last executing test programs: 3m14.970527286s ago: executing program 1 (id=265): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {0x0, 0xf0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000380)={@fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x31}, @flat=@weak_handle={0x77682a85, 0x1, 0x1}}, &(0x7f0000000440)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 3m14.962209698s ago: executing program 1 (id=266): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, 0x2c, 0x107, 0x70bd28, 0x25dfdbff, {0x3, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x2400c810) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') open_tree(r1, &(0x7f00000004c0)='./cgroup\x00', 0x88802) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000002b40), 0xffffffffffffffff) mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f0000000100)={[{@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x34]}}, {@usrquota}]}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_bt_hci(r4, 0x800448d5, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r5, &(0x7f0000000f00)={0x2020}, 0x2020) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000002c00)={0x0, 0x100000, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x38, r3, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x38}}, 0x0) socket$key(0xf, 0x3, 0x2) 3m14.914266254s ago: executing program 1 (id=267): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x44040) write$input_event(r0, &(0x7f0000000b80)={{0x0, 0x2710}, 0x0, 0x4, 0x7ff}, 0x34000) 3m14.818557087s ago: executing program 1 (id=268): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) lsetxattr$security_ima(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@sha1={0x1, "f521e955444478cabb47696229509533a6c2e0be"}, 0x15, 0x1) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x60200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x3}, 0x1c) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x28, 0x0, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0x41, 0x60}}}}}, 0x28}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000400)={r4}) umount2(&(0x7f0000000380)='./file0\x00', 0x4) 3m14.765273085s ago: executing program 1 (id=269): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'gre0\x00'}}]}]}, 0x24}}, 0x200000000000000) 3m14.454933847s ago: executing program 1 (id=274): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x2006}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000000)="ea77", 0x2}], 0x1, 0x0, 0x0, 0x300}}], 0x1, 0x119e75c40673edef) 3m14.238129001s ago: executing program 32 (id=274): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x2006}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000000)="ea77", 0x2}], 0x1, 0x0, 0x0, 0x300}}], 0x1, 0x119e75c40673edef) 7.014633445s ago: executing program 0 (id=1488): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b90101000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.604212607s ago: executing program 4 (id=1502): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12015082d5281b08c00901024ffa0102030109021200013daea002090425070013fd42fb"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000740)={0x14, 0x0, &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000980)={0x14, 0x0, &(0x7f0000000940)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, 0x16, 0x1, 0x0, 0x25dfdbfb, {0xa}, [@nested={0x18, 0xca, 0x0, 0x1, [@nested={0x14, 0x6, 0x0, 0x1, [@typed={0xd, 0xe4, 0x0, 0x0, @binary="b1fc2d971a289f852a"}]}]}]}, 0x2c}}, 0x40) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="2014016719f0d3a3c3a000ef"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.434411228s ago: executing program 3 (id=1505): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x300, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x40000072, 0x0, 0x7ff}]}) (fail_nth: 2) 4.934490718s ago: executing program 3 (id=1506): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000002a00)={0x14, 0x76, 0x31f, 0x0, 0x0, "", [@nested={0x4, 0xd}]}, 0x14}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000040)={0x2, 0xa000, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000080)=0x5, 0x4) setsockopt$inet_int(r3, 0x0, 0x1, &(0x7f00000009c0)=0x1234, 0x4) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "fc0300", 0x60, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65}], @pkt_toobig={0x2, 0x0, 0x0, 0x49, {0x4, 0x6, '\x00', 0xf08, 0x2b, 0xb9e02c7ea3376920, @ipv4={'\x00', '\xff\xff', @multicast2}, @dev={0xfe, 0x80, '\x00', 0x10}, [@srh={0x2c, 0x4, 0x4, 0x2, 0x0, 0x40, 0x5, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback]}]}}}}}}, 0x96) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000002a00)={0x14, 0x76, 0x31f, 0x0, 0x0, "", [@nested={0x4, 0xd}]}, 0x14}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) connect$inet(r3, &(0x7f0000000040)={0x2, 0xa000, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) (async) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000080)=0x5, 0x4) (async) setsockopt$inet_int(r3, 0x0, 0x1, &(0x7f00000009c0)=0x1234, 0x4) (async) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "fc0300", 0x60, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65}], @pkt_toobig={0x2, 0x0, 0x0, 0x49, {0x4, 0x6, '\x00', 0xf08, 0x2b, 0xb9e02c7ea3376920, @ipv4={'\x00', '\xff\xff', @multicast2}, @dev={0xfe, 0x80, '\x00', 0x10}, [@srh={0x2c, 0x4, 0x4, 0x2, 0x0, 0x40, 0x5, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback]}]}}}}}}, 0x96) (async) 4.764669013s ago: executing program 3 (id=1508): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000340)={0x2, 0x10000005, 0x5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x40) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0xa, 0x2000002, 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) close_range(r0, 0xffffffffffffffff, 0x500000000000000) 4.502242344s ago: executing program 3 (id=1510): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x40001) write$UHID_INPUT(r0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x101, 0x6, 0x4, 0x1ff}, 'syz1\x00', 0x4f}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000240)={{0x4a7d, 0xc51, 0xf69a, 0xfff}, 'syz0\x00', 0x30}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$key(0xf, 0x3, 0x2) keyctl$set_reqkey_keyring(0xe, 0x7) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020100030e000000fcffffff0400000005000600000000000a00000000000000fc01ff80000000000000000000000000000000000000000005000500000000000a0000002efcb098950a0ec00000000000000000000000aa0000000000000000020013"], 0x70}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_ifreq(r3, 0x8931, &(0x7f0000000000)={'vcan0\x00', @ifru_map={0x3, 0x73, 0xc0f5, 0x9, 0x0, 0x8}}) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a090400002800018058000100637400001c0002800500030000000000080001400000000908000240000000000900010073797a30000000140000001100010000000000000000000000000a48099b1770394d4f443aca1b9fb2e5ff433edc5c1e5d922b7e4b6d899b84e6b247789ae937b3c58e3421e6e7ad4342352883b6b5283f6e01449ce8de82963e5cbc7102c51e3869c67fc81c917918364272a000"], 0x80}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120101025032d010dd04319033070102030109021200010c0190060904e2430002060005"], &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) bind$nfc_llcp(r0, &(0x7f0000000440)={0x27, r7, 0xffffffffffffffff, 0x7, 0x8, 0x81, "ea11d8aa4d535c3ef64795003f6afdd630688b4a2521126a40eaaf4a77f4bbb20cd32cf3384f0bcb947ee0df4d1349010893bbf6dd8abc000119ecfebf5ef4", 0x10}, 0x60) 4.335768639s ago: executing program 2 (id=1512): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000004d00)={0x0, 0x0, &(0x7f0000004cc0)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010025bd7000fcdbdf251800002108000300", @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x24000044}, 0x4080) 4.235193537s ago: executing program 2 (id=1513): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x24004008}, 0x0) recvmsg(r0, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000) recvmmsg(r0, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0, 0xc3}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)=""/195, 0xc3}, {&(0x7f0000001840)=""/4087, 0xff7}, {&(0x7f0000000080)=""/118, 0x76}], 0x3}, 0x7}], 0x3, 0x40002000, 0x0) 4.229657208s ago: executing program 2 (id=1514): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)) pipe(&(0x7f0000000440)) syz_init_net_socket$ax25(0x3, 0x2, 0x8) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)) pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xf) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000006000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 4.15611876s ago: executing program 2 (id=1515): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$video(&(0x7f00000000c0), 0x0, 0x82341) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000cc0)={0xa, {0x800, 0x7b, 0x1000}}) r2 = syz_open_dev$swradio(&(0x7f00000004c0), 0x1, 0x2) pread64(r2, &(0x7f00000000c0)=""/105, 0x69, 0x7) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f00000006c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='noinode32']) r3 = socket$inet(0xa, 0x801, 0x84) chroot(&(0x7f0000000180)='./file0/../file0\x00') clock_gettime(0x7, &(0x7f0000000600)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) utimensat(r0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000580)={{r4, r5/1000+10000}, {r6, r7/1000+60000}}, 0x100) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f00000000c0)=0xe0000000, 0x4) listen(r3, 0x8) r8 = accept4(r3, 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff038}, {0x20, 0x0, 0x0, 0xffffefff}, {0x6}]}, 0x10) sendmmsg(r9, &(0x7f0000000180), 0x4000190, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x88000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x8, &(0x7f0000000100)=[{0x2fe1, 0xfb, 0x9, 0x51cc}, {0x6f, 0x9, 0x6, 0x8001}, {0x800, 0x4, 0xb, 0x6}, {0x7, 0x8, 0x5, 0x4}, {0xfffe, 0x1, 0x4, 0xe}, {0x400, 0xf8, 0x35, 0xd}, {0x1000, 0x3, 0x6, 0x1}, {0xe, 0xea, 0xd, 0xfffffffa}]}) umount2(&(0x7f0000000040)='./file0/file0\x00', 0x5) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r11, r11, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340), 0x4000, &(0x7f0000000380)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r11}}, {@debug={'debug', 0x3d, 0x36aa}}, {@nodevmap}, {@access_any}], [{@flag='dirsync'}]}}) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x800, 0x0) 4.026147591s ago: executing program 2 (id=1516): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="40274000000005edaeffffffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x32, &(0x7f0000000080)=0x4, 0x4) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181403, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f00006dd000/0x400000)=nil) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4020ae46, &(0x7f00000000c0)={0x3, 0x1, [{0x0, 0x608, 0x0, 0x0, @msi={0x0, 0x7, 0x20000, 0x80000}}, {0x8, 0x1, 0x0, 0x0, @adapter={0x6, 0x7176, 0x2, 0x9, 0x8}}, {0x1, 0x3, 0x1, 0x0, @msi={0x40, 0x0, 0x5, 0x2}}]}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3f8, 0x0, 0x100, 0x0, 0x310, 0x310, 0x310, 0x4, 0x0, {[{{@arp={@dev, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_hsr\x00', 'syz_tun\x00', {}, {}, 0x2}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "e22a239a6bb651a9837df08bc7f880efe7126f5d56b33dd54f5db150ee26"}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@arp={@local, @local, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'batadv_slave_1\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "9695d92849c79fac2d070731112f73924a493f1567e5d8b4cd2c5f35f67b"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x448) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1a5042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r6, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r7, &(0x7f0000000080)=[{&(0x7f0000002200)=""/4101, 0x1005}], 0x1, 0x0, 0x0, 0x9) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0x11ff, @broadcast, 'bond_slave_1\x00'}}, 0x1e) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) 3.896100299s ago: executing program 0 (id=1517): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000017c0)=""/4113, 0x1011}, {&(0x7f0000005740)=""/4071, 0xfe7}, {&(0x7f0000003840)=""/4160, 0x1040}, {&(0x7f0000000200)=""/115, 0x73}, {&(0x7f0000000880)=""/108, 0x6c}], 0x5}, 0x12100) 3.769605717s ago: executing program 0 (id=1518): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {0x0, 0x0, 0x58, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000380)={@fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x31}, @flat=@weak_handle={0x77682a85, 0x1, 0x1}}, &(0x7f0000000440)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 3.674727008s ago: executing program 0 (id=1519): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x200000035}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) sendmmsg(r2, &(0x7f000000db40)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)="e3a2", 0x2}], 0x1}}], 0x1, 0x48850) read$alg(r2, &(0x7f0000002300)=""/4128, 0x1020) sendmmsg$alg(r2, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000005880)="4a895703cd17bcedc1666306831c5c5864ffa418ac198f0265d77afca35e38f139b2cf0be1badc10d8cec9dd66449d939643effb514ece9c54c3a48cb71e9dacb4d9daf0705c904f94c08f6c446468930f4ca4313b2d50287be8b9ca790b1161d1131312cb2be667de8247d6f019f3f303c5d97f7e581a1bc5c1c5e16dba7bb3857c21d6de441f58c8548c1657cbab43f1d0535cdc45b1a4024dae285e8a9cc4548a40eaf9679353bf28382bd9a5c5e78ef8920da23b70977b487a0fcd11d9478dfd4d79be5eed791f01fa456cc8c08dbb35a090622d8369f5004bb9197ebc47ad0cb54d5c542242510f9d882928786a87b08daf2acb81b17ab509ec15c585d2006b36c21f6e81046ae16898ef797e0544581fcec801e889686f1b80fbd12a373099966e76f03d9b9e097806d23f8f7102282ad4f721ded9bfdbf406ffb3e6a6467dd909b66112e29d073a37fb6e077ad638cb8f28bfe888fe6c009ad37d368ad0c4a34a70c1a795110e63c41bdca93473f3b74127e35634cc05d5bdd55c5f5f658617d5dc911ef5d5b117d6dec9849636850ff9bf25ffd0fe09b81c653be1ce231c96dfd5514e7967c5ac79fedc4dae746bdb11725be5650a825c178356db68d31e155b20114105a3e902555f329448ca577a1a3be792d396e10c84fcc52c43f25efd40730b23db6f4cca8ab196b5a201184f4b7b4cec7ef64a325ff3fbcbc51dc46466209b4781ecbc943e33a20a9b2a290434279b09ee3911e2ce54ffbb634db216096f9b6d7cd1b093d05d0f03f7df64e2670c9336c7bf27d0da73d81498bf6256cd6025ab62f0f4b2bce327927c1d4b923cc3db422354e389c81749dd51042d3c98a7e5acaaef627283b630d59a8a75dc506400c40d6c8c0a062254cde2e643fe99fb03f42f0396e23b0273f0f5a354826824ab2d72b8793dcff47c75387011767f554f7594918d76fc80cecef01ac74dd10d257ac962209026850f3e1ec2877ea63c59c3c4e751594c31774ade2eac9e94b33b2d06c668cb700fdbe61ac4ec2d595f5a3f5b2722f7644fa8081d1445bada8624b025291d7528144d5a092d410249b20f9faba62f760c05b9e25abdafd107a29033c3ca67cb62500ce9979878a2c293151528ef33574e96148c7798ee427936f205627c1d6aad4e1956b10495b23ebb2fd687d75cb0f9faec439c494cb59c3293d62617f9e0c88168f993e8540db1ab44dfad05bd7c7841954f21a923fc049a8f6e141a0ae26e55e167063421e35340a19c6316e593dc46b2c5d00b1118f5badadcb30af89ce2efe81937727c5d38c9368ecb79f3b1393dfbf74b713ca09f3e3ed774019227497ab6599fb4be12be93b4ba8cd7c5e5ab022e43b11179c9a58a938e8fc9bd0f2ea990d6af6545827b25d23002b8de3faa3994711d9fd4e5ec7e5f2b3e64df3e5d9f31762c39aa25902bd49e17ebd597730461fbcf75095375a49775a92e0246f963e021b678d30bf218e495d6acccbc2b94e555b4ef1392dea925e9ab0afcb85314c3577fd5962fb6845ace74af46a71b4304bc58c953e02e8aa7adccd209bca4f5c6b16161aeb3d5377a15c3e2ac38136b8b0424bdec89354cb53319bee78cd078fcf99dd3c02d6b9f070c40c5adda3f7d58d8476b1688f0e776695b8ae6b807b55a4a84d67d772a1b663ccca7bdb47f098265378205b921140c5ae3ae03bbc8821a4cfb79add44884ebe9c7d67415de7a4f51e315910f77be57c12718e1cc0700d0112af51013c4a87ec39226abf811a19a857a04e7ada6265345e87bf5ad3327afcde22e16543b3cf4f4bdccdbdcbf2b6e2291f4877b32b5a69e00387bfb1c824380bd57f3af90cf685b5cfb874f7870adbf50621768bf2d45eb5c3f783dcc067b001aa01c6cf239e98010cd016108fb1de06cc59070b5db347ff892246fbb699e0ee999cc9c923e2a5354fb4816c15dd8206f1033b556666b3ddf2aae0e892055239d9c5faf1c4b61de224d153623e40574918b1639635ea46a895d2f5a2958d409dddc1e55441fbdfe40b83ae0b3f3f8f694d18b19a9bef18c54c6888636e803154d8c8fb66566f4ba5fa02a7bfd5ed23cf61f75b26fd7f3ff03d1b9e26ac0e2568604f9e550185abad80dacbe12bac5a01c3b0d06cd9f8532ce8ac28ee8fabbd1f8f6622077dcb41ebedc2c2eeb2e1efa3f1ecfb5937a1368f54ff4255676840dd65006460ee6703275c51d27fe4bc6f5923720983a235df824190ab6f908475d2496e5928e915d482277617898a0ee8609eb526528e5f00c5f003972491a16ea209c8a794b6acd2997731d656d83f2ec41412ab3d48256424279a27f8e99431c25ce3afb42eaace7daa26e760912b02f3e5842340ce81f05694ae63c854928bacdbdbe2d1919d0044b9e2d142cd330bc4cdfeccd89d14974ded579a559584384615123d3b56f00ff9bf1c2ec28d23a15c5031a990d79462cfbf4fa576f10b74ce05276e433c4b1acf95fc29929c29c8de9ccc781b644bec6b3736c054a7699b3372133dc52da8b3e42976a5ff354fdb08335843698cdc198f5b1067b1a73ecf317397e64db3f6965d29fa6c76822685f7e0566a8984b57912527ce5df0eaa24ae441b9e7f01ed0121c58938dc1620c448bb9e1d746c499e8b249262e5bc7b642c245e04623f4c0cccc8a6e5c043da2921cd642287984e6c94619b79d23c576a27d10a9850fcf09a6bab32761cff1b0abdb521426588162e9b4e11e6e90aa2e1d227842c245daea800e6567c6a94ada996fa8f23d25ab3d3fbfb53d3bfec69fcd4f8a0a3f21851960363bad9a156a8bf8dac7bc61b3df1e0f88bc46e589c432e9321165f8bc5a8e7c4fdff96ee9fa27f1b03ff6e16d90f40bd55234cc7606e0f2d10889c5c26e7f9e79a76c63991b02b35df613c030186211742a9b80ad7fe4b415e9293f9638f83d95548442723ae89f62ef2c7e68acf94ccf9281fc4d6d1b4db097602080a5f715a3dfec6f792cf7a81884c6ebb57ae05ffa16146586b8c42dbc686e009522f0c8d4e168206d79966bd53d59483c73e8e522420f7c325444e8a10346749e3fa20dc892e0ac305ae50fdca06ea1aa29dac09fc2fa848565d643396db05cca93008560155ab60e7f31380974dd6aa735e7498148d7b1e1bf35fa35fa213da8f3d4d4b3dc1aabbff1b2e00e793ddec178c85cd9d8ba3b335887b0c715c3fe4b5fc7f8b2f63250f73af47142744572e1db60f8c7361c7fb811b5f4af6e6c10fb3d9440aa0367609fa6c32dd1bdd613970be35d74f34cc5bbdc9f630480c9c82f3118fe033617c353e795a9b7308336b8dc65f3328fabf4532a87c9f1d9d35f431959f2ab922cabbfeafa051a771916653f6bab8910e437e613e02fca4c6019c640b822f6657607b983694862409f06ce57bae67ada5d83945a6caea554a13488a6d8bb85c80a779e9bb4c2ed07abdec0f6d0c83497efd096d3a5ca5095885ebf7b3cf7183350bce692aa62fc1b45f620647bb2cf8744b57dc5c1f47de9bb005e6802b3d3efa4dcee835252d178239bc28fbd1bee6a7a3d70359330f1b7ff4daecb1f820f00398a2ce4046202db3c1b80ae497bd9d065c2fb265716e984378b4ccb5b6f5d2ffcc5c992aa259ca1ac92bb387c53f5e73e65263e7312b7dbfdf799b06c1999218d613046d57a2bc1e27ca84d41a0bb4a1ba08786d0c8ba1c293f914659b5d32cfd95ef7a1b3709e8ba41f037242e44df5fa2b1a0dccb0ea43ddb85e5dde552f5747e52e8c73d25dd0c903229522c4d91e523879d377f318b7f353ec6954f3aff1dd0bd7cface9dd2d209e181f2a74e07c557e4bae9645a4d282c84b70c74a8210669fd8e7cbe4e17813dd8a0da360d2c99d675abbf66ca6a1cdb18112c509338a7b22e14309732d732f873474e25f5e36bd730336cf35517ecc2da649c85adce16aa98554470d16058aa77898bbe450a85bff003273ed0b23806af8034aa91348774412d5f608bc7efdec13414dcb735e0de85ff8de01fbedf5585900d2f301092fd57d91f828cf5babf70610d45f1545dc0bab7f69c90efbf2edc6f46f397ed9a13da7cf7123d008f0a1af23f20ebefabb5a7a46ecaa675f8b57e8478cf31ac40fe4874cdae89e4b8d4e7684252d89fbb2f5bf24bcbbeefa53cc24a2856636454390a1d47efafb4c23712a4b9c8dfe6f370fa4446eba7703215233a749e3a7ab28542dfbf03db73648e6bf06395858d59ec7dddbe460aae30487e91c2d19c8334525adef322a66a70ea32d2f8a72bf1bb3b0d9bc2d6ebd40bba9e4c02d3ee005a0a72e5f65afb01f6adb8ab2cd11d9c9fad7e3e1f950659bf1826b380a4f296c76c529a65235a15a9596a2a330431d5e905390321dc4a47c84e47c3e8e8cc5b11cf62d7515e584359a1e442abfc9aab4d0233eb0911398c43688a8fe41d462bde8aa4be1af978cc0b40dc25ea20c3fdb0953a3293e197748cdcd576619c4fe8b5754851c90b6b5207b3eefbd86eb67012663dbc87858a86dc51855381dc746501eb76316d778da06c4d8a03ebe3a07f05dcbfdbe6020bd8f4547e6b598cf4dc7be2ea167c4fd362b2224d4869b97d991c64251faacea7184ee97349d5b68af90bacd5441ae423173f6271d1be106381a7bcf0925d25ae26a0afb1c82232a648c178b8076a5fa8bedeec3c90f450dbb3573fc45c2d7b65c420d4f323069d3cfafc6dac879698b801ea8dd18b6d3c171200308e76f0c16a977bc73cd88818196a9b54b47c3f3c9595e8ddcb38334202cecba7764505340680c858cab156e658785bda719237baf1164e2927ccebcf8dccfcebacb0d3bac011cf7c544b71f1c399931ea886524d10e95319d12fc63b74d532e9c94aa78d43fc2b097e496e69405d3e147a45454cb292987330d126bba36dcefe664cce49bcd0f782d03a93e059b7ee23039ae30e47be8c457ca092238659e022c5cc1830a6c6179a65be9865d9f2ce34b25fed3551b69bae554528679e2110d9d4c85302ad99272174b8bbb2da37810cda715eb2536a91011999b9bbbdfff212d0dbd40126b12f2ecb8d389a1e845f25c30cb2986cc85aa5614c10837afa40061cddcf14297bd2861106dec71a0b34a79afe612394633ea6b8f71495b3db408728bf37de889768d6dd2642a627f928c6a86df2bedf3352e5f56a5ed424770d613331aa5d6e71bb40bfef383d69f3ef570156093ee4f31500513e50abf5e576dd6571d59910f8d21f75e2fe2913c6348a2c23ec8bcfeef8c5b4cb4ca254496e78a0beadcfdb96afdf9f0f5ccb7abe6746cb718dab6ea7f0ba8080d0ce12ec9985978f76b885a85adc2e3115db7450644c75cd80062c7f34cd0b7824d621607759ba8eb17289d3920f1356319e980c989d794016dd05987cc8a17a947a8dc0398de5cec6dd1eadf685de957ca4d1394fc67482fd22498f6aacc8e7f25ebac952073e12f526e1427ee49e6df9e5c895df631e5b4041e6e88b3508b8c3ce597830e2ce3aad12ecb696e5ef7970cd9c1e3be94506ac746f7ce8438a356507027149d0ebd6e95783ff084609fc079ace20e5bae9cac9625f58ff8ccb2c2b50506a237ecdf21774d560ba51d9d956691590392a5aa5ad6a2ff9d69d58a82401f7de6daacf3257f20c9847c3760ab1a41ab024df0ad8789fe629c0d7ab8adeea9777a914f79e2b4dbc3e234505f1729467a60b410ceadc87a2d8c12c0cf46c8ab0a7392e971d5ac3035788b2177ae165336074f29effda63042146c2e13a12d50b672531d905c69b", 0xfff}], 0x1}], 0x1, 0x20040894) syz_usb_connect(0x2, 0x24, &(0x7f0000000a80)={{0x12, 0x1, 0x300, 0x4a, 0xc3, 0xc0, 0x20, 0x2639, 0x13, 0xf5b3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xc0, 0x9, 0x40, 0xa, "", [{{0x9, 0x4, 0xef, 0x8, 0x0, 0x6d, 0x17, 0xc1, 0x4}}]}}]}}, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0}) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_ifreq(r5, 0x8931, &(0x7f0000000000)={'dummy0\x00', @ifru_hwaddr}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000004d80)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000004d40)={&(0x7f0000003780)={0x15a4, 0x12, 0x800, 0x70bd2a, 0x25dfdbfc, {0x18, 0x8, 0x6, 0x3, {0x4e23, 0x4e21, [0x8001, 0x4, 0x1, 0x400], [0x8, 0xffffffff, 0x1, 0x2], r6, [0x1, 0x9]}, 0x1, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x6e, 0x1, "0ea832d927398f3e19750dbf973ce9be7623767bf258cf4188e125b24f8d5a7e75c182ab6f7f1347086345afd57d83cbf657e8e2013c4bbc2d103c63ebf7894db7682d4797ff4705ec82b8f32559ae873a9692224e39d67201478c5d07350c157025fc406cfefd6789ed"}, @INET_DIAG_REQ_BYTECODE={0x103, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xfb, 0x1, "2eca8f5ecb332cac0444a25a8b7ed8a4dae20e30ba1da9645eb941f17366fb361bc97a0d3c04d2713a445bd5981dac072036bcb353b157eaf52f8827265ebbf3942f66db53eebec0561398c8e94c55508fa129a1d00959773375aa8a93a997f3d4b84e35ddb1cbc60da6738f76ba7584cf01ac1d17f5ba098bba1ddc9ed49dc9df47b6dd1864239f95f1e5f3bb00c8cd28101c55ddc0ca88a58e18485fc190bc46eabe0a7954b2d93de3594af62567727ec257b9495b63781498964db749463afa452eda1c3548389a456560b767ab73b1d41ea0fa67339c88f36c8e7d77c3b2ff0e4f61a4d7a3121c7256ba2a2261a3d3beaa00000000"}, @INET_DIAG_REQ_BYTECODE={0x44, 0x1, "e70e7e11578820a8b8829e0183f6676e820e820a75d2f2a47b09a92fd03afa426e8014ef97101f6d1e09a1edac71aa1fbafdfb7d21b5fdc5302a2b1fc27ef167"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xaf, 0x1, "3d1f0a5c92ac681e400da662e2e7d68d8c974ff7fb28901964a3da61db02d2bb53d37c39990dedef333e29dad862b834ef3a0ed29a6559cc80eeb842d3fd98f5598e3448a606de0e3e10c652660cef284b84a7658176a492b5694a009c0c48a2a6ed34f2e08f5fb8e79ae25b5b23c38df1eb801939a134114dc8ae687c1622544cdae7deee7b5838c7fe936e94837d3f08cf0bd2f8c7517c0d7a4e33f766d1e8bbf753fa85b33cf7bc16d4"}, @INET_DIAG_REQ_BYTECODE={0xd2, 0x1, "0c93194c4e774792b7c74d920ee9bd2525a1038c016446e8c10a9163014692dc627d13be16f629574ce0c0bb2fb562156c0630ab5f1a3cd915ac9b4419613586661ffad9a5dca9c34bc4b084e3dac785161c8489fd84c61f9917ff061c0e1039ee556e4226e303eb1da8cd94993583a5f78c70a281a0b6ccfca12f840a7a808576b2c0cda6ac0fd8a3a37fe64dff229a96a74268215f7960ac2d20518bf668e639a77fa3f8b3d543817d9609de45d9cbba4863bb0af9e0a9cfecc269fd02ec7aafada6c527954c8cd2bec75a2068"}, @INET_DIAG_REQ_BYTECODE={0x84, 0x1, "cf0bc162e71380466bff8a6b4236a2423c9154533704fa28ecf1b9ae664ed4ffcfc13ccd94a342ba575d1407a82bddc0bcfceae79e798fd4f7e216e14ea7431dea6ff00f7af2b68d569dda95640949f688aee3966a2b9f1b17541c242c3c1afc3e3d0f600784f2e1d6cd0e8124b4e658887a9a7231b0ea1e5858a1b4d32bfe57"}, @INET_DIAG_REQ_BYTECODE={0x98, 0x1, "24df012eecd4e346002eaedfc8646226c13786a61caad1742ba021b05ba0daa023ffabe923652ad41fc5f2c603e6856bfedbac4d18a901b29d3a74befe711741c1f3fc9ad21e1791362530b800e2e6f8d1723a373387f1953a2b0c16f3e3e9e45f7de06cd1701ab2438c4c235d838430c7c43cb856c0f6e846b3b316c98bb6ad962a1354571d9fc60feed99c8cb01b2ae67edf61"}]}, 0x15a4}, 0x1, 0x0, 0x0, 0x40015}, 0x4040000) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f00000018c0)=ANY=[@ANYBLOB="000086dd0000110000080000000060ec97000f982c00fe8000000000000000000000000000aaff020000000000000000000000000001670000000000000002009078000008006f2a7a6303ff000100000000000000000000000000000001000000000000000000000000000000012f1000a300000000fc010000000000000000000000000001fe8000000000000000000000000000aafc02000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bbfc000000000010000000000000000001fe8000000000000000000000000000bbfc0100000000000000000000000000013ad800000000000002bfc9ac4a70ba84646eba50f5859f31f4d9286aaa1792ed14ee4547c4956d4a971cbb5943ff64def2e0d1ded05bd5360357e2296fe1969dda8dda4c22b408f36fa9304a55e25c397d7549ced7ea2a33d05664862232e0c905d4787a86f07900b5e46bafb81c0172b1a37f80d45da7d7db810f0ce8cf826a145c82e35954006a0983dc7ea81e60c7fc155f021fd73f84c23b5a2fffed1a8a6557200050872970c9c98557b169f6da6be0c8e68640cc68607cf8aae3cd6769f0d553e7b5637b912f421157bc5e0a561ec9afe882b9555df4e2fb81b44925179b6021ad454c87a8fcd5e995696ff452611f000126d09297b3b8ed118dd6aa049f386fa0805cdbd997e6dd1622e5c9715458b79e11a9117a786b86a332ad123bbbe1854d4b4a4f1894a52b045516d73880e6be6f2ab043d75f145ebf5ea5ce7fc48fc6fef5d3668b5e68b394e596f44e08b70f966da035f95ad9fce927f6cf9431ab0e918622cb409a58effbbbd81760159a00010765b80e651d81d3850f1ea176347f1672f8d0c9f995c300c97563eeb8dd8bc9d39d40040ed36c0beb6d760f975944a7991739fa296c23c80a2f50c55d69c3741aeeac2e2ff5ba1331adee3590ffa1da2eda6406d8bfa19bc633582baa5f4e85383c6dcee60e47558f43dd6ec67522084c07b6739b391a9728cee6e86ad90c6ec699a5ff20511625e0fc207c405efd1993535116766cc2d29e427dac73da1338211d075cbc352321530b6b98346ade12f626c0be812d2eb571b0bd3c4b335d797bb37bd3826db203e3c89ded2a6d6f95f1744410a0da344329d3bd0cabbfa8e22ec43a8ae8ce43ed8facf77c4f0709e84c8f31d0612485475ae27a3302ecfc04172553c019c3c29a134ec62b4f5ae1c49674af502b2076c4d2e9ed108147135072472fd321dbbe32e15f123d7c9229ad7edc90b0ad3e1dc2ee48a7f384e0271c91c44a0a508df345fbebf9559ad6e3496593ef62139aa5723033209fd80f807638d5b24088e8cb896b499d6d872d42a8d938a77651c28cef73f00ada83257742e08c8c79aef569198542584b408ada5df6f0096ec9a6a8c78fd6d78c5c0944845a5fbcb1936e16a59f05ac6d82c6c2c99c9cae379ece8ddf805e618a61e35361cc4c83b5a07dafe2fe96c7599d6de1a3c5035c77a86b021b72d81bff0c2b6f9665840bf8c98debc219d3d75d451b60293f099ed171c5e566d2591e4bd507a51b925d09aa3ce8c7b8f56d1e35158839484e663de76545c818b0ea8646120eca0b75da4c0e648ae0d56aa168b19f48460923d8d38d3cd570a4c9d6ae1af48b28964db4d5eb89aa2845b8bdddd89f9272ad3e5d04e5624089ae1d124b0eef9ad7ebae1ea2557f946e2a824ed497d45826f26f089fabd54be895fece37564a13f716451a3cb549bece785de9ffa233c8cd10591986b5e5d2bd7349d508b6b504fff44ca31f386383b9da747d0c688bfde3725ebe669571340addd8f83157cdd04bfa060a6b9446e6231d235ecc28ff84ec9f6882bf1eefba15d7b1e47f3233a9dba73c6a027dc9be90e21892545b5d0a4402e9b69b82658b5f8a05977f4b385854814747655b0795e738723ef152b6b3199c41521c8bd86a9d3868b2a969697301b5fbca39bf541849ace04ed8b1b481a3bc80baeaece999cd09a828ae1471482a74cd5e63bb5c80c20050c053fe22fe7375267f84370f0ef1832732f1e0c49b9689d2911d1ea925db9cfce33e9b69d05f6d605e6fce75f65940136f5f55dfe7a8983a9edbc086937ec9f4100bb3e874c075f3d6caeaf46780bcc104dd83825ae45fd5a423d743d817b95e432ba28d994d65883c0532d208f6e90d951de4780b741b4810feee7d3dbd75267666b98510792533ad80bc57d3d6970d2e38504e76c6cc2cf4fb6e1358d49a1a0a30c0bc0d07d29845d9cb2371861fb9f01eb064a18f9e61a5682ef07c31ff8fb1050211fa22f01ef57f042a95756796d4c853360915e5e9c408bc09874d9bcf300c47d74a16c7b85842e22b5734bb84fb4de5dc241708408cb2b379d55be7dc8085f32fd129c2f14f2fd58041e695596e0c2806c81906d33029c120d7c7e7f145680668fee3e5f010798364713d8c87832a51a934dcd448ac6cd35856ccc3e27c21ff9e25f1cb710d2b1796f637479fa32b003f110b0e2ac9c153941dad387a9edc7c16f50823bcd98a8618cc8735cbaa521a3d6484fc842b9185c740337838e12cf13c9efde323e8bbd33965d2bc435dcdb0cc7c26bf407063ca7a254c33800dd06b191b871fe6b2aae140d1cc1d6f22c1e5c4bc025375b77d3c4edc4cfb9dc558a9ae4814ed5dc83ad963fb590af7c109d2d35df528fa898ac5ea4db299c563fcc7d722a97d68a8e3f7771e5fff804f623ff0b2f25231bbd50ba1bc3a4d4ed857aaef212601bfdb0e183fd85f607e5cccbd4c8452b9b1e4c8376a687a59d34ac1c2dc20645a59efbc022bbd0f30999aafd2796ab3deaf29d0ce9bad1d1eda5f34dfd24cf05c8f3298566d255f75ec91919248c99abe29d5c9879758f68808f2a24dfeb386328dae00d06286a0d46b6b7ea117ad7fdbb5d9f833abf36984190a45bbeb9cd2e45af3f9077b208147e798370bd9e5373881ffa94267b82fc7cc4f11b5258cf219950a5a5732fbe10d385e9053c6fd7b5cc3098aedba588a2b619bc54e7f12228b907aea4f4544c65990baaad1b522635dfe5bb6b71721707f815d7a8ee24c8328d67b46e199c0e5c0c7fdb44b3e9defd5726317f74f4cb87909b00f1f4df8858a980a86f87d27dcf33d6d89bc4c7ec088a7270aff9470d7ef12835eddb86f7471af31e8f2cde0cf102d9c9df7cbf1064d1f61acc5897959df60a6e2861c90316c36f20cfb25d069a21a28441003ea5530e842e6112bc90d3cf67184c063bb33182b59aa49c97eee50f6141ba81518b95963b66f20a7296e911ad472e79ffa926feb2e5c5da5e97ff007445beff0c8711a90c7c7525d48e463c30997d530cab0a845ac173f399effcf6af84f50c6319a1ce3565eef74df335cab14daa748ce2037364d90a2ba428d56d5b3b602b2030ea6b721ffb19078bcfe3bbcace66fb3058745b92ff01de9ddb4dd4e0e460b090bc3983946c007e5f465cd9869cd67c5bcd5881c4557c81c69289bca96d4dc4f4cfa421547d5d5c92279b996173704616c1d50e2016efaee7acfb01c56323bad976ffb39f7d3407f7995742a63751a746e6ef6035923e4e879d92ec3e5d2390fe363270cfdadb75f1db87a71d2343229ec140cf75a25e98a298c98c22fd144b675e5fcf39115b243d8c29ab8d6f7c87a7313481fb99bdeb759072cc9a6ec5153d94298bbfdf80bc3075a503c232e3be025004d281d3478bcbdd0f5549be09fca89da7d0e34af97302607c20c464e034c6428cbe326c07615b39fc72ab6f254c7aad6102f813b9623c6a7601b6ea29f84e86999b1287bd111bfa49672c886cca6eb8786eefc96a84cb0aa04ee0334d3fe23a0cef39078bce8f22cc35eeb2fcbe22280df1209ffb05347cbc3061915e7fedbdc752c658c199b23b3346367cc5a68be6a79069a188f6a6efb2d2aaa387ebed66eeb411b9094254041932876a1120a4ae1d20dfaa8709c62828a3ee332cbbe997b6eae047bd493535a25042e1fb3f2b2933c17f6ef96c1793c0ff79fe740b9282416e5e65ef58254055e38afa2e8cec89274f4e542153896baae0e50c37c83bf1034a5b722c874652182954d271991110e43333a48fd85f9b3427915ff9bd2e3b5342858fd2d86801d1cddb55b66bda6c7df3b04ceeae4a7ce74391255ede63695046d8c27241514ceebbc0a5e6a119f7830600385c3b67583ad2e48f8517c4f31349d2d3535a71b1ba2543fca666e1a06f62ce20557ef459e419e0534feec1958cd6fb5c4413eaa1c7e7a64cb19f6a592fd74def605d69a5e6fe14ad77f60ef0424a8f6b7026c1f4b493c71b6428a826fa731022276888b0dd9fcf6dd67cfdfd2fd1765c3c5d9c5fe4d2012bf8217b9dc91b583d945f70d0df13d3b3380200f02753e86f0de109129586629db95d829235e0db826de6e17c830c1aeca17573cbf95cd18c92b8e12c57e93e189d25fe6e71c32526f82e52de09355ca7f5105a61e059d5924d227119175714b5ab610b8dfa9c53d0b4105481bd5f3d47dd6d9d0eee798d7e38644ecd4971b2663a8c628cf51016597eb2c70640a0fea463f9012eca14e957b4280866ad8490fe7c3db57cd40684dc5655bafdd28e8a24217ca96e6ea1ded591b0b8f0cc9f79059fca8c22a884fab4be708e50a38ed1c0350015f3e4326f0af07c57b31d13868167e6ae776f3203f9f03b316233a4d7045b4652b506238a9be0b68b54e6bc52cc1c0894fbfe5071616170ca4895f6636f9be5df32e09f7429c7569aa42715809969b3f8a88080f57155b4c0cbe54039fa8996c4614657a9e4c4b1eafaaf0a663c0d461380ecd907688668d119c0361c6ac486cda549521ad2702d54053e4c2747e710399e235fc8defe54c64218915598c14de35cec58f24328d950ba6548595bc4b9e6c45e3ccdaed1b1dfe9ae3e7dfa2e768d75d7408242d0c504ef2fa583703d8509e5520db9692003b34c9e4ed48aabaa6908cf599667a4ce679ccbadd440900bd917522eeecd73dc2d90446db4d7d40323ec7971477d061fbd6d1c6434c8614ef7a909f46acb4657c4828601a30b993cd9c1b14215674471fceb9777917d6b3cf6c217d453d01ae5007f7ed70f92aaddae11d2f9bcb5854c1292303c3324fef63eff0a3e7ed487310c81a23bb2f89f68a44af31ffc759827b9855fbc6b9e1321bdbed45679c14d5d72b89a7e684ca8fb434352632533b622c8b5ebd162148c301496c0a18fbf31f10e2319020f5f59e81050f21bbed6b007775bc87b3f0ef643d0294dc7db502a0a45d3c68024fad13885d0212fc96067b2de27c2ec471b201cd50f38fc777a6123931e148c4d888097e6ea4f379ff69ba12cda93b2f48ffbb7286395232a4a78094014fbf8f5b1ae3d0ac780efad2721b2996711f6c3ff54468028fc8fcab62fdd160e1e0b18a8b1726dc1bdf34c2ee35ece720716f01f495eb9adc8361e6bcd0f7fdf7a21abb2ea14ab6563f6a9e580c3e5dd0ee7dcaf5d36f04696ddae6b36039cc611020c783504fa233179397f40dee4199528bd2adf4dd0037d0709fcb0c989ed2a26b0b6d475d6c3e25ef26a87d8b25974ed4a84453df731a3d3d496a4807b5ebc5f310dfa6b72f52634cb5705cca5253899ab69035290a0e1f78d148b80c35cac0275c8a5bab51670e7aca012000000000000000ab0924172f9c2a1d"], 0xfce) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x3, @win={{0x1, 0x9, 0x2, 0x3}, 0x7, 0x6be, &(0x7f0000000240)={{0x1, 0x8, 0x8000, 0xcf}, &(0x7f0000000200)={{0x7, 0x7, 0xc, 0xfffffffa}}}, 0x401, &(0x7f0000000280)="8382d166f30e540432ab7ef36b1aa2355d7085c9d1a2d1a6e22eb4fd0f60cf2e1b0e3813eeb15675b509c24fd8459127411a0cc2f7c2471166", 0x8}}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x1a8000, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4}, {0x3000, 0xffff1000, 0xd}, {0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x1000, 0x1, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, 0x1}, {0x0, 0x10000, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, {0x0, 0x0, 0xa, 0x0, 0x1, 0x0, 0x0, 0x5, 0x1, 0x2}, {0xffff1000, 0xeeee8000}, {}, {}, 0xddf8ffdb, 0x0, 0x8000000, 0x140030, 0xa, 0x0, 0x3000, [0x0, 0x0, 0x2]}) r9 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r9, 0xc100565c, &(0x7f00000000c0)={0x5, 0x1, 0x1, {0xa, @pix={0x4, 0x5, 0x34565348, 0x0, 0x1, 0x3, 0x9, 0x1, 0x1, 0x3, 0x0, 0x1}}, 0x1}) socket$netlink(0x10, 0x3, 0x6) 3.460724106s ago: executing program 4 (id=1520): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)) pipe(&(0x7f0000000440)) syz_init_net_socket$ax25(0x3, 0x2, 0x8) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)) pipe(&(0x7f0000000000)) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xf) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000600000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.202939076s ago: executing program 2 (id=1521): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback={0x400000000000000}, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) 2.920642266s ago: executing program 33 (id=1521): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback={0x400000000000000}, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) 1.441029319s ago: executing program 4 (id=1523): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x20, r1, 0x5, 0x0, 0xe7030000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) 1.319951028s ago: executing program 3 (id=1524): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0xfffffffc}, [@mark={0xc, 0x15, {0x35075a, 0x2}}]}, 0xc4}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b80000001400010000000080ff000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x10) 1.229153482s ago: executing program 3 (id=1525): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b90101000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 582.436427ms ago: executing program 4 (id=1526): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000017c0)=""/4113, 0x1011}, {&(0x7f0000005740)=""/4071, 0xfe7}, {&(0x7f0000003840)=""/4160, 0x1040}, {&(0x7f0000000200)=""/115, 0x73}, {&(0x7f0000000880)=""/108, 0x6c}], 0x5}, 0x12100) 385.018307ms ago: executing program 4 (id=1527): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000500)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000740)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x173}, {&(0x7f0000000280)=""/85, 0x53}, {&(0x7f0000000fc0)=""/4081, 0x564}, {&(0x7f0000000400)=""/106, 0x2f}, {&(0x7f00000006c0)=""/66, 0x11}, {&(0x7f0000000200)=""/77, 0x65f}, {&(0x7f0000000540)=""/166, 0x4a}, {&(0x7f0000000100)=""/10, 0x158}], 0x8, &(0x7f0000000600)=""/191, 0x41, 0x900}, 0x1}], 0x4000000000003b4, 0x12022, &(0x7f0000000080)={0x77359400}) 204.940674ms ago: executing program 0 (id=1528): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00006010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 70.418477ms ago: executing program 4 (id=1529): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="40274000000005edaeffffffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x32, &(0x7f0000000080)=0x4, 0x4) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181403, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f00006dd000/0x400000)=nil) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4020ae46, &(0x7f00000000c0)={0x3, 0x1, [{0x0, 0x608, 0x0, 0x0, @msi={0x0, 0x7, 0x20000, 0x80000}}, {0x8, 0x1, 0x0, 0x0, @adapter={0x6, 0x7176, 0x2, 0x9, 0x8}}, {0x1, 0x3, 0x1, 0x0, @msi={0x40, 0x0, 0x5, 0x2}}]}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3f8, 0x0, 0x100, 0x0, 0x310, 0x310, 0x310, 0x4, 0x0, {[{{@arp={@dev, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_hsr\x00', 'syz_tun\x00', {}, {}, 0x2}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "e22a239a6bb651a9837df08bc7f880efe7126f5d56b33dd54f5db150ee26"}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@arp={@local, @local, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'batadv_slave_1\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "9695d92849c79fac2d070731112f73924a493f1567e5d8b4cd2c5f35f67b"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x448) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1a5042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r6, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r7, &(0x7f0000000080)=[{&(0x7f0000002200)=""/4101, 0x1005}], 0x1, 0x0, 0x0, 0x9) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0x11ff, @broadcast, 'bond_slave_1\x00'}}, 0x1e) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) 0s ago: executing program 0 (id=1530): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='{^]\x00', 0x70000, &(0x7f0000000040)={@_ha_fsid={[0x5, 0x752c]}, {0x8, 0x4, 0x3, 0xec}}, 0xc4, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0xc69}) ioctl$KVM_SET_GUEST_DEBUG_x86(r0, 0x4048ae9b, &(0x7f0000000240)={0x1c0002, 0x0, {[0x0, 0x4, 0x1, 0x8, 0xff, 0xffff, 0x4, 0x100000001]}}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0x8, 0x100, 0x914a58f5f2ccf37, 0x7, 0x6, 0x7, 0xffff, 0xf8, 0x0}, &(0x7f0000000180)=0x20) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={r1, 0x1000, 0x2, [0x0, 0xa]}, &(0x7f0000000200)=0xc) syz_usb_connect(0x5, 0x59, &(0x7f0000000000)=ANY=[], 0x0) kernel console output (not intermixed with test programs): bcdDevice=91.36 [ 266.932401][ T994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.941473][ T994] usb 1-1: Product: syz [ 266.947879][ T994] usb 1-1: Manufacturer: syz [ 266.952552][ T994] usb 1-1: SerialNumber: syz [ 266.978489][ T994] usb 1-1: config 0 descriptor?? [ 267.066813][ T6904] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.077793][ T6904] usb 4-1: config 0 has no interfaces? [ 267.083759][ T6904] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 267.094005][ T6904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.106404][ T6904] usb 4-1: config 0 descriptor?? [ 267.234973][ T5913] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 267.247487][ T5913] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 267.283008][ T994] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 267.422988][ T994] usb 5-1: device descriptor read/64, error -71 [ 267.682917][ T994] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 267.823204][ T994] usb 5-1: device descriptor read/64, error -71 [ 267.933861][ T994] usb usb5-port1: attempt power cycle [ 268.282897][ T994] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 268.303496][ T994] usb 5-1: device descriptor read/8, error -71 [ 268.464580][ T5913] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 268.542943][ T994] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 268.563565][ T994] usb 5-1: device descriptor read/8, error -71 [ 268.673836][ T994] usb usb5-port1: unable to enumerate USB device [ 268.681663][ T5913] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001000. ret = -EPROTO [ 268.697019][ T5913] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 268.710169][ T5913] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 268.721515][ T5913] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 268.736275][ T5913] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 268.750234][ T5913] usb 3-1: USB disconnect, device number 69 [ 269.480214][ T809] usb 1-1: USB disconnect, device number 69 [ 269.665535][ T809] usb 4-1: USB disconnect, device number 59 [ 269.767137][ T9225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1152'. [ 269.904368][ T9232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1155'. [ 269.952901][ T5913] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 270.113053][ T5913] usb 1-1: Using ep0 maxpacket: 16 [ 270.127942][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 270.170749][ T5913] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 270.201715][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.211376][ T5913] usb 1-1: Product: syz [ 270.221021][ T5913] usb 1-1: Manufacturer: syz [ 270.228057][ T5913] usb 1-1: SerialNumber: syz [ 270.236113][ T5913] usb 1-1: config 0 descriptor?? [ 270.255209][ T5913] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 270.266396][ T5913] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 270.484480][ T9249] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1164'. [ 270.533277][ T9] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 270.684170][ T9] usb 5-1: device descriptor read/64, error -71 [ 270.803331][ T6904] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 270.856372][ T5913] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 270.933394][ T9] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 270.974708][ T6904] usb 4-1: too many configurations: 70, using maximum allowed: 8 [ 270.985488][ T6904] usb 4-1: config index 0 descriptor too short (expected 65505, got 72) [ 270.995982][ T6904] usb 4-1: config index 1 descriptor too short (expected 65505, got 72) [ 271.007527][ T6904] usb 4-1: config index 2 descriptor too short (expected 65505, got 72) [ 271.018134][ T6904] usb 4-1: config index 3 descriptor too short (expected 65505, got 72) [ 271.030555][ T6904] usb 4-1: config index 4 descriptor too short (expected 65505, got 72) [ 271.040687][ T6904] usb 4-1: config index 5 descriptor too short (expected 65505, got 72) [ 271.051289][ T6904] usb 4-1: config index 6 descriptor too short (expected 65505, got 72) [ 271.061562][ T6904] usb 4-1: config index 7 descriptor too short (expected 65505, got 72) [ 271.073416][ T6904] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 271.083148][ T9] usb 5-1: device descriptor read/64, error -71 [ 271.090628][ T6904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.099523][ T6904] usb 4-1: Product: syz [ 271.103992][ T6904] usb 4-1: Manufacturer: syz [ 271.108934][ T6904] usb 4-1: SerialNumber: syz [ 271.120373][ T6904] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 271.138943][ T994] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 271.204572][ T9] usb usb5-port1: attempt power cycle [ 271.278452][ T9221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.294188][ T9221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.305830][ T9221] openvswitch: netlink: Key 8 has unexpected len 2 expected 40 [ 271.317264][ T5913] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 271.332121][ T5913] em28xx 1-1:0.0: board has no eeprom [ 271.358732][ T29] usb 4-1: USB disconnect, device number 60 [ 271.583052][ T9] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 271.604025][ T9] usb 5-1: device descriptor read/8, error -71 [ 271.623239][ T5913] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 271.631525][ T5913] em28xx 1-1:0.0: dvb set to bulk mode. [ 271.637562][ T5184] em28xx 1-1:0.0: Binding DVB extension [ 271.643443][ T809] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 271.665074][ T5913] usb 1-1: USB disconnect, device number 70 [ 271.682569][ T5913] em28xx 1-1:0.0: Disconnecting em28xx [ 271.717635][ T5184] em28xx 1-1:0.0: Registering input extension [ 271.727512][ T5913] em28xx 1-1:0.0: Closing input extension [ 271.747371][ T5913] em28xx 1-1:0.0: Freeing device [ 271.815039][ T809] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 271.824396][ T809] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 271.835780][ T809] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 271.845090][ T809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.853340][ T809] usb 3-1: Product: syz [ 271.857606][ T809] usb 3-1: Manufacturer: syz [ 271.862274][ T809] usb 3-1: SerialNumber: syz [ 271.862887][ T9] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 271.883989][ T809] usb 3-1: config 0 descriptor?? [ 271.893753][ T9] usb 5-1: device descriptor read/8, error -71 [ 271.905471][ T809] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 272.013412][ T9] usb usb5-port1: unable to enumerate USB device [ 272.215314][ T994] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 272.223188][ T994] ath9k_htc: Failed to initialize the device [ 272.231640][ T29] usb 4-1: ath9k_htc: USB layer deinitialized [ 272.314250][ T6904] usb 3-1: USB disconnect, device number 70 [ 272.776555][ T30] audit: type=1800 audit(2000000160.560:9): pid=9276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1173" name="/" dev="fuse" ino=4 res=0 errno=0 [ 273.303488][ T809] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 273.393421][ T29] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 273.475389][ T809] usb 4-1: config 4 has an invalid interface number: 22 but max is 0 [ 273.493113][ T809] usb 4-1: config 4 has no interface number 0 [ 273.499559][ T809] usb 4-1: config 4 interface 22 has no altsetting 0 [ 273.509027][ T809] usb 4-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=22.62 [ 273.519273][ T809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.528342][ T809] usb 4-1: Product: syz [ 273.533078][ T809] usb 4-1: Manufacturer: syz [ 273.538079][ T809] usb 4-1: SerialNumber: syz [ 273.550329][ T809] usb 4-1: active config #4 != 1 ?? [ 273.557888][ T29] usb 3-1: too many configurations: 70, using maximum allowed: 8 [ 273.573164][ T29] usb 3-1: config index 0 descriptor too short (expected 65505, got 72) [ 273.586551][ T5930] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 273.603681][ T29] usb 3-1: config index 1 descriptor too short (expected 65505, got 72) [ 273.614022][ T29] usb 3-1: config index 2 descriptor too short (expected 65505, got 72) [ 273.624301][ T29] usb 3-1: config index 3 descriptor too short (expected 65505, got 72) [ 273.634790][ T29] usb 3-1: config index 4 descriptor too short (expected 65505, got 72) [ 273.644963][ T29] usb 3-1: config index 5 descriptor too short (expected 65505, got 72) [ 273.655355][ T29] usb 3-1: config index 6 descriptor too short (expected 65505, got 72) [ 273.665484][ T29] usb 3-1: config index 7 descriptor too short (expected 65505, got 72) [ 273.678049][ T29] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 273.688597][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.697239][ T29] usb 3-1: Product: syz [ 273.701521][ T29] usb 3-1: Manufacturer: syz [ 273.706545][ T29] usb 3-1: SerialNumber: syz [ 273.720168][ T29] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 273.741207][ T809] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 273.773942][ T5930] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 273.804700][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.822078][ T29] usb 4-1: USB disconnect, device number 61 [ 273.832234][ T5930] usb 5-1: Product: syz [ 273.851888][ T5930] usb 5-1: Manufacturer: syz [ 273.863145][ T5930] usb 5-1: SerialNumber: syz [ 273.964601][ T9] usb 3-1: USB disconnect, device number 71 [ 274.278816][ T5930] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 274.291543][ T5930] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 274.292971][ T6904] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 274.468474][ T6904] usb 1-1: Using ep0 maxpacket: 8 [ 274.493306][ T9319] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.1192'. [ 274.498916][ T6904] usb 1-1: config 3 has an invalid interface number: 230 but max is 0 [ 274.532159][ T6904] usb 1-1: config 3 has no interface number 0 [ 274.540684][ T6904] usb 1-1: config 3 interface 230 altsetting 4 bulk endpoint 0xD has invalid maxpacket 8 [ 274.567938][ T6904] usb 1-1: config 3 interface 230 has no altsetting 0 [ 274.591768][ T6904] usb 1-1: New USB device found, idVendor=199e, idProduct=8002, bcdDevice=bb.31 [ 274.611939][ T6904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.627067][ T6904] usb 1-1: Product: syz [ 274.642337][ T6904] usb 1-1: Manufacturer: syz [ 274.647626][ T6904] usb 1-1: SerialNumber: syz [ 274.662600][ T9315] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 274.857409][ T809] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 274.865786][ T809] ath9k_htc: Failed to initialize the device [ 274.872756][ T9] usb 3-1: ath9k_htc: USB layer deinitialized [ 274.909708][ T6904] uvcvideo 1-1:3.230: Found UVC 0.00 device syz (199e:8002) [ 274.918641][ T6904] uvcvideo 1-1:3.230: No valid video chain found. [ 274.937027][ T6904] usb 1-1: USB disconnect, device number 71 [ 275.213700][ T9343] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1201'. [ 275.224151][ T9343] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1201'. [ 275.514393][ T6904] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 275.522665][ T5930] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 275.653006][ T6904] usb 4-1: device descriptor read/64, error -71 [ 275.683756][ T994] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 275.741033][ T5930] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001000. ret = -EPROTO [ 275.764922][ T5930] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 275.778293][ T5930] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 275.789664][ T5930] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 275.803874][ T5930] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 275.827699][ T5930] usb 5-1: USB disconnect, device number 66 [ 275.835035][ T9362] netlink: 'syz.2.1204': attribute type 10 has an invalid length. [ 275.863336][ T994] usb 1-1: Using ep0 maxpacket: 32 [ 275.874789][ T994] usb 1-1: config index 0 descriptor too short (expected 114, got 109) [ 275.896573][ T994] usb 1-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config [ 275.908395][ T994] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 275.935303][ T6904] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 275.952025][ T994] usb 1-1: New USB device found, idVendor=2b73, idProduct=0029, bcdDevice= 0.40 [ 275.981386][ T994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.006181][ T994] usb 1-1: Product: syz [ 276.013503][ T994] usb 1-1: Manufacturer: syz [ 276.022846][ T994] usb 1-1: SerialNumber: syz [ 276.072902][ T6904] usb 4-1: device descriptor read/64, error -71 [ 276.214332][ T6904] usb usb4-port1: attempt power cycle [ 276.443233][ T5930] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 276.574129][ T6904] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 276.605926][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.615067][ T6904] usb 4-1: device descriptor read/8, error -71 [ 276.618347][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.634672][ T5930] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 276.666785][ T5930] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 276.691656][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.708345][ T5930] usb 3-1: config 0 descriptor?? [ 276.865086][ T6904] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 276.916658][ T6904] usb 4-1: device descriptor read/8, error -71 [ 277.033452][ T6904] usb usb4-port1: unable to enumerate USB device [ 277.168645][ T994] usb 1-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 277.190896][ T994] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 277.235761][ T5930] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 277.289043][ T994] usb 1-1: USB disconnect, device number 72 [ 277.323221][ T809] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 277.364659][ T9376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.389532][ T9376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.483041][ T809] usb 5-1: device descriptor read/64, error -71 [ 277.651643][ T9407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.660931][ T9407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.723122][ T809] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 277.735321][ T9] usb 3-1: USB disconnect, device number 72 [ 277.741910][ T9407] plantronics 0003:047F:FFFF.0012: usb_submit_urb(ctrl) failed: -19 [ 277.852935][ T809] usb 5-1: device descriptor read/64, error -71 [ 277.963342][ T809] usb usb5-port1: attempt power cycle [ 277.973228][ T994] usb 1-1: new full-speed USB device number 73 using dummy_hcd [ 278.164520][ T994] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.175245][ T994] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 278.187544][ T994] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 278.198712][ T994] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 278.211541][ T994] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 278.222190][ T994] usb 1-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 278.230926][ T994] usb 1-1: Product: syz [ 278.235263][ T994] usb 1-1: Manufacturer: syz [ 278.240041][ T994] usb 1-1: SerialNumber: syz [ 278.247945][ T994] usb 1-1: config 0 descriptor?? [ 278.303038][ T809] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 278.304476][ T994] rc_core: IR keymap rc-imon-rsc not found [ 278.328816][ T994] Registered IR keymap rc-empty [ 278.336679][ T994] rc rc0: iMON Station as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 278.337787][ T809] usb 5-1: device descriptor read/8, error -71 [ 278.350204][ T994] input: iMON Station as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input48 [ 278.366799][ T994] imon_raw 1-1:0.0: probe with driver imon_raw failed with error -90 [ 278.467412][ T29] usb 1-1: USB disconnect, device number 73 [ 278.593001][ T809] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 278.633483][ T809] usb 5-1: device descriptor read/8, error -71 [ 278.683054][ T5930] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 278.753203][ T809] usb usb5-port1: unable to enumerate USB device [ 278.842947][ T5930] usb 3-1: Using ep0 maxpacket: 8 [ 278.850214][ T5930] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.861043][ T5930] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 278.873269][ T5930] usb 3-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 278.882667][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.891034][ T5930] usb 3-1: Product: syz [ 278.895420][ T5930] usb 3-1: Manufacturer: syz [ 278.900389][ T5930] usb 3-1: SerialNumber: syz [ 279.112024][ T9418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.121587][ T9418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.131727][ T9418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.147373][ T9418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.158644][ T9418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.176510][ T9413] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 279.179731][ T9418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.205129][ T9418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.216785][ T9418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.228277][ T9418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.238966][ T9418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.375285][ T5930] usb 3-1: USB disconnect, device number 73 [ 279.416515][ T9431] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1217'. [ 279.457103][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 279.873864][ T994] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 279.913102][ T9] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 280.032958][ T994] usb 4-1: Using ep0 maxpacket: 32 [ 280.041422][ T994] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 280.051117][ T994] usb 4-1: config 0 has no interface number 0 [ 280.057823][ T9] usb 1-1: device descriptor read/64, error -71 [ 280.064749][ T994] usb 4-1: config 0 interface 184 has no altsetting 0 [ 280.075103][ T994] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 280.087086][ T994] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.098082][ T994] usb 4-1: Product: syz [ 280.104587][ T994] usb 4-1: Manufacturer: syz [ 280.110062][ T994] usb 4-1: SerialNumber: syz [ 280.119687][ T994] usb 4-1: config 0 descriptor?? [ 280.303918][ T9] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 280.374049][ T5841] Bluetooth: hci0: command 0x080f tx timeout [ 280.400649][ T9459] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1229'. [ 280.400649][ T9458] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 280.410402][ T9459] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1229'. [ 280.431076][ T9459] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1229'. [ 280.441158][ T9459] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1229'. [ 280.451240][ T9459] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1229'. [ 280.451335][ T9] usb 1-1: device descriptor read/64, error -71 [ 280.461227][ T9459] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1229'. [ 280.461406][ T9459] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1229'. [ 280.461553][ T9459] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1229'. [ 280.461707][ T9459] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1229'. [ 280.461850][ T9459] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1229'. [ 280.535826][ T9442] netlink: 'syz.3.1222': attribute type 19 has an invalid length. [ 280.626124][ T9] usb usb1-port1: attempt power cycle [ 280.761084][ T994] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 280.793631][ T994] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 280.872972][ T5930] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 280.973162][ T9] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 281.005181][ T9] usb 1-1: device descriptor read/8, error -71 [ 281.015828][ T994] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 281.028053][ T994] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 281.033096][ T5930] usb 5-1: Using ep0 maxpacket: 8 [ 281.039597][ T994] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 281.054251][ T994] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 281.058548][ T5930] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 281.092913][ T5930] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 281.114400][ T5930] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 281.131869][ T5930] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 281.148402][ T5930] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 281.160623][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.254028][ T9] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 281.274447][ T9] usb 1-1: device descriptor read/8, error -71 [ 281.383236][ T9] usb usb1-port1: unable to enumerate USB device [ 281.397310][ T5930] usb 5-1: GET_CAPABILITIES returned 0 [ 281.407180][ T5930] usbtmc 5-1:16.0: can't read capabilities [ 281.608467][ T5930] usb 5-1: USB disconnect, device number 71 [ 282.503342][ T9] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 282.666861][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 282.676782][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.685287][ T9] usb 5-1: Product: syz [ 282.689812][ T9] usb 5-1: Manufacturer: syz [ 282.694550][ T9] usb 5-1: SerialNumber: syz [ 282.982582][ T9508] comedi comedi1: mpc624: I/O port conflict (0x1,16) [ 282.985595][ T5930] usb 4-1: USB disconnect, device number 66 [ 283.111515][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 283.142343][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 283.167851][ T29] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 283.349143][ T9518] netlink: 'syz.3.1248': attribute type 10 has an invalid length. [ 283.364991][ T29] usb 1-1: unable to get BOS descriptor or descriptor too short [ 283.376111][ T29] usb 1-1: not running at top speed; connect to a high speed hub [ 283.386932][ T29] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 283.405488][ T29] usb 1-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 283.418554][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.432894][ T809] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 283.444792][ T29] usb 1-1: Product: syz [ 283.450333][ T29] usb 1-1: Manufacturer: syz [ 283.456375][ T29] usb 1-1: SerialNumber: syz [ 283.583352][ T809] usb 3-1: device descriptor read/64, error -71 [ 283.662981][ T994] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 283.676071][ T29] usb 1-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 283.685189][ T29] usb 1-1: found format II with max.bitrate = 512, frame size=4095 [ 283.694145][ T29] usb 1-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 283.703552][ T29] usb 1-1: found format II with max.bitrate = 512, frame size=4095 [ 283.718275][ T29] usb 1-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 283.777450][ T29] usb 1-1: USB disconnect, device number 78 [ 283.815187][ T994] usb 4-1: Using ep0 maxpacket: 8 [ 283.838969][ T5854] udevd[5854]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 283.858972][ T994] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 283.864354][ T809] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 283.872282][ T994] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 283.894829][ T994] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 283.905913][ T994] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 283.917937][ T994] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 283.931737][ T994] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 283.947678][ T994] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.956521][ T994] usb 4-1: Product: syz [ 283.960897][ T994] usb 4-1: Manufacturer: syz [ 283.967115][ T994] usb 4-1: SerialNumber: syz [ 283.975406][ T994] usb 4-1: config 0 descriptor?? [ 283.982289][ T994] hub 4-1:0.0: bad descriptor, ignoring hub [ 283.988639][ T994] hub 4-1:0.0: probe with driver hub failed with error -5 [ 283.999426][ T994] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input49 [ 284.013401][ T809] usb 3-1: device descriptor read/64, error -71 [ 284.123405][ T809] usb usb3-port1: attempt power cycle [ 284.206231][ T994] usb 4-1: USB disconnect, device number 67 [ 284.364994][ T9526] syzkaller1: entered promiscuous mode [ 284.372011][ T9526] syzkaller1: entered allmulticast mode [ 284.463615][ T809] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 284.504505][ T809] usb 3-1: device descriptor read/8, error -71 [ 284.733020][ T29] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 284.753842][ T809] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 284.778322][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPROTO [ 284.792702][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 284.793709][ T809] usb 3-1: device descriptor read/8, error -71 [ 284.810038][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 284.826248][ T9] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 284.842740][ T9] usb 5-1: USB disconnect, device number 72 [ 284.929124][ T809] usb usb3-port1: unable to enumerate USB device [ 284.943293][ T29] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.962952][ T29] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 284.974126][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.987731][ T29] usb 1-1: config 0 descriptor?? [ 285.007012][ T29] pwc: Askey VC010 type 2 USB webcam detected. [ 285.283008][ T809] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 285.409352][ T29] pwc: recv_control_msg error -32 req 02 val 2b00 [ 285.417717][ T29] pwc: recv_control_msg error -32 req 02 val 2700 [ 285.426008][ T29] pwc: recv_control_msg error -32 req 02 val 2c00 [ 285.433689][ T29] pwc: recv_control_msg error -32 req 04 val 1000 [ 285.440932][ T29] pwc: recv_control_msg error -32 req 04 val 1300 [ 285.447731][ T809] usb 4-1: Using ep0 maxpacket: 8 [ 285.453837][ T29] pwc: recv_control_msg error -32 req 04 val 1400 [ 285.461413][ T29] pwc: recv_control_msg error -32 req 02 val 2000 [ 285.468744][ T809] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 285.480441][ T29] pwc: recv_control_msg error -32 req 02 val 2100 [ 285.487954][ T29] pwc: recv_control_msg error -32 req 04 val 1500 [ 285.497184][ T809] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 285.507392][ T809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.515823][ T809] usb 4-1: Product: syz [ 285.520696][ T29] pwc: recv_control_msg error -32 req 02 val 2500 [ 285.527764][ T809] usb 4-1: Manufacturer: syz [ 285.532961][ T809] usb 4-1: SerialNumber: syz [ 285.538082][ T29] pwc: recv_control_msg error -32 req 02 val 2400 [ 285.545771][ T29] pwc: recv_control_msg error -32 req 02 val 2600 [ 285.559315][ T29] pwc: recv_control_msg error -32 req 02 val 2900 [ 285.767198][ T809] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 285.777027][ T29] pwc: recv_control_msg error -32 req 04 val 1100 [ 285.784626][ T809] usb 4-1: MIDIStreaming interface descriptor not found [ 285.795153][ T29] pwc: Registered as video103. [ 285.808024][ T29] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input50 [ 285.949627][ T809] usb 4-1: USB disconnect, device number 68 [ 286.006031][ T5959] udevd[5959]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 286.007507][ T994] usb 1-1: USB disconnect, device number 79 [ 286.241609][ T9542] __nla_validate_parse: 57 callbacks suppressed [ 286.241630][ T9542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1258'. [ 286.260253][ T9542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1258'. [ 286.508848][ T9552] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1263'. [ 286.599195][ T5841] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 286.663002][ T9] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 286.823536][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 286.837214][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.848525][ T9] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.864509][ T994] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 286.876360][ T9] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.886660][ T6904] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 286.897111][ T9] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 286.912566][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 286.920177][ T9] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 286.929879][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.947510][ T9] usb 3-1: config 0 descriptor?? [ 287.001543][ T9572] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1272'. [ 287.045566][ T994] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.057401][ T994] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 287.068274][ T6904] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.080778][ T994] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.090784][ T6904] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 287.101383][ T6904] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 287.114724][ T6904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.125270][ T994] usb 5-1: config 0 descriptor?? [ 287.146696][ T6904] usb 1-1: config 0 descriptor?? [ 287.414066][ T29] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 287.429142][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 287.436030][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 287.450014][ T9] usb 3-1: USB disconnect, device number 78 [ 287.553025][ T29] usb 4-1: device descriptor read/64, error -71 [ 287.785572][ T9558] tmpfs: Unknown parameter 'mpo½]' [ 287.793359][ T29] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 287.802976][ T9] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 287.857344][ T994] ath6kl: Failed to read usb control message: -71 [ 287.864224][ T994] ath6kl: Unable to read the bmi data from the device: -71 [ 287.871893][ T994] ath6kl: unable to read target info byte count: -71 [ 287.880980][ T994] ath6kl: Failed to init ath6kl core: -71 [ 287.893428][ T994] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 287.906026][ T994] usb 5-1: USB disconnect, device number 73 [ 287.964672][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 287.972214][ T9] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.973132][ T29] usb 4-1: device descriptor read/64, error -71 [ 287.984616][ T9] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.003578][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 288.013078][ T9] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 288.021791][ T9] usb 3-1: Product: syz [ 288.026313][ T9] usb 3-1: Manufacturer: syz [ 288.037565][ T9] hub 3-1:4.0: USB hub found [ 288.093334][ T29] usb usb4-port1: attempt power cycle [ 288.236237][ T9] hub 3-1:4.0: 2 ports detected [ 288.434267][ T29] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 288.464035][ T29] usb 4-1: device descriptor read/8, error -71 [ 288.650013][ T9580] netlink: 'syz.2.1275': attribute type 10 has an invalid length. [ 288.665112][ T9580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.685102][ T9580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.706111][ T29] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 288.717728][ T9] hub 3-1:4.0: set hub depth failed [ 288.733906][ T29] usb 4-1: device descriptor read/8, error -71 [ 288.741940][ T9] usb 3-1: USB disconnect, device number 79 [ 288.843214][ T29] usb usb4-port1: unable to enumerate USB device [ 289.142991][ T29] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 289.297063][ T29] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 289.311625][ T29] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 289.335151][ T29] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 289.356379][ T29] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 289.371742][ T29] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 289.386008][ T29] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 289.400504][ T29] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 289.411748][ T29] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 289.421873][ T29] usb 5-1: Product: syz [ 289.428006][ T29] usb 5-1: Manufacturer: syz [ 289.446180][ T9598] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 289.465024][ T29] cdc_wdm 5-1:1.0: skipping garbage [ 289.477761][ T29] cdc_wdm 5-1:1.0: skipping garbage [ 289.490934][ T29] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 289.498651][ T29] cdc_wdm 5-1:1.0: Unknown control protocol [ 289.662704][ T29] usb 1-1: USB disconnect, device number 80 [ 289.681001][ T9598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1283'. [ 289.719648][ T9598] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1283'. [ 289.732021][ T9607] QAT: Device 12 not found [ 289.751110][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 289.760003][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 289.767525][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 289.774591][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 289.782960][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 289.791372][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 289.801257][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 289.809208][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 289.816204][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 289.827837][ T9] usb 5-1: USB disconnect, device number 74 [ 290.499565][ T9622] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.1294'. [ 290.562006][ T9624] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 290.853086][ T9] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 290.863778][ T994] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 291.047605][ T9] usb 3-1: config 2 has an invalid interface number: 191 but max is 0 [ 291.056935][ T994] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.078290][ T9] usb 3-1: config 2 has an invalid descriptor of length 34, skipping remainder of the config [ 291.096069][ T994] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 291.107315][ T9] usb 3-1: config 2 has no interface number 0 [ 291.114370][ T994] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 291.124747][ T9] usb 3-1: config 2 interface 191 altsetting 9 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 291.138834][ T994] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.147865][ T9] usb 3-1: config 2 interface 191 altsetting 9 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 291.164726][ T994] usb 4-1: config 0 descriptor?? [ 291.170178][ T9] usb 3-1: config 2 interface 191 altsetting 9 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 291.199803][ T9] usb 3-1: config 2 interface 191 altsetting 9 has a duplicate endpoint with address 0x2, skipping [ 291.215032][ T9] usb 3-1: config 2 interface 191 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 291.228446][ T9] usb 3-1: config 2 interface 191 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 291.240525][ T9] usb 3-1: config 2 interface 191 altsetting 9 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 291.253516][ T9] usb 3-1: config 2 interface 191 altsetting 9 has an endpoint descriptor with address 0x6A, changing to 0xA [ 291.267632][ T9] usb 3-1: config 2 interface 191 altsetting 9 endpoint 0xA has an invalid bInterval 191, changing to 7 [ 291.303400][ T9] usb 3-1: config 2 interface 191 altsetting 9 endpoint 0xA has invalid maxpacket 50250, setting to 1024 [ 291.316490][ T9] usb 3-1: config 2 interface 191 altsetting 9 has a duplicate endpoint with address 0xA, skipping [ 291.330264][ T9] usb 3-1: config 2 interface 191 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 291.342903][ T9] usb 3-1: config 2 interface 191 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 291.359606][ T9] usb 3-1: config 2 interface 191 has no altsetting 0 [ 291.368414][ T9637] FAULT_INJECTION: forcing a failure. [ 291.368414][ T9637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.386021][ T9] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=71.42 [ 291.400790][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.410812][ T9637] CPU: 0 UID: 0 PID: 9637 Comm: syz.0.1298 Not tainted syzkaller #0 PREEMPT(full) [ 291.410839][ T9637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 291.410849][ T9637] Call Trace: [ 291.410855][ T9637] [ 291.410862][ T9637] dump_stack_lvl+0xe8/0x150 [ 291.410892][ T9637] should_fail_ex+0x412/0x560 [ 291.410920][ T9637] _copy_from_user+0x2d/0xb0 [ 291.410935][ T9637] restore_altstack+0xab/0x4c0 [ 291.410960][ T9637] ? __pfx_restore_altstack+0x10/0x10 [ 291.410985][ T9637] ? _raw_spin_unlock_irq+0x23/0x50 [ 291.411009][ T9637] __ia32_sys_rt_sigreturn+0x2bd/0x8e0 [ 291.411033][ T9637] ? __lock_acquire+0x6b5/0x2cf0 [ 291.411061][ T9637] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 291.411080][ T9637] ? _raw_spin_unlock_irq+0x2e/0x50 [ 291.411099][ T9637] ? signal_setup_done+0x22f/0x310 [ 291.411137][ T9637] ? arch_do_signal_or_restart+0x4be/0x830 [ 291.411163][ T9637] ? __task_pid_nr_ns+0x28/0x470 [ 291.411192][ T9637] ? __task_pid_nr_ns+0x28/0x470 [ 291.411219][ T9637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.411238][ T9637] do_syscall_64+0x15f/0xf80 [ 291.411259][ T9637] ? trace_irq_disable+0x3b/0x140 [ 291.411279][ T9637] ? clear_bhb_loop+0x40/0x90 [ 291.411298][ T9637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.411316][ T9637] RIP: 0033:0x7fd7f293db99 [ 291.411332][ T9637] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 291.411346][ T9637] RSP: 002b:00007fd7f0bf5a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 291.411365][ T9637] RAX: ffffffffffffffda RBX: 00007fd7f2c15fa0 RCX: 00007fd7f293db99 [ 291.411377][ T9637] RDX: 00007fd7f0bf5a80 RSI: 00007fd7f0bf5bb0 RDI: 0000000000000021 [ 291.411388][ T9637] RBP: 00007fd7f0bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 291.411397][ T9637] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 291.411407][ T9637] R13: 00007fd7f2c16038 R14: 00007fd7f2c15fa0 R15: 00007ffd7c293548 [ 291.411432][ T9637] [ 291.411614][ T9] usb 3-1: Product: syz [ 291.629655][ T9641] 9p: Bad value for 'rfdno' [ 291.654445][ T9] usb 3-1: Manufacturer: syz [ 291.662912][ T9] usb 3-1: SerialNumber: syz [ 291.911125][ T9] usb 3-1: USB disconnect, device number 80 [ 292.319295][ T9651] FAULT_INJECTION: forcing a failure. [ 292.319295][ T9651] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.363056][ T9651] CPU: 0 UID: 0 PID: 9651 Comm: syz.0.1302 Not tainted syzkaller #0 PREEMPT(full) [ 292.363081][ T9651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 292.363093][ T9651] Call Trace: [ 292.363100][ T9651] [ 292.363108][ T9651] dump_stack_lvl+0xe8/0x150 [ 292.363139][ T9651] should_fail_ex+0x412/0x560 [ 292.363169][ T9651] _copy_from_user+0x2d/0xb0 [ 292.363195][ T9651] ___sys_sendmsg+0x1c6/0x360 [ 292.363220][ T9651] ? __pfx____sys_sendmsg+0x10/0x10 [ 292.363238][ T9651] ? __lock_acquire+0x6b5/0x2cf0 [ 292.363316][ T9651] __sys_sendmmsg+0x27c/0x4e0 [ 292.363342][ T9651] ? __pfx___sys_sendmmsg+0x10/0x10 [ 292.363359][ T9651] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 292.363400][ T9651] ? ksys_write+0x242/0x270 [ 292.363419][ T9651] ? __pfx_ksys_write+0x10/0x10 [ 292.363441][ T9651] __x64_sys_sendmmsg+0xa0/0xc0 [ 292.363463][ T9651] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.363481][ T9651] do_syscall_64+0x15f/0xf80 [ 292.363503][ T9651] ? trace_irq_disable+0x3b/0x140 [ 292.363523][ T9651] ? clear_bhb_loop+0x40/0x90 [ 292.363545][ T9651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.363562][ T9651] RIP: 0033:0x7fd7f299c819 [ 292.363579][ T9651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.363600][ T9651] RSP: 002b:00007fd7f0bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 292.363619][ T9651] RAX: ffffffffffffffda RBX: 00007fd7f2c15fa0 RCX: 00007fd7f299c819 [ 292.363633][ T9651] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 292.363644][ T9651] RBP: 00007fd7f0bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 292.363654][ T9651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 292.363663][ T9651] R13: 00007fd7f2c16038 R14: 00007fd7f2c15fa0 R15: 00007ffd7c293548 [ 292.363691][ T9651] [ 292.628720][ T9653] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1303'. [ 292.882923][ T29] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 293.045346][ T29] usb 1-1: Using ep0 maxpacket: 32 [ 293.062148][ T9661] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1307'. [ 293.081885][ T9661] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1307'. [ 293.083708][ T29] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 256 [ 293.138599][ T29] usb 1-1: config 0 interface 0 has no altsetting 0 [ 293.179315][ T29] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 293.209190][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.232899][ T29] usb 1-1: Product: syz [ 293.247343][ T29] usb 1-1: Manufacturer: syz [ 293.263708][ T29] usb 1-1: SerialNumber: syz [ 293.307851][ T29] usb 1-1: config 0 descriptor?? [ 293.319461][ T9653] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 293.563481][ T9669] FAULT_INJECTION: forcing a failure. [ 293.563481][ T9669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.587940][ T9669] CPU: 1 UID: 0 PID: 9669 Comm: syz.2.1310 Not tainted syzkaller #0 PREEMPT(full) [ 293.587967][ T9669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 293.587978][ T9669] Call Trace: [ 293.587988][ T9669] [ 293.587997][ T9669] dump_stack_lvl+0xe8/0x150 [ 293.588028][ T9669] should_fail_ex+0x412/0x560 [ 293.588057][ T9669] _copy_to_iter+0x589/0x17d0 [ 293.588095][ T9669] ? __pfx__copy_to_iter+0x10/0x10 [ 293.588117][ T9669] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 293.588139][ T9669] ? lockdep_hardirqs_on+0x7a/0x110 [ 293.588161][ T9669] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 293.588181][ T9669] ? __skb_try_recv_datagram+0x3d4/0x4d0 [ 293.588210][ T9669] __skb_datagram_iter+0xf8/0x980 [ 293.588234][ T9669] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 293.588264][ T9669] skb_copy_datagram_iter+0xb5/0x240 [ 293.588289][ T9669] netlink_recvmsg+0x2c3/0xa50 [ 293.588315][ T9669] ? __pfx_netlink_recvmsg+0x10/0x10 [ 293.588336][ T9669] ? __lock_acquire+0x6b5/0x2cf0 [ 293.588358][ T9669] ? aa_sock_msg_perm+0xf1/0x1b0 [ 293.588379][ T9669] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 293.588403][ T9669] ? security_socket_recvmsg+0x7e/0x2c0 [ 293.588425][ T9669] ? __pfx_netlink_recvmsg+0x10/0x10 [ 293.588444][ T9669] sock_recvmsg+0x172/0x1b0 [ 293.588472][ T9669] ____sys_recvmsg+0x1e6/0x4a0 [ 293.588502][ T9669] ? __pfx_____sys_recvmsg+0x10/0x10 [ 293.588538][ T9669] ? import_iovec+0x73/0xa0 [ 293.588566][ T9669] ___sys_recvmsg+0x215/0x590 [ 293.588593][ T9669] ? __pfx____sys_recvmsg+0x10/0x10 [ 293.588619][ T9669] ? __fget_files+0x2a/0x420 [ 293.588655][ T9669] ? __fget_files+0x3a0/0x420 [ 293.588684][ T9669] do_recvmmsg+0x334/0x800 [ 293.588711][ T9669] ? __pfx_do_recvmmsg+0x10/0x10 [ 293.588741][ T9669] ? _copy_from_user+0x94/0xb0 [ 293.588767][ T9669] __x64_sys_recvmmsg+0x1b7/0x250 [ 293.588790][ T9669] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 293.588814][ T9669] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.588831][ T9669] do_syscall_64+0x15f/0xf80 [ 293.588852][ T9669] ? trace_irq_disable+0x3b/0x140 [ 293.588879][ T9669] ? clear_bhb_loop+0x40/0x90 [ 293.588898][ T9669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.588914][ T9669] RIP: 0033:0x7fa102f9c819 [ 293.588930][ T9669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.588944][ T9669] RSP: 002b:00007fa103e04028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 293.588964][ T9669] RAX: ffffffffffffffda RBX: 00007fa103215fa0 RCX: 00007fa102f9c819 [ 293.588976][ T9669] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 293.588987][ T9669] RBP: 00007fa103e04090 R08: 0000200000000080 R09: 0000000000000000 [ 293.588998][ T9669] R10: 0000000000012022 R11: 0000000000000246 R12: 0000000000000001 [ 293.589007][ T9669] R13: 00007fa103216038 R14: 00007fa103215fa0 R15: 00007fff4a0bf448 [ 293.589039][ T9669] [ 293.624743][ T9] usb 4-1: USB disconnect, device number 73 [ 293.749806][ T29] gs_usb 1-1:0.0: Couldn't get device config: (err=-121) [ 293.794257][ T9671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1312'. [ 293.826480][ T29] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -121 [ 294.363894][ T29] usb 4-1: new low-speed USB device number 74 using dummy_hcd [ 294.503132][ T29] usb 4-1: device descriptor read/64, error -71 [ 294.743062][ T29] usb 4-1: new low-speed USB device number 75 using dummy_hcd [ 294.834103][ T5913] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 294.873040][ T29] usb 4-1: device descriptor read/64, error -71 [ 294.984702][ T29] usb usb4-port1: attempt power cycle [ 294.995000][ T5913] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.006439][ T5913] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 295.017527][ T5913] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 295.027583][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.040108][ T5913] usb 5-1: config 0 descriptor?? [ 295.201429][ T9698] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1322'. [ 295.211474][ T9698] Unknown options in mask b7f2 [ 295.258018][ T9701] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1323'. [ 295.330896][ T29] usb 4-1: new low-speed USB device number 76 using dummy_hcd [ 295.353627][ T29] usb 4-1: device descriptor read/8, error -71 [ 295.593389][ T29] usb 4-1: new low-speed USB device number 77 using dummy_hcd [ 295.613568][ T29] usb 4-1: device descriptor read/8, error -71 [ 295.644351][ T9] usb 1-1: USB disconnect, device number 81 [ 295.724900][ T29] usb usb4-port1: unable to enumerate USB device [ 296.043038][ T9] usb 1-1: new full-speed USB device number 82 using dummy_hcd [ 296.208198][ T9] usb 1-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23 [ 296.221331][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.232502][ T9] usb 1-1: Product: syz [ 296.237935][ T9] usb 1-1: Manufacturer: syz [ 296.244629][ T9] usb 1-1: SerialNumber: syz [ 296.255488][ T9] usb 1-1: config 0 descriptor?? [ 296.480594][ T9] usb 1-1: USB disconnect, device number 82 [ 297.378132][ T9738] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.1338'. [ 297.431051][ T9740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1339'. [ 297.483000][ T5913] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 297.592932][ T29] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 297.615781][ T809] usb 5-1: USB disconnect, device number 75 [ 297.623423][ T5913] usb 4-1: device descriptor read/64, error -71 [ 297.721036][ T9746] ufs: You didn't specify the type of your ufs filesystem [ 297.721036][ T9746] [ 297.721036][ T9746] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 297.721036][ T9746] [ 297.721036][ T9746] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 297.770530][ T9746] ufs: ufs_fill_super(): bad magic number [ 297.778806][ T29] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 297.790043][ T29] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 297.803033][ T29] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 297.812655][ T29] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 297.843451][ T29] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 297.855762][ T29] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 297.875068][ T29] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 297.886201][ T5913] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 297.895098][ T29] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 297.904969][ T29] usb 1-1: Product: syz [ 297.909452][ T29] usb 1-1: Manufacturer: syz [ 297.920656][ T9736] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 297.933907][ T29] cdc_wdm 1-1:1.0: skipping garbage [ 297.939175][ T29] cdc_wdm 1-1:1.0: skipping garbage [ 297.950084][ T29] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 297.963206][ T29] cdc_wdm 1-1:1.0: Unknown control protocol [ 298.032959][ T5913] usb 4-1: device descriptor read/64, error -71 [ 298.143284][ T5913] usb usb4-port1: attempt power cycle [ 298.157177][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 298.163798][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 298.170289][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 298.177010][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 298.183760][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 298.190734][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 298.197200][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 298.204184][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 298.210544][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 298.217726][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 298.224763][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 298.231867][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 298.238820][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 298.246333][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 298.253837][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 298.260980][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 298.267517][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 298.275185][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 298.281853][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 298.289386][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 298.299869][ T994] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 298.315411][ T809] usb 1-1: USB disconnect, device number 83 [ 298.472938][ T994] usb 5-1: Using ep0 maxpacket: 32 [ 298.480297][ T994] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.491733][ T994] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 32 [ 298.504427][ T994] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 298.514373][ T994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.522836][ T994] usb 5-1: Product: syz [ 298.527832][ T994] usb 5-1: Manufacturer: syz [ 298.533924][ T994] usb 5-1: SerialNumber: syz [ 298.540902][ T994] usb 5-1: config 0 descriptor?? [ 298.563003][ T5913] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 298.593953][ T5913] usb 4-1: device descriptor read/8, error -71 [ 298.602985][ T5930] usb 3-1: new full-speed USB device number 81 using dummy_hcd [ 298.759816][ T994] usb 5-1: USB disconnect, device number 76 [ 298.760735][ T5930] usb 3-1: unable to get BOS descriptor or descriptor too short [ 298.779848][ T5930] usb 3-1: not running at top speed; connect to a high speed hub [ 298.789594][ T5930] usb 3-1: config 61 has an invalid interface number: 37 but max is 0 [ 298.798907][ T5930] usb 3-1: config 61 has no interface number 0 [ 298.805422][ T5930] usb 3-1: config 61 interface 37 has no altsetting 0 [ 298.816440][ T5930] usb 3-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 298.827571][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.837022][ T5913] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 298.845990][ T5930] usb 3-1: Product: syz [ 298.851897][ T5930] usb 3-1: Manufacturer: syz [ 298.857281][ T5930] usb 3-1: SerialNumber: syz [ 298.874621][ T5913] usb 4-1: device descriptor read/8, error -71 [ 298.998218][ T5913] usb usb4-port1: unable to enumerate USB device [ 299.192946][ T809] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 299.276519][ T5930] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 299.342984][ T809] usb 1-1: Using ep0 maxpacket: 32 [ 299.355115][ T809] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 299.368635][ T809] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 299.392002][ T809] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 299.413109][ T809] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 299.435047][ T809] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 299.449982][ T809] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 299.467684][ T809] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 299.478041][ T809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.489194][ T809] usb 1-1: Product: syz [ 299.494290][ T809] usb 1-1: Manufacturer: syz [ 299.499187][ T809] usb 1-1: SerialNumber: syz [ 299.508906][ T809] usb 1-1: config 0 descriptor?? [ 299.689725][ T5930] gp8psk: usb out operation failed. [ 299.700090][ T5930] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 299.718784][ T5930] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-19) [ 299.733082][ T5930] usb 3-1: USB disconnect, device number 81 [ 300.232980][ T5930] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 300.362741][ T9774] FAULT_INJECTION: forcing a failure. [ 300.362741][ T9774] name failslab, interval 1, probability 0, space 0, times 0 [ 300.379041][ T9774] CPU: 1 UID: 0 PID: 9774 Comm: syz.3.1352 Not tainted syzkaller #0 PREEMPT(full) [ 300.379068][ T9774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 300.379078][ T9774] Call Trace: [ 300.379085][ T9774] [ 300.379093][ T9774] dump_stack_lvl+0xe8/0x150 [ 300.379137][ T9774] should_fail_ex+0x412/0x560 [ 300.379171][ T9774] should_failslab+0xa8/0x100 [ 300.379198][ T9774] __kmalloc_cache_noprof+0x88/0x660 [ 300.379251][ T9774] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 300.379278][ T9774] ? sctp_v6_cmp_addr+0x15/0xd0 [ 300.379310][ T9774] ? sctp_add_bind_addr+0x8c/0x370 [ 300.379335][ T9774] sctp_add_bind_addr+0x8c/0x370 [ 300.379357][ T9774] sctp_copy_local_addr_list+0x314/0x4f0 [ 300.379379][ T9774] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 300.379397][ T9774] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 300.379424][ T9774] ? sctp_v4_is_any+0x35/0x60 [ 300.379450][ T9774] ? sctp_copy_one_addr+0x93/0x360 [ 300.379486][ T9774] sctp_bind_addr_copy+0xb3/0x3c0 [ 300.379512][ T9774] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 300.379535][ T9774] sctp_connect_new_asoc+0x2ff/0x6b0 [ 300.379557][ T9774] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 300.379587][ T9774] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 300.379605][ T9774] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 300.379622][ T9774] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 300.379641][ T9774] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 300.379660][ T9774] ? security_sctp_bind_connect+0x7e/0x2c0 [ 300.379686][ T9774] sctp_sendmsg+0x1528/0x2c10 [ 300.379723][ T9774] ? __pfx_sctp_sendmsg+0x10/0x10 [ 300.379750][ T9774] ? aa_sk_perm+0x6d5/0x900 [ 300.379780][ T9774] ? __pfx_aa_sk_perm+0x10/0x10 [ 300.379799][ T9774] ? sock_rps_record_flow+0x19/0x350 [ 300.379825][ T9774] ? inet_sendmsg+0x2f4/0x370 [ 300.379843][ T9774] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 300.379872][ T9774] ____sys_sendmsg+0x80a/0x9f0 [ 300.379904][ T9774] ? __pfx_____sys_sendmsg+0x10/0x10 [ 300.379933][ T9774] ? import_iovec+0x73/0xa0 [ 300.379961][ T9774] ___sys_sendmsg+0x2a5/0x360 [ 300.379981][ T9774] ? __lock_acquire+0x6b5/0x2cf0 [ 300.380009][ T9774] ? __pfx____sys_sendmsg+0x10/0x10 [ 300.380036][ T9774] ? kstrtouint+0x6e/0xe0 [ 300.380077][ T9774] ? __fget_files+0x2a/0x420 [ 300.380098][ T9774] ? __fget_files+0x3a0/0x420 [ 300.380126][ T9774] __sys_sendmmsg+0x27c/0x4e0 [ 300.380152][ T9774] ? __pfx___sys_sendmmsg+0x10/0x10 [ 300.380168][ T9774] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 300.380213][ T9774] ? ksys_write+0x242/0x270 [ 300.380233][ T9774] ? __pfx_ksys_write+0x10/0x10 [ 300.380265][ T9774] __x64_sys_sendmmsg+0xa0/0xc0 [ 300.380285][ T9774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.380303][ T9774] do_syscall_64+0x15f/0xf80 [ 300.380325][ T9774] ? trace_irq_disable+0x3b/0x140 [ 300.380346][ T9774] ? clear_bhb_loop+0x40/0x90 [ 300.380367][ T9774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.380385][ T9774] RIP: 0033:0x7f5863f9c819 [ 300.380403][ T9774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.380418][ T9774] RSP: 002b:00007f5864e49028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 300.380436][ T9774] RAX: ffffffffffffffda RBX: 00007f5864215fa0 RCX: 00007f5863f9c819 [ 300.380449][ T9774] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000004 [ 300.380460][ T9774] RBP: 00007f5864e49090 R08: 0000000000000000 R09: 0000000000000000 [ 300.380470][ T9774] R10: 0000000020000014 R11: 0000000000000246 R12: 0000000000000002 [ 300.380481][ T9774] R13: 00007f5864216038 R14: 00007f5864215fa0 R15: 00007fff147736f8 [ 300.380512][ T9774] [ 300.888735][ T5930] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.900462][ T5930] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 300.911230][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.924288][ T5930] usb 5-1: config 0 descriptor?? [ 300.931557][ T9781] netlink: 'syz.3.1355': attribute type 10 has an invalid length. [ 300.934078][ T5930] pwc: Askey VC010 type 2 USB webcam detected. [ 301.323091][ T809] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 301.333031][ T5913] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 301.472918][ T809] usb 3-1: Using ep0 maxpacket: 32 [ 301.480236][ T809] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 301.488909][ T809] usb 3-1: can't read configurations, error -61 [ 301.498226][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 301.509654][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 301.520358][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 301.532352][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 301.544003][ T5930] pwc: recv_control_msg error -71 req 02 val 2700 [ 301.551378][ T5930] pwc: recv_control_msg error -71 req 02 val 2c00 [ 301.559058][ T5930] pwc: recv_control_msg error -71 req 04 val 1000 [ 301.566522][ T5930] pwc: recv_control_msg error -71 req 04 val 1300 [ 301.575498][ T5913] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 301.585499][ T5930] pwc: recv_control_msg error -71 req 04 val 1400 [ 301.592432][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.601469][ T5913] usb 4-1: Product: syz [ 301.606181][ T5930] pwc: recv_control_msg error -71 req 02 val 2000 [ 301.612773][ T5913] usb 4-1: Manufacturer: syz [ 301.617670][ T5913] usb 4-1: SerialNumber: syz [ 301.623357][ T5930] pwc: recv_control_msg error -71 req 02 val 2100 [ 301.632481][ T5913] usb 4-1: config 0 descriptor?? [ 301.637755][ T809] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 301.646013][ T5930] pwc: recv_control_msg error -71 req 04 val 1500 [ 301.654408][ T5930] pwc: recv_control_msg error -71 req 02 val 2500 [ 301.663317][ T5930] pwc: recv_control_msg error -71 req 02 val 2400 [ 301.671087][ T5930] pwc: recv_control_msg error -71 req 02 val 2600 [ 301.678066][ T5930] pwc: recv_control_msg error -71 req 02 val 2900 [ 301.685367][ T5930] pwc: recv_control_msg error -71 req 02 val 2800 [ 301.692709][ T5930] pwc: recv_control_msg error -71 req 04 val 1100 [ 301.700043][ T5930] pwc: recv_control_msg error -71 req 04 val 1200 [ 301.708672][ T5930] pwc: Registered as video103. [ 301.724753][ T5930] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input51 [ 301.766774][ T5930] usb 5-1: USB disconnect, device number 77 [ 301.803976][ T809] usb 3-1: Using ep0 maxpacket: 32 [ 301.813928][ T809] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 301.828954][ T809] usb 3-1: can't read configurations, error -61 [ 301.836424][ T809] usb usb3-port1: attempt power cycle [ 301.867787][ T5913] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 301.970925][ T5913] usb 1-1: USB disconnect, device number 84 [ 302.084652][ T5930] usb 4-1: USB disconnect, device number 82 [ 302.148585][ T9799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1362'. [ 302.173055][ T809] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 302.205835][ T809] usb 3-1: Using ep0 maxpacket: 32 [ 302.221921][ T809] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 302.233554][ T809] usb 3-1: can't read configurations, error -61 [ 302.311550][ T9807] binder: BINDER_SET_CONTEXT_MGR already set [ 302.319329][ T9807] binder: 9806:9807 ioctl 4018620d 200000004a80 returned -16 [ 302.334701][ T9807] binder: 9806:9807 ioctl 7aa 200000000380 returned -22 [ 302.383421][ T809] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 302.413632][ T809] usb 3-1: Using ep0 maxpacket: 32 [ 302.421870][ T809] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 302.431339][ T809] usb 3-1: can't read configurations, error -61 [ 302.439862][ T809] usb usb3-port1: unable to enumerate USB device [ 302.553121][ T9813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1369'. [ 302.584419][ T5930] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 302.689724][ T9821] fuse: Bad value for 'group_id' [ 302.697636][ T9820] fuse: Bad value for 'group_id' [ 302.703563][ T9821] fuse: Bad value for 'group_id' [ 302.709011][ T9820] fuse: Bad value for 'group_id' [ 302.744699][ T5930] usb 5-1: Using ep0 maxpacket: 32 [ 302.753848][ T5930] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 302.764911][ T5930] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 302.775844][ T5930] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 302.787562][ T5930] usb 5-1: config 1 has no interface number 0 [ 302.795456][ T5930] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 302.808002][ T5930] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 302.821464][ T5930] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 302.833499][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.852152][ T5930] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 302.963323][ T5913] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 303.049653][ T5930] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 303.123017][ T5913] usb 1-1: Using ep0 maxpacket: 16 [ 303.131973][ T5913] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 303.141170][ T5913] usb 1-1: config 0 has no interface number 0 [ 303.148224][ T5913] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 303.160407][ T5913] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 303.177032][ T5913] usb 1-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 303.187687][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.196254][ T5913] usb 1-1: Product: syz [ 303.200791][ T5913] usb 1-1: Manufacturer: syz [ 303.205605][ T5913] usb 1-1: SerialNumber: syz [ 303.213153][ T5913] usb 1-1: config 0 descriptor?? [ 303.223974][ T5913] cypress_m8 1-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 303.455808][ T5930] usb 5-1: USB disconnect, device number 78 [ 303.474250][ T5930] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 303.853691][ T809] usb 4-1: new low-speed USB device number 83 using dummy_hcd [ 303.950227][ T5913] usb 1-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 303.965603][ T5913] usb 1-1: USB disconnect, device number 85 [ 303.985614][ T9828] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1375'. [ 303.985959][ T5913] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 304.011804][ T5913] cypress_m8 1-1:0.35: device disconnected [ 304.023983][ T809] usb 4-1: Invalid ep0 maxpacket: 64 [ 304.153320][ T809] usb 4-1: new low-speed USB device number 84 using dummy_hcd [ 304.293854][ T9843] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1380'. [ 304.333097][ T809] usb 4-1: Invalid ep0 maxpacket: 64 [ 304.341640][ T809] usb usb4-port1: attempt power cycle [ 304.503005][ T5184] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 304.673224][ T5184] usb 3-1: Using ep0 maxpacket: 16 [ 304.680762][ T5184] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 304.690645][ T809] usb 4-1: new low-speed USB device number 85 using dummy_hcd [ 304.701097][ T5184] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 304.715572][ T5184] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.724542][ T809] usb 4-1: Invalid ep0 maxpacket: 64 [ 304.733197][ T5184] usb 3-1: Product: syz [ 304.737728][ T5184] usb 3-1: Manufacturer: syz [ 304.743299][ T5184] usb 3-1: SerialNumber: syz [ 304.755208][ T5184] r8152-cfgselector 3-1: Unknown version 0x0000 [ 304.762454][ T5184] r8152-cfgselector 3-1: config 0 descriptor?? [ 304.863045][ T809] usb 4-1: new low-speed USB device number 86 using dummy_hcd [ 304.883637][ T809] usb 4-1: Invalid ep0 maxpacket: 64 [ 304.889551][ T809] usb usb4-port1: unable to enumerate USB device [ 304.974988][ T5184] r8152-cfgselector 3-1: Unknown version 0x0000 [ 304.984341][ T5184] r8152-cfgselector 3-1: No union descriptors [ 304.994549][ T5184] r8152-cfgselector 3-1: USB disconnect, device number 86 [ 305.043037][ T994] usb 1-1: new full-speed USB device number 86 using dummy_hcd [ 305.214620][ T994] usb 1-1: not running at top speed; connect to a high speed hub [ 305.224478][ T994] usb 1-1: config 3 has an invalid interface number: 81 but max is 0 [ 305.234242][ T994] usb 1-1: config 3 has no interface number 0 [ 305.241243][ T994] usb 1-1: config 3 interface 81 altsetting 6 endpoint 0xD has invalid wMaxPacketSize 0 [ 305.251537][ T994] usb 1-1: config 3 interface 81 altsetting 6 endpoint 0xC has invalid maxpacket 1413, setting to 64 [ 305.264327][ T994] usb 1-1: config 3 interface 81 has no altsetting 0 [ 305.273824][ T994] usb 1-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=e5.ba [ 305.285303][ T994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.294556][ T994] usb 1-1: Product: syz [ 305.299150][ T994] usb 1-1: Manufacturer: syz [ 305.303901][ T994] usb 1-1: SerialNumber: syz [ 305.311865][ T9852] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 305.533175][ T994] redrat3 1-1:3.81: Couldn't find all endpoints [ 305.547631][ T994] usb 1-1: USB disconnect, device number 86 [ 305.843108][ T809] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 306.002970][ T809] usb 3-1: Using ep0 maxpacket: 32 [ 306.012032][ T809] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 306.020508][ T809] usb 3-1: can't read configurations, error -61 [ 306.152945][ T809] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 306.304728][ T5841] Bluetooth: hci0: unexpected event for opcode 0x0406 [ 306.312881][ T809] usb 3-1: Using ep0 maxpacket: 32 [ 306.321237][ T809] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 306.330611][ T809] usb 3-1: can't read configurations, error -61 [ 306.340060][ T809] usb usb3-port1: attempt power cycle [ 306.683269][ T809] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 306.713873][ T809] usb 3-1: Using ep0 maxpacket: 32 [ 306.723032][ T809] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 306.732642][ T809] usb 3-1: can't read configurations, error -61 [ 306.883005][ T809] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 306.903369][ T809] usb 3-1: Using ep0 maxpacket: 32 [ 306.910868][ T809] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 306.919144][ T809] usb 3-1: can't read configurations, error -61 [ 306.926202][ T809] usb usb3-port1: unable to enumerate USB device [ 307.072957][ T994] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 307.232211][ T994] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.246987][ T994] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 307.261309][ T994] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.276482][ T994] usb 4-1: config 0 descriptor?? [ 307.366100][ T9876] tipc: Started in network mode [ 307.371615][ T9876] tipc: Node identity , cluster identity 4711 [ 307.380087][ T9876] tipc: Failed to obtain node identity [ 307.387714][ T9876] tipc: Enabling of bearer rejected, failed to enable media [ 307.454079][ T5899] usb 1-1: new low-speed USB device number 87 using dummy_hcd [ 307.595101][ T5899] usb 1-1: device descriptor read/64, error -71 [ 307.843122][ T5899] usb 1-1: new low-speed USB device number 88 using dummy_hcd [ 307.983014][ T5899] usb 1-1: device descriptor read/64, error -71 [ 307.997507][ T994] ath6kl: Failed to read usb control message: -71 [ 308.005245][ T994] ath6kl: Unable to read the bmi data from the device: -71 [ 308.013094][ T994] ath6kl: unable to read target info byte count: -71 [ 308.024918][ T994] ath6kl: Failed to init ath6kl core: -71 [ 308.032452][ T994] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 308.047863][ T994] usb 4-1: USB disconnect, device number 87 [ 308.093537][ T5899] usb usb1-port1: attempt power cycle [ 308.133187][ T9] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 308.295562][ T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 308.305614][ T9] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 308.317757][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 308.328231][ T9] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 308.343250][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 308.356813][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 308.374544][ T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 308.388155][ T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 308.400702][ T9] usb 5-1: Product: syz [ 308.406415][ T9] usb 5-1: Manufacturer: syz [ 308.416421][ T9889] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 308.430170][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 308.439827][ T5899] usb 1-1: new low-speed USB device number 89 using dummy_hcd [ 308.450792][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 308.462690][ T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 308.472447][ T9] cdc_wdm 5-1:1.0: Unknown control protocol [ 308.484343][ T5899] usb 1-1: device descriptor read/8, error -71 [ 308.639048][ C0] wdm_int_callback: 95 callbacks suppressed [ 308.639074][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 308.654134][ C0] wdm_int_callback: 95 callbacks suppressed [ 308.654152][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 308.668330][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 308.679156][ T809] usb 5-1: USB disconnect, device number 79 [ 308.733356][ T5899] usb 1-1: new low-speed USB device number 90 using dummy_hcd [ 308.763759][ T5899] usb 1-1: device descriptor read/8, error -71 [ 308.893324][ T5899] usb usb1-port1: unable to enumerate USB device [ 309.123078][ T9] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 309.229674][ T9906] binder: 9905:9906 ioctl c0306201 2000000003c0 returned -14 [ 309.253910][ T809] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 309.283056][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 309.296024][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 309.311818][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 309.330660][ T9] usb 3-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 309.343573][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.357912][ T9] usb 3-1: Product: syz [ 309.365852][ T9] usb 3-1: Manufacturer: syz [ 309.372631][ T9] usb 3-1: SerialNumber: syz [ 309.425924][ T809] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.443835][ T809] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 309.459083][ T809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.477253][ T809] usb 4-1: config 0 descriptor?? [ 309.483202][ T5899] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 309.489111][ T809] pwc: Askey VC010 type 2 USB webcam detected. [ 309.644483][ T9] usb 3-1: USB disconnect, device number 91 [ 309.653058][ T5899] usb 5-1: Using ep0 maxpacket: 32 [ 309.707296][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 309.815823][ T9906] kvm: Disabled LAPIC found during irq injection [ 309.893051][ T5899] usb 5-1: unable to get BOS descriptor or descriptor too short [ 309.893733][ T809] pwc: recv_control_msg error -32 req 02 val 2b00 [ 309.914806][ T5899] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 309.917103][ T809] pwc: recv_control_msg error -71 req 02 val 2700 [ 309.923964][ T5899] usb 5-1: can't read configurations, error -71 [ 309.940578][ T809] pwc: recv_control_msg error -71 req 02 val 2c00 [ 309.949095][ T809] pwc: recv_control_msg error -71 req 04 val 1000 [ 309.958891][ T809] pwc: recv_control_msg error -71 req 04 val 1300 [ 309.966989][ T809] pwc: recv_control_msg error -71 req 04 val 1400 [ 309.974602][ T809] pwc: recv_control_msg error -71 req 02 val 2000 [ 309.982530][ T809] pwc: recv_control_msg error -71 req 02 val 2100 [ 309.991783][ T809] pwc: recv_control_msg error -71 req 04 val 1500 [ 310.004526][ T809] pwc: recv_control_msg error -71 req 02 val 2500 [ 310.016161][ T809] pwc: recv_control_msg error -71 req 02 val 2400 [ 310.025126][ T809] pwc: recv_control_msg error -71 req 02 val 2600 [ 310.033666][ T809] pwc: recv_control_msg error -71 req 02 val 2900 [ 310.042072][ T809] pwc: recv_control_msg error -71 req 02 val 2800 [ 310.049983][ T809] pwc: recv_control_msg error -71 req 04 val 1100 [ 310.058569][ T809] pwc: recv_control_msg error -71 req 04 val 1200 [ 310.069270][ T809] pwc: Registered as video103. [ 310.080103][ T809] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input53 [ 310.123497][ T809] usb 4-1: USB disconnect, device number 88 [ 310.282136][ T9913] netlink: 'syz.2.1407': attribute type 1 has an invalid length. [ 310.585569][ T5184] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 310.643159][ T809] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 310.687247][ T9930] netlink: 'syz.4.1414': attribute type 10 has an invalid length. [ 310.766339][ T5184] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.789106][ T5892] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 310.803370][ T809] usb 1-1: Using ep0 maxpacket: 32 [ 310.812485][ T5184] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 310.827778][ T5184] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.838363][ T809] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 310.849196][ T809] usb 1-1: can't read configurations, error -61 [ 310.861692][ T5184] usb 3-1: config 0 descriptor?? [ 310.952919][ T5892] usb 4-1: Using ep0 maxpacket: 32 [ 310.965278][ T5892] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 310.977099][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.989979][ T5892] usb 4-1: Product: syz [ 310.994952][ T809] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 310.995010][ T5892] usb 4-1: Manufacturer: syz [ 311.011322][ T5892] usb 4-1: SerialNumber: syz [ 311.024742][ T5892] usb 4-1: config 0 descriptor?? [ 311.037094][ T5892] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 311.182957][ T809] usb 1-1: Using ep0 maxpacket: 32 [ 311.191422][ T809] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 311.200677][ T809] usb 1-1: can't read configurations, error -61 [ 311.207825][ T809] usb usb1-port1: attempt power cycle [ 311.234274][ T5892] gspca_ov534_9: reg_w failed -71 [ 311.283031][ T5930] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 311.442993][ T5930] usb 5-1: Using ep0 maxpacket: 32 [ 311.453451][ T5930] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 311.470769][ T5930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 311.486629][ T5930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 311.507548][ T5930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 311.525900][ T5930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 311.550121][ T5930] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 311.561238][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.570712][ T809] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 311.580454][ T5930] usb 5-1: Product: syz [ 311.585843][ T5930] usb 5-1: Manufacturer: syz [ 311.591850][ T5930] usb 5-1: SerialNumber: syz [ 311.600759][ T5930] usb 5-1: config 0 descriptor?? [ 311.608292][ T809] usb 1-1: Using ep0 maxpacket: 32 [ 311.618451][ T809] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 311.628251][ T809] usb 1-1: can't read configurations, error -61 [ 311.640991][ T5184] ath6kl: Failed to read usb control message: -71 [ 311.656308][ T5184] ath6kl: Unable to read the bmi data from the device: -71 [ 311.666799][ T5184] ath6kl: unable to read target info byte count: -71 [ 311.675368][ T5184] ath6kl: Failed to init ath6kl core: -71 [ 311.694092][ T5184] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 311.709501][ T5184] usb 3-1: USB disconnect, device number 92 [ 311.712732][ T5892] gspca_ov534_9: Unknown sensor 0000 [ 311.717030][ T5892] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 311.737737][ T5892] usb 4-1: USB disconnect, device number 89 [ 311.764333][ T809] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 311.818969][ T809] usb 1-1: Using ep0 maxpacket: 32 [ 311.825175][ T5930] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 311.836212][ T5930] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 311.846317][ T809] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 311.856660][ T5930] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 311.864207][ T809] usb 1-1: can't read configurations, error -61 [ 311.871120][ T5930] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 311.878981][ T809] usb usb1-port1: unable to enumerate USB device [ 311.887680][ T5930] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 311.896266][ T5930] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 311.904885][ T5930] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 311.913345][ T5930] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 311.933393][ T5930] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 311.941230][ T5930] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 311.949088][ T5930] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 311.956834][ T5930] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 311.966291][ T5930] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 311.975024][ T5930] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 311.988540][ T5930] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 311.996994][ T5930] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 312.004237][ T5930] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 312.011492][ T5930] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 312.018954][ T5930] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 312.028130][ T5930] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 312.035250][ T5930] input input54: Timeout waiting for response from device. [ 312.052260][ T5930] usb 5-1: USB disconnect, device number 82 [ 312.233998][ T9952] FAULT_INJECTION: forcing a failure. [ 312.233998][ T9952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.251627][ T9952] CPU: 1 UID: 0 PID: 9952 Comm: syz.3.1425 Not tainted syzkaller #0 PREEMPT(full) [ 312.251653][ T9952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 312.251665][ T9952] Call Trace: [ 312.251672][ T9952] [ 312.251681][ T9952] dump_stack_lvl+0xe8/0x150 [ 312.251711][ T9952] should_fail_ex+0x412/0x560 [ 312.251740][ T9952] _copy_to_iter+0x404/0x17d0 [ 312.251768][ T9952] ? do_raw_spin_lock+0x12b/0x2f0 [ 312.251797][ T9952] ? __pfx__copy_to_iter+0x10/0x10 [ 312.251818][ T9952] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 312.251839][ T9952] ? lockdep_hardirqs_on+0x7a/0x110 [ 312.251861][ T9952] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 312.251881][ T9952] ? __skb_try_recv_datagram+0x3d4/0x4d0 [ 312.251910][ T9952] __skb_datagram_iter+0xf8/0x980 [ 312.251933][ T9952] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 312.251963][ T9952] skb_copy_datagram_iter+0xb5/0x240 [ 312.251986][ T9952] netlink_recvmsg+0x2c3/0xa50 [ 312.252011][ T9952] ? __pfx_netlink_recvmsg+0x10/0x10 [ 312.252032][ T9952] ? __lock_acquire+0x6b5/0x2cf0 [ 312.252055][ T9952] ? aa_sock_msg_perm+0xf1/0x1b0 [ 312.252076][ T9952] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 312.252100][ T9952] ? security_socket_recvmsg+0x7e/0x2c0 [ 312.252123][ T9952] ? __pfx_netlink_recvmsg+0x10/0x10 [ 312.252143][ T9952] sock_recvmsg+0x172/0x1b0 [ 312.252171][ T9952] ____sys_recvmsg+0x1e6/0x4a0 [ 312.252200][ T9952] ? __pfx_____sys_recvmsg+0x10/0x10 [ 312.252236][ T9952] ? import_iovec+0x73/0xa0 [ 312.252264][ T9952] ___sys_recvmsg+0x215/0x590 [ 312.252284][ T9952] ? get_pid_task+0x20/0x1f0 [ 312.252308][ T9952] ? __pfx____sys_recvmsg+0x10/0x10 [ 312.252335][ T9952] ? __fget_files+0x2a/0x420 [ 312.252374][ T9952] ? __fget_files+0x3a0/0x420 [ 312.252406][ T9952] __x64_sys_recvmsg+0x1ba/0x2a0 [ 312.252430][ T9952] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 312.252468][ T9952] ? __pfx_ksys_write+0x10/0x10 [ 312.252493][ T9952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.252513][ T9952] do_syscall_64+0x15f/0xf80 [ 312.252535][ T9952] ? trace_irq_disable+0x3b/0x140 [ 312.252556][ T9952] ? clear_bhb_loop+0x40/0x90 [ 312.252579][ T9952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.252595][ T9952] RIP: 0033:0x7f5863f9c819 [ 312.252612][ T9952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.252628][ T9952] RSP: 002b:00007f5864e49028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 312.252646][ T9952] RAX: ffffffffffffffda RBX: 00007f5864215fa0 RCX: 00007f5863f9c819 [ 312.252660][ T9952] RDX: 0000000000012100 RSI: 0000200000000080 RDI: 0000000000000003 [ 312.252671][ T9952] RBP: 00007f5864e49090 R08: 0000000000000000 R09: 0000000000000000 [ 312.252683][ T9952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.252693][ T9952] R13: 00007f5864216038 R14: 00007f5864215fa0 R15: 00007fff147736f8 [ 312.252721][ T9952] [ 312.626295][ T9955] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1426'. [ 312.792597][ T9955] syz.4.1426 (9955): drop_caches: 2 [ 312.802590][ T9955] syz.4.1426 (9955): drop_caches: 2 [ 313.062969][ T5930] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 313.225083][ T5930] usb 4-1: config 0 has an invalid interface number: 64 but max is -1 [ 313.235493][ T5930] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 313.247193][ T5930] usb 4-1: config 0 has no interface number 0 [ 313.262954][ T5930] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=86.34 [ 313.273079][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.293897][ T5930] usb 4-1: config 0 descriptor?? [ 313.521662][ T5930] usb 4-1: USB disconnect, device number 90 [ 313.623294][ T5892] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 313.655550][ T9983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1436'. [ 313.808742][ T5892] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.831369][ T5892] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 313.842164][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.856713][ T5892] usb 5-1: config 0 descriptor?? [ 313.953084][ T809] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 314.092932][ T809] usb 1-1: device descriptor read/64, error -71 [ 314.123273][ T9995] sctp: [Deprecated]: syz.2.1440 (pid 9995) Use of int in maxseg socket option. [ 314.123273][ T9995] Use struct sctp_assoc_value instead [ 314.343760][ T809] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 314.483144][ T809] usb 1-1: device descriptor read/64, error -71 [ 314.595672][ T5892] ath6kl: Failed to read usb control message: -71 [ 314.596506][ T809] usb usb1-port1: attempt power cycle [ 314.603050][ T5899] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 314.618693][ T5892] ath6kl: Unable to read the bmi data from the device: -71 [ 314.634866][ T5892] ath6kl: unable to read target info byte count: -71 [ 314.656945][ T5892] ath6kl: Failed to init ath6kl core: -71 [ 314.670607][ T5892] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 314.683025][ T5930] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 314.683358][ T5892] usb 5-1: USB disconnect, device number 83 [ 314.818502][ T5899] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 314.832881][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.851314][ T5899] usb 4-1: Product: syz [ 314.858983][ T5899] usb 4-1: Manufacturer: syz [ 314.866903][ T5899] usb 4-1: SerialNumber: syz [ 314.875090][ T5930] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.894439][ T5930] usb 3-1: config 0 has no interfaces? [ 314.903676][ T5930] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 314.926504][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.942073][ T5930] usb 3-1: config 0 descriptor?? [ 314.992952][ T809] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 315.013982][ T809] usb 1-1: device descriptor read/8, error -71 [ 315.253156][ T809] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 315.282200][ T5899] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 315.283693][ T809] usb 1-1: device descriptor read/8, error -71 [ 315.304780][ T5899] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 315.425343][ T809] usb usb1-port1: unable to enumerate USB device [ 315.453302][ T5930] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 315.603039][ T5930] usb 5-1: Using ep0 maxpacket: 32 [ 315.616817][ T5930] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.633231][ T5930] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 32 [ 315.655095][ T5930] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 315.665833][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.683041][ T5930] usb 5-1: Product: syz [ 315.687292][ T5930] usb 5-1: Manufacturer: syz [ 315.692005][ T5930] usb 5-1: SerialNumber: syz [ 315.706250][ T5930] usb 5-1: config 0 descriptor?? [ 315.923852][ T5930] usb 5-1: USB disconnect, device number 84 [ 316.535358][ T5899] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 316.537870][T10016] FAULT_INJECTION: forcing a failure. [ 316.537870][T10016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 316.564458][T10016] CPU: 1 UID: 0 PID: 10016 Comm: syz.4.1447 Not tainted syzkaller #0 PREEMPT(full) [ 316.564487][T10016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 316.564499][T10016] Call Trace: [ 316.564505][T10016] [ 316.564513][T10016] dump_stack_lvl+0xe8/0x150 [ 316.564542][T10016] should_fail_ex+0x412/0x560 [ 316.564572][T10016] _copy_to_iter+0x589/0x17d0 [ 316.564605][T10016] ? __pfx__copy_to_iter+0x10/0x10 [ 316.564621][T10016] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 316.564640][T10016] ? lockdep_hardirqs_on+0x7a/0x110 [ 316.564663][T10016] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 316.564684][T10016] ? __skb_try_recv_datagram+0x3d4/0x4d0 [ 316.564714][T10016] __skb_datagram_iter+0xf8/0x980 [ 316.564732][T10016] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 316.564749][T10016] skb_copy_datagram_iter+0xb5/0x240 [ 316.564765][T10016] netlink_recvmsg+0x2c3/0xa50 [ 316.564782][T10016] ? __pfx_netlink_recvmsg+0x10/0x10 [ 316.564804][T10016] ? __lock_acquire+0x6b5/0x2cf0 [ 316.564834][T10016] ? aa_sock_msg_perm+0xf1/0x1b0 [ 316.564855][T10016] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 316.564879][T10016] ? security_socket_recvmsg+0x7e/0x2c0 [ 316.564892][T10016] ? __pfx_netlink_recvmsg+0x10/0x10 [ 316.564902][T10016] sock_recvmsg+0x172/0x1b0 [ 316.564920][T10016] ____sys_recvmsg+0x1e6/0x4a0 [ 316.564942][T10016] ? __pfx_____sys_recvmsg+0x10/0x10 [ 316.564978][T10016] ? import_iovec+0x73/0xa0 [ 316.565007][T10016] ___sys_recvmsg+0x215/0x590 [ 316.565029][T10016] ? __pfx____sys_recvmsg+0x10/0x10 [ 316.565043][T10016] ? __fget_files+0x2a/0x420 [ 316.565070][T10016] ? __fget_files+0x3a0/0x420 [ 316.565094][T10016] do_recvmmsg+0x334/0x800 [ 316.565123][T10016] ? __pfx_do_recvmmsg+0x10/0x10 [ 316.565158][T10016] ? _copy_from_user+0x94/0xb0 [ 316.565182][T10016] __x64_sys_recvmmsg+0x1b7/0x250 [ 316.565197][T10016] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 316.565214][T10016] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.565226][T10016] do_syscall_64+0x15f/0xf80 [ 316.565243][T10016] ? trace_irq_disable+0x3b/0x140 [ 316.565265][T10016] ? clear_bhb_loop+0x40/0x90 [ 316.565287][T10016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.565305][T10016] RIP: 0033:0x7fb55f39c819 [ 316.565321][T10016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.565330][T10016] RSP: 002b:00007fb560209028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 316.565342][T10016] RAX: ffffffffffffffda RBX: 00007fb55f615fa0 RCX: 00007fb55f39c819 [ 316.565350][T10016] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 316.565357][T10016] RBP: 00007fb560209090 R08: 0000200000000080 R09: 0000000000000000 [ 316.565364][T10016] R10: 0000000000012022 R11: 0000000000000246 R12: 0000000000000001 [ 316.565370][T10016] R13: 00007fb55f616038 R14: 00007fb55f615fa0 R15: 00007fff4cdbf438 [ 316.565388][T10016] [ 316.866755][ T5899] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001000. ret = -EPROTO [ 316.886218][ T5899] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 316.933451][ T5899] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 316.958916][ T5899] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 316.985133][ T5899] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 317.009699][ T5899] usb 4-1: USB disconnect, device number 91 [ 317.373057][ T5913] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 317.461878][ T9] usb 3-1: USB disconnect, device number 93 [ 317.468167][ T5899] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 317.527417][ T5913] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 317.552617][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.561453][ T5913] usb 5-1: Product: syz [ 317.568502][ T5913] usb 5-1: Manufacturer: syz [ 317.573822][ T5913] usb 5-1: SerialNumber: syz [ 317.581514][ T5913] usb 5-1: config 0 descriptor?? [ 317.634828][ T5899] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.645982][ T5899] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 317.657531][ T5930] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 317.658015][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.679486][ T5899] usb 1-1: config 0 descriptor?? [ 317.751888][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.759029][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.813614][ T5930] usb 4-1: Using ep0 maxpacket: 32 [ 317.821555][ T5930] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.832294][ T5930] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 32 [ 317.845910][ T5930] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 317.857021][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.865466][ T5930] usb 4-1: Product: syz [ 317.869837][ T5930] usb 4-1: Manufacturer: syz [ 317.876989][ T5930] usb 4-1: SerialNumber: syz [ 317.885988][ T5930] usb 4-1: config 0 descriptor?? [ 317.992382][ T5913] usb 5-1: Firmware: major: 12, minor: 178, hardware type: ATUSB (1) [ 318.106245][ T5930] usb 4-1: USB disconnect, device number 92 [ 318.206515][ T5913] usb 5-1: failed to fetch extended address, random address set [ 318.246307][ T5913] usb 5-1: USB disconnect, device number 85 [ 318.399876][T10035] bond0: entered promiscuous mode [ 318.405496][T10035] bond_slave_0: entered promiscuous mode [ 318.411669][T10035] bond_slave_1: entered promiscuous mode [ 318.417836][T10035] mac80211_hwsim hwsim8 4: entered promiscuous mode [ 318.430303][ T5930] syz1: Port: 1 Link DOWN [ 318.486964][ T5899] ath6kl: Failed to read usb control message: -71 [ 318.501331][ T5899] ath6kl: Unable to read the bmi data from the device: -71 [ 318.511958][ T5899] ath6kl: unable to read target info byte count: -71 [ 318.520517][ T5899] ath6kl: Failed to init ath6kl core: -71 [ 318.528128][ T5899] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 318.543381][ T5899] usb 1-1: USB disconnect, device number 99 [ 318.799296][T10062] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.1461'. [ 319.118525][ T5913] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 319.133079][ T5899] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 319.308076][ T5899] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 319.324429][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.333341][ T5899] usb 5-1: Product: syz [ 319.338185][ T5899] usb 5-1: Manufacturer: syz [ 319.344189][ T5899] usb 5-1: SerialNumber: syz [ 319.375623][ T5913] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.414078][ T5913] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 319.433584][ T5913] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 319.443907][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.471781][ T5913] usb 4-1: config 0 descriptor?? [ 319.645762][ T809] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 319.773631][ T5899] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 319.787445][ T5899] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 319.919510][ T809] usb 1-1: Using ep0 maxpacket: 32 [ 319.929593][ T809] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.941181][ T809] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 32 [ 319.953817][ T809] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 319.966228][ T809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.981084][ T809] usb 1-1: Product: syz [ 319.986139][ T809] usb 1-1: Manufacturer: syz [ 319.991213][ T809] usb 1-1: SerialNumber: syz [ 320.011020][ T809] usb 1-1: config 0 descriptor?? [ 320.234792][ T809] usb 1-1: USB disconnect, device number 100 [ 321.182711][T10068] Set syz1 is full, maxelem 65536 reached [ 321.480718][ T5899] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPROTO [ 321.494484][ T5899] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 321.510458][ T5899] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 321.536016][ T5899] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 321.566470][ T5899] usb 5-1: USB disconnect, device number 86 [ 321.928921][ T5913] usb 4-1: USB disconnect, device number 93 [ 321.974131][ T809] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 322.142882][ T809] usb 3-1: Using ep0 maxpacket: 32 [ 322.152241][ T809] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.166442][ T809] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 32 [ 322.178954][ T809] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 322.189354][ T809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.198379][ T809] usb 3-1: Product: syz [ 322.204347][ T809] usb 3-1: Manufacturer: syz [ 322.209337][ T809] usb 3-1: SerialNumber: syz [ 322.217485][ T809] usb 3-1: config 0 descriptor?? [ 322.332986][ T5913] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 322.340932][ T5184] usb 5-1: new full-speed USB device number 87 using dummy_hcd [ 322.432504][ T809] usb 3-1: USB disconnect, device number 94 [ 322.493102][ T5913] usb 4-1: Using ep0 maxpacket: 8 [ 322.502161][ T5184] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.516505][ T5184] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 322.530566][ T5184] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 322.530702][ T5913] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 322.551087][ T5184] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 322.562633][ T5913] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 322.574061][ T5913] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 322.585371][ T5913] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 322.596672][ T5184] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 322.606564][ T5913] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 322.620024][ T5184] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 322.628819][ T5184] usb 5-1: Product: syz [ 322.634114][ T5913] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 322.646745][ T5184] usb 5-1: Manufacturer: syz [ 322.651835][ T5184] usb 5-1: SerialNumber: syz [ 322.656804][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.667674][T10130] netlink: 'syz.0.1482': attribute type 10 has an invalid length. [ 322.678586][ T5184] usb 5-1: config 0 descriptor?? [ 322.792977][ T5184] rc_core: IR keymap rc-imon-rsc not found [ 322.799573][ T5184] Registered IR keymap rc-empty [ 322.810628][ T5184] rc rc0: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 322.825098][ T5184] input: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input55 [ 322.838948][ T5184] imon_raw 5-1:0.0: probe with driver imon_raw failed with error -90 [ 322.849467][T10137] overlayfs: failed to resolve './file1': -2 [ 322.899648][ T5913] usb 4-1: usb_control_msg returned -32 [ 322.907715][ T5899] usb 5-1: USB disconnect, device number 87 [ 322.914425][ T5913] usbtmc 4-1:16.0: can't read capabilities [ 322.986750][ T5913] usb 4-1: USB disconnect, device number 94 [ 323.172006][T10151] tipc: Started in network mode [ 323.177872][T10151] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 323.187344][T10151] tipc: Enabled bearer , priority 10 [ 323.258977][T10156] loop2: detected capacity change from 0 to 4095 [ 323.299684][T10154] FAULT_INJECTION: forcing a failure. [ 323.299684][T10154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.337954][T10154] CPU: 0 UID: 0 PID: 10154 Comm: syz.3.1490 Not tainted syzkaller #0 PREEMPT(full) [ 323.337976][T10154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 323.337984][T10154] Call Trace: [ 323.337990][T10154] [ 323.337997][T10154] dump_stack_lvl+0xe8/0x150 [ 323.338022][T10154] should_fail_ex+0x412/0x560 [ 323.338044][T10154] copy_fpstate_to_sigframe+0xb1b/0xd60 [ 323.338064][T10154] ? copy_fpstate_to_sigframe+0x196/0xd60 [ 323.338084][T10154] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 323.338106][T10154] ? ktime_get+0x1f5/0x220 [ 323.338123][T10154] ? lapic_next_event+0x11/0x20 [ 323.338142][T10154] ? clockevents_program_event+0x3ba/0x4b0 [ 323.338161][T10154] ? do_raw_spin_unlock+0xf5/0x210 [ 323.338187][T10154] ? __pfx_clockevents_program_event+0x10/0x10 [ 323.338208][T10154] ? fpu__alloc_mathframe+0xac/0x130 [ 323.338225][T10154] get_sigframe+0x5f7/0x820 [ 323.338248][T10154] ? __pfx_get_sigframe+0x10/0x10 [ 323.338266][T10154] ? posixtimer_deliver_signal+0x2ec/0x3f0 [ 323.338289][T10154] x64_setup_rt_frame+0x160/0xcb0 [ 323.338309][T10154] ? _raw_spin_unlock_irq+0x23/0x50 [ 323.338325][T10154] ? lockdep_hardirqs_on+0x7a/0x110 [ 323.338343][T10154] ? _raw_spin_unlock_irq+0x2e/0x50 [ 323.338358][T10154] ? get_signal+0x114f/0x1330 [ 323.338381][T10154] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 323.338403][T10154] arch_do_signal_or_restart+0x424/0x830 [ 323.338421][T10154] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 323.338443][T10154] ? ksys_read+0x242/0x270 [ 323.338459][T10154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.338474][T10154] exit_to_user_mode_loop+0x86/0x480 [ 323.338492][T10154] ? rcu_is_watching+0x15/0xb0 [ 323.338514][T10154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.338529][T10154] do_syscall_64+0x33e/0xf80 [ 323.338546][T10154] ? trace_irq_disable+0x3b/0x140 [ 323.338563][T10154] ? clear_bhb_loop+0x40/0x90 [ 323.338582][T10154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.338596][T10154] RIP: 0033:0x7f5863f9c817 [ 323.338611][T10154] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 323.338623][T10154] RSP: 002b:00007f5864e49028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 323.338640][T10154] RAX: 0000000000000000 RBX: 00007f5864215fa0 RCX: 00007f5863f9c819 [ 323.338649][T10154] RDX: 0000000000002020 RSI: 0000200000008400 RDI: 0000000000000003 [ 323.338657][T10154] RBP: 00007f5864e49090 R08: 0000000000000000 R09: 0000000000000000 [ 323.338665][T10154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 323.338672][T10154] R13: 00007f5864216038 R14: 00007f5864215fa0 R15: 00007fff147736f8 [ 323.338693][T10154] [ 323.343251][ T5184] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 323.742930][ T994] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 323.786291][ T5184] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.797789][ T5184] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 323.808324][ T5184] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 323.819737][ T5184] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.830791][ T5184] usb 1-1: config 0 descriptor?? [ 323.898359][ T994] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.920808][ T994] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 323.933717][ T994] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.951423][ T994] usb 3-1: config 0 descriptor?? [ 324.161773][T10170] syzkaller1: entered promiscuous mode [ 324.177539][T10170] syzkaller1: entered allmulticast mode [ 324.302947][ T5913] tipc: Node number set to 15444650 [ 324.639767][T10159] bond0: entered promiscuous mode [ 324.646504][T10159] bond_slave_0: entered promiscuous mode [ 324.652981][T10159] bond_slave_1: entered promiscuous mode [ 324.659199][T10159] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 324.736375][ T994] ath6kl: Failed to read usb control message: -71 [ 324.744861][ T994] ath6kl: Unable to read the bmi data from the device: -71 [ 324.745687][T10190] FAULT_INJECTION: forcing a failure. [ 324.745687][T10190] name failslab, interval 1, probability 0, space 0, times 0 [ 324.752385][ T994] ath6kl: unable to read target info byte count: -71 [ 324.764850][ T994] ath6kl: Failed to init ath6kl core: -71 [ 324.779980][ T994] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 324.781477][T10190] CPU: 1 UID: 0 PID: 10190 Comm: syz.3.1505 Not tainted syzkaller #0 PREEMPT(full) [ 324.781499][T10190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 324.781511][T10190] Call Trace: [ 324.781520][T10190] [ 324.781529][T10190] dump_stack_lvl+0xe8/0x150 [ 324.781560][T10190] should_fail_ex+0x412/0x560 [ 324.781589][T10190] should_failslab+0xa8/0x100 [ 324.781610][T10190] __kmalloc_noprof+0xe8/0x760 [ 324.781635][T10190] ? tomoyo_encode+0x28b/0x550 [ 324.781662][T10190] tomoyo_encode+0x28b/0x550 [ 324.781687][T10190] tomoyo_realpath_from_path+0x58d/0x5d0 [ 324.781710][T10190] ? tomoyo_domain+0xd7/0x130 [ 324.781734][T10190] ? tomoyo_path_number_perm+0x219/0x630 [ 324.781761][T10190] tomoyo_path_number_perm+0x246/0x630 [ 324.781792][T10190] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 324.781816][T10190] ? __lock_acquire+0x6b5/0x2cf0 [ 324.781853][T10190] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 324.781895][T10190] ? __fget_files+0x2a/0x420 [ 324.781919][T10190] ? __fget_files+0x2a/0x420 [ 324.781939][T10190] ? __fget_files+0x3a0/0x420 [ 324.781959][T10190] ? __fget_files+0x2a/0x420 [ 324.781983][T10190] security_file_ioctl+0xc3/0x2a0 [ 324.782009][T10190] __se_sys_ioctl+0x47/0x170 [ 324.782106][T10190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.782142][T10190] do_syscall_64+0x15f/0xf80 [ 324.782170][T10190] ? clear_bhb_loop+0x40/0x90 [ 324.782192][T10190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.782210][T10190] RIP: 0033:0x7f5863f9c819 [ 324.782228][T10190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.782242][T10190] RSP: 002b:00007f5864e49028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 324.782262][T10190] RAX: ffffffffffffffda RBX: 00007f5864215fa0 RCX: 00007f5863f9c819 [ 324.782275][T10190] RDX: 0000200000000100 RSI: 00000000c008ae88 RDI: 0000000000000008 [ 324.782287][T10190] RBP: 00007f5864e49090 R08: 0000000000000000 R09: 0000000000000000 [ 324.782298][T10190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.782309][T10190] R13: 00007f5864216038 R14: 00007f5864215fa0 R15: 00007fff147736f8 [ 324.782360][T10190] [ 324.783030][T10190] ERROR: Out of memory at tomoyo_realpath_from_path. [ 324.805023][ T994] usb 3-1: USB disconnect, device number 95 [ 324.810497][ T5913] usb 5-1: new full-speed USB device number 88 using dummy_hcd [ 325.189006][ T5913] usb 5-1: unable to get BOS descriptor or descriptor too short [ 325.197697][ T5913] usb 5-1: not running at top speed; connect to a high speed hub [ 325.208406][ T5913] usb 5-1: config 61 has an invalid interface number: 37 but max is 0 [ 325.217220][ T5913] usb 5-1: config 61 has no interface number 0 [ 325.224342][ T5913] usb 5-1: config 61 interface 37 has no altsetting 0 [ 325.234348][ T5913] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 325.244828][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.253706][ T5913] usb 5-1: Product: syz [ 325.258016][ T5913] usb 5-1: Manufacturer: syz [ 325.262701][ T5913] usb 5-1: SerialNumber: syz [ 325.580903][T10201] comedi comedi3: pcl730: I/O port conflict (0x6,4) [ 325.606591][T10207] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1510'. [ 325.709262][ T5913] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 325.798157][T10211] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1512'. [ 325.872946][ T5899] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 325.994702][T10218] tmpfs: Unknown parameter 'noinode32' [ 326.065278][ T5899] usb 4-1: Using ep0 maxpacket: 16 [ 326.075241][ T5899] usb 4-1: unable to get BOS descriptor or descriptor too short [ 326.091475][ T5899] usb 4-1: config 12 has an invalid interface number: 226 but max is 0 [ 326.112262][ T5913] gp8psk: usb in 128 operation failed. [ 326.116928][ T5899] usb 4-1: config 12 has no interface number 0 [ 326.128158][ T5913] gp8psk: usb in 137 operation failed. [ 326.135848][ T5899] usb 4-1: config 12 interface 226 has no altsetting 0 [ 326.147529][ T5899] usb 4-1: New USB device found, idVendor=04dd, idProduct=9031, bcdDevice= 7.33 [ 326.154556][ T5913] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 326.158484][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.187202][ T994] usb 1-1: USB disconnect, device number 101 [ 326.192943][ T5913] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-19) [ 326.211512][ T5899] usb 4-1: Product: syz [ 326.229136][ T5899] usb 4-1: Manufacturer: syz [ 326.236180][ T5899] usb 4-1: SerialNumber: syz [ 326.238725][ T5913] usb 5-1: USB disconnect, device number 88 [ 326.733277][ T994] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 326.900580][ T994] usb 1-1: unable to get BOS descriptor or descriptor too short [ 326.924446][ T994] usb 1-1: not running at top speed; connect to a high speed hub [ 326.939240][ T994] usb 1-1: config 192 has an invalid interface number: 239 but max is 0 [ 326.953630][ T994] usb 1-1: config 192 has no interface number 0 [ 326.958854][ T3463] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.972890][ T994] usb 1-1: config 192 interface 239 has no altsetting 0 [ 326.986026][ T994] usb 1-1: New USB device found, idVendor=2639, idProduct=0013, bcdDevice=f5.b3 [ 327.002981][ T994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.022919][ T994] usb 1-1: Product: syz [ 327.027371][ T994] usb 1-1: Manufacturer: syz [ 327.032289][ T994] usb 1-1: SerialNumber: syz [ 327.081331][ T3463] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.190176][ T3463] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.288335][ T3463] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.321709][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 327.347094][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 327.356745][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 327.376965][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 327.392596][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 327.560273][ T3463] bridge_slave_1: left allmulticast mode [ 327.570689][ T3463] bridge_slave_1: left promiscuous mode [ 327.578055][ T3463] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.589325][ T3463] bridge_slave_0: left allmulticast mode [ 327.599566][ T3463] bridge_slave_0: left promiscuous mode [ 327.605696][ T3463] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.620575][ T3463] dvmrp6: left allmulticast mode [ 327.628192][ T3463] tipc: Resetting bearer [ 327.798091][ T3463] tipc: Disabling bearer [ 327.870127][ T3463] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.879660][ T3463] bond_slave_0: left promiscuous mode [ 327.888249][ T3463] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.900203][ T3463] bond_slave_1: left promiscuous mode [ 327.910335][ T3463] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 327.921913][ T3463] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 327.930079][ T3463] bond0 (unregistering): Released all slaves [ 328.014028][ T3463] tipc: Left network mode [ 328.600966][ T3463] hsr_slave_0: left promiscuous mode [ 328.607437][T10207] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 328.626324][ T3463] hsr_slave_1: left promiscuous mode [ 328.644582][ T3463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.660656][ T3463] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.699197][ T3463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.718652][ T3463] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.770720][ T5899] usb 4-1: No union descriptors [ 328.804718][ T5899] usb 4-1: USB disconnect, device number 95 [ 328.817728][ T3463] veth1_macvtap: left promiscuous mode [ 328.819895][T10244] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1524'. [ 328.842399][ T3463] veth0_macvtap: left promiscuous mode [ 328.858396][ T3463] veth1_vlan: left promiscuous mode [ 328.866887][ T3463] veth0_vlan: left promiscuous mode [ 329.073660][ T7232] smc: removing ib device syz2 [ 329.199959][ T3463] team0 (unregistering): Port device team_slave_1 removed [ 329.232922][ T5899] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 329.242683][ T3463] team0 (unregistering): Port device team_slave_0 removed [ 329.395941][ T5899] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.408075][ T5899] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 329.420591][ T5899] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 329.441785][T10235] chnl_net:caif_netlink_parms(): no params data found [ 329.450316][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.493927][ T5847] Bluetooth: hci2: command tx timeout [ 329.513264][ T5899] usb 4-1: config 0 descriptor?? [ 329.655496][ T7232] smbdirect: ib_dev[syz2] removed [ 329.926352][ T994] usb 1-1: USB disconnect, device number 102 [ 330.288390][T10235] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.303945][T10235] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.311782][T10235] bridge_slave_0: entered allmulticast mode [ 330.325621][ T5899] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 330.352164][T10235] bridge_slave_0: entered promiscuous mode [ 330.365713][T10235] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.382424][T10235] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.393147][T10235] bridge_slave_1: entered allmulticast mode [ 330.406359][T10235] bridge_slave_1: entered promiscuous mode [ 330.445471][ T6904] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 330.490536][ T5899] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.514837][ T5899] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 330.542252][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.549006][T10235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.583255][ T6904] usb 1-1: device descriptor read/64, error -71 [ 330.614769][T10235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.626318][ T5899] usb 5-1: config 0 descriptor?? [ 330.798707][T10235] team0: Port device team_slave_0 added [ 330.809893][T10235] team0: Port device team_slave_1 added [ 330.822974][ T6904] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 330.973037][ T6904] usb 1-1: device descriptor read/64, error -71 [ 330.989868][T10235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.997831][T10235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.025339][T10235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.067258][T10235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.074887][T10235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.104214][ T6904] usb usb1-port1: attempt power cycle [ 331.112605][T10235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.325301][T10235] hsr_slave_0: entered promiscuous mode [ 331.359088][T10235] hsr_slave_1: entered promiscuous mode [ 331.445054][ T6904] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 331.506712][T10283] bond0: entered promiscuous mode [ 331.512449][T10283] bond_slave_0: entered promiscuous mode [ 331.521505][T10283] bond_slave_1: entered promiscuous mode [ 331.529232][T10283] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 331.540115][ T6904] usb 1-1: device descriptor read/8, error -71 [ 331.541202][ T7232] ================================================================== [ 331.554784][ T7232] BUG: KASAN: invalid-free in gid_table_release_one+0x384/0x470 [ 331.557256][ T3463] IPVS: stop unused estimator thread 0... [ 331.562442][ T7232] Free of addr ffff888079a000d8 by task kworker/u8:21/7232 [ 331.562458][ T7232] [ 331.562467][ T7232] CPU: 1 UID: 0 PID: 7232 Comm: kworker/u8:21 Not tainted syzkaller #0 PREEMPT(full) [ 331.562485][ T7232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 331.562497][ T7232] Workqueue: ib-unreg-wq ib_unregister_work [ 331.562522][ T7232] Call Trace: [ 331.562530][ T7232] [ 331.562536][ T7232] dump_stack_lvl+0xe8/0x150 [ 331.562561][ T7232] print_address_description+0x55/0x1e0 [ 331.562587][ T7232] print_report+0x58/0x70 [ 331.562615][ T7232] ? gid_table_release_one+0x384/0x470 [ 331.562634][ T7232] kasan_report_invalid_free+0xea/0x110 [ 331.562652][ T7232] ? gid_table_release_one+0x384/0x470 [ 331.562672][ T7232] free_large_kmalloc+0x3c/0x110 [ 331.562689][ T7232] gid_table_release_one+0x384/0x470 [ 331.562712][ T7232] ib_device_release+0xd2/0x1c0 [ 331.562737][ T7232] ? __pfx_ib_device_release+0x10/0x10 [ 331.562759][ T7232] device_release+0xc4/0x1f0 [ 331.562777][ T7232] kobject_put+0x228/0x560 [ 331.562801][ T7232] ? process_scheduled_works+0xa70/0x1860 [ 331.562827][ T7232] process_scheduled_works+0xb5d/0x1860 [ 331.562861][ T7232] ? __pfx_process_scheduled_works+0x10/0x10 [ 331.562885][ T7232] ? assign_work+0x3d5/0x5e0 [ 331.562908][ T7232] worker_thread+0xa53/0xfc0 [ 331.562941][ T7232] kthread+0x388/0x470 [ 331.562959][ T7232] ? __pfx_worker_thread+0x10/0x10 [ 331.562981][ T7232] ? __pfx_kthread+0x10/0x10 [ 331.562998][ T7232] ret_from_fork+0x514/0xb70 [ 331.563023][ T7232] ? __pfx_ret_from_fork+0x10/0x10 [ 331.563044][ T7232] ? __switch_to+0xc79/0x1410 [ 331.563064][ T7232] ? __pfx_kthread+0x10/0x10 [ 331.563081][ T7232] ret_from_fork_asm+0x1a/0x30 [ 331.563103][ T7232] [ 331.563109][ T7232] [ 331.746481][ T7232] The buggy address belongs to the physical page: [ 331.752914][ T7232] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888079a01800 pfn:0x79a00 [ 331.763141][ T7232] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 331.772202][ T7232] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 331.780017][ T7232] page_type: f8(unknown) [ 331.784377][ T7232] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 331.793302][ T7232] raw: ffff888079a01800 0000000000000000 00000000f8000000 0000000000000000 [ 331.801877][ T7232] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 331.811076][ T7232] head: ffff888079a01800 0000000000000000 00000000f8000000 0000000000000000 [ 331.820006][ T7232] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 331.828752][ T7232] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 331.837697][ T7232] page dumped because: kasan: bad access detected [ 331.844221][ T7232] page_owner tracks the page as allocated [ 331.850021][ T7232] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 6388, tgid 6387 (syz.2.158), ts 118686162976, free_ts 118678548117 [ 331.868166][ T7232] post_alloc_hook+0x231/0x280 [ 331.872946][ T7232] get_page_from_freelist+0x24ba/0x2540 [ 331.878487][ T7232] __alloc_frozen_pages_noprof+0x18d/0x380 [ 331.884407][ T7232] alloc_pages_mpol+0x235/0x490 [ 331.889427][ T7232] ___kmalloc_large_node+0x4e/0x120 [ 331.894730][ T7232] __kmalloc_large_node_noprof+0x18/0x90 [ 331.900363][ T7232] __kmalloc_noprof+0x3e8/0x760 [ 331.905210][ T7232] ib_cache_setup_one+0x198/0x570 [ 331.910229][ T7232] ib_register_device+0xfbd/0x13e0 [ 331.915526][ T7232] rxe_register_device+0x1e3/0x350 [ 331.920723][ T7232] rxe_net_add+0x81/0x110 [ 331.925052][ T7232] rxe_newlink+0xf4/0x1c0 [ 331.929566][ T7232] nldev_newlink+0x5bc/0x650 [ 331.934147][ T7232] rdma_nl_rcv+0x6d1/0xa10 [ 331.938657][ T7232] netlink_unicast+0x80f/0x9b0 [ 331.943501][ T7232] netlink_sendmsg+0x813/0xb40 [ 331.948340][ T7232] page last free pid 6388 tgid 6387 stack trace: [ 331.954744][ T7232] __free_frozen_pages+0xbc7/0xd30 [ 331.960155][ T7232] stack_depot_save_flags+0x40e/0x810 [ 331.965710][ T7232] kasan_save_track+0x4f/0x80 [ 331.970471][ T7232] __kasan_slab_alloc+0x6c/0x80 [ 331.975410][ T7232] kmem_cache_alloc_noprof+0x2bc/0x650 [ 331.980952][ T7232] sk_prot_alloc+0x57/0x210 [ 331.985460][ T7232] sk_alloc+0x3a/0x390 [ 331.989526][ T7232] inet_create+0x7a0/0x1000 [ 331.994023][ T7232] __sock_create+0x4b2/0x9d0 [ 331.998722][ T7232] udp_sock_create4+0xca/0x480 [ 332.003569][ T7232] rxe_setup_udp_tunnel+0x151/0x790 [ 332.008859][ T7232] rxe_net_init+0xaf/0x330 [ 332.013277][ T7232] rxe_newlink+0xd3/0x1c0 [ 332.017868][ T7232] nldev_newlink+0x5bc/0x650 [ 332.022533][ T7232] rdma_nl_rcv+0x6d1/0xa10 [ 332.027042][ T7232] netlink_unicast+0x80f/0x9b0 [ 332.031990][ T7232] [ 332.034326][ T7232] Memory state around the buggy address: [ 332.040058][ T7232] ffff8880799fff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 332.048472][ T7232] ffff888079a00000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 332.056626][ T7232] >ffff888079a00080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 332.065115][ T7232] ^ [ 332.072299][ T7232] ffff888079a00100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 332.080800][ T7232] ffff888079a00180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 332.089051][ T7232] ================================================================== [ 332.123509][ T5847] Bluetooth: hci2: command tx timeout [ 332.129216][ T7232] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 332.136632][ T7232] CPU: 0 UID: 0 PID: 7232 Comm: kworker/u8:21 Not tainted syzkaller #0 PREEMPT(full) [ 332.146374][ T7232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 332.156615][ T7232] Workqueue: ib-unreg-wq ib_unregister_work [ 332.162951][ T7232] Call Trace: [ 332.166311][ T7232] [ 332.169234][ T7232] vpanic+0x56c/0xa60 [ 332.173297][ T7232] ? __pfx_vpanic+0x10/0x10 [ 332.177798][ T7232] ? __pfx___schedule+0x10/0x10 [ 332.182913][ T7232] panic+0xc5/0xd0 [ 332.186624][ T7232] ? __pfx_panic+0x10/0x10 [ 332.191028][ T7232] ? preempt_schedule_common+0x82/0xd0 [ 332.196481][ T7232] check_panic_on_warn+0x89/0xb0 [ 332.201590][ T7232] end_report+0x73/0x170 [ 332.205994][ T7232] ? gid_table_release_one+0x384/0x470 [ 332.211798][ T7232] kasan_report_invalid_free+0xfa/0x110 [ 332.217432][ T7232] ? gid_table_release_one+0x384/0x470 [ 332.223277][ T7232] free_large_kmalloc+0x3c/0x110 [ 332.228395][ T7232] gid_table_release_one+0x384/0x470 [ 332.233856][ T7232] ib_device_release+0xd2/0x1c0 [ 332.238889][ T7232] ? __pfx_ib_device_release+0x10/0x10 [ 332.244794][ T7232] device_release+0xc4/0x1f0 [ 332.249387][ T7232] kobject_put+0x228/0x560 [ 332.253799][ T7232] ? process_scheduled_works+0xa70/0x1860 [ 332.259603][ T7232] process_scheduled_works+0xb5d/0x1860 [ 332.265279][ T7232] ? __pfx_process_scheduled_works+0x10/0x10 [ 332.271528][ T7232] ? assign_work+0x3d5/0x5e0 [ 332.276286][ T7232] worker_thread+0xa53/0xfc0 [ 332.281050][ T7232] kthread+0x388/0x470 [ 332.285108][ T7232] ? __pfx_worker_thread+0x10/0x10 [ 332.290378][ T7232] ? __pfx_kthread+0x10/0x10 [ 332.295234][ T7232] ret_from_fork+0x514/0xb70 [ 332.299851][ T7232] ? __pfx_ret_from_fork+0x10/0x10 [ 332.304973][ T7232] ? __switch_to+0xc79/0x1410 [ 332.309843][ T7232] ? __pfx_kthread+0x10/0x10 [ 332.314710][ T7232] ret_from_fork_asm+0x1a/0x30 [ 332.319517][ T7232] [ 332.323761][ T7232] Kernel Offset: disabled [ 332.328092][ T7232] Rebooting in 86400 seconds..