 descriptor?? [ 247.665374][ T9] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 247.817163][ T9] usb 2-1: config 160 has an invalid interface number: 200 but max is 0 [ 247.825589][ T9] usb 2-1: config 160 has no interface number 0 [ 247.831910][ T9] usb 2-1: config 160 interface 200 has no altsetting 0 [ 247.841296][ T9] usb 2-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 247.850411][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.859754][ T9] usb 2-1: Product: syz [ 247.863944][ T9] usb 2-1: Manufacturer: syz [ 247.868861][ T9] usb 2-1: SerialNumber: syz [ 247.940034][ T10] cypress 0003:04B4:07B1.001C: unknown main item tag 0x0 [ 247.947438][ T10] cypress 0003:04B4:07B1.001C: unknown main item tag 0x0 [ 247.954558][ T10] cypress 0003:04B4:07B1.001C: unknown main item tag 0x0 [ 247.963631][ T10] cypress 0003:04B4:07B1.001C: unknown main item tag 0x0 [ 247.971050][ T10] cypress 0003:04B4:07B1.001C: unknown main item tag 0x0 [ 247.980629][ T10] cypress 0003:04B4:07B1.001C: hidraw0: USB HID v1.01 Device [HID 04b4:07b1] on usb-dummy_hcd.2-1/input0 [ 248.091649][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 248.098941][ T9] usb 2-1: MIDIStreaming interface descriptor not found [ 248.146183][ T9] usb 2-1: USB disconnect, device number 92 [ 248.158137][ T5924] usb 3-1: USB disconnect, device number 92 [ 248.196618][ T6588] udevd[6588]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 248.884689][ T9] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 248.934732][ T5825] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 249.014644][ T9] usb 2-1: device descriptor read/64, error -71 [ 249.096188][ T5825] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 249.105309][ T5825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.115435][ T5825] usb 3-1: config 0 descriptor?? [ 249.125123][ T5825] cp210x 3-1:0.0: cp210x converter detected [ 249.264475][ T9] usb 2-1: new full-speed USB device number 94 using dummy_hcd [ 249.323623][ T5825] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 249.331785][ T5825] cp210x 3-1:0.0: failed to get vendor val 0x370c size 73: -32 [ 249.339404][ T5825] cp210x 3-1:0.0: GPIO initialisation failed: -32 [ 249.350155][ T5825] usb 3-1: cp210x converter now attached to ttyUSB0 [ 249.404772][ T9] usb 2-1: device descriptor read/64, error -71 [ 249.515312][ T9] usb usb2-port1: attempt power cycle [ 249.674811][ T9374] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 249.700052][ T5825] usb 3-1: USB disconnect, device number 93 [ 249.731449][ T5825] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 249.743947][ T5825] cp210x 3-1:0.0: device disconnected [ 249.854234][ T9] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 249.885794][ T9] usb 2-1: device descriptor read/8, error -71 [ 250.124049][ T9] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 250.144494][ T9] usb 2-1: device descriptor read/8, error -71 [ 250.174063][ T5825] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 250.256676][ T9] usb usb2-port1: unable to enumerate USB device [ 250.270775][ T9383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.279772][ T9383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.325343][ T5825] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.335534][ T5825] usb 3-1: config 0 interface 0 has no altsetting 0 [ 250.344573][ T5825] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 250.353670][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.361950][ T5825] usb 3-1: Product: syz [ 250.366168][ T5825] usb 3-1: Manufacturer: syz [ 250.370759][ T5825] usb 3-1: SerialNumber: syz [ 250.378027][ T5825] usb 3-1: config 0 descriptor?? [ 250.385430][ T5825] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 250.396016][ T5825] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 250.405948][ T5825] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 250.415934][ T5825] usb 3-1: media controller created [ 250.430126][ T5825] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 250.465407][ T5825] DVB: Unable to find symbol tda10046_attach() [ 250.471578][ T5825] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 250.480258][ T5825] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 250.585798][ T5825] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 250.597957][ T5825] usb 3-1: USB disconnect, device number 94 [ 250.831312][ T9386] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 250.843857][ T9386] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 250.891673][ T9388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.901492][ T9388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.240724][ T9391] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 251.280843][ T9391] tipc: Started in network mode [ 251.285784][ T9391] tipc: Node identity ca7fb2d2f2c5, cluster identity 4711 [ 251.293179][ T9391] tipc: Enabled bearer , priority 0 [ 251.346380][ T9391] syzkaller0: entered promiscuous mode [ 251.351964][ T9391] syzkaller0: entered allmulticast mode [ 251.383558][ T5924] usb 3-1: new low-speed USB device number 95 using dummy_hcd [ 251.425115][ T9391] tipc: Resetting bearer [ 251.512390][ T9390] tipc: Resetting bearer [ 251.524857][ T5924] usb 3-1: device descriptor read/64, error -71 [ 251.544907][ T9390] tipc: Disabling bearer [ 251.763297][ T5924] usb 3-1: new low-speed USB device number 96 using dummy_hcd [ 251.903277][ T5924] usb 3-1: device descriptor read/64, error -71 [ 252.013390][ T5924] usb usb3-port1: attempt power cycle [ 252.053153][ T5877] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 252.193289][ T5877] usb 2-1: device descriptor read/64, error -71 [ 252.269913][ T9405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.279130][ T9405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.353164][ T5924] usb 3-1: new low-speed USB device number 97 using dummy_hcd [ 252.373722][ T5924] usb 3-1: device descriptor read/8, error -71 [ 252.442919][ T5877] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 252.572862][ T5877] usb 2-1: device descriptor read/64, error -71 [ 252.622843][ T5924] usb 3-1: new low-speed USB device number 98 using dummy_hcd [ 252.643748][ T5924] usb 3-1: device descriptor read/8, error -71 [ 252.683005][ T5877] usb usb2-port1: attempt power cycle [ 252.753412][ T5924] usb usb3-port1: unable to enumerate USB device [ 252.903431][ T9411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.912798][ T9411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.022630][ T5877] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 253.043080][ T5877] usb 2-1: device descriptor read/8, error -71 [ 253.292469][ T5877] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 253.312926][ T5877] usb 2-1: device descriptor read/8, error -71 [ 253.432646][ T5877] usb usb2-port1: unable to enumerate USB device [ 254.180652][ T9414] delete_channel: no stack [ 254.185399][ T9414] delete_channel: no stack [ 254.191305][ T9414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1051'. [ 254.860627][ T5828] ------------[ cut here ]------------ [ 254.866280][ T5828] WARNING: ./include/linux/ns_common.h:255 at put_mnt_ns+0x152/0x190, CPU#1: syz-executor/5828 [ 254.876739][ T5828] Modules linked in: [ 254.880676][ T5828] CPU: 1 UID: 0 PID: 5828 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 254.890222][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 254.900323][ T5828] RIP: 0010:put_mnt_ns+0x152/0x190 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 254.905608][ T5828] Code: 79 00 00 bf 01 00 00 00 89 ee e8 99 15 7e ff 85 ed 7e 1f e8 50 11 7e ff 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 3f 11 7e ff 90 <0f> 0b 90 e9 33 ff ff ff e8 31 11 7e ff 4c 89 f7 be 03 00 00 00 5b [ 254.925511][ T5828] RSP: 0018:ffffc90003eefa68 EFLAGS: 00010293 [ 254.932156][ T5828] RAX: ffffffff82434e41 RBX: ffff888028d30c00 RCX: ffff88802a838000 [ 254.940186][ T5828] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 254.948230][ T5828] RBP: 00000000ffffffff R08: ffff888028d30cbb R09: 1ffff110051a6197 [ 254.956279][ T5828] R10: dffffc0000000000 R11: ffffed10051a6198 R12: dffffc0000000000 [ 254.964329][ T5828] R13: 0000000000000009 R14: ffff888028d30cb8 R15: dffffc0000000000 [ 254.972348][ T5828] FS: 0000000000000000(0000) GS:ffff888125b82000(0000) knlGS:0000000000000000 [ 254.981311][ T5828] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 254.988249][ T5828] CR2: 00007f95db85df98 CR3: 000000007e65e000 CR4: 00000000003526f0 [ 254.996291][ T5828] Call Trace: [ 254.999580][ T5828] [ 255.002580][ T5828] free_nsproxy+0x46/0x560 [ 255.007036][ T5828] do_exit+0x6b8/0x2300 [ 255.011208][ T5828] ? do_raw_spin_lock+0x121/0x290 [ 255.016329][ T5828] ? __pfx_do_exit+0x10/0x10 [ 255.022472][ T5828] do_group_exit+0x21c/0x2d0 [ 255.027360][ T5828] ? lockdep_hardirqs_on+0x9c/0x150 [ 255.032632][ T5828] get_signal+0x1285/0x1340 [ 255.037169][ T5828] arch_do_signal_or_restart+0x9a/0x7a0 [ 255.042782][ T5828] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 255.048958][ T5828] ? do_sys_openat2+0x154/0x1c0 [ 255.053865][ T5828] ? exit_to_user_mode_loop+0x55/0x4f0 [ 255.059365][ T5828] exit_to_user_mode_loop+0x87/0x4f0 [ 255.064697][ T5828] ? rcu_is_watching+0x15/0xb0 [ 255.069479][ T5828] do_syscall_64+0x2e9/0xfa0 [ 255.074345][ T5828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.080540][ T5828] ? clear_bhb_loop+0x60/0xb0 [ 255.085269][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.091201][ T5828] RIP: 0033:0x7f381538efc1 [ 255.095676][ T5828] Code: Unable to access opcode bytes at 0x7f381538ef97. [ 255.102724][ T5828] RSP: 002b:00007fffb35cdd40 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 255.111175][ T5828] RAX: fffffffffffffffc RBX: 00007f3815411d7d RCX: 00007f381538efc1 [ 255.119398][ T5828] RDX: 0000000000090800 RSI: 00007fffb35cef50 RDI: 00000000ffffff9c [ 255.127659][ T5828] RBP: 00007fffb35cef50 R08: 0000000000000000 R09: 0000000000000000 [ 255.135702][ T5828] R10: 0000000000000000 R11: 0000000000000287 R12: 00007fffb35cef50 [ 255.143907][ T5828] R13: 00007f3815411d7d R14: 000000000003a7f0 R15: 00007fffb35d2200 [ 255.151993][ T5828] [ 255.155027][ T5828] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 255.162308][ T5828] CPU: 1 UID: 0 PID: 5828 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 255.171766][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 255.181836][ T5828] Call Trace: [ 255.185121][ T5828] [ 255.188057][ T5828] dump_stack_lvl+0x99/0x250 [ 255.192656][ T5828] ? __asan_memcpy+0x40/0x70 [ 255.197257][ T5828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.202465][ T5828] ? __pfx__printk+0x10/0x10 [ 255.207079][ T5828] vpanic+0x237/0x6d0 [ 255.211060][ T5828] ? __pfx_vpanic+0x10/0x10 [ 255.215554][ T5828] ? is_bpf_text_address+0x292/0x2b0 [ 255.220834][ T5828] ? is_bpf_text_address+0x26/0x2b0 [ 255.226036][ T5828] panic+0xb9/0xc0 [ 255.229750][ T5828] ? __pfx_panic+0x10/0x10 [ 255.234176][ T5828] __warn+0x318/0x4d0 [ 255.238148][ T5828] ? put_mnt_ns+0x152/0x190 [ 255.242644][ T5828] ? put_mnt_ns+0x152/0x190 [ 255.247141][ T5828] report_bug+0x2be/0x4f0 [ 255.251466][ T5828] ? put_mnt_ns+0x152/0x190 [ 255.255967][ T5828] ? put_mnt_ns+0x152/0x190 [ 255.260460][ T5828] ? put_mnt_ns+0x154/0x190 [ 255.264951][ T5828] handle_bug+0x84/0x160 [ 255.269187][ T5828] exc_invalid_op+0x1a/0x50 [ 255.273677][ T5828] asm_exc_invalid_op+0x1a/0x20 [ 255.278515][ T5828] RIP: 0010:put_mnt_ns+0x152/0x190 [ 255.283617][ T5828] Code: 79 00 00 bf 01 00 00 00 89 ee e8 99 15 7e ff 85 ed 7e 1f e8 50 11 7e ff 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 3f 11 7e ff 90 <0f> 0b 90 e9 33 ff ff ff e8 31 11 7e ff 4c 89 f7 be 03 00 00 00 5b [ 255.303211][ T5828] RSP: 0018:ffffc90003eefa68 EFLAGS: 00010293 [ 255.309268][ T5828] RAX: ffffffff82434e41 RBX: ffff888028d30c00 RCX: ffff88802a838000 [ 255.317230][ T5828] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 255.325194][ T5828] RBP: 00000000ffffffff R08: ffff888028d30cbb R09: 1ffff110051a6197 [ 255.333166][ T5828] R10: dffffc0000000000 R11: ffffed10051a6198 R12: dffffc0000000000 [ 255.341127][ T5828] R13: 0000000000000009 R14: ffff888028d30cb8 R15: dffffc0000000000 [ 255.349095][ T5828] ? put_mnt_ns+0x151/0x190 [ 255.353596][ T5828] ? put_mnt_ns+0x151/0x190 [ 255.358090][ T5828] free_nsproxy+0x46/0x560 [ 255.362497][ T5828] do_exit+0x6b8/0x2300 [ 255.366651][ T5828] ? do_raw_spin_lock+0x121/0x290 [ 255.371671][ T5828] ? __pfx_do_exit+0x10/0x10 [ 255.376268][ T5828] do_group_exit+0x21c/0x2d0 [ 255.380858][ T5828] ? lockdep_hardirqs_on+0x9c/0x150 [ 255.386048][ T5828] get_signal+0x1285/0x1340 [ 255.390561][ T5828] arch_do_signal_or_restart+0x9a/0x7a0 [ 255.396106][ T5828] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 255.402253][ T5828] ? do_sys_openat2+0x154/0x1c0 [ 255.407108][ T5828] ? exit_to_user_mode_loop+0x55/0x4f0 [ 255.412559][ T5828] exit_to_user_mode_loop+0x87/0x4f0 [ 255.417839][ T5828] ? rcu_is_watching+0x15/0xb0 [ 255.422602][ T5828] do_syscall_64+0x2e9/0xfa0 [ 255.427185][ T5828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.433245][ T5828] ? clear_bhb_loop+0x60/0xb0 [ 255.437918][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.443803][ T5828] RIP: 0033:0x7f381538efc1 [ 255.448206][ T5828] Code: Unable to access opcode bytes at 0x7f381538ef97. [ 255.455206][ T5828] RSP: 002b:00007fffb35cdd40 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 255.463609][ T5828] RAX: fffffffffffffffc RBX: 00007f3815411d7d RCX: 00007f381538efc1 [ 255.471567][ T5828] RDX: 0000000000090800 RSI: 00007fffb35cef50 RDI: 00000000ffffff9c [ 255.479538][ T5828] RBP: 00007fffb35cef50 R08: 0000000000000000 R09: 0000000000000000 [ 255.487512][ T5828] R10: 0000000000000000 R11: 0000000000000287 R12: 00007fffb35cef50 [ 255.495480][ T5828] R13: 00007f3815411d7d R14: 000000000003a7f0 R15: 00007fffb35d2200 [ 255.503461][ T5828] [ 255.506732][ T5828] Kernel Offset: disabled [ 255.511046][ T5828] Rebooting in 86400 seconds..