last executing test programs: 57.625299611s ago: executing program 1 (id=524): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e00000018"], 0x0}, 0x94) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e22, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="280000006000000029000000040000002b011000000004"], 0x28}, 0x4004004) 57.444393216s ago: executing program 1 (id=525): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="14000000100001000000000000000000001b000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001"], 0x7c}}, 0x0) 57.305048332s ago: executing program 1 (id=526): write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0', [], 0xa, "1f411d2552ad52cb07410969e814977e4f2c4a805220"}, 0x21) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e0000001801"], 0x0}, 0x94) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e22, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="280000000000000029000000040000002b011000f401010004"], 0x28}, 0x4004004) 57.149598602s ago: executing program 3 (id=527): socket(0x15, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x296a, 0x4, 0x9, 0x0, [{0x98, 0x37, 0x7f, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0xf5}, {0xf, 0x4, 0x9, '\x00', 0x13}, {0xf, 0x3e, 0x3, '\x00', 0x8e}, {0x3, 0x7f, 0x92, '\x00', 0xa}, {0xf, 0xe3, 0x1, '\x00', 0xac}, {0x3, 0x8, 0x6, '\x00', 0x8}, {0x1, 0xda, 0x2, '\x00', 0x67}, {0x2, 0x7, 0x2, '\x00', 0x8}, {0x8, 0x4, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x2, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x8}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x4, 0x0, 0x7, '\x00', 0x7}, {0x2f, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0xca, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x3, 0xc, 0x3, '\x00', 0x8}]}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) ioctl$sock_netdev_private(r4, 0x89f4, &(0x7f0000000140)="c910f8e676f121779f10489e0d8314a66e40c1b8d35932e721a18d46e5d274bd01a2dbfbf6bd9629f12e321431b84565309a6c77d553ff5ab45b9eda981d502254df5e45056a159d443d62b882e671df1d4078eb3b6297c22f9089685051d34f84a80be83d4b855a5b30d896f849d2c504b4dbe5fdcbd70aeed359c7b2bac8c38e428d7c3e7935a45abb5c708d45cde1e180be934d62de200ff7c2529b314396f113e5132e41aaefe5b3bdaacbcbd6713c59548e82e1ed47813e5db98a168ae9abb6fd57260c") r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000280)={{0x1000, 0x4, 0xfffc, 0x9}, 'syz1\x00', 0x9}) ioctl$UI_SET_FFBIT(r5, 0x4004556b, 0x51) ioctl$UI_SET_FFBIT(r5, 0x4004556b, 0x16) ioctl$UI_SET_FFBIT(r5, 0x4004556b, 0x32) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) fstat(r7, &(0x7f00000003c0)) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000003c0), 0x3) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r10, 0x4188aea7, &(0x7f00000000c0)={0x9, 0x0, [{0x0, 0x0, 0x7}, {}, {0x10}, {0x0, 0x0, 0xfffffffffffffffd}, {}, {0x3, 0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x4}, {0x59c2}]}) socket$inet_sctp(0x2, 0x1, 0x84) 57.086362861s ago: executing program 1 (id=528): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000011000101000000000000003100000000639a2dc9bc04788a8af4dd9e9a72ea7ada51c48147bfdce82ed4bdc3e50f20cb3455212c605eae394ac8eb0c6d358976075ce461b27f9047f80c04a711eb546e7fd7d7349707d8cb14fd9e624d6589b160c6b9fc54fcf6ebbb3d1bd8e6d799084fdd949e2c6ef0b22639e2c685be7cfe363bae39", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b0000000000"], 0x28}}, 0x20000040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r3 = timerfd_create(0x1, 0x80000) read(r3, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000340)={0x1, @multicast1, 0xfffc, 0x0, 'lc\x00', 0x9, 0xfc, 0x75}, 0x2c) ioctl$KVM_SET_CLOCK(r4, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000003, 0x1004}) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c000000090605000000000000000000060000000900020073797a300000000014000780060004404e20000006000540362100000500010007"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x804) 56.162020892s ago: executing program 2 (id=534): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000001000106"], 0xffe) 55.782050638s ago: executing program 3 (id=537): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000004800070000000900010073797a3000000000a0000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d5c00128038000180090001006c61737400000000280002800c000240fffffffffffffffe0800014000800000080001400000000d0800014000010102200001800a00010071756f746100000055fe02800c000140000000000000000408000340000001"], 0xe8}}, 0x20050800) 55.534081188s ago: executing program 3 (id=539): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x44000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, 0x0, 0x0) (async) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x4044000) (async) r4 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r5 = shmat(r4, &(0x7f0000ff6000/0x4000)=nil, 0x6000) r6 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r6, 0x84, 0x2, 0x0, 0x0) sendto$inet(r6, &(0x7f0000000100)="ab", 0x1, 0x2000c8d4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) (async) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000002300), 0x0) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r8, 0x0) (async) r9 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x0) close(0xffffffffffffffff) (async) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r9, 0xc0205710, 0x0) (async) shmdt(r5) capget(0x0, 0x0) r10 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2) ioctl$SCSI_IOCTL_STOP_UNIT(r10, 0x6) 55.45401285s ago: executing program 2 (id=540): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) 55.289085363s ago: executing program 4 (id=541): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='netdevsim0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000b80)=ANY=[@ANYBLOB="5400000010000304040900000000000000000040", @ANYRES32=0x0, @ANYBLOB="01010200000000002400128009000100766c616e000000001400028006000100000000000600050088a8000008000500", @ANYRES32=r3], 0x54}, 0x1, 0xba01}, 0x810) 55.247607172s ago: executing program 2 (id=542): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x2000) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x10, [0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2], 0x0, [0x0, 0x2, 0x5, 0x0, 0x7eb2, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xe, 0x12, r0, 0x74ebf000) 55.142182037s ago: executing program 1 (id=543): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x88) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000000)={0x10, 0x55020859, 0xfffffff7}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b7000000ff000000bfa300000000000007030000f8ffffff620af0fff8ffffff71a4f0ff000000002d040200000000001d400200000000004604000001ed000062030000000000001d440000000000007a0a00fe00ffffffc3030000f1000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0465f2f994114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840b08000000f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e82623951743283070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00a5b4f7e9ad0500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/fs/binfmt_misc/syz2\x00', 0x2, 0x0) pread64(r4, &(0x7f0000000100)=""/159, 0x9f, 0x6) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x60, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40480c0}, 0x4) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000180)=0x4, 0x1ff, 0xe) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x2, @empty, 0xc}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) r5 = syz_open_dev$vim2m(&(0x7f0000000200), 0x1, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000000340)={0xf4, 0x30324c4a, 0x2, @stepwise={0x2, 0x8, 0x2bdc4a4, 0x2, 0x42, 0x81}}) r6 = socket$key(0xf, 0x3, 0x2) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, 0x0, 0x4050) sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r9 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000024c0), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r9, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xfffffffd, 0x4, 0xb, 0x6}}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000007912a800000000005d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) syz_usb_connect$uac2(0x3, 0x8b, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x4b4, 0x931f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x3, 0x1, 0x6, 0x10, 0x1, {0x8, 0xb, 0x1, 0x8a, 0x1, 0x4, 0x20, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x11, 0x7, 0x9, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x5, 0x2, 0x3, 0x1, 0x5, 0x1, 0x17}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x4, 0x6c, 0x5, {0x8, 0x25, 0x1, 0x80, 0x3f, 0x12, 0xff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x3, 0xc4, {0x8, 0x25, 0x1, 0x3, 0xc, 0xfc}}}}}}}}]}}, 0x0) 54.972797075s ago: executing program 4 (id=544): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) unshare(0x20000400) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @broadcast}, 0x0, 0x2, 0x4, 0x3}}, 0x26) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) close_range(r0, r3, 0x0) 54.959935419s ago: executing program 2 (id=545): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001"], 0x7c}}, 0x0) 54.697955678s ago: executing program 2 (id=546): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) (fail_nth: 6) shutdown(r0, 0x0) 54.667816414s ago: executing program 4 (id=547): r0 = syz_usb_connect(0x6, 0x1cb, &(0x7f0000000480)=ANY=[@ANYBLOB="2cb3d2abd4f5"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff0200000000000000000b000000000100000000ff"], 0x0) 54.15013885s ago: executing program 0 (id=549): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a03000000000000000000070000000900010073797a300008f50068000000090a010400000000000000000700000208000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c001180090001006d657461000004001c00028008000240000000140800014000000004080003"], 0xb0}, 0x1, 0x0, 0x0, 0x40014}, 0x40) 54.149869868s ago: executing program 2 (id=550): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000140)={0x4, 0x9}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000040)=@x={0x94, 0x5, "0d40d15750e5"}) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x2a000, 0x1000}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket(0x1e, 0x1, 0x0) sendmmsg$sock(r4, &(0x7f0000000100)=[{{&(0x7f0000000080)=@tipc=@nameseq={0x1e, 0x4, 0x0, {0x0, 0x3}}, 0x80, 0x0}}], 0x1, 0x0) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="95000000000000008276c20f018b86ef9271e32f7bd67d121ed76c1f4f1e8a085558fe64290f9b0300000056e3d22eeceabb690c7960d7932dac81af452a54036615357d4b9252e791b1be02adfd48af77"], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94) r6 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, r6, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) 54.041749424s ago: executing program 0 (id=551): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e0000001801"], 0x0}, 0x94) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e22, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="280060000000000029000000040000002b0110000000040004"], 0x28}, 0x4004004) 53.908819439s ago: executing program 3 (id=552): write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0', [], 0xa, "1f411d2552ad52cb07410969e814977e4f2c"}, 0x1d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e0000001801"], 0x0}, 0x94) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e22, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="280000000000000029000000040000002b011000f401010004"], 0x28}, 0x4004004) 53.749743724s ago: executing program 4 (id=553): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0xfff5, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(r0, 0x0) 53.749567005s ago: executing program 0 (id=554): r0 = socket$nl_route(0x10, 0x3, 0x0) restart_syscall() sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x51060, 0x42c04}, [@IFLA_LINKINFO={0xffffffffffffff1a, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x2}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x24) 53.645515812s ago: executing program 3 (id=555): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e0000001801"], 0x0}, 0x94) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e22, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="280000000800000029000000040000002b0110000700010004"], 0x28}, 0x4004004) 53.484711638s ago: executing program 0 (id=556): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000002000106"], 0xffe) 53.414329838s ago: executing program 4 (id=557): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x1c, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1d}]}]}, 0x1c}}, 0xc000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x80, 0xfe, 0x7fff0006}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000b00)=@ccm_128={{0x303, 0x38}, "0000090800000003", "73b59657269ef929ee540a8a0a86c5d0", "6362dfd5", "21be0dd9f7f3c312"}, 0x28) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000004c0), 0x8000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x20004, r1, 0x2}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000002c0)=0x6) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x10) 53.380926215s ago: executing program 3 (id=558): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000002780), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000002840)=@multiplanar_overlay={0x6, 0x4, 0x4, 0x4000, 0x10000, {0x0, 0x2710}, {0x5, 0x8, 0xf4, 0x2, 0x3, 0x3, "60ef845a"}, 0x400, 0x3, {0x0}, 0x10}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x0, 0x28, 0xffffffff, 0x9, 0x6, 0x7, 0xfffffe0009000001, 0xfa10, 0xffffefff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf09010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001700)=""/4108, 0x100c}], 0x1}, 0x2000) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5}) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000040)={0x2, 0xa000, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) setsockopt$sock_int(r7, 0x1, 0xc, &(0x7f0000000480)=0x8, 0x4) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x2d, &(0x7f0000000080)=0xffffffff, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000100)=0x9, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r6) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x20, 0x4, [0x2, 0x0, 0x0, 0x100, 0x5, 0x0, 0x0, 0x2]}}) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) listen(0xffffffffffffffff, 0xda90) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000040)={0x3, 0x1, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r8, 0x100000000) ioctl$IOMMU_IOAS_UNMAP$ALL(r4, 0x3b86, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) 52.988724258s ago: executing program 0 (id=559): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='netdevsim0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000b80)=ANY=[@ANYBLOB="5400000010000304040900000000000000000041", @ANYRES32=0x0, @ANYBLOB="01010200000000002400128009000100766c616e000000001400028006000100000000000600050088a8000008000500", @ANYRES32=r3], 0x54}, 0x1, 0xba01}, 0x810) 52.145749525s ago: executing program 4 (id=560): syz_emit_ethernet(0x46, &(0x7f0000000080)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x10, 0x2c, 0x0, @dev, @mcast2, {[@hopopts={0x3c}], @echo_reply}}}}}, 0x0) (async) syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 52.145576437s ago: executing program 0 (id=561): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x1e, 0x4, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create1(0x0) socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}, 0x1, 0x2400000000000000}, 0x0) 52.079872557s ago: executing program 1 (id=562): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRES64=0x0], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 32 (id=550): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000140)={0x4, 0x9}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000040)=@x={0x94, 0x5, "0d40d15750e5"}) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x2a000, 0x1000}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket(0x1e, 0x1, 0x0) sendmmsg$sock(r4, &(0x7f0000000100)=[{{&(0x7f0000000080)=@tipc=@nameseq={0x1e, 0x4, 0x0, {0x0, 0x3}}, 0x80, 0x0}}], 0x1, 0x0) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="95000000000000008276c20f018b86ef9271e32f7bd67d121ed76c1f4f1e8a085558fe64290f9b0300000056e3d22eeceabb690c7960d7932dac81af452a54036615357d4b9252e791b1be02adfd48af77"], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94) r6 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, r6, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) kernel console output (not intermixed with test programs): _hcd [ 106.619500][ T5627] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 106.700130][ T5918] bond0: (slave bond_slave_1): Releasing backup interface [ 106.794320][ T5714] usb 4-1: unable to get BOS descriptor or descriptor too short [ 106.812683][ T5627] usb 5-1: Using ep0 maxpacket: 8 [ 106.829940][ T5714] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 106.850277][ T5627] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 106.868618][ T5714] usb 4-1: can't read configurations, error -71 [ 106.883623][ T5627] usb 5-1: config 0 has no interface number 0 [ 106.904075][ T5627] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 106.944461][ T5918] team0: Port device team_slave_0 removed [ 106.947889][ T5627] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 106.979813][ T5627] usb 5-1: config 0 interface 8 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 0 [ 107.001096][ T5627] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 107.024819][ T5627] usb 5-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 107.026337][ T5918] team0: Port device team_slave_1 removed [ 107.043668][ T5627] usb 5-1: Product: syz [ 107.072746][ T5627] usb 5-1: config 0 descriptor?? [ 107.073633][ T5918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.105255][ T5627] iowarrior 5-1:0.8: no interrupt-in endpoint found [ 107.108654][ T5918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.164996][ T5918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.200897][ T5918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.236789][ T5918] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 107.301675][ T5627] usb 5-1: USB disconnect, device number 7 [ 107.338826][ T5931] FAULT_INJECTION: forcing a failure. [ 107.338826][ T5931] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 107.359978][ T5931] CPU: 1 UID: 0 PID: 5931 Comm: syz.0.51 Not tainted syzkaller #0 PREEMPT(full) [ 107.360006][ T5931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 107.360027][ T5931] Call Trace: [ 107.360040][ T5931] [ 107.360049][ T5931] dump_stack_lvl+0xe8/0x150 [ 107.360086][ T5931] should_fail_ex+0x412/0x560 [ 107.360118][ T5931] _copy_from_user+0x2d/0xb0 [ 107.360147][ T5931] ___sys_sendmsg+0x1c6/0x360 [ 107.360174][ T5931] ? __lock_acquire+0x6b5/0x2cf0 [ 107.360201][ T5931] ? __pfx____sys_sendmsg+0x10/0x10 [ 107.360227][ T5931] ? __lock_acquire+0x6b5/0x2cf0 [ 107.360253][ T5931] ? kstrtouint+0x6e/0xe0 [ 107.360316][ T5931] __sys_sendmmsg+0x27c/0x4e0 [ 107.360350][ T5931] ? __pfx___sys_sendmmsg+0x10/0x10 [ 107.360375][ T5931] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 107.360420][ T5931] ? ksys_write+0x242/0x270 [ 107.360445][ T5931] ? __pfx_ksys_write+0x10/0x10 [ 107.360473][ T5931] __x64_sys_sendmmsg+0xa0/0xc0 [ 107.360497][ T5931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.360517][ T5931] do_syscall_64+0x15f/0xf80 [ 107.360541][ T5931] ? clear_bhb_loop+0x40/0x90 [ 107.360561][ T5931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.360577][ T5931] RIP: 0033:0x7fab91b9cdd9 [ 107.360598][ T5931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.360611][ T5931] RSP: 002b:00007fab929df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 107.360629][ T5931] RAX: ffffffffffffffda RBX: 00007fab91e15fa0 RCX: 00007fab91b9cdd9 [ 107.360641][ T5931] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 107.360652][ T5931] RBP: 00007fab929df090 R08: 0000000000000000 R09: 0000000000000000 [ 107.360661][ T5931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.360670][ T5931] R13: 00007fab91e16038 R14: 00007fab91e15fa0 R15: 00007fab91f3fa48 [ 107.360694][ T5931] [ 107.922589][ T5939] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.55'. [ 107.940283][ T5939] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 108.450842][ T5627] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 108.638279][ T5627] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 108.652902][ T5627] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.667219][ T5627] usb 3-1: Product: syz [ 108.672624][ T5627] usb 3-1: Manufacturer: syz [ 108.679262][ T5627] usb 3-1: SerialNumber: syz [ 108.703118][ T5627] usb 3-1: config 0 descriptor?? [ 108.713959][ T5964] input: syz0 as /devices/virtual/input/input16 [ 108.858888][ T5964] vivid-000: disconnect [ 108.864218][ T5714] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 108.983744][ T5972] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 109.005995][ T5972] tipc: Started in network mode [ 109.018811][ T5972] tipc: Node identity 42a152327865, cluster identity 4711 [ 109.035653][ T5972] tipc: Enabled bearer , priority 0 [ 109.042876][ T5714] usb 2-1: Using ep0 maxpacket: 8 [ 109.050548][ T5714] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 109.051654][ T5972] syzkaller0: entered promiscuous mode [ 109.060519][ T5714] usb 2-1: config 179 has no interface number 0 [ 109.075800][ T5714] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 109.092022][ T5972] syzkaller0: entered allmulticast mode [ 109.115407][ T5714] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 109.139532][ T5959] vivid-000: reconnect [ 109.146934][ T5972] tipc: Resetting bearer [ 109.156302][ T5714] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 109.187953][ T5972] tipc: Disabling bearer [ 109.188960][ T5714] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 109.205796][ T5714] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 109.219589][ T5714] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 109.229205][ T5714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.292045][ T5962] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 109.358209][ T5627] usb 3-1: Firmware version (0.0) predates our first public release. [ 109.379284][ T5627] usb 3-1: Please update to version 0.2 or newer [ 109.512091][ T5953] netlink: 32 bytes leftover after parsing attributes in process `syz.2.60'. [ 109.529135][ T5627] usb 3-1: Firmware: build ! [ 109.915469][ T5962] vlan2: entered allmulticast mode [ 109.929861][ T5962] veth1_to_bond: entered allmulticast mode [ 109.942992][ T5627] usb 3-1: USB disconnect, device number 4 [ 110.199368][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 110.213379][ T5999] netlink: 40 bytes leftover after parsing attributes in process `syz.0.73'. [ 110.317307][ T6000] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 110.494931][ T5773] usb 2-1: USB disconnect, device number 8 [ 110.495186][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 110.518647][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 110.682542][ T6017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.77'. [ 110.829410][ T5700] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 111.002829][ T5700] usb 1-1: config 48 interface 0 altsetting 98 bulk endpoint 0x4 has invalid maxpacket 1024 [ 111.025283][ T5700] usb 1-1: config 48 interface 0 altsetting 98 has an endpoint descriptor with address 0x5A, changing to 0xA [ 111.042133][ T5627] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 111.065376][ T5700] usb 1-1: config 48 interface 0 altsetting 98 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 111.088378][ T5700] usb 1-1: config 48 interface 0 altsetting 98 endpoint 0xA has invalid wMaxPacketSize 0 [ 111.108332][ T5700] usb 1-1: config 48 interface 0 has no altsetting 0 [ 111.134890][ T5700] usb 1-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 111.163936][ T5700] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.189433][ T5714] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 111.197280][ T5700] usb 1-1: Product: syz [ 111.201868][ T5700] usb 1-1: Manufacturer: syz [ 111.215417][ T5700] usb 1-1: SerialNumber: syz [ 111.233430][ T5627] usb 5-1: unable to get BOS descriptor or descriptor too short [ 111.261804][ T6008] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 111.281507][ T5627] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 111.299567][ T5627] usb 5-1: can't read configurations, error -71 [ 111.349495][ T5714] usb 3-1: device descriptor read/64, error -71 [ 111.386399][ T6024] xt_hashlimit: size too large, truncated to 1048576 [ 111.599566][ T5714] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 111.661772][ T6032] netlink: 16 bytes leftover after parsing attributes in process `syz.1.82'. [ 111.679029][ T6033] input: syz1 as /devices/virtual/input/input18 [ 111.751507][ T5714] usb 3-1: device descriptor read/64, error -71 [ 111.870558][ T5714] usb usb3-port1: attempt power cycle [ 112.019443][ T5728] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 112.027165][ T5773] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 112.189607][ T5773] usb 2-1: Using ep0 maxpacket: 8 [ 112.198010][ T5728] usb 4-1: config 0 has no interfaces? [ 112.203861][ T5773] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 112.212902][ T5728] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 112.222433][ T5773] usb 2-1: config 179 has no interface number 0 [ 112.228865][ T5728] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.232100][ T5714] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 112.237529][ T5773] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 112.283115][ T5728] usb 4-1: config 0 descriptor?? [ 112.290550][ T5773] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 112.309763][ T5714] usb 3-1: device descriptor read/8, error -71 [ 112.315043][ T5773] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 112.335459][ T5773] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 112.350156][ T5773] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 112.364750][ T5773] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 112.374059][ T5773] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.397769][ T6035] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 112.532729][ T6029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.564220][ T6029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.583172][ T5714] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 112.595784][ T5773] usb 4-1: USB disconnect, device number 8 [ 112.622952][ T5714] usb 3-1: device descriptor read/8, error -71 [ 112.665894][ T5728] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input19 [ 112.764285][ T5714] usb usb3-port1: unable to enumerate USB device [ 112.835796][ T6049] netlink: 4 bytes leftover after parsing attributes in process `syz.4.89'. [ 112.859900][ T5714] usb 2-1: USB disconnect, device number 9 [ 112.860711][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 112.874403][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 112.939284][ T6049] xt_hashlimit: size too large, truncated to 1048576 [ 113.221811][ T6053] Zero length message leads to an empty skb [ 113.231384][ T6053] FAULT_INJECTION: forcing a failure. [ 113.231384][ T6053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.245750][ T6053] CPU: 1 UID: 0 PID: 6053 Comm: syz.4.90 Not tainted syzkaller #0 PREEMPT(full) [ 113.245776][ T6053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 113.245792][ T6053] Call Trace: [ 113.245800][ T6053] [ 113.245808][ T6053] dump_stack_lvl+0xe8/0x150 [ 113.245836][ T6053] should_fail_ex+0x412/0x560 [ 113.245868][ T6053] _copy_to_user+0x31/0xb0 [ 113.245902][ T6053] simple_read_from_buffer+0xe1/0x170 [ 113.245936][ T6053] proc_fail_nth_read+0x1bb/0x230 [ 113.245969][ T6053] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 113.246002][ T6053] ? rw_verify_area+0x2a6/0x4d0 [ 113.246033][ T6053] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 113.246065][ T6053] vfs_read+0x20c/0xa70 [ 113.246102][ T6053] ? __pfx___mutex_lock+0x10/0x10 [ 113.246133][ T6053] ? __pfx_vfs_read+0x10/0x10 [ 113.246167][ T6053] ? __fget_files+0x2a/0x420 [ 113.246198][ T6053] ? __fget_files+0x3a0/0x420 [ 113.246224][ T6053] ? __fget_files+0x2a/0x420 [ 113.246259][ T6053] ksys_read+0x150/0x270 [ 113.246293][ T6053] ? __pfx_ksys_read+0x10/0x10 [ 113.246333][ T6053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.246358][ T6053] do_syscall_64+0x15f/0xf80 [ 113.246388][ T6053] ? clear_bhb_loop+0x40/0x90 [ 113.246417][ T6053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.246439][ T6053] RIP: 0033:0x7f7c82f5d60e [ 113.246468][ T6053] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 113.246485][ T6053] RSP: 002b:00007f7c811f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 113.246509][ T6053] RAX: ffffffffffffffda RBX: 00007f7c811f66c0 RCX: 00007f7c82f5d60e [ 113.246525][ T6053] RDX: 000000000000000f RSI: 00007f7c811f60a0 RDI: 0000000000000004 [ 113.246537][ T6053] RBP: 00007f7c811f6090 R08: 0000000000000000 R09: 0000000000000000 [ 113.246550][ T6053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 113.246562][ T6053] R13: 00007f7c83216038 R14: 00007f7c83215fa0 R15: 00007f7c8333fa48 [ 113.246598][ T6053] [ 113.579658][ T5728] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 113.667741][ T5700] usb 1-1: USB disconnect, device number 7 [ 113.754155][ T5728] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 113.768830][ T5728] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.796715][ T5728] usb 4-1: Product: syz [ 113.808873][ T5728] usb 4-1: Manufacturer: syz [ 113.820036][ T5728] usb 4-1: SerialNumber: syz [ 113.841388][ T5728] usb 4-1: config 0 descriptor?? [ 114.253574][ T30] audit: type=1804 audit(1777744079.619:2): pid=6076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.100" name="/newroot/30/file1" dev="tmpfs" ino=173 res=1 errno=0 [ 114.517238][ T6084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.103'. [ 114.532277][ T6086] program syz.2.104 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.580883][ T6084] vlan2: entered promiscuous mode [ 114.596297][ T6084] bond0: entered promiscuous mode [ 114.604774][ T6084] bond_slave_0: entered promiscuous mode [ 114.620318][ T6084] bond_slave_1: entered promiscuous mode [ 114.713211][ T6055] netlink: 32 bytes leftover after parsing attributes in process `syz.3.91'. [ 114.733937][ T6090] netlink: 16 bytes leftover after parsing attributes in process `syz.2.105'. [ 114.747643][ T5728] usb 4-1: Firmware: major: 24, minor: 33, hardware type: ATUSB (2) [ 115.140359][ T6104] FAULT_INJECTION: forcing a failure. [ 115.140359][ T6104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.185869][ T5728] usb 4-1: failed to fetch extended address, random address set [ 115.211639][ T6104] CPU: 0 UID: 0 PID: 6104 Comm: syz.2.110 Not tainted syzkaller #0 PREEMPT(full) [ 115.211721][ T6104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 115.211768][ T6104] Call Trace: [ 115.211791][ T6104] [ 115.211813][ T6104] dump_stack_lvl+0xe8/0x150 [ 115.211898][ T6104] should_fail_ex+0x412/0x560 [ 115.211977][ T6104] _copy_to_user+0x31/0xb0 [ 115.212062][ T6104] simple_read_from_buffer+0xe1/0x170 [ 115.212140][ T6104] proc_fail_nth_read+0x1bb/0x230 [ 115.212210][ T6104] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 115.212287][ T6104] ? rw_verify_area+0x2a6/0x4d0 [ 115.212351][ T6104] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 115.212375][ T6104] vfs_read+0x20c/0xa70 [ 115.212407][ T6104] ? __pfx___mutex_lock+0x10/0x10 [ 115.212441][ T6104] ? __pfx_vfs_read+0x10/0x10 [ 115.212470][ T6104] ? __fget_files+0x2a/0x420 [ 115.212499][ T6104] ? __fget_files+0x3a0/0x420 [ 115.212520][ T6104] ? __fget_files+0x2a/0x420 [ 115.212554][ T6104] ksys_read+0x150/0x270 [ 115.212583][ T6104] ? __pfx_ksys_read+0x10/0x10 [ 115.212612][ T6104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.212630][ T6104] do_syscall_64+0x15f/0xf80 [ 115.212650][ T6104] ? trace_irq_disable+0x3b/0x140 [ 115.212675][ T6104] ? clear_bhb_loop+0x40/0x90 [ 115.212695][ T6104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.212712][ T6104] RIP: 0033:0x7f881595d60e [ 115.212730][ T6104] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 115.212745][ T6104] RSP: 002b:00007f8813bf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 115.212764][ T6104] RAX: ffffffffffffffda RBX: 00007f8813bf66c0 RCX: 00007f881595d60e [ 115.212776][ T6104] RDX: 000000000000000f RSI: 00007f8813bf60a0 RDI: 0000000000000004 [ 115.212786][ T6104] RBP: 00007f8813bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 115.212797][ T6104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 115.212807][ T6104] R13: 00007f8815c16038 R14: 00007f8815c15fa0 R15: 00007f8815d3fa48 [ 115.212838][ T6104] [ 115.212999][ T5700] hid-generic 0004:0004:01FF.0003: hidraw0: HID v1.ff Device [syz0] on syz0 [ 115.320178][ T5728] usb 4-1: USB disconnect, device number 9 [ 115.619529][ T5627] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 115.699882][ T5700] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 115.788462][ T5627] usb 1-1: unable to get BOS descriptor or descriptor too short [ 115.794996][ T5627] usb 1-1: not running at top speed; connect to a high speed hub [ 115.796404][ T5627] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 115.800793][ T5627] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 115.800823][ T5627] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.800843][ T5627] usb 1-1: Product: syz [ 115.800859][ T5627] usb 1-1: Manufacturer: syz [ 115.800874][ T5627] usb 1-1: SerialNumber: syz [ 115.869592][ T5700] usb 3-1: Using ep0 maxpacket: 16 [ 115.874264][ T5700] usb 3-1: config 3 has an invalid interface number: 200 but max is 0 [ 115.874302][ T5700] usb 3-1: config 3 has no interface number 0 [ 115.874357][ T5700] usb 3-1: config 3 interface 200 has no altsetting 0 [ 115.878347][ T5700] usb 3-1: New USB device found, idVendor=15c2, idProduct=0042, bcdDevice=a2.86 [ 115.878399][ T5700] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.878420][ T5700] usb 3-1: Product: syz [ 115.878436][ T5700] usb 3-1: Manufacturer: syz [ 115.878452][ T5700] usb 3-1: SerialNumber: syz [ 116.123948][ T5700] imon 3-1:3.200: unable to register, err -19 [ 116.157788][ T5700] usb 3-1: USB disconnect, device number 9 [ 116.631653][ T5773] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 116.800431][ T5773] usb 2-1: Using ep0 maxpacket: 8 [ 116.815849][ T5773] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 116.826046][ T5773] usb 2-1: config 179 has no interface number 0 [ 116.832515][ T5773] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 116.846814][ T5773] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 116.866741][ T5773] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 116.887981][ T5773] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 116.904637][ T5773] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 116.920079][ T5773] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 116.930956][ T5773] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.955190][ T6139] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 117.222660][ T5773] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input20 [ 117.418552][ T5699] usb 2-1: USB disconnect, device number 10 [ 117.418570][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 117.433266][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 118.090769][ T6185] fuse: Bad value for 'user_id' [ 118.096123][ T6185] fuse: Bad value for 'user_id' [ 118.105296][ T6185] fuse: Bad value for 'user_id' [ 118.112117][ T6185] fuse: Bad value for 'user_id' [ 118.414096][ T5627] usb 1-1: 1:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 118.446195][ T5627] usb 1-1: found format II with max.bitrate = 512, frame size=4095 [ 118.487101][ T5627] usb 1-1: 1:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 118.518538][ T5627] usb 1-1: found format II with max.bitrate = 512, frame size=4095 [ 118.542855][ T5627] usb 1-1: failed to enable PITCH for EP 0x1 [ 118.559744][ T5627] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 118.774942][ T5627] usb 1-1: USB disconnect, device number 8 [ 118.961161][ T5699] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 118.976205][ T5778] udevd[5778]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.178264][ T6218] syz.4.131 uses obsolete (PF_INET,SOCK_PACKET) [ 119.182525][ T5699] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 119.206119][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.221609][ T5699] usb 2-1: Product: syz [ 119.227034][ T5699] usb 2-1: Manufacturer: syz [ 119.233085][ T5699] usb 2-1: SerialNumber: syz [ 119.245157][ T5699] usb 2-1: config 0 descriptor?? [ 119.263234][ T5699] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 119.449717][ T5627] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 119.505379][ T6227] fuse: Unknown parameter 'r«atmod00000000000000000040000m' [ 119.521788][ T6224] fuse: Unknown parameter 'OQ‡›51ŸyN00000000000000000000' [ 119.578900][ T6210] netlink: 28 bytes leftover after parsing attributes in process `syz.2.128'. [ 119.620761][ T5627] usb 1-1: Using ep0 maxpacket: 8 [ 119.628902][ T5627] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 119.637951][ T5627] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 228 [ 119.648711][ T5627] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 119.661760][ T5627] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 119.680172][ T5627] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 119.690628][ T5627] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.711996][ T30] audit: type=1326 audit(1777744085.079:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.4.133" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c82f9cdd9 code=0x0 [ 119.818597][ T6234] mmap: syz.4.133 (6234) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 119.852817][ T6233] netlink: 12 bytes leftover after parsing attributes in process `syz.3.134'. [ 120.165983][ T6245] loop9: detected capacity change from 0 to 4096 [ 120.488377][ T6248] usbtmc 1-1:16.0: simple usb_control_msg returned 0 [ 120.499232][ T5699] gspca_stk1135: reg_w 0x5 err -110 [ 120.506075][ T5699] gspca_stk1135: serial bus timeout: status=0x00 [ 120.513756][ T5699] gspca_stk1135: Sensor write failed [ 120.521868][ T5699] gspca_stk1135: serial bus timeout: status=0x00 [ 120.533304][ T5699] gspca_stk1135: Sensor write failed [ 120.545374][ T5699] gspca_stk1135: serial bus timeout: status=0x00 [ 120.553157][ T5699] gspca_stk1135: Sensor read failed [ 120.567157][ T5699] gspca_stk1135: serial bus timeout: status=0x00 [ 120.581406][ T5699] gspca_stk1135: Sensor read failed [ 120.586841][ T5699] gspca_stk1135: Detected sensor type unknown (0x0) [ 120.593998][ T5699] gspca_stk1135: serial bus timeout: status=0x00 [ 120.600780][ T5699] gspca_stk1135: Sensor read failed [ 120.606204][ T5699] gspca_stk1135: serial bus timeout: status=0x00 [ 120.617138][ T5699] gspca_stk1135: Sensor read failed [ 120.622818][ T5699] gspca_stk1135: serial bus timeout: status=0x00 [ 120.639442][ T5699] gspca_stk1135: Sensor write failed [ 120.664645][ T5699] gspca_stk1135: serial bus timeout: status=0x00 [ 120.685408][ T5699] gspca_stk1135: Sensor write failed [ 120.694031][ T5627] usb 1-1: USB disconnect, device number 9 [ 120.712461][ T5699] stk1135 2-1:0.0: probe with driver stk1135 failed with error -110 [ 120.837645][ T6253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.139'. [ 120.875959][ T6253] netlink: 12 bytes leftover after parsing attributes in process `syz.2.139'. [ 120.963439][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.985705][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.010096][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.036368][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.117155][ T6264] xt_hashlimit: size too large, truncated to 1048576 [ 121.629917][ T5627] usb 2-1: USB disconnect, device number 11 [ 122.127219][ T6292] netlink: 'syz.3.144': attribute type 10 has an invalid length. [ 122.191810][ T6295] netlink: 14 bytes leftover after parsing attributes in process `syz.4.150'. [ 122.395809][ T6295] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.455002][ T6295] bond_slave_0: left promiscuous mode [ 122.514053][ T6295] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.526242][ T6295] bond_slave_1: left promiscuous mode [ 122.549399][ T6295] bond0 (unregistering): Released all slaves [ 123.254497][ T6310] netlink: 12 bytes leftover after parsing attributes in process `syz.2.156'. [ 123.759430][ T5773] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 123.932834][ T5773] usb 3-1: config 48 interface 0 altsetting 98 bulk endpoint 0x4 has invalid maxpacket 1024 [ 123.957667][ T5773] usb 3-1: config 48 interface 0 altsetting 98 has an endpoint descriptor with address 0x5A, changing to 0xA [ 123.997642][ T5773] usb 3-1: config 48 interface 0 altsetting 98 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 124.028628][ T5773] usb 3-1: config 48 interface 0 altsetting 98 endpoint 0xA has invalid wMaxPacketSize 0 [ 124.063931][ T5773] usb 3-1: config 48 interface 0 has no altsetting 0 [ 124.097931][ T5773] usb 3-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 124.112008][ T5773] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.140979][ T5773] usb 3-1: Product: syz [ 124.153183][ T5773] usb 3-1: Manufacturer: syz [ 124.172500][ T5773] usb 3-1: SerialNumber: syz [ 124.191397][ T6316] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 124.482469][ T6316] input: syz1 as /devices/virtual/input/input21 [ 124.695398][ T5773] usb 3-1: USB disconnect, device number 10 [ 124.876967][ T6335] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 125.029993][ T5699] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 125.215957][ T5699] usb 4-1: Using ep0 maxpacket: 32 [ 125.253096][ T5699] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 125.283399][ T5699] usb 4-1: config 0 has no interface number 0 [ 125.306153][ T5699] usb 4-1: config 0 interface 12 has no altsetting 0 [ 125.361207][ T5699] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 125.394931][ T5699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.428956][ T5699] usb 4-1: Product: syz [ 125.450019][ T5699] usb 4-1: Manufacturer: syz [ 125.468644][ T5699] usb 4-1: SerialNumber: syz [ 125.531492][ T5699] usb 4-1: config 0 descriptor?? [ 125.630392][ T5700] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 125.809424][ T5700] usb 5-1: Using ep0 maxpacket: 8 [ 125.827942][ T5700] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 125.849162][ T5700] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 253 [ 125.881025][ T5700] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 125.913822][ T5700] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.961455][ T5700] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 125.988503][ T5700] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.139482][ T5714] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 126.285351][ T5714] usb 2-1: device descriptor read/64, error -71 [ 126.541094][ T5714] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 126.689590][ T5714] usb 2-1: device descriptor read/64, error -71 [ 126.802246][ T6355] usbtmc 5-1:16.0: simple usb_control_msg returned 0 [ 126.821482][ T5714] usb usb2-port1: attempt power cycle [ 127.009028][ T5700] usb 5-1: USB disconnect, device number 10 [ 127.179503][ T5714] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 127.220340][ T5714] usb 2-1: device descriptor read/8, error -71 [ 127.469901][ T5714] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 127.511183][ T5714] usb 2-1: device descriptor read/8, error -71 [ 127.559391][ T5773] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 127.630240][ T5714] usb usb2-port1: unable to enumerate USB device [ 127.729864][ T5773] usb 1-1: Using ep0 maxpacket: 32 [ 127.746983][ T5773] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.783661][ T5773] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.814621][ T5773] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 127.837239][ T5773] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.863647][ T5773] usb 1-1: config 0 descriptor?? [ 127.881933][ T5773] hub 1-1:0.0: USB hub found [ 128.079442][ T5773] hub 1-1:0.0: 1 port detected [ 128.130170][ T5627] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 128.313776][ T5627] usb 5-1: unable to get BOS descriptor or descriptor too short [ 128.343399][ T5627] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 128.362675][ T5627] usb 5-1: can't read configurations, error -71 [ 128.418765][ T6369] netlink: 12 bytes leftover after parsing attributes in process `syz.2.178'. [ 128.655882][ T5699] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 128.687690][ T5699] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 128.700930][ T5684] hub 1-1:0.0: activate --> -90 [ 128.719080][ T5699] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 128.742961][ T5699] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 128.823959][ T5699] usb 4-1: USB disconnect, device number 10 [ 128.907084][ T5684] hub 1-1:0.0: hub_ext_port_status failed (err = 0) [ 128.964202][ T6380] netlink: 52 bytes leftover after parsing attributes in process `syz.1.183'. [ 129.109843][ T5714] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 129.210217][ T5699] usb 1-1: USB disconnect, device number 10 [ 129.246279][ T6386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.186'. [ 129.274628][ T6386] vlan2: entered promiscuous mode [ 129.279906][ T6386] bond0: entered promiscuous mode [ 129.285406][ T6386] bond_slave_0: entered promiscuous mode [ 129.292658][ T6386] bond_slave_1: entered promiscuous mode [ 129.315519][ T5714] usb 3-1: config 48 interface 0 altsetting 98 bulk endpoint 0x4 has invalid maxpacket 1024 [ 129.353677][ T5714] usb 3-1: config 48 interface 0 altsetting 98 has an endpoint descriptor with address 0x5A, changing to 0xA [ 129.391279][ T5714] usb 3-1: config 48 interface 0 altsetting 98 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 129.407351][ T5714] usb 3-1: config 48 interface 0 altsetting 98 endpoint 0xA has invalid wMaxPacketSize 0 [ 129.420267][ T5714] usb 3-1: config 48 interface 0 has no altsetting 0 [ 129.429817][ T5714] usb 3-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 129.449401][ T5714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.461963][ T5714] usb 3-1: Product: syz [ 129.466197][ T5714] usb 3-1: Manufacturer: syz [ 129.471110][ T5714] usb 3-1: SerialNumber: syz [ 129.503283][ T6378] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 129.721731][ T6398] xt_hashlimit: size too large, truncated to 1048576 [ 129.909950][ T6406] input: syz1 as /devices/virtual/input/input23 [ 130.289661][ T5684] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 130.429757][ T5773] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 130.472442][ T5684] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 130.490316][ T5684] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.520639][ T5684] usb 2-1: Product: syz [ 130.533345][ T5684] usb 2-1: Manufacturer: syz [ 130.546552][ T5684] usb 2-1: SerialNumber: syz [ 130.578555][ T5684] usb 2-1: config 0 descriptor?? [ 130.632560][ T5773] usb 1-1: unable to get BOS descriptor or descriptor too short [ 130.656017][ T5773] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 130.666385][ T5773] usb 1-1: can't read configurations, error -71 [ 130.839691][ T5700] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 130.994348][ T5700] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 131.004849][ T5700] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.013021][ T5700] usb 4-1: Product: syz [ 131.018550][ T5700] usb 4-1: Manufacturer: syz [ 131.023376][ T5700] usb 4-1: SerialNumber: syz [ 131.382814][ T6408] netlink: 32 bytes leftover after parsing attributes in process `syz.1.193'. [ 131.410248][ T5684] usb 2-1: Firmware: major: 24, minor: 33, hardware type: ATUSB (2) [ 131.475612][ T5700] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 131.489999][ T5700] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 131.669462][ T5728] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 131.774275][ T6434] netlink: 28 bytes leftover after parsing attributes in process `syz.0.201'. [ 131.784005][ T6434] netlink: 36 bytes leftover after parsing attributes in process `syz.0.201'. [ 131.795169][ T5684] usb 2-1: failed to fetch extended address, random address set [ 131.822437][ T5728] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 131.838077][ T5728] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 131.856521][ T5728] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 131.873888][ T5728] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.892389][ T5684] usb 2-1: USB disconnect, device number 16 [ 131.916484][ T5728] usb 5-1: Product: syz [ 131.935179][ T5728] usb 5-1: Manufacturer: syz [ 131.960674][ T5728] usb 5-1: SerialNumber: syz [ 131.984184][ T5728] usb 5-1: config 0 descriptor?? [ 132.003341][ T5714] usb 3-1: USB disconnect, device number 11 [ 132.115476][ T5728] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 132.509638][ T5714] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 132.679434][ T5714] usb 3-1: Using ep0 maxpacket: 8 [ 132.679508][ T5684] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 132.692872][ T5714] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 132.701380][ T5714] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 768 [ 132.711708][ T5714] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 132.722071][ T5714] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.737156][ T5714] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 132.747204][ T5714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.810457][ T6427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.819549][ T6427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.822376][ T5722] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 132.837590][ T5684] usb 2-1: device descriptor read/64, error -71 [ 132.992859][ T5722] usb 1-1: unable to get BOS descriptor or descriptor too short [ 133.012608][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.014858][ T5722] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 133.027581][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.035612][ T5722] usb 1-1: can't read configurations, error -71 [ 133.091181][ T5684] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 133.153145][ T5700] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 133.166337][ T5700] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 133.181487][ T5700] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 133.198418][ T5700] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 133.210394][ T5700] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 133.226433][ T5700] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 133.232474][ T5684] usb 2-1: device descriptor read/64, error -71 [ 133.252486][ T5700] usb 4-1: USB disconnect, device number 11 [ 133.351842][ T5684] usb usb2-port1: attempt power cycle [ 133.553714][ T6456] usbtmc 3-1:16.0: simple usb_control_msg returned 0 [ 133.646626][ T6427] netlink: 16 bytes leftover after parsing attributes in process `syz.4.200'. [ 133.689623][ T5684] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 133.722667][ T6427] bond0 (unregistering): Released all slaves [ 133.734517][ T5684] usb 2-1: device descriptor read/8, error -71 [ 133.756912][ T5700] usb 3-1: USB disconnect, device number 12 [ 133.922440][ T5699] usb 5-1: USB disconnect, device number 13 [ 133.967989][ T6463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.006735][ T5684] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 134.031517][ T5684] usb 2-1: device descriptor read/8, error -71 [ 134.141999][ T5684] usb usb2-port1: unable to enumerate USB device [ 134.421107][ T5700] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 134.591294][ T5700] usb 4-1: config 0 has an invalid descriptor of length 54, skipping remainder of the config [ 134.609700][ T5700] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 134.632255][ T5700] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 134.655158][ T5700] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.681892][ T5700] usb 4-1: config 0 descriptor?? [ 134.695633][ T6475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.217'. [ 134.917074][ T5700] usb 4-1: USB disconnect, device number 12 [ 135.241408][ T6490] FAULT_INJECTION: forcing a failure. [ 135.241408][ T6490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.255040][ T6490] CPU: 0 UID: 0 PID: 6490 Comm: syz.2.223 Not tainted syzkaller #0 PREEMPT(full) [ 135.255066][ T6490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 135.255078][ T6490] Call Trace: [ 135.255086][ T6490] [ 135.255094][ T6490] dump_stack_lvl+0xe8/0x150 [ 135.255124][ T6490] should_fail_ex+0x412/0x560 [ 135.255155][ T6490] _copy_to_user+0x31/0xb0 [ 135.255193][ T6490] simple_read_from_buffer+0xe1/0x170 [ 135.255224][ T6490] proc_fail_nth_read+0x1bb/0x230 [ 135.255253][ T6490] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 135.255282][ T6490] ? rw_verify_area+0x2a6/0x4d0 [ 135.255325][ T6490] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 135.255352][ T6490] vfs_read+0x20c/0xa70 [ 135.255385][ T6490] ? __pfx___mutex_lock+0x10/0x10 [ 135.255413][ T6490] ? __pfx_vfs_read+0x10/0x10 [ 135.255442][ T6490] ? __fget_files+0x2a/0x420 [ 135.255470][ T6490] ? __fget_files+0x3a0/0x420 [ 135.255492][ T6490] ? __fget_files+0x2a/0x420 [ 135.255525][ T6490] ksys_read+0x150/0x270 [ 135.255555][ T6490] ? __pfx_ksys_read+0x10/0x10 [ 135.255592][ T6490] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.255614][ T6490] do_syscall_64+0x15f/0xf80 [ 135.255638][ T6490] ? trace_irq_disable+0x3b/0x140 [ 135.255667][ T6490] ? clear_bhb_loop+0x40/0x90 [ 135.255692][ T6490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.255712][ T6490] RIP: 0033:0x7f881595d60e [ 135.255735][ T6490] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 135.255755][ T6490] RSP: 002b:00007f8813bf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 135.255783][ T6490] RAX: ffffffffffffffda RBX: 00007f8813bf66c0 RCX: 00007f881595d60e [ 135.255798][ T6490] RDX: 000000000000000f RSI: 00007f8813bf60a0 RDI: 0000000000000004 [ 135.255809][ T6490] RBP: 00007f8813bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 135.255821][ T6490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.255832][ T6490] R13: 00007f8815c16038 R14: 00007f8815c15fa0 R15: 00007f8815d3fa48 [ 135.255865][ T6490] [ 136.233053][ T6516] netlink: 28 bytes leftover after parsing attributes in process `syz.3.235'. [ 136.250407][ T6516] netlink: 36 bytes leftover after parsing attributes in process `syz.3.235'. [ 136.273397][ T5684] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 136.349611][ T5725] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 136.441462][ T5684] usb 2-1: config 48 interface 0 altsetting 98 bulk endpoint 0x4 has invalid maxpacket 1024 [ 136.454448][ T5684] usb 2-1: config 48 interface 0 altsetting 98 has an endpoint descriptor with address 0x5A, changing to 0xA [ 136.483940][ T5684] usb 2-1: config 48 interface 0 altsetting 98 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 136.516762][ T5684] usb 2-1: config 48 interface 0 altsetting 98 endpoint 0xA has invalid wMaxPacketSize 0 [ 136.527498][ T5725] usb 5-1: Using ep0 maxpacket: 32 [ 136.545928][ T5725] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 136.562199][ T5684] usb 2-1: config 48 interface 0 has no altsetting 0 [ 136.584098][ T5725] usb 5-1: config 0 interface 0 has no altsetting 0 [ 136.591245][ T5725] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 136.602750][ T5684] usb 2-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 136.618989][ T5725] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.631868][ T5684] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.644716][ T5725] usb 5-1: config 0 descriptor?? [ 136.651404][ T5684] usb 2-1: Product: syz [ 136.660249][ T5684] usb 2-1: Manufacturer: syz [ 136.676160][ T5684] usb 2-1: SerialNumber: syz [ 136.681250][ T5722] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 136.707222][ T6503] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 136.857272][ T5722] usb 4-1: Using ep0 maxpacket: 8 [ 136.870236][ T5722] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.897444][ T5722] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 136.911021][ T5722] usb 4-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 136.933922][ T5722] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.948765][ T5722] usb 4-1: config 0 descriptor?? [ 137.131864][ T6541] input: syz1 as /devices/virtual/input/input27 [ 137.285640][ T6547] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 137.312980][ T6550] netlink: 12 bytes leftover after parsing attributes in process `syz.0.247'. [ 137.325239][ T6547] bond0 (unregistering): Released all slaves [ 137.401549][ T5722] cypress 0003:04B4:DE61.0004: invalid report_size 60495 [ 137.408725][ T5722] cypress 0003:04B4:DE61.0004: item 0 2 1 7 parsing failed [ 137.425694][ T5722] cypress 0003:04B4:DE61.0004: parse failed [ 137.431877][ T5722] cypress 0003:04B4:DE61.0004: probe with driver cypress failed with error -22 [ 137.580583][ T5700] usb 4-1: USB disconnect, device number 13 [ 137.868702][ T6567] netlink: 16 bytes leftover after parsing attributes in process `syz.2.254'. [ 138.040139][ T5773] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 138.229659][ T5773] usb 1-1: Using ep0 maxpacket: 8 [ 138.248985][ T5773] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 138.268092][ T5773] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1280, setting to 1024 [ 138.280129][ T5773] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 138.291197][ T5773] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 138.313019][ T5773] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.331493][ T5773] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 138.341446][ T5773] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.352852][ T6577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.259'. [ 138.394719][ T6577] vlan2: entered promiscuous mode [ 138.400302][ T6577] bond0: entered promiscuous mode [ 138.405489][ T6577] bond_slave_0: entered promiscuous mode [ 138.411673][ T6577] bond_slave_1: entered promiscuous mode [ 138.774330][ T6585] kvm: pic: non byte write [ 138.939636][ T5722] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 139.035897][ T5684] usb 2-1: USB disconnect, device number 21 [ 139.104740][ T5722] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.144501][ T6592] usbtmc 1-1:16.0: simple usb_control_msg returned 0 [ 139.148430][ T5722] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.161713][ T5722] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 139.196649][ T5722] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 139.222443][ T5725] usbhid 5-1:0.0: can't add hid device: -71 [ 139.238663][ T5722] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.251879][ T5725] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 139.274798][ T5722] usb 4-1: config 0 descriptor?? [ 139.297430][ T5725] usb 5-1: USB disconnect, device number 14 [ 139.348472][ T5700] usb 1-1: USB disconnect, device number 15 [ 139.555196][ T6600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.582058][ T6600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.702607][ T5722] usbhid 4-1:0.0: can't add hid device: -71 [ 139.713709][ T5722] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 139.724968][ T5722] usb 4-1: USB disconnect, device number 14 [ 139.791031][ T5725] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 139.929426][ T5725] usb 2-1: device descriptor read/64, error -71 [ 139.971383][ T6614] netlink: 36 bytes leftover after parsing attributes in process `syz.0.274'. [ 140.189691][ T5725] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 140.313318][ T6620] fuse: Bad value for 'fd' [ 140.319580][ T5725] usb 2-1: device descriptor read/64, error -71 [ 140.329669][ T5699] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 140.430608][ T5725] usb usb2-port1: attempt power cycle [ 140.491794][ T5699] usb 1-1: config 48 interface 0 altsetting 98 bulk endpoint 0x4 has invalid maxpacket 1024 [ 140.517434][ T5699] usb 1-1: config 48 interface 0 altsetting 98 has an endpoint descriptor with address 0x5A, changing to 0xA [ 140.536888][ T5699] usb 1-1: config 48 interface 0 altsetting 98 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 140.548418][ T5699] usb 1-1: config 48 interface 0 altsetting 98 endpoint 0xA has invalid wMaxPacketSize 0 [ 140.559186][ T5699] usb 1-1: config 48 interface 0 has no altsetting 0 [ 140.574366][ T5699] usb 1-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 140.584041][ T5699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.590324][ T5722] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 140.593402][ T5699] usb 1-1: Product: syz [ 140.604250][ T5699] usb 1-1: Manufacturer: syz [ 140.619078][ T5699] usb 1-1: SerialNumber: syz [ 140.631611][ T6618] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 140.763940][ T5722] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 140.780753][ T5725] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 140.799819][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.816117][ T5722] usb 4-1: Product: syz [ 140.830045][ T5725] usb 2-1: device descriptor read/8, error -71 [ 140.838224][ T5722] usb 4-1: Manufacturer: syz [ 140.849269][ T5722] usb 4-1: SerialNumber: syz [ 140.866793][ T6630] xt_hashlimit: size too large, truncated to 1048576 [ 140.881656][ T5722] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 140.896140][ T6631] binder: 6628:6631 ioctl c018620c 200000000240 returned -22 [ 140.959045][ T6634] binder: 6628:6634 ioctl c00c620f 2000000002c0 returned -22 [ 141.002378][ T5684] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 141.036713][ T6628] [U] v [ 141.057762][ T6637] input: syz1 as /devices/virtual/input/input28 [ 141.080811][ T5725] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 141.131263][ T5725] usb 2-1: device descriptor read/8, error -71 [ 141.230380][ T6639] netlink: 36 bytes leftover after parsing attributes in process `syz.4.283'. [ 141.242161][ T5725] usb usb2-port1: unable to enumerate USB device [ 141.539608][ T5725] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 141.711759][ T5725] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 141.721171][ T5725] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.738679][ T5725] usb 5-1: config 0 descriptor?? [ 141.879422][ T5714] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 142.033071][ T5714] usb 3-1: unable to get BOS descriptor or descriptor too short [ 142.050296][ T5684] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 142.066176][ T5684] ath9k_htc: Failed to initialize the device [ 142.070401][ T5714] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 142.099771][ T5714] usb 3-1: can't read configurations, error -71 [ 142.136875][ T5684] usb 4-1: ath9k_htc: USB layer deinitialized [ 142.155881][ T6640] netlink: 'syz.4.283': attribute type 10 has an invalid length. [ 142.175875][ T6640] warning: `syz.4.283' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 142.617717][ T6651] loop9: detected capacity change from 0 to 7 [ 142.643937][ T6651] Buffer I/O error on dev loop9, logical block 0, async page read [ 142.668708][ T6651] Buffer I/O error on dev loop9, logical block 0, async page read [ 142.680504][ T6651] Buffer I/O error on dev loop9, logical block 0, async page read [ 142.705111][ T6651] Buffer I/O error on dev loop9, logical block 0, async page read [ 142.713938][ T6651] Buffer I/O error on dev loop9, logical block 0, async page read [ 142.753621][ T6651] Buffer I/O error on dev loop9, logical block 0, async page read [ 142.775032][ T6651] Buffer I/O error on dev loop9, logical block 0, async page read [ 142.787558][ T6651] ldm_validate_partition_table(): Disk read failed. [ 142.810035][ T6651] Buffer I/O error on dev loop9, logical block 0, async page read [ 142.819002][ T6651] Buffer I/O error on dev loop9, logical block 0, async page read [ 142.831993][ T6651] Buffer I/O error on dev loop9, logical block 0, async page read [ 142.842886][ T6651] Dev loop9: unable to read RDB block 0 [ 142.849014][ T6651] loop9: unable to read partition table [ 142.865674][ T6651] loop9: partition table beyond EOD, truncated [ 142.876184][ T6651] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 142.876184][ T6651] ) failed (rc=-5) [ 142.955137][ T5722] usb 4-1: USB disconnect, device number 15 [ 143.204559][ T5699] usb 1-1: USB disconnect, device number 16 [ 143.438883][ T6667] netlink: 56 bytes leftover after parsing attributes in process `syz.3.295'. [ 143.625324][ T6676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.299'. [ 143.642093][ T6676] vlan2: entered promiscuous mode [ 143.647359][ T6676] bond0: entered promiscuous mode [ 143.652831][ T6676] bond_slave_0: entered promiscuous mode [ 143.658818][ T6676] bond_slave_1: entered promiscuous mode [ 143.743196][ T5700] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 143.930194][ T5700] usb 3-1: Using ep0 maxpacket: 8 [ 143.943323][ T5700] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.967034][ T5700] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 143.981328][ T5700] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 143.995324][ T5700] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 144.000192][ T5722] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 144.015030][ T5700] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 144.026744][ T5700] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.044727][ T5700] hub 3-1:1.0: bad descriptor, ignoring hub [ 144.056518][ T5700] hub 3-1:1.0: probe with driver hub failed with error -5 [ 144.066581][ T5700] cdc_wdm 3-1:1.0: skipping garbage [ 144.072789][ T5700] cdc_wdm 3-1:1.0: skipping garbage [ 144.083492][ T5700] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 144.102415][ T5700] cdc_wdm 3-1:1.0: Unknown control protocol [ 144.205169][ T5722] usb 4-1: unable to get BOS descriptor or descriptor too short [ 144.226902][ T5722] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 144.239523][ T5725] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 144.258828][ T6671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.259640][ T5722] usb 4-1: can't read configurations, error -71 [ 144.283339][ T6671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.337468][ T6691] syzkaller0: entered promiscuous mode [ 144.345013][ T6691] syzkaller0: entered allmulticast mode [ 144.388532][ T5700] usb 5-1: USB disconnect, device number 15 [ 144.410918][ T5728] usb 3-1: USB disconnect, device number 15 [ 144.421614][ T5725] usb 1-1: config 48 interface 0 altsetting 98 bulk endpoint 0x4 has invalid maxpacket 1024 [ 144.433627][ T5725] usb 1-1: config 48 interface 0 altsetting 98 has an endpoint descriptor with address 0x5A, changing to 0xA [ 144.453134][ T5725] usb 1-1: config 48 interface 0 altsetting 98 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 144.468541][ T5725] usb 1-1: config 48 interface 0 altsetting 98 endpoint 0xA has invalid wMaxPacketSize 0 [ 144.479444][ T5725] usb 1-1: config 48 interface 0 has no altsetting 0 [ 144.490483][ T5725] usb 1-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 144.508184][ T5725] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.527581][ T5725] usb 1-1: Product: syz [ 144.535461][ T5725] usb 1-1: Manufacturer: syz [ 144.544297][ T5725] usb 1-1: SerialNumber: syz [ 144.554591][ T6687] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 144.769740][ T5728] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 144.910454][ T5728] usb 3-1: device descriptor read/64, error -71 [ 144.968524][ T6707] input: syz1 as /devices/virtual/input/input31 [ 144.979492][ T5684] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 145.139709][ T5684] usb 5-1: Using ep0 maxpacket: 8 [ 145.152048][ T5684] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 145.170494][ T5728] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 145.179826][ T5684] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1792, setting to 1024 [ 145.207835][ T5684] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 145.244447][ T5684] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 145.265340][ T5684] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.283496][ T5684] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 145.299834][ T5684] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.339646][ T5728] usb 3-1: device descriptor read/64, error -71 [ 145.470110][ T5728] usb usb3-port1: attempt power cycle [ 145.649983][ T5699] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 145.809915][ T5699] usb 2-1: Using ep0 maxpacket: 32 [ 145.819865][ T5728] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 145.834426][ T5699] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 145.843907][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.852208][ T5699] usb 2-1: Product: syz [ 145.856512][ T5699] usb 2-1: Manufacturer: syz [ 145.861218][ T5699] usb 2-1: SerialNumber: syz [ 145.862618][ T5728] usb 3-1: device descriptor read/8, error -71 [ 145.873028][ T5699] usb 2-1: config 0 descriptor?? [ 146.092240][ T6725] usbtmc 5-1:16.0: simple usb_control_msg returned 0 [ 146.109504][ T5728] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 146.144795][ T5728] usb 3-1: device descriptor read/8, error -71 [ 146.261447][ T5728] usb usb3-port1: unable to enumerate USB device [ 146.283817][ T5699] airspy 2-1:0.0: Board ID: 00 [ 146.288717][ T5699] airspy 2-1:0.0: Firmware version: [ 146.298063][ T5728] usb 5-1: USB disconnect, device number 16 [ 147.125827][ T5725] usb 1-1: USB disconnect, device number 17 [ 147.187308][ T6731] xt_hashlimit: size too large, truncated to 1048576 [ 147.360215][ T6737] netlink: 36 bytes leftover after parsing attributes in process `syz.2.323'. [ 147.491459][ T5699] airspy 2-1:0.0: usb_control_msg() failed -110 request 0e [ 147.566342][ T5699] airspy 2-1:0.0: Registered as swradio24 [ 147.588698][ T5699] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 147.640620][ T5725] usb 2-1: USB disconnect, device number 26 [ 147.698190][ T6743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.324'. [ 148.457330][ T6755] netlink: 'syz.0.328': attribute type 21 has an invalid length. [ 148.744061][ T6745] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 148.775817][ T6745] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 148.966949][ T6745] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 149.075299][ T6745] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 149.098765][ T6745] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 149.150629][ T6745] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 149.201815][ T6745] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 149.216468][ T6762] veth0_vlan: entered allmulticast mode [ 149.226958][ T6767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.329'. [ 149.250918][ T6745] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 149.319070][ T6745] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 149.407547][ T6745] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 149.455016][ T6745] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 149.516848][ T6745] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 149.540955][ T6767] veth0_vlan (unregistering): left allmulticast mode [ 149.575427][ T6745] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 149.591032][ T6745] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 149.626902][ T6745] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 149.889472][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 149.949461][ T5725] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 150.110976][ T5725] usb 2-1: Using ep0 maxpacket: 32 [ 150.143943][ T5725] usb 2-1: config 123 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 150.167977][ T5725] usb 2-1: config 123 interface 0 has no altsetting 0 [ 150.178541][ T5725] usb 2-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 150.201766][ T5725] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.203825][ T5714] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 150.213983][ T5725] usb 2-1: Product: syz [ 150.222035][ T5725] usb 2-1: Manufacturer: syz [ 150.228591][ T5725] usb 2-1: SerialNumber: syz [ 150.401634][ T5714] usb 3-1: config 48 interface 0 altsetting 98 bulk endpoint 0x4 has invalid maxpacket 1024 [ 150.442824][ T5714] usb 3-1: config 48 interface 0 altsetting 98 has an endpoint descriptor with address 0x5A, changing to 0xA [ 150.472815][ T5714] usb 3-1: config 48 interface 0 altsetting 98 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 150.500664][ T5714] usb 3-1: config 48 interface 0 altsetting 98 endpoint 0xA has invalid wMaxPacketSize 0 [ 150.532569][ T5714] usb 3-1: config 48 interface 0 has no altsetting 0 [ 150.554029][ T5714] usb 3-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 150.579373][ T5714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.596632][ T5714] usb 3-1: Product: syz [ 150.614429][ T5714] usb 3-1: Manufacturer: syz [ 150.632899][ T5714] usb 3-1: SerialNumber: syz [ 150.657246][ T6774] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 150.910498][ T5725] usb 2-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 150.941794][ T5725] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 150.957202][ T5725] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 150.968609][ T5725] usb 2-1: media controller created [ 151.055922][ T5725] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 151.089538][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 151.135784][ T6785] input: syz1 as /devices/virtual/input/input32 [ 151.149580][ T5725] set interface failed [ 151.150122][ T5725] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 151.166457][ T5725] error writing reg: 0xff, val: 0x00 [ 151.250519][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 151.301534][ T6783] fuse: fd is not a fuse device [ 151.355805][ T5725] dvb_usb_mxl111sf 2-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 151.377196][ T5725] usb 2-1: USB disconnect, device number 27 [ 151.410982][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 151.649541][ T50] Bluetooth: hci4: command 0x0c1a tx timeout [ 151.747734][ T6797] netlink: 16 bytes leftover after parsing attributes in process `syz.0.340'. [ 151.880265][ T5725] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 151.971118][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 152.018603][ T6805] netlink: 36 bytes leftover after parsing attributes in process `syz.3.344'. [ 152.062816][ T5725] usb 2-1: config 48 interface 0 altsetting 98 bulk endpoint 0x4 has invalid maxpacket 1024 [ 152.075780][ T5725] usb 2-1: config 48 interface 0 altsetting 98 has an endpoint descriptor with address 0x5A, changing to 0xA [ 152.089733][ T5725] usb 2-1: config 48 interface 0 altsetting 98 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 152.101318][ T5725] usb 2-1: config 48 interface 0 altsetting 98 endpoint 0xA has invalid wMaxPacketSize 0 [ 152.113327][ T5725] usb 2-1: config 48 interface 0 has no altsetting 0 [ 152.125284][ T5725] usb 2-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 152.143036][ T5725] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.158321][ T5725] usb 2-1: Product: syz [ 152.163199][ T5725] usb 2-1: Manufacturer: syz [ 152.167942][ T5725] usb 2-1: SerialNumber: syz [ 152.183622][ T6793] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 152.249503][ T5699] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 152.422916][ T5699] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.434060][ T5699] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.443981][ T5699] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 152.453158][ T5699] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.468169][ T5699] usb 1-1: config 0 descriptor?? [ 152.597221][ T6817] input: syz1 as /devices/virtual/input/input33 [ 152.649443][ T808] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 152.681297][ T6804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.707734][ T6804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.819481][ T808] usb 4-1: Using ep0 maxpacket: 32 [ 152.830259][ T808] usb 4-1: config 123 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 152.844711][ T808] usb 4-1: config 123 interface 0 has no altsetting 0 [ 152.859679][ T808] usb 4-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 152.869220][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.878068][ T808] usb 4-1: Product: syz [ 152.883048][ T808] usb 4-1: Manufacturer: syz [ 152.887796][ T808] usb 4-1: SerialNumber: syz [ 152.924468][ T6804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.943281][ T6804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.028201][ T5714] usb 3-1: USB disconnect, device number 20 [ 153.164407][ T5699] hid_parser_main: 3 callbacks suppressed [ 153.164459][ T5699] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 153.169823][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 153.199559][ T5699] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 153.331949][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 153.423187][ T5699] cp2112 0003:10C4:EA90.0005: error requesting version [ 153.445475][ T808] usb 4-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 153.483605][ T808] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 153.501953][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 153.548287][ T808] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 153.571428][ T5684] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 153.576066][ T808] usb 4-1: media controller created [ 153.648906][ T6837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.356'. [ 153.660454][ T808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 153.714500][ T808] set interface failed [ 153.714532][ T808] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 153.731178][ T50] Bluetooth: hci4: command 0x0c1a tx timeout [ 153.754164][ T808] error writing reg: 0xff, val: 0x00 [ 153.787565][ T5684] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 153.802560][ T5684] usb 5-1: can't read configurations, error -71 [ 153.838323][ T808] dvb_usb_mxl111sf 4-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 153.857754][ T808] usb 4-1: USB disconnect, device number 18 [ 154.029475][ T5700] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 154.049652][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 154.146699][ T6843] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 154.190179][ T5700] usb 3-1: Using ep0 maxpacket: 32 [ 154.198432][ T5700] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.210566][ T5700] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.221543][ T5700] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 154.236049][ T5700] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 154.245572][ T5700] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.259155][ T5700] usb 3-1: config 0 descriptor?? [ 154.402919][ T5773] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 154.559444][ T5773] usb 4-1: Using ep0 maxpacket: 16 [ 154.572490][ T5773] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 154.583363][ T5773] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.592059][ T5773] usb 4-1: Product: syz [ 154.596716][ T5773] usb 4-1: Manufacturer: syz [ 154.601793][ T5773] usb 4-1: SerialNumber: syz [ 154.611835][ T5773] usb 4-1: config 0 descriptor?? [ 154.665788][ T5725] usb 2-1: USB disconnect, device number 28 [ 154.767173][ T5700] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0006/input/input34 [ 154.828202][ T5773] dvb_usb_dtv5100 4-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 154.849931][ T5684] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 154.860360][ T5773] usb 4-1: USB disconnect, device number 19 [ 154.956996][ T5700] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0006/input/input35 [ 155.014399][ T5684] usb 5-1: config 48 interface 0 altsetting 98 bulk endpoint 0x4 has invalid maxpacket 1024 [ 155.042282][ T5684] usb 5-1: config 48 interface 0 altsetting 98 has an endpoint descriptor with address 0x5A, changing to 0xA [ 155.073781][ T5684] usb 5-1: config 48 interface 0 altsetting 98 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 155.106162][ T5684] usb 5-1: config 48 interface 0 altsetting 98 endpoint 0xA has invalid wMaxPacketSize 0 [ 155.130030][ T5684] usb 5-1: config 48 interface 0 has no altsetting 0 [ 155.156023][ T5684] usb 5-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 155.186755][ T5684] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.207749][ T5684] usb 5-1: Product: syz [ 155.213684][ T5684] usb 5-1: Manufacturer: syz [ 155.223885][ T5684] usb 5-1: SerialNumber: syz [ 155.249433][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 155.276882][ T6849] raw-gadget.6 gadget.4: fail, usb_ep_enable returned -22 [ 155.291035][ T24] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 155.390998][ T6857] syzkaller0: entered promiscuous mode [ 155.399200][ T6857] syzkaller0: entered allmulticast mode [ 155.412476][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 155.569526][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 155.645979][ T6871] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 155.695612][ T6873] input: syz1 as /devices/virtual/input/input36 [ 155.809584][ T50] Bluetooth: hci4: command 0x0c1a tx timeout [ 156.540230][ T808] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 156.719675][ T808] usb 2-1: Using ep0 maxpacket: 32 [ 156.727804][ T808] usb 2-1: config 123 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 156.742531][ T808] usb 2-1: config 123 interface 0 has no altsetting 0 [ 156.755008][ T808] usb 2-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 156.764841][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.773147][ T808] usb 2-1: Product: syz [ 156.797220][ T808] usb 2-1: Manufacturer: syz [ 156.818300][ T808] usb 2-1: SerialNumber: syz [ 156.877580][ T6884] syzkaller0: entered promiscuous mode [ 156.883685][ T6884] syzkaller0: entered allmulticast mode [ 156.900033][ T6885] tipc: Enabled bearer , priority 0 [ 156.932176][ T6885] tipc: Resetting bearer [ 156.966530][ T6885] tipc: Disabling bearer [ 157.152138][ T6890] netem: change failed [ 157.402042][ T808] usb 2-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 157.670179][ T5684] usb 5-1: USB disconnect, device number 18 [ 157.694445][ T6892] netlink: 36 bytes leftover after parsing attributes in process `syz.4.374'. [ 157.782261][ T808] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 157.836316][ T808] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 157.885682][ T808] usb 2-1: media controller created [ 158.106721][ T6897] fuse: Bad value for 'user_id' [ 158.128146][ T6897] fuse: Bad value for 'user_id' [ 158.225571][ T808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 158.257307][ T6897] vxcan1: entered promiscuous mode [ 158.268775][ T6897] vxcan1: entered allmulticast mode [ 158.402770][ T6901] xt_hashlimit: size too large, truncated to 1048576 [ 158.452408][ T5699] cp2112 0003:10C4:EA90.0005: probe with driver cp2112 failed with error -32 [ 158.525872][ T808] set interface failed [ 158.525905][ T808] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 158.582522][ T5700] kye 0003:0458:5011.0006: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 158.670043][ T808] error writing reg: 0xff, val: 0x00 [ 159.012580][ T5699] usb 1-1: USB disconnect, device number 18 [ 159.402868][ T808] dvb_usb_mxl111sf 2-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 159.583298][ T808] usb 2-1: USB disconnect, device number 30 [ 159.851058][ T5773] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 159.934614][ T5714] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 159.967911][ T5699] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 160.063192][ T5773] usb 5-1: config 48 interface 0 altsetting 98 bulk endpoint 0x4 has invalid maxpacket 1024 [ 160.100569][ T5773] usb 5-1: config 48 interface 0 altsetting 98 has an endpoint descriptor with address 0x5A, changing to 0xA [ 160.128931][ T5773] usb 5-1: config 48 interface 0 altsetting 98 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 160.155747][ T5773] usb 5-1: config 48 interface 0 altsetting 98 endpoint 0xA has invalid wMaxPacketSize 0 [ 160.198952][ T5773] usb 5-1: config 48 interface 0 has no altsetting 0 [ 160.219249][ T5773] usb 5-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 160.233007][ T5773] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.241835][ T5773] usb 5-1: Product: syz [ 160.246172][ T5773] usb 5-1: Manufacturer: syz [ 160.254534][ T5773] usb 5-1: SerialNumber: syz [ 160.276649][ T6916] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 160.293481][ T5714] usb 4-1: Using ep0 maxpacket: 8 [ 160.402690][ T5714] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 160.453131][ T5714] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 7936, setting to 1024 [ 160.474783][ T5699] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 160.494988][ T5699] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 160.536739][ T5714] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 160.558120][ T5699] usb 1-1: Product: syz [ 160.571665][ T5699] usb 1-1: SerialNumber: syz [ 160.621520][ T5714] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 160.642289][ T5699] usb 1-1: config 0 descriptor?? [ 160.673715][ T5714] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 160.709215][ T6924] input: syz1 as /devices/virtual/input/input37 [ 160.716403][ T5714] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 160.831144][ T5714] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.878388][ T808] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 161.026855][ T5699] hso 1-1:0.0: Failed to find INT IN ep [ 161.283136][ T808] usb 2-1: Using ep0 maxpacket: 32 [ 161.551339][ T808] usb 2-1: config 123 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 161.611006][ T808] usb 2-1: config 123 interface 0 has no altsetting 0 [ 162.221861][ T808] usb 2-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 162.241344][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.251410][ T5684] usb 1-1: USB disconnect, device number 19 [ 162.704159][ T808] usb 2-1: Product: syz [ 162.708407][ T808] usb 2-1: Manufacturer: syz [ 162.754740][ T5773] usb 5-1: USB disconnect, device number 19 [ 162.976421][ T808] usb 2-1: SerialNumber: syz [ 163.299505][ T5773] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 163.361818][ T808] usb 2-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 163.449645][ T5684] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 163.479430][ T5773] usb 1-1: Using ep0 maxpacket: 16 [ 163.486645][ T808] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 163.498243][ T5773] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 163.503346][ T5773] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 163.503377][ T5773] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.503398][ T5773] usb 1-1: Product: syz [ 163.503413][ T5773] usb 1-1: Manufacturer: syz [ 163.503455][ T5773] usb 1-1: SerialNumber: syz [ 163.521754][ T5773] usb 1-1: config 0 descriptor?? [ 163.564703][ T5773] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 163.564771][ T5773] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 163.611848][ T5684] usb 5-1: Using ep0 maxpacket: 16 [ 163.619963][ T5684] usb 5-1: unable to get BOS descriptor or descriptor too short [ 163.737112][ T5684] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 163.748650][ T5684] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 512, setting to 64 [ 163.767847][ T5684] usb 5-1: string descriptor 0 read error: -22 [ 163.778072][ T5684] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 163.804813][ T5684] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.847369][ T6940] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 163.897179][ T5684] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 163.926589][ T808] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 163.948125][ T5684] usb 5-1: MIDIStreaming interface descriptor not found [ 163.958531][ T808] usb 2-1: media controller created [ 164.071627][ T808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 164.140056][ T5773] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 164.437342][ T808] set interface failed [ 164.437376][ T808] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 164.492145][ T808] error writing reg: 0xff, val: 0x00 [ 164.602581][ T5684] usb 5-1: USB disconnect, device number 20 [ 164.718481][ T5773] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 164.743359][ T5773] em28xx 1-1:0.0: board has no eeprom [ 164.890284][ T5773] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 164.950745][ T5773] em28xx 1-1:0.0: dvb set to bulk mode. [ 164.981154][ T5728] em28xx 1-1:0.0: Binding DVB extension [ 165.035732][ T5773] usb 1-1: USB disconnect, device number 20 [ 165.069004][ T808] dvb_usb_mxl111sf 2-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 165.115938][ T5773] em28xx 1-1:0.0: Disconnecting em28xx [ 165.346713][ T6959] netlink: 16 bytes leftover after parsing attributes in process `syz.1.397'. [ 165.356408][ T6957] program syz.4.396 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 165.494940][ T808] usb 2-1: USB disconnect, device number 31 [ 165.559219][ T5728] em28xx 1-1:0.0: Registering input extension [ 165.589219][ T5773] em28xx 1-1:0.0: Closing input extension [ 165.854918][ T5773] em28xx 1-1:0.0: Freeing device [ 165.889597][ T5684] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 165.948667][ T6964] fuse: Unknown parameter 'çrou' [ 166.060049][ T5684] usb 5-1: Using ep0 maxpacket: 16 [ 166.081719][ T5684] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.105249][ T5684] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 166.120697][ T5684] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 166.133129][ T5684] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 166.144184][ T5684] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 166.163815][ T5684] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 166.173590][ T5684] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 166.182689][ T5684] usb 5-1: Manufacturer: syz [ 166.198583][ T5684] usb 5-1: config 0 descriptor?? [ 166.204941][ T5773] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 166.291862][ C0] kye 0003:0458:5011.0006: usb_submit_urb(ctrl) failed: -1 [ 166.305665][ T6860] kye 0003:0458:5011.0006: timeout initializing reports [ 166.403658][ T5773] usb 1-1: config 48 interface 0 altsetting 98 bulk endpoint 0x4 has invalid maxpacket 1024 [ 166.465942][ T5725] usb 4-1: USB disconnect, device number 20 [ 166.475775][ T5773] usb 1-1: config 48 interface 0 altsetting 98 has an endpoint descriptor with address 0x5A, changing to 0xA [ 166.564658][ T5773] usb 1-1: config 48 interface 0 altsetting 98 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 166.648227][ T5773] usb 1-1: config 48 interface 0 altsetting 98 endpoint 0xA has invalid wMaxPacketSize 0 [ 166.716375][ T5773] usb 1-1: config 48 interface 0 has no altsetting 0 [ 166.741366][ T5773] usb 1-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 166.759190][ T5773] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.767539][ T5684] rc_core: IR keymap rc-hauppauge not found [ 166.783425][ T5684] Registered IR keymap rc-empty [ 166.795799][ T5773] usb 1-1: Product: syz [ 166.805791][ T5684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 166.816962][ T5773] usb 1-1: Manufacturer: syz [ 166.834174][ T5773] usb 1-1: SerialNumber: syz [ 166.859911][ T5684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 166.881461][ T6962] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 166.923676][ T5684] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 167.001859][ T5684] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input39 [ 167.069177][ T5684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 167.091625][ T5725] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 167.120598][ T5684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 167.161172][ T5684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 167.189607][ T5684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 167.229536][ T5684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 167.241008][ T5714] usb 3-1: USB disconnect, device number 21 [ 167.290746][ T5725] usb 4-1: Using ep0 maxpacket: 32 [ 167.301558][ T5684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 167.331844][ T5725] usb 4-1: config 123 interface 0 has no altsetting 0 [ 167.376755][ T5725] usb 4-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 167.389845][ T5684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 167.424987][ T6978] input: syz1 as /devices/virtual/input/input40 [ 167.442711][ T5725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.451570][ T5684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 167.493126][ T5725] usb 4-1: Product: syz [ 167.506333][ T5725] usb 4-1: Manufacturer: syz [ 167.515264][ T5684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 167.532949][ T5725] usb 4-1: SerialNumber: syz [ 167.578430][ T5684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 167.698362][ T5684] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 167.766603][ T5684] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 167.876198][ T5725] usb 4-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 167.914332][ T5684] usb 5-1: USB disconnect, device number 21 [ 168.003377][ T5725] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 168.057331][ T5725] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 168.106725][ T5725] usb 4-1: media controller created [ 168.322589][ T5725] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 168.640401][ T5725] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 168.706373][ T5725] error writing reg: 0xff, val: 0x00 [ 169.217726][ T5725] dvb_usb_mxl111sf 4-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 169.463975][ T5725] usb 4-1: USB disconnect, device number 21 [ 170.059048][ T5773] usb 1-1: USB disconnect, device number 21 [ 170.269913][ T7008] fuse: Bad value for 'fd' [ 170.341959][ T7010] input: syz1 as /devices/virtual/input/input41 [ 170.459548][ T7014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.413'. [ 171.021021][ T7025] FAULT_INJECTION: forcing a failure. [ 171.021021][ T7025] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.156960][ T7025] CPU: 0 UID: 0 PID: 7025 Comm: syz.1.417 Not tainted syzkaller #0 PREEMPT(full) [ 171.156990][ T7025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 171.157003][ T7025] Call Trace: [ 171.157012][ T7025] [ 171.157021][ T7025] dump_stack_lvl+0xe8/0x150 [ 171.157051][ T7025] should_fail_ex+0x412/0x560 [ 171.157083][ T7025] _copy_from_user+0x2d/0xb0 [ 171.157113][ T7025] ___sys_recvmsg+0x175/0x590 [ 171.157149][ T7025] ? __pfx____sys_recvmsg+0x10/0x10 [ 171.157187][ T7025] ? __fget_files+0x2a/0x420 [ 171.157230][ T7025] ? __fget_files+0x3a0/0x420 [ 171.157265][ T7025] do_recvmmsg+0x334/0x800 [ 171.157303][ T7025] ? __pfx_do_recvmmsg+0x10/0x10 [ 171.157345][ T7025] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 171.157391][ T7025] __x64_sys_recvmmsg+0x198/0x250 [ 171.157424][ T7025] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 171.157463][ T7025] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.157485][ T7025] do_syscall_64+0x15f/0xf80 [ 171.157510][ T7025] ? trace_irq_disable+0x3b/0x140 [ 171.157540][ T7025] ? clear_bhb_loop+0x40/0x90 [ 171.157565][ T7025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.157586][ T7025] RIP: 0033:0x7fac3319cdd9 [ 171.157605][ T7025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.157622][ T7025] RSP: 002b:00007fac340bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 171.157643][ T7025] RAX: ffffffffffffffda RBX: 00007fac33415fa0 RCX: 00007fac3319cdd9 [ 171.157658][ T7025] RDX: 0000000000000f00 RSI: 0000200000000400 RDI: 0000000000000003 [ 171.157671][ T7025] RBP: 00007fac340bb090 R08: 0000000000000000 R09: 0000000000000000 [ 171.157684][ T7025] R10: 0000004c42bb4f92 R11: 0000000000000246 R12: 0000000000000001 [ 171.157696][ T7025] R13: 00007fac33416038 R14: 00007fac33415fa0 R15: 00007fac3353fa48 [ 171.157728][ T7025] [ 171.818787][ T7043] xt_hashlimit: size too large, truncated to 1048576 [ 172.309473][ T5725] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 172.514505][ T5725] usb 4-1: Using ep0 maxpacket: 32 [ 172.551507][ T5725] usb 4-1: config 123 interface 0 has no altsetting 0 [ 172.599337][ T5725] usb 4-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 172.613454][ T7056] netlink: 16 bytes leftover after parsing attributes in process `syz.2.427'. [ 172.641966][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.428'. [ 172.663204][ T5725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.706018][ T5725] usb 4-1: Product: syz [ 172.731105][ T5725] usb 4-1: Manufacturer: syz [ 172.769785][ T5725] usb 4-1: SerialNumber: syz [ 173.037807][ T5725] usb 4-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 173.120878][ T5725] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 173.205467][ T5725] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 173.241477][ T5725] usb 4-1: media controller created [ 173.334706][ T5725] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 173.345200][ T5773] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 173.380406][ T5684] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 173.446292][ T5725] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 173.460735][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 173.486733][ T5725] error writing reg: 0xff, val: 0x00 [ 173.513406][ T5773] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 173.552090][ T7068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.433'. [ 173.567864][ T5773] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.586303][ T5684] usb 1-1: Using ep0 maxpacket: 8 [ 173.611794][ T5684] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.641551][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 173.651937][ T5773] usb 3-1: config 0 descriptor?? [ 173.675767][ T5725] dvb_usb_mxl111sf 4-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 173.705309][ T5684] usb 1-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 173.715066][ T9] usb 5-1: config 157 has too many interfaces: 246, using maximum allowed: 32 [ 173.741422][ T5773] cp210x 3-1:0.0: cp210x converter detected [ 173.767684][ T5684] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.778124][ T9] usb 5-1: config 157 has 1 interface, different from the descriptor's value: 246 [ 173.824504][ T5722] usb 4-1: USB disconnect, device number 22 [ 173.838583][ T5684] usb 1-1: Product: syz [ 173.856767][ T9] usb 5-1: config 157 has no interface number 0 [ 173.880312][ T5684] usb 1-1: Manufacturer: syz [ 173.907573][ T9] usb 5-1: config 157 interface 224 has no altsetting 0 [ 173.920721][ T5684] usb 1-1: SerialNumber: syz [ 173.981771][ T5684] usb 1-1: config 0 descriptor?? [ 174.013009][ T9] usb 5-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 174.062661][ T5684] cdc_phonet 1-1:0.0: skipping garbage [ 174.110114][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.124283][ T5684] cdc_phonet 1-1:0.0: probe with driver cdc_phonet failed with error -22 [ 174.145808][ T7060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.169136][ T9] usb 5-1: Product: syz [ 174.186727][ T9] usb 5-1: Manufacturer: syz [ 174.206673][ T7060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.230993][ T9] usb 5-1: SerialNumber: syz [ 174.288307][ T5684] usb 1-1: USB disconnect, device number 22 [ 174.520086][ T9] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 174.730989][ T5773] cp210x 3-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 174.783114][ T5773] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 174.856377][ T5773] usb 3-1: cp210x converter now attached to ttyUSB0 [ 174.924589][ T5773] usb 3-1: USB disconnect, device number 22 [ 174.994409][ T7084] netlink: 12 bytes leftover after parsing attributes in process `syz.3.436'. [ 175.086045][ T5773] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 175.168317][ T5773] cp210x 3-1:0.0: device disconnected [ 175.593794][ T9] ueagle-atm 5-1:157.224: usbatm_usb_probe: bind failed: -19! [ 175.704687][ T9] usb 5-1: USB disconnect, device number 22 [ 176.961599][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 177.137450][ T7126] netlink: 16 bytes leftover after parsing attributes in process `syz.0.452'. [ 177.160005][ T5773] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 177.170480][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 177.194520][ T9] usb 5-1: config 123 interface 0 has no altsetting 0 [ 177.219615][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 177.241012][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.273139][ T9] usb 5-1: Product: syz [ 177.286753][ T9] usb 5-1: Manufacturer: syz [ 177.303738][ T9] usb 5-1: SerialNumber: syz [ 177.329500][ T5773] usb 3-1: device descriptor read/64, error -71 [ 177.340555][ T5725] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 177.522184][ T5725] usb 2-1: device descriptor read/64, error -71 [ 177.578998][ T9] usb 5-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 177.594628][ T5773] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 177.633831][ T9] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 177.670280][ T9] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 177.702543][ T9] usb 5-1: media controller created [ 177.749541][ T5773] usb 3-1: device descriptor read/64, error -71 [ 177.789404][ T5725] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 177.799116][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 177.881270][ T5773] usb usb3-port1: attempt power cycle [ 177.914877][ T9] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 177.948051][ T9] error writing reg: 0xff, val: 0x00 [ 177.959432][ T5725] usb 2-1: device descriptor read/64, error -71 [ 178.123840][ T5725] usb usb2-port1: attempt power cycle [ 178.162528][ T9] dvb_usb_mxl111sf 5-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 178.269398][ T5773] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 178.324268][ T9] usb 5-1: USB disconnect, device number 23 [ 178.346064][ T5773] usb 3-1: device descriptor read/8, error -71 [ 178.600152][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 179.017156][ T5725] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 179.101083][ T5725] usb 2-1: device descriptor read/8, error -71 [ 179.129484][ T5773] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 179.380044][ T5773] usb 3-1: device descriptor read/8, error -71 [ 179.478293][ T5725] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 179.573682][ T5773] usb usb3-port1: unable to enumerate USB device [ 179.610471][ T5725] usb 2-1: device descriptor read/8, error -71 [ 179.791314][ T5725] usb usb2-port1: unable to enumerate USB device [ 182.089420][ T5725] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 182.282551][ T5725] usb 3-1: Using ep0 maxpacket: 8 [ 182.339962][ T5725] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 182.399902][ T5725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.456928][ T5725] usb 3-1: config 0 descriptor?? [ 183.073901][ T7148] xfrm1: entered allmulticast mode [ 183.618895][ T5725] usb 3-1: string descriptor 0 read error: -71 [ 183.670612][ T5725] uvcvideo 3-1:0.0: Found multiple Units with ID 1 [ 183.698625][ T5725] uvcvideo 3-1:0.0: Found UVC 0.00 device (2833:0201) [ 183.730248][ T5725] uvcvideo 3-1:0.0: No valid video chain found. [ 183.942719][ T5725] usb 3-1: USB disconnect, device number 27 [ 184.216642][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 184.848616][ T7182] netlink: 16 bytes leftover after parsing attributes in process `syz.0.469'. [ 185.179732][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 185.250903][ T7189] FAULT_INJECTION: forcing a failure. [ 185.250903][ T7189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.290854][ T7189] CPU: 0 UID: 0 PID: 7189 Comm: syz.3.471 Not tainted syzkaller #0 PREEMPT(full) [ 185.290883][ T7189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 185.290896][ T7189] Call Trace: [ 185.290904][ T7189] [ 185.290913][ T7189] dump_stack_lvl+0xe8/0x150 [ 185.290947][ T7189] should_fail_ex+0x412/0x560 [ 185.290979][ T7189] _copy_from_user+0x2d/0xb0 [ 185.291010][ T7189] ___sys_recvmsg+0x175/0x590 [ 185.291046][ T7189] ? __pfx____sys_recvmsg+0x10/0x10 [ 185.291079][ T7189] ? __fget_files+0x2a/0x420 [ 185.291135][ T7189] do_recvmmsg+0x334/0x800 [ 185.291173][ T7189] ? __pfx_do_recvmmsg+0x10/0x10 [ 185.291222][ T7189] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 185.291267][ T7189] __x64_sys_recvmmsg+0x198/0x250 [ 185.291300][ T7189] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 185.291339][ T7189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.291362][ T7189] do_syscall_64+0x15f/0xf80 [ 185.291387][ T7189] ? trace_irq_disable+0x3b/0x140 [ 185.291417][ T7189] ? clear_bhb_loop+0x40/0x90 [ 185.291442][ T7189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.291463][ T7189] RIP: 0033:0x7f179f79cdd9 [ 185.291481][ T7189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.291499][ T7189] RSP: 002b:00007f179d9ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 185.291521][ T7189] RAX: ffffffffffffffda RBX: 00007f179fa15fa0 RCX: 00007f179f79cdd9 [ 185.291535][ T7189] RDX: 0000000000000f00 RSI: 0000200000000400 RDI: 0000000000000003 [ 185.291548][ T7189] RBP: 00007f179d9ee090 R08: 0000000000000000 R09: 0000000000000000 [ 185.291560][ T7189] R10: 0000004c42bb4f92 R11: 0000000000000246 R12: 0000000000000001 [ 185.291573][ T7189] R13: 00007f179fa16038 R14: 00007f179fa15fa0 R15: 00007f179fb3fa48 [ 185.291605][ T7189] [ 185.599434][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 185.606703][ T9] usb 3-1: config 123 interface 0 has no altsetting 0 [ 185.615901][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 185.625274][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.633370][ T9] usb 3-1: Product: syz [ 185.637872][ T9] usb 3-1: Manufacturer: syz [ 185.642665][ T9] usb 3-1: SerialNumber: syz [ 185.699211][ T7194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.473'. [ 185.777129][ T7195] xt_hashlimit: size too large, truncated to 1048576 [ 185.923864][ T9] usb 3-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 186.023606][ T9] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 186.089677][ T5684] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 186.104678][ T9] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 186.129584][ T7205] netlink: 12 bytes leftover after parsing attributes in process `syz.4.477'. [ 186.146079][ T9] usb 3-1: media controller created [ 186.242087][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 186.264311][ T5684] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.296281][ T5684] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.339057][ T5684] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 186.363500][ T9] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 186.393867][ T5684] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.404901][ T9] error writing reg: 0xff, val: 0x00 [ 186.465085][ T5684] usb 1-1: config 0 descriptor?? [ 186.623165][ T9] dvb_usb_mxl111sf 3-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 186.722379][ T9] usb 3-1: USB disconnect, device number 28 [ 186.765786][ T5684] usbhid 1-1:0.0: can't add hid device: -71 [ 186.810035][ T5684] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 186.890277][ T5684] usb 1-1: USB disconnect, device number 23 [ 187.331105][ T5684] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 187.420320][ T9] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 187.512660][ T5684] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.565894][ T5684] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.613459][ T5684] usb 1-1: New USB device found, idVendor=047f, idProduct=3333, bcdDevice= 0.40 [ 187.624108][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 187.653950][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 187.668803][ T5684] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.698278][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 16384, setting to 1024 [ 187.729016][ T5684] usb 1-1: config 0 descriptor?? [ 187.751548][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 187.798544][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 187.856388][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 187.904597][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 187.924004][ T7224] binder: 7223:7224 ioctl 3b81 200000000040 returned -22 [ 187.934563][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.946557][ T7225] binder: 7223:7225 ioctl 3b81 200000000040 returned -22 [ 187.982030][ T5725] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 188.340530][ T5725] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 188.384702][ T5725] usb 3-1: config 0 has no interface number 0 [ 188.406301][ T5725] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 188.461862][ T5725] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 188.486420][ T5684] plantronics 0003:047F:3333.0007: unknown main item tag 0x0 [ 188.515780][ T5725] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.556511][ T5725] usb 3-1: Product: syz [ 188.717292][ T5725] usb 3-1: Manufacturer: syz [ 188.739603][ T5725] usb 3-1: SerialNumber: syz [ 188.883658][ T5725] usb 3-1: config 0 descriptor?? [ 188.902325][ T5684] plantronics 0003:047F:3333.0007: hiddev1,hidraw0: USB HID v0.00 Device [HID 047f:3333] on usb-dummy_hcd.0-1/input0 [ 188.992213][ T5725] yurex 3-1:0.50: USB YUREX device now attached to Yurex #2 [ 189.397435][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 189.417488][ T7222] usbtmc 2-1:16.0: Unable to send data, error -71 [ 189.460888][ T5684] usb 1-1: USB disconnect, device number 24 [ 189.579672][ T7231] usbtmc 2-1:16.0: simple usb_control_msg returned 0 [ 189.617908][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 189.643330][ T7233] usbtmc 2-1:16.0: Unable to send data, error -71 [ 189.755425][ T7237] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 189.762285][ T7237] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 189.813563][ T5773] usb 2-1: USB disconnect, device number 36 [ 189.853071][ T7237] vhci_hcd vhci_hcd.0: Device attached [ 189.909245][ T7242] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 189.915932][ T7242] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 189.995781][ T5725] usb 3-1: USB disconnect, device number 29 [ 190.016834][ T7242] vhci_hcd vhci_hcd.0: Device attached [ 190.072003][ T5725] yurex 3-1:0.50: USB YUREX #2 now disconnected [ 190.087993][ T7232] fido_id[7232]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 190.204366][ T7237] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(5) [ 190.210979][ T7237] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 190.268655][ T7237] vhci_hcd vhci_hcd.0: Device attached [ 190.369804][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 190.410111][ T5684] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 190.434812][ T5699] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 190.579574][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 190.599585][ T5684] usb 1-1: Using ep0 maxpacket: 16 [ 190.620740][ T5684] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 190.662936][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 190.673989][ T5684] usb 1-1: config 0 has no interface number 0 [ 190.699519][ T5684] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 190.712286][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.728951][ T9] usb 4-1: Product: syz [ 190.737462][ T5684] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 190.775776][ T9] usb 4-1: Manufacturer: syz [ 190.809434][ T9] usb 4-1: SerialNumber: syz [ 190.817318][ T5684] usb 1-1: config 0 interface 41 has no altsetting 0 [ 190.838842][ T9] usb 4-1: config 0 descriptor?? [ 190.997749][ T5684] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 191.010474][ T0] NOHZ tick-stop error: local softirq work is pending, handler #24a!!! [ 191.040999][ T5684] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.076620][ T5684] usb 1-1: Product: syz [ 191.099040][ T5684] usb 1-1: Manufacturer: syz [ 191.115481][ T9] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 191.147239][ T5684] usb 1-1: SerialNumber: syz [ 191.156529][ T5773] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 191.179101][ T5684] usb 1-1: config 0 descriptor?? [ 191.209529][ T7248] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 191.223608][ T7248] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 191.426651][ T5773] usb 2-1: unable to get BOS descriptor or descriptor too short [ 191.584005][ T5773] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 191.687330][ T7248] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 191.716652][ T5773] usb 2-1: can't read configurations, error -71 [ 191.734240][ T7248] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 191.849636][ T5728] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 191.949312][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 192.290496][ T7237] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(12) [ 192.297189][ T7237] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 192.376834][ T7237] vhci_hcd vhci_hcd.0: Device attached [ 192.389386][ T5728] usb 3-1: Using ep0 maxpacket: 32 [ 192.397791][ T5728] usb 3-1: config 123 interface 0 has no altsetting 0 [ 192.431105][ T5728] usb 3-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 192.440867][ T7242] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(16) [ 192.447576][ T7242] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 192.460705][ T5684] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 192.475336][ T5728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.517133][ T7242] vhci_hcd vhci_hcd.0: Device attached [ 192.523846][ T5728] usb 3-1: Product: syz [ 192.542389][ T5728] usb 3-1: Manufacturer: syz [ 192.552649][ T7237] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(19) [ 192.559331][ T7237] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 192.567722][ T5728] usb 3-1: SerialNumber: syz [ 192.761776][ T7237] vhci_hcd vhci_hcd.0: Device attached [ 192.792944][ T7242] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(18) [ 192.799612][ T7242] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 192.817064][ T7242] vhci_hcd vhci_hcd.0: Device attached [ 192.896889][ T7242] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(21) [ 192.903649][ T7242] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 192.939316][ T5684] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 192.961708][ T5728] usb 3-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 193.010398][ T7242] vhci_hcd vhci_hcd.0: Device attached [ 193.018353][ T5684] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 193.096687][ T5728] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 193.118984][ T7278] netlink: 16 bytes leftover after parsing attributes in process `syz.1.495'. [ 193.128465][ T5684] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 193.137954][ T5728] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 193.168764][ T5684] usb 1-1: USB disconnect, device number 25 [ 193.181088][ T5728] usb 3-1: media controller created [ 193.274868][ T7261] sg_write: data in/out 393432/56 bytes for SCSI command 0x0-- guessing data in; [ 193.274868][ T7261] program syz.4.491 not setting count and/or reply_len properly [ 193.340130][ T5728] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 194.107309][ T7275] vhci_hcd: connection closed [ 194.126255][ T7271] vhci_hcd: connection closed [ 194.159442][ T7273] vhci_hcd: connection closed [ 194.199122][ T12] vhci_hcd vhci_hcd.3: stop threads [ 194.219321][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 194.294656][ T5728] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 194.316515][ T12] vhci_hcd vhci_hcd.3: release socket [ 194.327779][ T5728] error writing reg: 0xff, val: 0x00 [ 194.384548][ T7268] vhci_hcd: connection closed [ 194.392200][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 194.422610][ T7265] vhci_hcd: connection closed [ 194.450921][ T9] usb write operation failed. (-71) [ 194.467358][ T7243] vhci_hcd: connection closed [ 194.467813][ T7238] vhci_hcd: connection reset by peer [ 194.487311][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.494623][ T7249] vhci_hcd: connection closed [ 194.531751][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.569892][ T12] vhci_hcd vhci_hcd.3: stop threads [ 194.608395][ T12] vhci_hcd vhci_hcd.3: release socket [ 194.686597][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 194.708137][ T9] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 194.791839][ T12] vhci_hcd vhci_hcd.3: stop threads [ 194.828745][ T9] dvbdev: DVB: registering new adapter (Terratec H7) [ 194.836191][ T12] vhci_hcd vhci_hcd.3: release socket [ 194.865361][ T5728] dvb_usb_mxl111sf 3-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 194.891862][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 194.906353][ T9] usb 4-1: media controller created [ 194.921182][ T7287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.498'. [ 194.948052][ T12] vhci_hcd vhci_hcd.3: stop threads [ 194.974741][ T9] usb read operation failed. (-71) [ 194.982802][ T12] vhci_hcd vhci_hcd.3: release socket [ 195.033511][ T9] usb write operation failed. (-71) [ 195.045693][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 195.167572][ T12] vhci_hcd vhci_hcd.3: stop threads [ 195.182183][ T12] vhci_hcd vhci_hcd.3: release socket [ 195.195530][ T9] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 195.236244][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 195.378589][ T12] vhci_hcd vhci_hcd.3: stop threads [ 195.411335][ T12] vhci_hcd vhci_hcd.3: release socket [ 195.500774][ T7240] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 195.500901][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 195.552471][ T12] vhci_hcd vhci_hcd.3: stop threads [ 195.606120][ T9] usb 4-1: USB disconnect, device number 23 [ 195.678112][ T12] vhci_hcd vhci_hcd.3: release socket [ 195.757012][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 195.773506][ T12] vhci_hcd vhci_hcd.3: stop threads [ 195.778783][ T12] vhci_hcd vhci_hcd.3: release socket [ 195.800080][ T5728] usb 3-1: USB disconnect, device number 30 [ 195.867762][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 195.962040][ T5699] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 196.575447][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 196.591993][ T0] NOHZ tick-stop error: local softirq work is pending, handler #288!!! [ 196.731188][ T7301] xt_hashlimit: size too large, truncated to 1048576 [ 197.664971][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 197.744782][ T7308] netlink: 'syz.3.504': attribute type 4 has an invalid length. [ 197.792650][ T7308] netlink: 17 bytes leftover after parsing attributes in process `syz.3.504'. [ 198.391603][ T5714] usb usb40-port1: attempt power cycle [ 198.459421][ T5700] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 198.641942][ T5700] usb 2-1: unable to get BOS descriptor or descriptor too short [ 198.688351][ T5700] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 198.716943][ T5700] usb 2-1: can't read configurations, error -71 [ 198.760344][ T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 198.922303][ T9] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 198.941627][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 198.988151][ T9] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 199.007094][ T5714] usb usb40-port1: unable to enumerate USB device [ 199.009439][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.057354][ T9] usb 3-1: Product: syz [ 199.082542][ T9] usb 3-1: Manufacturer: syz [ 199.106964][ T9] usb 3-1: SerialNumber: syz [ 199.136808][ T9] usb 3-1: config 0 descriptor?? [ 199.174331][ T9] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 199.328056][ T7324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.511'. [ 199.374210][ T7324] netlink: 16 bytes leftover after parsing attributes in process `syz.3.511'. [ 199.409241][ T7324] netlink: 12 bytes leftover after parsing attributes in process `syz.3.511'. [ 199.628154][ T7331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.513'. [ 199.659033][ T5728] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 199.831358][ T5728] usb 5-1: Using ep0 maxpacket: 32 [ 199.858799][ T5728] usb 5-1: config 123 interface 0 has no altsetting 0 [ 199.880702][ T5728] usb 5-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 199.904686][ T5728] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.936173][ T5728] usb 5-1: Product: syz [ 199.950575][ T5728] usb 5-1: Manufacturer: syz [ 199.953556][ T7338] fuse: Bad value for 'rootmode' [ 199.964160][ T5728] usb 5-1: SerialNumber: syz [ 200.205054][ T5728] usb 5-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 200.245428][ T5728] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 200.284895][ T5728] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 200.311996][ T5728] usb 5-1: media controller created [ 200.330758][ T7347] netlink: 20 bytes leftover after parsing attributes in process `syz.3.519'. [ 200.372380][ T5728] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 200.397644][ T7348] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 200.406216][ T7350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.520'. [ 200.453970][ T5728] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 200.462264][ T5728] error writing reg: 0xff, val: 0x00 [ 200.548984][ T5728] dvb_usb_mxl111sf 5-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 200.622660][ T7350] vlan2: entered promiscuous mode [ 200.666181][ T7350] bond0: entered promiscuous mode [ 200.818112][ T5714] usb 5-1: USB disconnect, device number 24 [ 201.152604][ T7360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.525'. [ 201.279570][ T5714] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 201.455965][ T5714] usb 1-1: unable to get BOS descriptor or descriptor too short [ 201.495619][ T5714] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 201.531074][ T9] gspca_sunplus: reg_r err -110 [ 201.535398][ T5714] usb 1-1: can't read configurations, error -71 [ 201.558451][ T9] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 201.630810][ T7369] ªªªªªC: renamed from vlan0 (while UP) [ 201.638238][ T7366] input: syz1 as /devices/virtual/input/input45 [ 201.674152][ T30] audit: type=1326 audit(1777744167.039:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7363 comm="syz.3.527" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179f79cdd9 code=0x7ffc0000 [ 201.707052][ T7371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.528'. [ 201.768781][ T30] audit: type=1326 audit(1777744167.039:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7363 comm="syz.3.527" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179f79cdd9 code=0x7ffc0000 [ 201.852061][ T30] audit: type=1326 audit(1777744167.039:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7363 comm="syz.3.527" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f179f79cdd9 code=0x7ffc0000 [ 201.906073][ T30] audit: type=1326 audit(1777744167.039:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7363 comm="syz.3.527" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179f79cdd9 code=0x7ffc0000 [ 201.978183][ T30] audit: type=1326 audit(1777744167.069:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7363 comm="syz.3.527" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f179f79cdd9 code=0x7ffc0000 [ 202.052270][ T30] audit: type=1326 audit(1777744167.069:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7363 comm="syz.3.527" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179f79cdd9 code=0x7ffc0000 [ 202.125832][ T30] audit: type=1326 audit(1777744167.069:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7363 comm="syz.3.527" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179f79cdd9 code=0x7ffc0000 [ 202.235539][ T30] audit: type=1326 audit(1777744167.069:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7363 comm="syz.3.527" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f179f79cdd9 code=0x7ffc0000 [ 202.235670][ T30] audit: type=1326 audit(1777744167.069:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7363 comm="syz.3.527" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179f79cdd9 code=0x7ffc0000 [ 202.235712][ T30] audit: type=1326 audit(1777744167.069:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7363 comm="syz.3.527" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f179f79cdd9 code=0x7ffc0000 [ 202.301948][ T5700] usb 3-1: USB disconnect, device number 31 [ 202.630896][ T5714] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 202.792749][ T5714] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.827582][ T5714] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x48, changing to 0x8 [ 202.846368][ T7393] netlink: 16 bytes leftover after parsing attributes in process `syz.3.537'. [ 202.857304][ T5714] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 10 [ 202.886075][ T5714] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 202.923840][ T5714] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 202.965054][ T5714] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 202.993215][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 203.024562][ T5714] usb 1-1: Product: syz [ 203.044908][ T5714] usb 1-1: Manufacturer: syz [ 203.058570][ T5714] usb 1-1: SerialNumber: syz [ 203.093945][ T5714] usb 1-1: config 0 descriptor?? [ 203.133311][ T5714] radio-si470x 1-1:0.0: could not find interrupt in endpoint [ 203.162086][ T5714] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 203.207435][ T5714] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 203.322407][ T5714] usb 1-1: USB disconnect, device number 27 [ 203.402408][ T7404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.541'. [ 204.061682][ T7415] FAULT_INJECTION: forcing a failure. [ 204.061682][ T7415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.075626][ T7415] CPU: 0 UID: 0 PID: 7415 Comm: syz.2.546 Not tainted syzkaller #0 PREEMPT(full) [ 204.075655][ T7415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 204.075668][ T7415] Call Trace: [ 204.075677][ T7415] [ 204.075685][ T7415] dump_stack_lvl+0xe8/0x150 [ 204.075724][ T7415] should_fail_ex+0x412/0x560 [ 204.075755][ T7415] _copy_from_user+0x2d/0xb0 [ 204.075784][ T7415] ___sys_recvmsg+0x175/0x590 [ 204.075819][ T7415] ? __pfx____sys_recvmsg+0x10/0x10 [ 204.075860][ T7415] ? __fget_files+0x2a/0x420 [ 204.075920][ T7415] do_recvmmsg+0x334/0x800 [ 204.075958][ T7415] ? __pfx_do_recvmmsg+0x10/0x10 [ 204.075999][ T7415] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 204.076045][ T7415] __x64_sys_recvmmsg+0x198/0x250 [ 204.076077][ T7415] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 204.076115][ T7415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.076138][ T7415] do_syscall_64+0x15f/0xf80 [ 204.076163][ T7415] ? trace_irq_disable+0x3b/0x140 [ 204.076192][ T7415] ? clear_bhb_loop+0x40/0x90 [ 204.076217][ T7415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.076237][ T7415] RIP: 0033:0x7f881599cdd9 [ 204.076256][ T7415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.076274][ T7415] RSP: 002b:00007f8813bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 204.076295][ T7415] RAX: ffffffffffffffda RBX: 00007f8815c15fa0 RCX: 00007f881599cdd9 [ 204.076309][ T7415] RDX: 0000000000000f00 RSI: 0000200000000400 RDI: 0000000000000003 [ 204.076322][ T7415] RBP: 00007f8813bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 204.076334][ T7415] R10: 0000004c42bb4f92 R11: 0000000000000246 R12: 0000000000000001 [ 204.076347][ T7415] R13: 00007f8815c16038 R14: 00007f8815c15fa0 R15: 00007f8815d3fa48 [ 204.076378][ T7415] [ 204.589683][ T5684] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 204.839044][ T5684] usb 2-1: unable to get BOS descriptor or descriptor too short [ 204.915006][ T5684] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 204.923100][ T7432] __nla_validate_parse: 2 callbacks suppressed [ 204.923122][ T7432] netlink: 36 bytes leftover after parsing attributes in process `syz.0.554'. [ 205.008459][ T5684] usb 2-1: can't read configurations, error -71 [ 205.421999][ T7447] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 206.018279][ T7454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.559'. [ 211.617650][ C1] sched: DL replenish lagged too much [ 256.208654][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.517643][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.384353][ T5773] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 354.870283][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 354.988079][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.948691][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 395.662451][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 419.137924][ T31] INFO: task kworker/0:0:9 blocked for more than 155 seconds. [ 422.527564][ T31] Not tainted syzkaller #0 [ 425.122153][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.