last executing test programs: 4.996249361s ago: executing program 1 (id=576): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r1, 0x1000006) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) fcntl$addseals(r1, 0x409, 0x7) r4 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x1000000}) syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd5000000010902"], 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000580)=0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x400000000000000) 3.943302451s ago: executing program 2 (id=581): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x29, r6, {0x7}}, './file1\x00'}) (fail_nth: 6) 3.630508844s ago: executing program 2 (id=583): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001964d408861a92e03f530102030109022400010200100309041f0202e917f300090502020002020000090582020002"], 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0xb3, 0x2, 0xffffffff}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000740)={0x0, 0x31, 0x2, "8fe3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.250440083s ago: executing program 1 (id=587): creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x130, 0x0, 0x2, {0x0, 0x3, 0x0, '\x00', {0x7ff, 0x7ff, 0xadf, 0x10, r2, 0x0, 0x6000, '\x00', 0x6, 0x81, 0x1, 0x3, {0x1, 0x6}, {0x24000000000006, 0xb}, {0x2000001, 0xd}, {0x4, 0x5}, 0x2, 0x6, 0xfff, 0x7}}}}) write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x402be001}}, 0x50) 3.168056764s ago: executing program 1 (id=588): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x2c, r1, 0x915, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x2c}, 0x1, 0x100000000000000, 0x0, 0x4000059}, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) 3.043703704s ago: executing program 1 (id=589): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r1, r1, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = fanotify_init(0x200, 0x40000) fanotify_mark(r2, 0x1, 0x8000018, r0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x800000000000000) 2.938299034s ago: executing program 1 (id=591): socket$kcm(0x2, 0x3, 0x2) (async) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x20, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x23}, @multicast2}}}], 0x20}, 0x4008804) mkdir(&(0x7f0000000000)='./file0\x00', 0x20) 2.807165246s ago: executing program 1 (id=592): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000840)='sched\x00') lseek(r1, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000540)=""/230) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x141802, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r6, 0x80184151, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x850}, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, 0x0) r7 = dup(0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0xe4, r9, 0xe7816804f9787cab, 0x70b52a, 0x25dfdc03, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xad, 0xbe, "c6d8f7e077744811fcc97482ed485fdecd829692f5e815b338726837459cd060748415bbbb627265f65f30b6f975167ae172b0557761f80e06491472db775c775bd63a1348d0e153e283602e72b5280825e069a68c4f3b6c875237555a8fe2fd2dadc72a354d535fbebf5b56ea614e8e782a139cf96a83070b0992a89c561b33c3ec7472cd93728190afea43a531602fcd7cd3be5dc136348b30547110fbb53da0e24d6116fbd28ee4"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}]}, 0xe4}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, 0x0) write$tun(r2, 0x0, 0x0) 1.772109235s ago: executing program 2 (id=595): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000180)=[0x0], 0x1, r3, r4, 0x2, 0x0, 0x2, 0x1, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x45, 0x412f, 0xe154, 0x20, 0x7, 0xb2bf, 0x3, "fe1d0000341300ddff000000000caa000000090000000000000004b427180010"}}) 1.59345144s ago: executing program 2 (id=597): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @empty, 0x4}, 0x1c) listen(r0, 0x2000005) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xffcc, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.567140801s ago: executing program 0 (id=598): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) socket$igmp(0x2, 0x3, 0x2) creat(&(0x7f0000001380)='./file0\x00', 0x12c) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000410000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r1], 0xc4}}, 0x0) 1.372094691s ago: executing program 0 (id=599): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x2cf1389d, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000180)={0x1, 0x0, {0x0, 0x0, 0x3007}}) (async) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async) syz_usb_control_io$uac2(r1, 0x0, &(0x7f0000000300)={0x44, &(0x7f00000000c0)={0x20, 0xe, 0x12, "005692b913c9fa9c8d627ae3f9aec8b43207"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000001c0)={0x20, 0x81, 0x2, "906b"}, &(0x7f0000000200)={0x20, 0x82, 0x3, '\x00 \x00'}, &(0x7f0000000240)={0x20, 0x83, 0x2, "289a"}, &(0x7f0000000280)={0x20, 0x84, 0x2, ' o'}, &(0x7f00000002c0)={0x20, 0x85, 0x3}}) 1.240372964s ago: executing program 2 (id=600): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x400000000000000) 795.372425ms ago: executing program 3 (id=602): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d800000010008104687da3aa7143a0b8c81d080911000000000000a118001500060014000040a8002b000e00014006046109d67f6f94007134cf6ee0a000a0e408e8d8ef52a9bbc7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c4a918d1bcf0f938baa5d060a517898516277ce06bbace6f177ccbec4c2ee5a7cef4260027836b0d17a54ef5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f00feffff16ac9609f4fb00000000000000000000000000000000000000000000000000e19bdee3c4ead119f9ae2aa728e2fd1b", 0xd8}], 0x1, 0x0, 0x0, 0x300}, 0x20004004) 752.191207ms ago: executing program 3 (id=603): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x140, 0x0) socket$packet(0x11, 0xa, 0x300) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x2) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x12) ioctl$KVM_CAP_DISABLE_QUIRKS2(r3, 0x4068aea3, &(0x7f00000000c0)={0xd5, 0x0, 0xa4fd52e6afd443a8}) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x1, 0x4001c05) socket$packet(0x11, 0x3, 0x300) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000000)=[0x7, 0x6, 0x0], &(0x7f0000000040), &(0x7f0000000080), 0x0}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000000114010029bd7000fddbdf250800010002"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x854) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r6, 0xc0d05604, &(0x7f0000000100)={0x2, @win={{0xe369, 0x5, 0xfffff9b6, 0x4}, 0x0, 0xffffffa5, 0x0, 0xd, 0x0, 0x60}}) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000200)="4444d9fdc32fdb27415c6bd938fd27fa00000005004ef56491000dbbaa9649ca3c5ec1c6e53961b91a569266e03e9f53ba1f6a81e17a097a303e52f61be16493be08bd0e57bc982e466ce4e4a56094fb06e7f4de2957bbfde5b5c3bbcc7ef737188ef7003722d2a06ef64d144af71ca98de19b00000000000000", 0x7a) 636.465764ms ago: executing program 3 (id=604): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000100)=0x1, 0x4) sendmsg$802154_dgram(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0xf00}, 0x0) 518.831925ms ago: executing program 3 (id=605): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000)=',', 0x1, 0x8000, &(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10) 518.514789ms ago: executing program 0 (id=606): creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x130, 0x0, 0x2, {0x0, 0x3, 0x0, '\x00', {0x7ff, 0x7ff, 0xadf, 0x10, r2, 0x0, 0x6000, '\x00', 0x6, 0x81, 0x1, 0x3, {0x1, 0x6}, {0x24000000000006, 0xb}, {0x2000001, 0xd}, {0x4, 0x5}, 0x2, 0x6, 0xfff, 0x7}}}}) write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x402be001}}, 0x50) 441.700053ms ago: executing program 2 (id=607): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xb) pread64(0xffffffffffffffff, 0x0, 0x0, 0x9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000580)=""/131, &(0x7f0000000500)=""/74, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000100)=0x1) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) fcntl$setpipe(r2, 0x407, 0x80000000) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000380)={"0aa7c7b68dc1ba65556ad9d7e04181db", 0x0, 0x0, {0x0, 0x1}, {0xe, 0x7}, 0x5, [0x5, 0x0, 0x3, 0x1404000000000000, 0x0, 0x40, 0x6, 0x5, 0x3, 0xe, 0x7, 0xb85, 0x7fffffff, 0x5, 0x6, 0x6]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000001600)={{r0}, r3, 0x18, @inherit={0x70, &(0x7f0000000480)={0x1, 0x5, 0x8, 0x1, {0x8, 0x10000, 0x2, 0x2, 0x7}, [0xe, 0x4, 0x6, 0x4, 0x1]}}, @name="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"}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000001c0)=&(0x7f0000000140)) syz_clone3(&(0x7f0000000300)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) syz_clone(0xf21e8000, 0x0, 0xa, 0x0, 0x0, 0x0) 431.075028ms ago: executing program 3 (id=608): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000002c80)="d800000018007b29e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001ee006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 326.60242ms ago: executing program 0 (id=609): fanotify_init(0x4, 0x145800) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYRES64=r0, @ANYRES32=r0], 0x20}, 0x1, 0x0, 0x0, 0x4c44}, 0x24040054) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) r1 = socket(0x1, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'veth0_to_batadv\x00', 0x0}) (async) r3 = socket$packet(0x11, 0x2, 0x300) bind$packet(r3, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) r4 = socket$packet(0x11, 0x3, 0x300) (async) socketpair(0x1f, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) sendmmsg(r4, &(0x7f0000000440), 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000080)) (async) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x4054) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000980)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r10, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB="15080000", @ANYRES16=r11, @ANYBLOB="010025bd7000fedbdf250f000000050029000100000008000300", @ANYRES32=r12, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x885}, 0x40840) r13 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r13, 0x107, 0x1e, &(0x7f0000000240)=0x1000, 0x4) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r14, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) sendmmsg(r13, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r15}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r10, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000780)=ANY=[@ANYRES32=r3, @ANYRES16, @ANYRESOCT=r10, @ANYRESHEX=r6, @ANYRES8=r0, @ANYBLOB="cbe3e5f353e3b84b7bbeeed1c9975fcd54248dc905061e0ec58b892edc343049969ebf62e3ff6defc932545860986aa8c6d286653b985ffe7f24bfa007180674347018271d129dbecfacb9d57dbd77fdd03aa95745f4ed7107f87ce53b96b2cae140994ce5a57a6bb5339ec18e73a8f3db143093408524bdcec89906d83ef5fd83d0c1372106c8de4108bccf2da56dcc776a8f1ea4830c313c5e4198773aad40f21f932b2b8f9192a721ccebed4107f823b3e97acfebdeb2a7b356db9b4ef50c7508b66f0b4e846cabbea9873bf19d25a057128a5beb24c1bf93", @ANYRES16, @ANYRESDEC, @ANYRES16=r7], 0x308}}, 0x0) 247.856845ms ago: executing program 3 (id=610): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc714, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x0, "", [{{0x9, 0x4, 0x0, 0x7, 0x19, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8, 0x3, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x4, 0xff, 0xff}}}}}]}}]}}, 0x0) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000002300)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0xa0, 0x9, "", [{{0x9, 0x4, 0x0, 0xa, 0x2, 0x7, 0x1, 0x2, 0xfa, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x1, 0x5, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x3, 0x2, 0xa}}]}}}]}}]}}, &(0x7f0000002640)={0xa, &(0x7f0000002340)={0xa, 0x6, 0x250, 0x7, 0x0, 0x7f, 0xff}, 0xba, &(0x7f0000002380)={0x5, 0xf, 0xba, 0x1, [@generic={0xb5, 0x10, 0x3, "861c4f5a6d5a815cb17c33d91b46ca4f408f785848ca90fad69fe3001eb90b8e7a2a767e3cc04b478d40473eb2b6c5a729fc8995a55154bfe6787627f974fab8dbfafaf86aed7c35deb67acca6d0993e53281fe5bfe49087ed47b9897e832343b8a5d00a0ad7d8670afad0843b014ea29c06d8c02b94e60dab5cfd4c5c8d30a5dae90a8d699f496605f8b08be71b9dbe78bda94c64972245d8edb222460d7b2ce11d925fcde9ee84497ba11023be128a8f45"}]}, 0x6, [{0x4, &(0x7f0000002440)=@lang_id={0x4, 0x3, 0x2447}}, {0x4, &(0x7f0000002480)=@lang_id={0x4, 0x3, 0x41e}}, {0x5b, &(0x7f00000024c0)=@string={0x5b, 0x3, "a1567d5848c3517ec0aa1077b9e5bdec0107fa0f65c742e83e5eeaf17901c012b4ff38e023bb2d7b10fed6b9f7e7d464bde5fa528dbe61ebb74f52247012c833d96fd3da17f0df40b61c981a91f6969e5a3a2726281453ad28"}}, {0x4, &(0x7f0000002540)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f0000002580)=@lang_id={0x4, 0x3, 0xc1a}}, {0x41, &(0x7f00000025c0)=@string={0x41, 0x3, "fd64a57bc454c61ae05d2b1f9686dc98996c4aeccb36323b256aa521ef3de850ccafb74b6f20f803ec81303dc2131b3de39a867bbff744f0e2aa09e63325cc"}}]}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) (async) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000000)={[{@noswap}]}) (async) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000040)={[{@noswap}]}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r3, r3) setregid(r3, 0xffffffffffffffff) (async, rerun: 64) r4 = openat$cgroup_ro(r1, &(0x7f0000000080)='pids.events\x00', 0x0, 0x0) (rerun: 64) read$FUSE(r4, &(0x7f00000002c0)={0x2020}, 0x2020) (async, rerun: 32) syz_usb_connect$hid(0x6, 0x3f, &(0x7f00000026c0)=ANY=[@ANYBLOB="1201100100000000ef17b56040000102030109022d000101088008190400020203a44bf5c2210400000122270509058103400007070209050203000480cf087623879393cfd19596b8fbe524179a47e07f753e0ea47ded551602c22b935872442199cc06501e82e8384f1fe9c34a283570d62696711a3634e510833af80fb6245e8e243a1a71cdb3e58cb5"], &(0x7f00000002c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x0, 0xd, 0x81, 0xd5, 0x40, 0x3}, 0x72, &(0x7f0000000180)={0x5, 0xf, 0x72, 0x5, [@ptm_cap={0x3}, @generic={0x3b, 0x10, 0x4, "594aab1f3016a85fccbf4b6cc1f622531a0125a536bc73846761e9c7142232b44669079a6b1ee8c194ed7c5d6e8d57d7ac7a6c92cbb215b7"}, @ss_container_id={0x14, 0x10, 0x4, 0xc, "8327cfe3f256025cd9df904ea9c5b7a4"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x9, 0x0, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0xe8, "360b8e24f65e522c2168c893fb6f1234"}]}, 0x3, [{0x8, &(0x7f0000000200)=@string={0x8, 0x3, "3e6663830b21"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x414}}]}) (rerun: 32) r5 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x58f, 0x9410, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x50, 0x2, "", [{{0x9, 0x4, 0x0, 0xc, 0x2, 0x3, 0x1, 0x1, 0x1, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0x899}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x92, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x2, 0x4, 0xdd}}]}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x0, 0x2, 0x4, 0x8, 0x8, 0x5}, 0xb6, &(0x7f0000000380)={0x5, 0xf, 0xb6, 0x3, [@ptm_cap={0x3}, @generic={0xab, 0x10, 0x2, "0053a894fcd8830ea325046ff87b0a959790221511461a4f44e1c70f2defe01a6ceedcb65188161d57fc3e2990d5a4a858425f70f2955ba7a32f1c75d7958784d3afbaeb76bb552f78cb19a085db65ccae328962a0a0bdc0f09d8f46653cde4e2bb900865075fe0d3c357a3326639e7d4cd067eab39dc70c6b102dfb5d3085365e47a4e07be4aa73fd1692e41b23459be05a9e269235145479310617ffcd6eb7754f7f4a9ac20375"}, @ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x440a}}, {0x43, &(0x7f0000000480)=@string={0x43, 0x3, "38b57275a058cfcb781141c6ffad3f5a6649a1498603ee9acbc9c26c5ed6a60c353d35ad324d35aba59b63e1d2ac12c4306600becd8dbb37a68a5f5bcb50b51226"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x500a}}, {0xf6, &(0x7f0000000540)=@string={0xf6, 0x3, "8b8ca6e055586cfbf427bfafb6509242fcb1661104ec91e0a7f505f06cad3b42d61cc417babad26e5cf13a7f5a8a26dbec3a4ddc621130d053adbb53136fc290f2bf6cbc7a7413b65c9df513c218dd09c511e4f361079297f128e7fa2ae0d1f5bc86885c1de845027924e490d48fe649c116bddf7a62c53ef45dd6e784db54e0132e099f8eb0058f6855e5819160304d7fb11c183a7c1514631bb601220cf0374745ad6473550e38c62bb1ca27f5457e63507ad995f55451325242dd14a32d5c5953139834056ec66dbf665140631bc256e1ff99d23ae1fcb6fe7203c03631794a981c89d3e2c4a38681c9f152edaec626402a4c"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x3801}}, {0xe, &(0x7f0000000680)=@string={0xe, 0x3, "ca9286140b749b45cdb0cd17"}}]}) syz_usb_control_io$hid(r5, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x9, {0x9, 0x21, 0xb, 0x5e, 0x1, {0x22, 0x3}}}}, &(0x7f0000000080)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0}) 142.499669ms ago: executing program 0 (id=611): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="05052cb57000ff5a6a002c00000008000300", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x4004095}, 0x4008000) 0s ago: executing program 0 (id=612): socket$netlink(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000006c0)=[@text64={0x40, 0x0}], 0x1, 0x3, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000006c0)=[@text64={0x40, 0x0}], 0x1, 0x3, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYRES16=r3], 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x48f, 0x0, 0xfffffffffffffffb}]}) (async) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x48f, 0x0, 0xfffffffffffffffb}]}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.events\x00', 0x275a, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x34, r7, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x34}}, 0x0) (async) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x34, r7, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x34}}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r9 = dup(r8) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r9) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r6) sendmsg$NL80211_CMD_RELOAD_REGDB(r9, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r10, 0x100, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'wg0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r11, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r12}, 0x14) mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x80890, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c76657273696f6ebd3970323030302e4c2c00b24c126d9b99df3cdc0066c05c27565e80202812bf5144f71e77f2b5297eb7157326fd1114cf673e30f5623472873cd6cae1e6597d095f8a96005ef08eeb4869a7a3a4fc62759ebb2d377cdfeb6e222ffa190bf7cbc3cec886871774e5e300a6d9541c4ebfebbe2faf"]) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x80890, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c76657273696f6ebd3970323030302e4c2c00b24c126d9b99df3cdc0066c05c27565e80202812bf5144f71e77f2b5297eb7157326fd1114cf673e30f5623472873cd6cae1e6597d095f8a96005ef08eeb4869a7a3a4fc62759ebb2d377cdfeb6e222ffa190bf7cbc3cec886871774e5e300a6d9541c4ebfebbe2faf"]) kernel console output (not intermixed with test programs): 73][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.432599][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.440319][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.447740][ T5848] bridge_slave_1: entered allmulticast mode [ 94.455478][ T5848] bridge_slave_1: entered promiscuous mode [ 94.465373][ T5849] team0: Port device team_slave_1 added [ 94.486130][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.532065][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.578462][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.590833][ T5847] team0: Port device team_slave_0 added [ 94.599076][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.610018][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.617108][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.643505][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.667713][ T5847] team0: Port device team_slave_1 added [ 94.681813][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.691803][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.698961][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.725638][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.792566][ T5846] team0: Port device team_slave_0 added [ 94.813375][ T5848] team0: Port device team_slave_0 added [ 94.822023][ T5846] team0: Port device team_slave_1 added [ 94.828734][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.839923][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.866779][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.880187][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.887187][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.913898][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.927121][ T5848] team0: Port device team_slave_1 added [ 95.007946][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.015274][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.041818][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.071483][ T5849] hsr_slave_0: entered promiscuous mode [ 95.078028][ T5849] hsr_slave_1: entered promiscuous mode [ 95.086118][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.093491][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.119975][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.131862][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.139118][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.165444][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.176482][ T5853] Bluetooth: hci1: command tx timeout [ 95.182954][ T5861] Bluetooth: hci2: command tx timeout [ 95.189340][ T5851] Bluetooth: hci3: command tx timeout [ 95.216335][ T5847] hsr_slave_0: entered promiscuous mode [ 95.223158][ T5847] hsr_slave_1: entered promiscuous mode [ 95.230604][ T5851] Bluetooth: hci0: command tx timeout [ 95.232388][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 95.241994][ T5847] Cannot create hsr debugfs directory [ 95.248307][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.255510][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.282115][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.403080][ T5848] hsr_slave_0: entered promiscuous mode [ 95.409782][ T5848] hsr_slave_1: entered promiscuous mode [ 95.416280][ T5848] debugfs: 'hsr0' already exists in 'hsr' [ 95.422255][ T5848] Cannot create hsr debugfs directory [ 95.471928][ T5846] hsr_slave_0: entered promiscuous mode [ 95.478476][ T5846] hsr_slave_1: entered promiscuous mode [ 95.485981][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 95.491926][ T5846] Cannot create hsr debugfs directory [ 95.916534][ T5847] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.934601][ T5847] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.946563][ T5847] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.968160][ T5847] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.039748][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.061352][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.077980][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.091630][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.195243][ T5848] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.207143][ T5848] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.217934][ T5848] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.238184][ T5848] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.352147][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.364412][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.376238][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.391644][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.403796][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.475957][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.506293][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.513927][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.536408][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.543793][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.582618][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.658581][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.672588][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.694617][ T4870] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.701845][ T4870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.728264][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.735652][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.773804][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.808482][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.829389][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.836751][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.865718][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.872989][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.945048][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.978826][ T4870] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.986078][ T4870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.049177][ T4870] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.056720][ T4870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.183784][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.234262][ T5861] Bluetooth: hci2: command tx timeout [ 97.240061][ T5853] Bluetooth: hci1: command tx timeout [ 97.245671][ T5851] Bluetooth: hci3: command tx timeout [ 97.315384][ T5851] Bluetooth: hci0: command tx timeout [ 97.399370][ T5847] veth0_vlan: entered promiscuous mode [ 97.422198][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.446525][ T5847] veth1_vlan: entered promiscuous mode [ 97.587047][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.596792][ T5849] veth0_vlan: entered promiscuous mode [ 97.610721][ T5847] veth0_macvtap: entered promiscuous mode [ 97.622679][ T5847] veth1_macvtap: entered promiscuous mode [ 97.646164][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.667160][ T5849] veth1_vlan: entered promiscuous mode [ 97.686824][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.714161][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.758397][ T4870] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.776657][ T4870] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.786734][ T4870] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.797163][ T5849] veth0_macvtap: entered promiscuous mode [ 97.811097][ T4870] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.825181][ T5849] veth1_macvtap: entered promiscuous mode [ 97.865871][ T5848] veth0_vlan: entered promiscuous mode [ 97.905354][ T5848] veth1_vlan: entered promiscuous mode [ 97.935289][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.967935][ T5846] veth0_vlan: entered promiscuous mode [ 97.988746][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.012461][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.018933][ T5846] veth1_vlan: entered promiscuous mode [ 98.026749][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.044588][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.055564][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.074201][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.085283][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.131382][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.140713][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.163835][ T5848] veth0_macvtap: entered promiscuous mode [ 98.188273][ T5848] veth1_macvtap: entered promiscuous mode [ 98.261830][ T5846] veth0_macvtap: entered promiscuous mode [ 98.282725][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.303950][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.337047][ T5846] veth1_macvtap: entered promiscuous mode [ 98.351505][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.358950][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.383485][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.419364][ T1165] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.447425][ T1165] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.478550][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.494344][ T1165] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.523297][ T1165] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.536733][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.545371][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.550553][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.585847][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.596496][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.620784][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.631758][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.791623][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.819921][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.877492][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.890133][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.959429][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.970985][ T5938] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.989236][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.011511][ T1223] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 99.045191][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.058757][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.191334][ T1223] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 99.233239][ T1223] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 99.285689][ T1223] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 99.312512][ T5851] Bluetooth: hci3: command tx timeout [ 99.319170][ T5861] Bluetooth: hci2: command tx timeout [ 99.324774][ T5851] Bluetooth: hci1: command tx timeout [ 99.361528][ T1223] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 99.390620][ T5853] Bluetooth: hci0: command tx timeout [ 99.426789][ T1223] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 99.463875][ T1223] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 99.487519][ T1223] usb 4-1: Product: syz [ 99.498314][ T1223] usb 4-1: Manufacturer: syz [ 99.548347][ T1223] cdc_wdm 4-1:1.0: skipping garbage [ 99.572299][ T1223] cdc_wdm 4-1:1.0: skipping garbage [ 99.593589][ T1223] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 99.623011][ T5950] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 99.629731][ T5950] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 99.646298][ T5950] vhci_hcd vhci_hcd.0: Device attached [ 99.653229][ T5950] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(7) [ 99.653271][ T5950] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 99.653345][ T5950] vhci_hcd vhci_hcd.0: Device attached [ 99.655745][ T5950] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(9) [ 99.655771][ T5950] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 99.655834][ T5950] vhci_hcd vhci_hcd.0: Device attached [ 99.662211][ T5950] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(11) [ 99.662240][ T5950] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 99.662286][ T5950] vhci_hcd vhci_hcd.0: Device attached [ 99.699682][ T5942] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 99.795678][ T5962] kvm: apic: phys broadcast and lowest prio [ 99.820333][ T1223] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 99.829355][ T5897] usb 4-1: USB disconnect, device number 2 [ 99.849817][ T5942] usb 1-1: Using ep0 maxpacket: 16 [ 99.865175][ T5942] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 52, changing to 7 [ 99.881207][ T1223] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 99.898961][ T5942] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9272, setting to 1024 [ 99.921647][ T5942] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 99.933951][ T5942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.954297][ T5942] usb 1-1: Product: syz [ 99.964328][ T5942] usb 1-1: Manufacturer: syz [ 99.969146][ T5942] usb 1-1: SerialNumber: syz [ 99.986784][ T5942] usb 1-1: config 0 descriptor?? [ 100.001495][ T5942] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 100.013853][ T5942] em28xx 1-1:0.0: DVB interface 0 found: isoc [ 100.089953][ T808] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 100.249792][ T808] usb 2-1: Using ep0 maxpacket: 8 [ 100.258013][ T808] usb 2-1: unable to get BOS descriptor or descriptor too short [ 100.268192][ T808] usb 2-1: config 6 has an invalid interface number: 221 but max is 0 [ 100.284292][ T808] usb 2-1: config 6 has no interface number 0 [ 100.290726][ T5942] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 100.297647][ T808] usb 2-1: config 6 interface 221 has no altsetting 0 [ 100.313121][ T808] usb 2-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice=eb.2f [ 100.329680][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.346802][ T808] usb 2-1: Product: syz [ 100.360502][ T808] usb 2-1: Manufacturer: syz [ 100.376251][ T5942] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 100.389413][ T808] usb 2-1: SerialNumber: syz [ 100.397670][ T5942] em28xx 1-1:0.0: board has no eeprom [ 100.499917][ T5942] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 100.517443][ T5942] em28xx 1-1:0.0: dvb set to isoc mode. [ 100.532643][ T5897] em28xx 1-1:0.0: Binding DVB extension [ 100.605327][ T5942] usb 1-1: USB disconnect, device number 2 [ 100.642323][ T5942] em28xx 1-1:0.0: Disconnecting em28xx [ 100.675929][ T808] pegasus 2-1:6.221: Missing or invalid endpoints [ 100.715985][ T5897] em28xx 1-1:0.0: Registering input extension [ 100.745795][ T808] usb 2-1: USB disconnect, device number 2 [ 100.760510][ T5942] em28xx 1-1:0.0: Closing input extension [ 100.815813][ T5952] vhci_hcd: connection reset by peer [ 100.823146][ T5955] vhci_hcd: connection closed [ 100.823448][ T5959] vhci_hcd: connection closed [ 100.824616][ T5957] vhci_hcd: connection closed [ 100.845838][ T4870] vhci_hcd vhci_hcd.1: stop threads [ 100.901121][ T4870] vhci_hcd vhci_hcd.1: release socket [ 100.926501][ T4870] vhci_hcd vhci_hcd.1: disconnect device [ 100.935131][ T5977] capability: warning: `syz.3.12' uses deprecated v2 capabilities in a way that may be insecure [ 100.955973][ T4870] vhci_hcd vhci_hcd.1: stop threads [ 100.964350][ T4870] vhci_hcd vhci_hcd.1: release socket [ 100.980680][ T4870] vhci_hcd vhci_hcd.1: disconnect device [ 101.000066][ T4870] vhci_hcd vhci_hcd.1: stop threads [ 101.011520][ T4870] vhci_hcd vhci_hcd.1: release socket [ 101.027002][ T4870] vhci_hcd vhci_hcd.1: disconnect device [ 101.041059][ T5942] em28xx 1-1:0.0: Freeing device [ 101.053086][ T4870] vhci_hcd vhci_hcd.1: stop threads [ 101.076369][ T4870] vhci_hcd vhci_hcd.1: release socket [ 101.096735][ T4870] vhci_hcd vhci_hcd.1: disconnect device [ 101.390522][ T5853] Bluetooth: hci3: command tx timeout [ 101.396139][ T5861] Bluetooth: hci1: command tx timeout [ 101.396158][ T5851] Bluetooth: hci2: command tx timeout [ 101.469754][ T5851] Bluetooth: hci0: command tx timeout [ 101.951164][ T808] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 102.122762][ T808] usb 3-1: Using ep0 maxpacket: 16 [ 102.136126][ T808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 52, changing to 7 [ 102.147557][ T808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9272, setting to 1024 [ 102.166542][ T808] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 102.183068][ T6021] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 102.187860][ T808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.189661][ T6021] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 102.209522][ T6021] vhci_hcd vhci_hcd.0: Device attached [ 102.237612][ T808] usb 3-1: Product: syz [ 102.242622][ T808] usb 3-1: Manufacturer: syz [ 102.248502][ T808] usb 3-1: SerialNumber: syz [ 102.248534][ T6024] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(7) [ 102.259781][ T6024] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 102.268320][ T6024] vhci_hcd vhci_hcd.0: Device attached [ 102.278967][ T808] usb 3-1: config 0 descriptor?? [ 102.292564][ T5942] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 102.304600][ T808] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 102.323508][ T6021] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(9) [ 102.330154][ T6021] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 102.342824][ T808] em28xx 3-1:0.0: DVB interface 0 found: isoc [ 102.354691][ T6021] vhci_hcd vhci_hcd.0: Device attached [ 102.364200][ T6021] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(11) [ 102.370885][ T6021] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 102.380349][ T6021] vhci_hcd vhci_hcd.0: Device attached [ 102.409742][ T5940] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 102.440674][ T6021] kvm: apic: phys broadcast and lowest prio [ 102.479924][ T5940] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 102.492544][ T5942] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 102.510614][ T5942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.519115][ T5942] usb 2-1: Product: syz [ 102.523988][ T5942] usb 2-1: Manufacturer: syz [ 102.528693][ T5942] usb 2-1: SerialNumber: syz [ 102.543240][ T5942] usb 2-1: config 0 descriptor?? [ 102.570938][ T808] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 102.598304][ T6036] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.32'. [ 102.609039][ T6036] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 102.647386][ T808] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 102.659598][ T808] em28xx 3-1:0.0: board has no eeprom [ 102.690024][ T5933] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 102.739728][ T808] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 102.748832][ T808] em28xx 3-1:0.0: dvb set to isoc mode. [ 102.763752][ T29] em28xx 3-1:0.0: Binding DVB extension [ 102.770834][ T5942] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 102.791907][ T808] usb 3-1: USB disconnect, device number 2 [ 102.829347][ T808] em28xx 3-1:0.0: Disconnecting em28xx [ 102.872025][ T5933] usb 4-1: Using ep0 maxpacket: 8 [ 102.890479][ T5933] usb 4-1: unable to get BOS descriptor or descriptor too short [ 102.916422][ T5933] usb 4-1: config 6 has an invalid interface number: 221 but max is 0 [ 102.934294][ T5933] usb 4-1: config 6 has no interface number 0 [ 102.947647][ T29] em28xx 3-1:0.0: Registering input extension [ 102.955130][ T5933] usb 4-1: config 6 interface 221 has no altsetting 0 [ 102.962812][ T808] em28xx 3-1:0.0: Closing input extension [ 102.983136][ T5933] usb 4-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice=eb.2f [ 102.997951][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.006782][ T5933] usb 4-1: Product: syz [ 103.011579][ T5933] usb 4-1: Manufacturer: syz [ 103.016262][ T5933] usb 4-1: SerialNumber: syz [ 103.031450][ T808] em28xx 3-1:0.0: Freeing device [ 103.269963][ T5933] pegasus 4-1:6.221: Missing or invalid endpoints [ 103.315756][ T5933] usb 4-1: USB disconnect, device number 3 [ 103.387889][ T6027] vhci_hcd: connection closed [ 103.388534][ T6025] vhci_hcd: connection closed [ 103.390233][ T6022] vhci_hcd: connection reset by peer [ 103.403805][ T6030] vhci_hcd: connection closed [ 103.404599][ T66] vhci_hcd vhci_hcd.3: stop threads [ 103.436224][ T66] vhci_hcd vhci_hcd.3: release socket [ 103.446601][ T66] vhci_hcd vhci_hcd.3: disconnect device [ 103.456639][ T66] vhci_hcd vhci_hcd.3: stop threads [ 103.463460][ T66] vhci_hcd vhci_hcd.3: release socket [ 103.470641][ T66] vhci_hcd vhci_hcd.3: disconnect device [ 103.476733][ T66] vhci_hcd vhci_hcd.3: stop threads [ 103.483040][ T66] vhci_hcd vhci_hcd.3: release socket [ 103.488719][ T66] vhci_hcd vhci_hcd.3: disconnect device [ 103.495280][ T66] vhci_hcd vhci_hcd.3: stop threads [ 103.503247][ T66] vhci_hcd vhci_hcd.3: release socket [ 103.509987][ T66] vhci_hcd vhci_hcd.3: disconnect device [ 103.649674][ T808] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 103.820382][ T808] usb 1-1: Using ep0 maxpacket: 8 [ 103.847965][ T808] usb 1-1: unable to get BOS descriptor or descriptor too short [ 103.869278][ T808] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 103.896291][ T808] usb 1-1: can't read configurations, error -71 [ 104.149672][ T6068] syz.3.45 uses obsolete (PF_INET,SOCK_PACKET) [ 104.165109][ T6068] syzkaller1: entered promiscuous mode [ 104.172579][ T6068] syzkaller1: entered allmulticast mode [ 104.183712][ T6068] netlink: 20 bytes leftover after parsing attributes in process `syz.3.45'. [ 104.908973][ T6089] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 104.915586][ T6089] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 104.940425][ T6089] vhci_hcd vhci_hcd.0: Device attached [ 104.973163][ T6095] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(7) [ 104.979871][ T6095] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 104.991894][ T6095] vhci_hcd vhci_hcd.0: Device attached [ 105.011049][ T1223] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 105.021491][ T6089] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(9) [ 105.028185][ T6089] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 105.042672][ T6089] vhci_hcd vhci_hcd.0: Device attached [ 105.063533][ T6089] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(11) [ 105.070256][ T6089] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 105.084716][ T6089] vhci_hcd vhci_hcd.0: Device attached [ 105.119673][ T808] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 105.191972][ T808] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 105.245722][ T6089] kvm: apic: phys broadcast and lowest prio [ 105.500830][ T29] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 105.597044][ T6118] warning: `syz.2.64' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 105.633385][ T5942] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 105.669620][ T29] usb 1-1: Using ep0 maxpacket: 8 [ 105.678570][ T29] usb 1-1: unable to get BOS descriptor or descriptor too short [ 105.693064][ T29] usb 1-1: config 6 has an invalid interface number: 221 but max is 0 [ 105.702999][ T29] usb 1-1: config 6 has no interface number 0 [ 105.712075][ T29] usb 1-1: config 6 interface 221 has no altsetting 0 [ 105.721621][ T29] usb 1-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice=eb.2f [ 105.737876][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.746741][ T29] usb 1-1: Product: syz [ 105.751671][ T29] usb 1-1: Manufacturer: syz [ 105.756483][ T29] usb 1-1: SerialNumber: syz [ 105.811848][ T5942] usb 2-1: USB disconnect, device number 3 [ 105.994909][ T29] pegasus 1-1:6.221: Missing or invalid endpoints [ 106.027058][ T29] usb 1-1: USB disconnect, device number 5 [ 106.078024][ T6100] vhci_hcd: connection closed [ 106.078115][ T6098] vhci_hcd: connection closed [ 106.084583][ T1165] vhci_hcd vhci_hcd.0: stop threads [ 106.104624][ T6096] vhci_hcd: connection closed [ 106.104887][ T6091] vhci_hcd: connection reset by peer [ 106.133271][ T1165] vhci_hcd vhci_hcd.0: release socket [ 106.156816][ T1165] vhci_hcd vhci_hcd.0: disconnect device [ 106.174793][ T1165] vhci_hcd vhci_hcd.0: stop threads [ 106.193094][ T1165] vhci_hcd vhci_hcd.0: release socket [ 106.204190][ T1165] vhci_hcd vhci_hcd.0: disconnect device [ 106.220883][ T1165] vhci_hcd vhci_hcd.0: stop threads [ 106.235308][ T1165] vhci_hcd vhci_hcd.0: release socket [ 106.251504][ T1165] vhci_hcd vhci_hcd.0: disconnect device [ 106.274325][ T1165] vhci_hcd vhci_hcd.0: stop threads [ 106.290258][ T1165] vhci_hcd vhci_hcd.0: release socket [ 106.302208][ T1165] vhci_hcd vhci_hcd.0: disconnect device [ 106.310264][ T6131] netlink: 'syz.1.71': attribute type 10 has an invalid length. [ 106.331889][ T6131] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 106.502936][ T6140] binder: BINDER_SET_CONTEXT_MGR already set [ 106.514867][ T6140] binder: 6138:6140 ioctl 4018620d 200000004a80 returned -16 [ 106.800356][ T6153] capability: warning: `syz.0.78' uses 32-bit capabilities (legacy support in use) [ 106.957990][ T6159] netlink: 'syz.0.79': attribute type 27 has an invalid length. [ 107.166814][ T5933] IPVS: starting estimator thread 0... [ 107.270828][ T6166] IPVS: using max 25 ests per chain, 60000 per kthread [ 107.623729][ T5940] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 108.127981][ T6201] netlink: 212 bytes leftover after parsing attributes in process `syz.3.97'. [ 109.757408][ T6257] netlink: 32 bytes leftover after parsing attributes in process `syz.0.118'. [ 109.974549][ T5940] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 110.137164][ T5940] usb 4-1: config 0 has no interfaces? [ 110.159775][ T5940] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 110.190286][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.225416][ T5940] usb 4-1: config 0 descriptor?? [ 110.340450][ T808] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 110.457674][ T29] usb 4-1: USB disconnect, device number 4 [ 110.621159][ T5897] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 110.759829][ T5897] usb 1-1: device descriptor read/64, error -71 [ 111.010461][ T5897] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 111.139627][ T5897] usb 1-1: device descriptor read/64, error -71 [ 111.250124][ T5897] usb usb1-port1: attempt power cycle [ 111.416785][ T6296] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.601642][ T5897] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 111.640472][ T5897] usb 1-1: device descriptor read/8, error -71 [ 111.891902][ T5897] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 111.931303][ T5897] usb 1-1: device descriptor read/8, error -71 [ 112.051592][ T5897] usb usb1-port1: unable to enumerate USB device [ 112.167465][ T6311] netlink: 'syz.3.138': attribute type 3 has an invalid length. [ 112.209872][ T1223] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 112.380414][ T1223] usb 3-1: Using ep0 maxpacket: 8 [ 112.390231][ T1223] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 112.398749][ T1223] usb 3-1: config 0 has no interface number 0 [ 112.405013][ T1223] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 112.419011][ T1223] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 112.432094][ T1223] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 112.443627][ T1223] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 112.458056][ T1223] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 112.468705][ T1223] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.485913][ T1223] usb 3-1: config 0 descriptor?? [ 112.511312][ T5933] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 112.525828][ T1223] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 112.688037][ T5933] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 112.698732][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.713695][ T6309] netlink: 44 bytes leftover after parsing attributes in process `syz.2.137'. [ 112.724021][ T5933] usb 4-1: Product: syz [ 112.728311][ T5933] usb 4-1: Manufacturer: syz [ 112.735012][ T6309] netlink: 'syz.2.137': attribute type 6 has an invalid length. [ 112.735890][ T5933] usb 4-1: SerialNumber: syz [ 112.742512][ T6309] netlink: 'syz.2.137': attribute type 5 has an invalid length. [ 112.761772][ T6309] netlink: 'syz.2.137': attribute type 4 has an invalid length. [ 112.896766][ T5897] usb 3-1: USB disconnect, device number 3 [ 112.896779][ C0] ldusb 3-1:0.55: usb_submit_urb failed (-19) [ 112.995017][ T5933] usb 4-1: unit 8 not found! [ 113.000728][ T5933] usb 4-1: unit 6 not found! [ 113.079995][ T5933] usb 4-1: USB disconnect, device number 5 [ 113.129411][ T5864] udevd[5864]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 114.949378][ T6319] ldusb 3-1:0.55: Couldn't submit interrupt_out_urb -19 [ 114.976805][ T5897] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 115.198530][ T6375] delete_channel: no stack [ 115.230938][ T6375] delete_channel: no stack [ 115.694735][ T6393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.164'. [ 115.924335][ T6402] netlink: 'syz.2.168': attribute type 4 has an invalid length. [ 115.933366][ T6402] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.168'. [ 116.243867][ T6411] binder_alloc: 6409: binder_alloc_buf, no vma [ 116.270289][ T5940] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 116.433439][ T5940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 116.466900][ T5940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.477989][ T5940] usb 4-1: New USB device found, idVendor=056a, idProduct=5012, bcdDevice= 0.00 [ 116.495894][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.504464][ T6417] netlink: 132 bytes leftover after parsing attributes in process `syz.1.173'. [ 116.517290][ T5940] usb 4-1: config 0 descriptor?? [ 116.702331][ T808] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 116.756154][ T6425] netlink: 12 bytes leftover after parsing attributes in process `syz.2.176'. [ 116.789649][ T6425] netlink: 'syz.2.176': attribute type 6 has an invalid length. [ 116.800064][ T6425] Zero length message leads to an empty skb [ 116.873727][ T808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.892021][ T808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.906396][ T808] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 116.922007][ T808] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 116.932709][ T808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.966670][ T808] usb 1-1: config 0 descriptor?? [ 116.978810][ T5940] wacom 0003:056A:5012.0001: unknown main item tag 0x0 [ 116.986964][ T5940] wacom 0003:056A:5012.0001: unknown main item tag 0x0 [ 116.995191][ T5940] wacom 0003:056A:5012.0001: unknown main item tag 0x0 [ 117.011103][ T5940] wacom 0003:056A:5012.0001: unknown main item tag 0x0 [ 117.019141][ T5940] wacom 0003:056A:5012.0001: unknown main item tag 0x0 [ 117.027987][ T5940] wacom 0003:056A:5012.0001: unknown main item tag 0x0 [ 117.035622][ T5940] wacom 0003:056A:5012.0001: unknown main item tag 0x0 [ 117.043236][ T5940] wacom 0003:056A:5012.0001: unknown main item tag 0x0 [ 117.054258][ T5940] wacom 0003:056A:5012.0001: unknown main item tag 0x0 [ 117.063150][ T5940] wacom 0003:056A:5012.0001: unknown main item tag 0x0 [ 117.078251][ T5940] wacom 0003:056A:5012.0001: reserved main item tag 0xd [ 117.091528][ T5940] wacom 0003:056A:5012.0001: Unknown device_type for 'HID 056a:5012'. Ignoring. [ 117.268280][ T5940] usb 4-1: USB disconnect, device number 6 [ 117.418993][ T6418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.430672][ T6418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.472611][ T808] usbhid 1-1:0.0: can't add hid device: -71 [ 117.499849][ T808] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 117.526377][ T808] usb 1-1: USB disconnect, device number 10 [ 117.723974][ T6442] binder_alloc: 6441: binder_alloc_buf, no vma [ 117.809691][ T5897] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 117.982690][ T5897] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 118.005370][ T5897] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 118.025050][ T5897] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 118.048085][ T5897] usb 3-1: config 0 interface 0 has no altsetting 0 [ 118.070943][ T5897] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 118.090921][ T5897] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 118.118778][ T5897] usb 3-1: config 0 interface 0 has no altsetting 0 [ 118.136197][ T5897] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 118.159857][ T5897] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 118.183347][ T5897] usb 3-1: config 0 interface 0 has no altsetting 0 [ 118.205286][ T5897] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 118.222272][ T5897] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 118.248562][ T5897] usb 3-1: config 0 interface 0 has no altsetting 0 [ 118.265038][ T5897] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 118.282063][ T5897] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 118.308965][ T5897] usb 3-1: config 0 interface 0 has no altsetting 0 [ 118.333233][ T5897] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 118.367415][ T5897] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 118.389078][ T5897] usb 3-1: config 0 interface 0 has no altsetting 0 [ 118.404250][ T5897] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 118.419646][ T5897] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 118.439813][ T5897] usb 3-1: config 0 interface 0 has no altsetting 0 [ 118.447994][ T5897] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 118.465389][ T5897] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 118.507504][ T5897] usb 3-1: config 0 interface 0 has no altsetting 0 [ 118.531280][ T5897] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 118.549578][ T5897] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 118.554024][ T6458] netlink: 2120 bytes leftover after parsing attributes in process `syz.3.187'. [ 118.562069][ T5897] usb 3-1: Product: syz [ 118.579566][ T5897] usb 3-1: Manufacturer: syz [ 118.590762][ T5897] usb 3-1: SerialNumber: syz [ 118.609932][ T5897] usb 3-1: config 0 descriptor?? [ 118.643440][ T5897] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 118.859067][ T5934] usb 3-1: USB disconnect, device number 4 [ 118.893062][ T5934] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 118.979438][ T6468] binder_alloc: 6467: binder_alloc_buf, no vma [ 119.319433][ T6478] syzkaller1: entered promiscuous mode [ 119.327540][ T6478] syzkaller1: entered allmulticast mode [ 119.417040][ T6478] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 119.436222][ T6478] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 119.505358][ T6481] tun0: tun_chr_ioctl cmd 2148553947 [ 119.511385][ T6481] tun0: tun_chr_ioctl cmd 1074025673 [ 119.542003][ T6484] netlink: 'syz.3.196': attribute type 27 has an invalid length. [ 119.651459][ T6486] netlink: 'syz.3.197': attribute type 21 has an invalid length. [ 119.661015][ T6486] netlink: 156 bytes leftover after parsing attributes in process `syz.3.197'. [ 120.705234][ T6522] FAULT_INJECTION: forcing a failure. [ 120.705234][ T6522] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 120.719961][ T6522] CPU: 0 UID: 0 PID: 6522 Comm: syz.2.211 Not tainted syzkaller #0 PREEMPT(full) [ 120.719988][ T6522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 120.720009][ T6522] Call Trace: [ 120.720017][ T6522] [ 120.720026][ T6522] dump_stack_lvl+0xe8/0x150 [ 120.720061][ T6522] should_fail_ex+0x412/0x560 [ 120.720095][ T6522] _copy_from_user+0x2d/0xb0 [ 120.720115][ T6522] input_event_from_user+0xb1/0x290 [ 120.720148][ T6522] ? __pfx_input_event_from_user+0x10/0x10 [ 120.720189][ T6522] evdev_write+0x2c7/0x4c0 [ 120.720216][ T6522] ? __lock_acquire+0x6b5/0x2cf0 [ 120.720250][ T6522] ? __pfx_evdev_write+0x10/0x10 [ 120.720280][ T6522] ? bpf_lsm_file_permission+0x9/0x20 [ 120.720305][ T6522] ? security_file_permission+0x75/0x260 [ 120.720336][ T6522] ? rw_verify_area+0x255/0x4d0 [ 120.720368][ T6522] ? __pfx_evdev_write+0x10/0x10 [ 120.720397][ T6522] vfs_write+0x29a/0xb90 [ 120.720425][ T6522] ? __pfx_vfs_write+0x10/0x10 [ 120.720447][ T6522] ? __fget_files+0x2a/0x420 [ 120.720485][ T6522] ? __fget_files+0x2a/0x420 [ 120.720510][ T6522] ? __fget_files+0x3a0/0x420 [ 120.720536][ T6522] ? __fget_files+0x2a/0x420 [ 120.720572][ T6522] ksys_write+0x150/0x270 [ 120.720594][ T6522] ? __pfx_ksys_write+0x10/0x10 [ 120.720623][ T6522] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.720645][ T6522] do_syscall_64+0x15f/0xf80 [ 120.720679][ T6522] ? trace_irq_disable+0x3b/0x140 [ 120.720704][ T6522] ? clear_bhb_loop+0x40/0x90 [ 120.720730][ T6522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.720751][ T6522] RIP: 0033:0x7f32dc19c819 [ 120.720775][ T6522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.720792][ T6522] RSP: 002b:00007f32dcfab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 120.720817][ T6522] RAX: ffffffffffffffda RBX: 00007f32dc415fa0 RCX: 00007f32dc19c819 [ 120.720831][ T6522] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 120.720844][ T6522] RBP: 00007f32dcfab090 R08: 0000000000000000 R09: 0000000000000000 [ 120.720856][ T6522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 120.720868][ T6522] R13: 00007f32dc416038 R14: 00007f32dc415fa0 R15: 00007ffda9774c48 [ 120.720906][ T6522] [ 120.745875][ T1223] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 120.920654][ T1223] usb 4-1: Using ep0 maxpacket: 8 [ 121.025483][ T1223] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 121.034067][ T1223] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 121.045246][ T1223] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 121.055484][ T1223] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 121.075386][ T1223] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.089032][ T1223] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 121.127356][ T1223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.382357][ T1223] usb 4-1: usb_control_msg returned -32 [ 121.394047][ T1223] usbtmc 4-1:16.0: can't read capabilities [ 121.573833][ T6540] vivid-000: ================= START STATUS ================= [ 121.592500][ T6540] vivid-000: Enable Output Cropping: true grabbed [ 121.603592][ T6540] vivid-000: Enable Output Composing: true grabbed [ 121.612726][ T6540] vivid-000: Enable Output Scaler: true grabbed [ 121.619345][ T6540] vivid-000: Tx RGB Quantization Range: Automatic grabbed [ 121.635683][ T6540] vivid-000: Transmit Mode: HDMI grabbed [ 121.649287][ T6540] vivid-000: Hotplug Present: 0x00000000 [ 121.662590][ T6540] vivid-000: RxSense Present: 0x00000000 [ 121.677048][ T6540] vivid-000: EDID Present: 0x00000000 [ 121.687085][ T5940] usb 4-1: USB disconnect, device number 7 [ 121.696592][ T6540] vivid-000: ================== END STATUS ================== [ 121.884929][ T6553] binder: BINDER_SET_CONTEXT_MGR already set [ 121.892298][ T6553] binder: 6552:6553 ioctl 4018620d 200000004a80 returned -16 [ 121.970287][ T6555] syzkaller1: entered promiscuous mode [ 121.988289][ T6555] syzkaller1: entered allmulticast mode [ 122.055642][ T6555] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 122.808822][ T6576] netlink: 'syz.3.228': attribute type 8 has an invalid length. [ 122.879614][ T5897] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 122.943312][ T6578] binder: BINDER_SET_CONTEXT_MGR already set [ 122.949856][ T6578] binder: 6577:6578 ioctl 4018620d 200000004a80 returned -16 [ 123.031832][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.057118][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.072215][ T5897] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 123.081902][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.098203][ T5897] usb 1-1: config 0 descriptor?? [ 123.518443][ T5897] hid_parser_main: 419 callbacks suppressed [ 123.518468][ T5897] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 123.538748][ T5897] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 123.548136][ T5897] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 123.556522][ T5897] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 123.564556][ T5897] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 123.599017][ T6591] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 123.610275][ T6591] block device autoloading is deprecated and will be removed. [ 123.671281][ T5897] playstation 0003:054C:0DF2.0002: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 123.749638][ T5933] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 123.771621][ T5897] playstation 0003:054C:0DF2.0002: Failed to retrieve feature with reportID 9: -32 [ 123.787786][ T6600] binder: BINDER_SET_CONTEXT_MGR already set [ 123.795918][ T6600] binder: 6599:6600 ioctl 4018620d 200000004a80 returned -16 [ 123.798346][ T5897] playstation 0003:054C:0DF2.0002: Failed to retrieve DualSense pairing info: -32 [ 123.850744][ T5897] playstation 0003:054C:0DF2.0002: Failed to get MAC address from DualSense [ 123.878406][ T5897] playstation 0003:054C:0DF2.0002: Failed to create dualsense. [ 123.912045][ T5933] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 123.929330][ T5897] playstation 0003:054C:0DF2.0002: probe with driver playstation failed with error -32 [ 123.930526][ T5933] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 123.970306][ T5933] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.990067][ T5933] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 123.999334][ T5933] usb 2-1: config 1 has no interface number 0 [ 124.006171][ T5933] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 124.015947][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.048402][ T5933] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 124.233000][ T5933] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values [ 124.247701][ T5933] snd_usb_pod 2-1:1.1: invalid control EP [ 124.263848][ T5933] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 124.279976][ T5933] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 124.292953][ T5933] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 124.448278][ T6593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.461808][ T6593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.471845][ T29] usb 2-1: USB disconnect, device number 4 [ 124.639265][ T6614] FAULT_INJECTION: forcing a failure. [ 124.639265][ T6614] name failslab, interval 1, probability 0, space 0, times 1 [ 124.654315][ T6614] CPU: 1 UID: 0 PID: 6614 Comm: syz.2.243 Not tainted syzkaller #0 PREEMPT(full) [ 124.654335][ T6614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 124.654345][ T6614] Call Trace: [ 124.654351][ T6614] [ 124.654357][ T6614] dump_stack_lvl+0xe8/0x150 [ 124.654390][ T6614] should_fail_ex+0x412/0x560 [ 124.654416][ T6614] should_failslab+0xa8/0x100 [ 124.654434][ T6614] __kmalloc_cache_noprof+0x88/0x660 [ 124.654459][ T6614] ? vhost_task_create+0x123/0x380 [ 124.654481][ T6614] vhost_task_create+0x123/0x380 [ 124.654497][ T6614] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 124.654520][ T6614] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 124.654560][ T6614] ? __pfx_vhost_task_create+0x10/0x10 [ 124.654591][ T6614] ? __pfx_vhost_task_fn+0x10/0x10 [ 124.654620][ T6614] ? __lock_acquire+0x6b5/0x2cf0 [ 124.654655][ T6614] ? kasan_save_track+0x4f/0x80 [ 124.654677][ T6614] ? kasan_save_track+0x3e/0x80 [ 124.654697][ T6614] ? kasan_save_free_info+0x46/0x50 [ 124.654715][ T6614] ? __kasan_slab_free+0x5c/0x80 [ 124.654726][ T6614] ? kfree+0x1c5/0x640 [ 124.654748][ T6614] kvm_mmu_post_init_vm+0x147/0x2d0 [ 124.654769][ T6614] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 124.654795][ T6614] ? __mutex_trylock_common+0x158/0x260 [ 124.654811][ T6614] ? look_up_lock_class+0x57/0x110 [ 124.654838][ T6614] ? register_lock_class+0x31/0x2e0 [ 124.654859][ T6614] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 124.654880][ T6614] ? __lock_acquire+0x6b5/0x2cf0 [ 124.654903][ T6614] ? __mutex_lock+0x320/0x1420 [ 124.654929][ T6614] ? kasan_quarantine_put+0xbb/0x1f0 [ 124.654961][ T6614] ? do_raw_write_lock+0x11d/0x260 [ 124.654990][ T6614] kvm_vcpu_ioctl+0xa62/0xfd0 [ 124.655011][ T6614] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 124.655026][ T6614] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 124.655061][ T6614] ? __fget_files+0x2a/0x420 [ 124.655085][ T6614] ? __fget_files+0x2a/0x420 [ 124.655104][ T6614] ? __fget_files+0x3a0/0x420 [ 124.655122][ T6614] ? __fget_files+0x2a/0x420 [ 124.655144][ T6614] ? bpf_lsm_file_ioctl+0x9/0x20 [ 124.655160][ T6614] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 124.655176][ T6614] __se_sys_ioctl+0xfc/0x170 [ 124.655191][ T6614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.655207][ T6614] do_syscall_64+0x15f/0xf80 [ 124.655227][ T6614] ? trace_irq_disable+0x3b/0x140 [ 124.655246][ T6614] ? clear_bhb_loop+0x40/0x90 [ 124.655265][ T6614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.655279][ T6614] RIP: 0033:0x7f32dc19c819 [ 124.655294][ T6614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.655306][ T6614] RSP: 002b:00007f32dcfab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 124.655332][ T6614] RAX: ffffffffffffffda RBX: 00007f32dc415fa0 RCX: 00007f32dc19c819 [ 124.655342][ T6614] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 124.655351][ T6614] RBP: 00007f32dcfab090 R08: 0000000000000000 R09: 0000000000000000 [ 124.655359][ T6614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.655367][ T6614] R13: 00007f32dc416038 R14: 00007f32dc415fa0 R15: 00007ffda9774c48 [ 124.655391][ T6614] [ 125.029694][ T5933] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 125.131588][ T6619] netlink: 'syz.2.244': attribute type 8 has an invalid length. [ 125.180083][ T5933] usb 4-1: Using ep0 maxpacket: 16 [ 125.188365][ T5933] usb 4-1: unable to get BOS descriptor or descriptor too short [ 125.200480][ T6622] PKCS7: Unknown OID: [4] 0.38.107.1697900.285475 [ 125.216311][ T5933] usb 4-1: config 8 has an invalid interface number: 68 but max is 0 [ 125.229171][ T6622] PKCS7: Only support pkcs7_signedData type [ 125.235590][ T5933] usb 4-1: config 8 has no interface number 0 [ 125.242547][ T5933] usb 4-1: config 8 interface 68 has no altsetting 0 [ 125.264166][ T5933] usb 4-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice=95.9e [ 125.273469][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.282244][ T5933] usb 4-1: Product: syz [ 125.286735][ T5933] usb 4-1: Manufacturer: syz [ 125.292412][ T5933] usb 4-1: SerialNumber: syz [ 125.571892][ T6612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.601448][ T6612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.637085][ T5934] usb 1-1: USB disconnect, device number 11 [ 125.805212][ T5933] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:8.68/input/input10 [ 125.839951][ T5196] bcm5974 4-1:8.68: could not read from device [ 125.890075][ T6633] binder: BINDER_SET_CONTEXT_MGR already set [ 125.903085][ T5196] bcm5974 4-1:8.68: could not read from device [ 125.903840][ T6633] binder: 6632:6633 ioctl 4018620d 200000004a80 returned -16 [ 125.940247][ T5933] usb 4-1: USB disconnect, device number 8 [ 125.947224][ T5196] bcm5974 4-1:8.68: could not read from device [ 126.093015][ T5839] udevd[5839]: Error opening device "/dev/input/event4": No such file or directory [ 126.104527][ T5839] udevd[5839]: Unable to EVIOCGABS device "/dev/input/event4" [ 126.139195][ T5839] udevd[5839]: Unable to EVIOCGABS device "/dev/input/event4" [ 126.168675][ T5839] udevd[5839]: Unable to EVIOCGABS device "/dev/input/event4" [ 126.178208][ T5839] udevd[5839]: Unable to EVIOCGABS device "/dev/input/event4" [ 126.602779][ T6645] syzkaller1: entered promiscuous mode [ 126.612460][ T6645] syzkaller1: entered allmulticast mode [ 126.691054][ T6649] netlink: 'syz.1.255': attribute type 40 has an invalid length. [ 126.701499][ T6650] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 127.213698][ T6664] netlink: 32 bytes leftover after parsing attributes in process `syz.3.260'. [ 127.589601][ T5934] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 127.752222][ T5934] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.767357][ T5934] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.784608][ T5934] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 127.801443][ T5934] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 127.811860][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.846541][ T5934] usb 3-1: Product: syz [ 127.850906][ T5934] usb 3-1: Manufacturer: syz [ 127.855560][ T5934] usb 3-1: SerialNumber: syz [ 127.947662][ T6686] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 128.143314][ T6691] netlink: 32 bytes leftover after parsing attributes in process `syz.3.271'. [ 128.230775][ T5933] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 128.258179][ T6693] binder: BINDER_SET_CONTEXT_MGR already set [ 128.269098][ T6693] binder: 6692:6693 ioctl 4018620d 200000004a80 returned -16 [ 128.287471][ T6695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.273'. [ 128.410284][ T5933] usb 2-1: Using ep0 maxpacket: 16 [ 128.419306][ T5933] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 128.432968][ T5933] usb 2-1: config 0 interface 0 has no altsetting 0 [ 128.444678][ T5933] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 128.458173][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.476953][ T5933] usb 2-1: Product: syz [ 128.482643][ T5933] usb 2-1: Manufacturer: syz [ 128.493580][ T5933] usb 2-1: SerialNumber: syz [ 128.504349][ T5933] usb 2-1: config 0 descriptor?? [ 128.591227][ T5897] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 128.728154][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 128.743430][ T5933] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input11 [ 128.758807][ T5897] usb 4-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 128.770719][ T5897] usb 4-1: config 0 interface 0 has no altsetting 0 [ 128.788977][ T5933] imon:send_packet: packet tx failed (-71) [ 128.795048][ T5897] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 128.795082][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 128.795102][ T5897] usb 4-1: Product: syz [ 128.795118][ T5897] usb 4-1: Manufacturer: syz [ 128.795133][ T5897] usb 4-1: SerialNumber: syz [ 128.806264][ T5897] usb 4-1: config 0 descriptor?? [ 128.840036][ T6697] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 128.859701][ T5933] imon 2-1:0.0: panel buttons/knobs setup failed [ 128.876251][ T5897] usb 4-1: selecting invalid altsetting 0 [ 128.950095][ T5933] rc_core: IR keymap rc-imon-pad not found [ 128.965807][ T5933] Registered IR keymap rc-empty [ 128.980301][ T5933] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 129.008121][ T5933] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 129.031123][ T5933] imon:send_packet: packet tx failed (-71) [ 129.059713][ T5933] imon 2-1:0.0: remote input dev register failed [ 129.069702][ T5933] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 129.157407][ T5934] cdc_ncm 3-1:1.0: bind() failure [ 129.165274][ T5897] usb 4-1: USB disconnect, device number 9 [ 129.290247][ T5934] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 129.310525][ T5934] cdc_ncm 3-1:1.1: bind() failure [ 129.313913][ T6712] fuse: Bad value for 'fd' [ 129.356570][ T5934] usb 3-1: USB disconnect, device number 5 [ 129.398573][ T5933] imon 2-1:0.0: unable to initialize intf0, err 0 [ 129.415522][ T5933] imon:imon_probe: failed to initialize context! [ 129.431546][ T5933] imon 2-1:0.0: unable to register, err -19 [ 129.455666][ T5933] usb 2-1: USB disconnect, device number 5 [ 129.673585][ T5865] udevd[5865]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 129.821543][ T29] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 129.835429][ T6716] netlink: 32 bytes leftover after parsing attributes in process `syz.2.280'. [ 129.999851][ T29] usb 1-1: Using ep0 maxpacket: 32 [ 130.008237][ T6720] binder: BINDER_SET_CONTEXT_MGR already set [ 130.026141][ T29] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 130.040876][ T6720] binder: 6719:6720 ioctl 4018620d 200000004a80 returned -16 [ 130.043264][ T29] usb 1-1: config 0 interface 0 has no altsetting 0 [ 130.055855][ T29] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 130.066387][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.083462][ T29] usb 1-1: config 0 descriptor?? [ 130.679621][ T5940] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 130.839896][ T5940] usb 3-1: Using ep0 maxpacket: 32 [ 130.858815][ T5940] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 130.889851][ T5940] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 130.914278][ T5940] usb 3-1: config 0 interface 0 has no altsetting 0 [ 130.927385][ T5940] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 130.937408][ T29] corsair-cpro 0003:1B1C:0C10.0003: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.0-1/input0 [ 130.951795][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.963921][ T5940] usb 3-1: Product: syz [ 130.968584][ T5940] usb 3-1: Manufacturer: syz [ 130.975470][ T5940] usb 3-1: SerialNumber: syz [ 131.002794][ T5940] usb 3-1: config 0 descriptor?? [ 131.097606][ T29] corsair-cpro 0003:1B1C:0C10.0003: probe with driver corsair-cpro failed with error -61 [ 131.325752][ T808] usb 1-1: USB disconnect, device number 12 [ 131.417919][ T5940] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 131.675910][ T1165] Bluetooth: hci4: Frame reassembly failed (-84) [ 131.874032][ T6748] binder: BINDER_SET_CONTEXT_MGR already set [ 131.880599][ T6748] binder: 6747:6748 ioctl 4018620d 200000004a80 returned -16 [ 132.054476][ T5940] usb 3-1: USB disconnect, device number 6 [ 132.545384][ T6769] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 133.076325][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.084517][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.169914][ T5934] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 133.339609][ T5934] usb 1-1: Using ep0 maxpacket: 32 [ 133.353425][ T5934] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 133.373881][ T5934] usb 1-1: config 0 has no interface number 0 [ 133.393686][ T5934] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 133.420938][ T5934] usb 1-1: config 0 interface 85 has no altsetting 0 [ 133.433636][ T5934] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 133.443459][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.459536][ T5934] usb 1-1: Product: syz [ 133.465894][ T5934] usb 1-1: Manufacturer: syz [ 133.474482][ T5934] usb 1-1: SerialNumber: syz [ 133.489083][ T5934] usb 1-1: config 0 descriptor?? [ 133.711380][ T5851] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 133.718728][ T5853] Bluetooth: hci4: command 0x1003 tx timeout [ 133.778031][ T5934] appletouch 1-1:0.85: Failed to read mode from device. [ 133.818095][ T5934] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 133.894582][ T5934] usb 1-1: USB disconnect, device number 13 [ 134.380346][ T5934] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 134.552124][ T5934] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.577869][ T5934] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 134.598146][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.610390][ T5934] usb 1-1: Product: syz [ 134.618339][ T5934] usb 1-1: Manufacturer: syz [ 134.628286][ T5934] usb 1-1: SerialNumber: syz [ 134.659429][ T5934] usb 1-1: config 0 descriptor?? [ 134.680293][ T5934] cyberjack 1-1:0.0: required endpoints missing [ 134.833401][ T6830] Bluetooth: MGMT ver 1.23 [ 134.845113][ T6830] Bluetooth: hci2: invalid length 1, exp 2 for type 0 [ 134.886784][ T5934] usb 1-1: USB disconnect, device number 14 [ 136.554881][ T6874] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 136.709626][ T5940] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 136.771738][ T6882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.339'. [ 136.870326][ T5940] usb 4-1: Using ep0 maxpacket: 16 [ 136.883354][ T5940] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 253, changing to 7 [ 136.911807][ T5940] usb 4-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 136.929577][ T808] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 136.943835][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.969700][ T5940] usb 4-1: Product: syz [ 136.979802][ T5940] usb 4-1: Manufacturer: syz [ 136.986287][ T5940] usb 4-1: SerialNumber: syz [ 137.097187][ T6892] fuse: Bad value for 'fd' [ 137.107278][ T6890] netlink: 56 bytes leftover after parsing attributes in process `syz.2.343'. [ 137.119073][ T808] usb 1-1: Using ep0 maxpacket: 8 [ 137.127203][ T808] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 137.139577][ T808] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 137.162068][ T808] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 137.179563][ T808] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 137.199915][ T808] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 137.229150][ T808] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 137.244910][ T6890] binder: 6889:6890 ioctl c00c642d 200000000480 returned -22 [ 137.252890][ T808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.293042][ T6890] binder: 6889:6890 ioctl c0306201 2000000002c0 returned -14 [ 137.350077][ T5940] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 137.483516][ T808] usb 1-1: usb_control_msg returned -32 [ 137.500886][ T808] usbtmc 1-1:16.0: can't read capabilities [ 137.567920][ T6900] binder: 6899:6900 ioctl c0306201 2000000002c0 returned -14 [ 137.874269][ T6908] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 137.901588][ T6908] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 138.046079][ T6908] netlink: 'syz.2.351': attribute type 10 has an invalid length. [ 138.090351][ T6908] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 138.131912][ T6914] fuse: Bad value for 'fd' [ 138.197236][ T6915] usbtmc 1-1:16.0: usb_clear_halt returned -32 [ 138.331582][ T6915] netlink: 40 bytes leftover after parsing attributes in process `syz.0.337'. [ 139.632047][ T5940] usb 4-1: disable ehci-hcd to run US-144 [ 139.645736][ T5940] usb 4-1: USB disconnect, device number 10 [ 139.779397][ T5864] udevd[5864]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 139.856148][ T6942] fuse: Bad value for 'fd' [ 139.981755][ T6946] netlink: 'syz.3.364': attribute type 10 has an invalid length. [ 139.991046][ T6946] netlink: 55 bytes leftover after parsing attributes in process `syz.3.364'. [ 140.023916][ T6944] loop6: detected capacity change from 0 to 2640 [ 140.070714][ T6944] Buffer I/O error on dev loop6, logical block 0, async page read [ 140.145236][ T6944] Buffer I/O error on dev loop6, logical block 0, async page read [ 140.192029][ T6944] Buffer I/O error on dev loop6, logical block 0, async page read [ 140.223008][ T6944] Buffer I/O error on dev loop6, logical block 0, async page read [ 140.275310][ T6944] Buffer I/O error on dev loop6, logical block 0, async page read [ 140.286905][ T6944] Buffer I/O error on dev loop6, logical block 0, async page read [ 140.335542][ T6944] Buffer I/O error on dev loop6, logical block 0, async page read [ 140.355788][ T5940] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 140.427783][ T6944] Buffer I/O error on dev loop6, logical block 0, async page read [ 140.493056][ T6944] ldm_validate_partition_table(): Disk read failed. [ 140.493220][ T6944] Buffer I/O error on dev loop6, logical block 0, async page read [ 140.493333][ T6944] Buffer I/O error on dev loop6, logical block 0, async page read [ 140.511356][ T5940] usb 4-1: config 0 has no interfaces? [ 140.511397][ T5940] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 140.511421][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.512428][ T6944] Dev loop6: unable to read RDB block 0 [ 140.512939][ T6944] loop6: unable to read partition table [ 140.520901][ T6944] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 140.526134][ T5940] usb 4-1: config 0 descriptor?? [ 140.658457][ T30] audit: type=1800 audit(1775196688.103:2): pid=6957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.0.366" name="/newroot/77/pids.events" dev="tmpfs" ino=418 res=0 errno=0 [ 140.798188][ T5897] usb 4-1: USB disconnect, device number 11 [ 141.131822][ T6974] FAULT_INJECTION: forcing a failure. [ 141.131822][ T6974] name failslab, interval 1, probability 0, space 0, times 0 [ 141.158333][ T6974] CPU: 0 UID: 0 PID: 6974 Comm: syz.2.371 Not tainted syzkaller #0 PREEMPT(full) [ 141.158362][ T6974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 141.158374][ T6974] Call Trace: [ 141.158383][ T6974] [ 141.158392][ T6974] dump_stack_lvl+0xe8/0x150 [ 141.158428][ T6974] should_fail_ex+0x412/0x560 [ 141.158471][ T6974] should_failslab+0xa8/0x100 [ 141.158495][ T6974] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 141.158529][ T6974] ? dup_task_struct+0x52/0x840 [ 141.158565][ T6974] dup_task_struct+0x52/0x840 [ 141.158592][ T6974] ? _raw_spin_unlock_irq+0x23/0x50 [ 141.158622][ T6974] copy_process+0x89b/0x4430 [ 141.158685][ T6974] ? __pfx_copy_process+0x10/0x10 [ 141.158725][ T6974] ? mutex_init_lockdep+0xdf/0x110 [ 141.158749][ T6974] vhost_task_create+0x1f9/0x380 [ 141.158774][ T6974] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 141.158796][ T6974] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 141.158821][ T6974] ? __pfx_vhost_task_create+0x10/0x10 [ 141.158853][ T6974] ? __pfx_vhost_task_fn+0x10/0x10 [ 141.158882][ T6974] ? __lock_acquire+0x6b5/0x2cf0 [ 141.158913][ T6974] ? kasan_save_track+0x4f/0x80 [ 141.158941][ T6974] ? kasan_save_track+0x3e/0x80 [ 141.158969][ T6974] ? kasan_save_free_info+0x46/0x50 [ 141.158992][ T6974] ? __kasan_slab_free+0x5c/0x80 [ 141.159008][ T6974] ? kfree+0x1c5/0x640 [ 141.159037][ T6974] kvm_mmu_post_init_vm+0x147/0x2d0 [ 141.159065][ T6974] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 141.159099][ T6974] ? __mutex_trylock_common+0x158/0x260 [ 141.159121][ T6974] ? look_up_lock_class+0x57/0x110 [ 141.159150][ T6974] ? register_lock_class+0x31/0x2e0 [ 141.159183][ T6974] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 141.159213][ T6974] ? __lock_acquire+0x6b5/0x2cf0 [ 141.159245][ T6974] ? __mutex_lock+0x320/0x1420 [ 141.159282][ T6974] ? kasan_quarantine_put+0xbb/0x1f0 [ 141.159326][ T6974] ? do_raw_write_lock+0x11d/0x260 [ 141.159368][ T6974] kvm_vcpu_ioctl+0xa62/0xfd0 [ 141.159398][ T6974] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 141.159418][ T6974] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 141.159499][ T6974] ? __fget_files+0x2a/0x420 [ 141.159529][ T6974] ? __fget_files+0x2a/0x420 [ 141.159554][ T6974] ? __fget_files+0x3a0/0x420 [ 141.159579][ T6974] ? __fget_files+0x2a/0x420 [ 141.159608][ T6974] ? bpf_lsm_file_ioctl+0x9/0x20 [ 141.159630][ T6974] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 141.159652][ T6974] __se_sys_ioctl+0xfc/0x170 [ 141.159674][ T6974] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.159696][ T6974] do_syscall_64+0x15f/0xf80 [ 141.159723][ T6974] ? trace_irq_disable+0x3b/0x140 [ 141.159748][ T6974] ? clear_bhb_loop+0x40/0x90 [ 141.159774][ T6974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.159795][ T6974] RIP: 0033:0x7f32dc19c819 [ 141.159814][ T6974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.159830][ T6974] RSP: 002b:00007f32dcfab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 141.159852][ T6974] RAX: ffffffffffffffda RBX: 00007f32dc415fa0 RCX: 00007f32dc19c819 [ 141.159866][ T6974] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 141.159877][ T6974] RBP: 00007f32dcfab090 R08: 0000000000000000 R09: 0000000000000000 [ 141.159889][ T6974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.159899][ T6974] R13: 00007f32dc416038 R14: 00007f32dc415fa0 R15: 00007ffda9774c48 [ 141.159932][ T6974] [ 141.895271][ T5934] usb 1-1: USB disconnect, device number 15 [ 141.988706][ T6986] netlink: 'syz.2.375': attribute type 2 has an invalid length. [ 142.013523][ T6986] netlink: 132 bytes leftover after parsing attributes in process `syz.2.375'. [ 142.209668][ T6989] netlink: 'syz.0.376': attribute type 10 has an invalid length. [ 142.242098][ T6991] syzkaller0: entered promiscuous mode [ 142.247934][ T6991] syzkaller0: entered allmulticast mode [ 142.280548][ T6989] team0: Device xfrm0 is of different type [ 142.304358][ T6991] syzkaller0: tun_net_xmit 64726 [ 142.394933][ T6996] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 142.406627][ T6996] process 'syz.1.378' launched '/dev/fd/8' with NULL argv: empty string added [ 142.500445][ T5897] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 142.528726][ T6998] netlink: 132 bytes leftover after parsing attributes in process `syz.2.379'. [ 142.679213][ T5897] usb 1-1: config 1 interface 0 has no altsetting 0 [ 142.709143][ T5897] usb 1-1: string descriptor 0 read error: -22 [ 142.718585][ T5897] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.40 [ 142.729895][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.865105][ T7008] netlink: 24 bytes leftover after parsing attributes in process `syz.3.384'. [ 143.162894][ T5933] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 143.204754][ T7010] fuse: Unknown parameter '184467440737095516150x000000000000000a' [ 143.319709][ T5933] usb 3-1: Using ep0 maxpacket: 32 [ 143.331447][ T5933] usb 3-1: unable to get BOS descriptor or descriptor too short [ 143.346499][ T5897] steelseries 0003:1038:1410.0004: unknown main item tag 0x5 [ 143.353860][ T5933] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.354726][ T5897] steelseries 0003:1038:1410.0004: unknown global tag 0xc [ 143.380267][ T5933] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 143.381587][ T5897] steelseries 0003:1038:1410.0004: item 0 4 1 12 parsing failed [ 143.403005][ T5933] usb 3-1: New USB device found, idVendor=041e, idProduct=3010, bcdDevice= 0.40 [ 143.419577][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.427696][ T5897] steelseries 0003:1038:1410.0004: parse failed [ 143.438590][ T5933] usb 3-1: Product: syz [ 143.443210][ T5933] usb 3-1: Manufacturer: syz [ 143.448843][ T5897] steelseries 0003:1038:1410.0004: probe with driver steelseries failed with error -22 [ 143.458189][ T5933] usb 3-1: SerialNumber: syz [ 143.627695][ T5934] usb 1-1: USB disconnect, device number 16 [ 143.719104][ T5933] usb 3-1: cannot find UAC_HEADER [ 143.795049][ T5933] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 143.810663][ T5933] usb 3-1: USB disconnect, device number 7 [ 143.868849][ T5864] udevd[5864]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.282916][ T7032] binder: 7031:7032 ioctl 4018620d 0 returned -22 [ 144.488894][ T7036] netlink: 'syz.0.393': attribute type 1 has an invalid length. [ 144.508870][ T7036] netlink: 908 bytes leftover after parsing attributes in process `syz.0.393'. [ 144.534873][ T7036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.588580][ T7036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.677885][ T7046] random: crng reseeded on system resumption [ 144.697709][ T7046] netlink: 24 bytes leftover after parsing attributes in process `syz.3.396'. [ 144.770990][ T7048] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 144.788702][ T7048] openvswitch: netlink: IP tunnel TTL not specified. [ 144.800029][ T5897] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 144.964190][ T5897] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 144.974956][ T5897] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 144.987690][ T5897] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 144.998930][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.007314][ T5897] usb 3-1: Product: syz [ 145.011778][ T5897] usb 3-1: Manufacturer: syz [ 145.016437][ T5897] usb 3-1: SerialNumber: syz [ 145.030258][ T5933] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 145.192220][ T5933] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 145.209567][ T5933] usb 4-1: config 0 has no interface number 0 [ 145.216638][ T5933] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 145.227956][ T5933] usb 4-1: config 0 interface 89 has no altsetting 0 [ 145.237838][ T5933] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 145.247688][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.256047][ T5933] usb 4-1: Product: syz [ 145.260662][ T5933] usb 4-1: Manufacturer: syz [ 145.265431][ T5933] usb 4-1: SerialNumber: syz [ 145.273958][ T5933] usb 4-1: config 0 descriptor?? [ 145.281520][ T5897] cdc_ncm 3-1:1.0: bind() failure [ 145.304320][ T5933] em28xx 4-1:0.89: New device syz syz @ 12 Mbps (0ccd:10af, interface 89, class 89) [ 145.317432][ T5933] em28xx 4-1:0.89: Device initialization failed. [ 145.324565][ T5933] em28xx 4-1:0.89: Device must be connected to a high-speed USB 2.0 port. [ 145.348773][ T5897] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 145.362099][ T5897] cdc_ncm 3-1:1.1: bind() failure [ 145.387225][ T5897] usb 3-1: USB disconnect, device number 8 [ 145.495721][ T808] usb 4-1: USB disconnect, device number 12 [ 145.686957][ T7060] binder: 7059:7060 ioctl 4018620d 0 returned -22 [ 145.943559][ T7068] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 146.249220][ T7073] netlink: 'syz.2.406': attribute type 4 has an invalid length. [ 146.258639][ T7073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.406'. [ 146.403826][ T7076] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.408'. [ 146.476165][ T7076] 9p: Bad value for 'wfdno' [ 146.845481][ T7094] binder: 7093:7094 ioctl 4018620d 0 returned -22 [ 146.939914][ T7098] netdevsim netdevsim3: Firmware load for '../file0' refused, path contains '..' component [ 147.060345][ T5933] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 147.222385][ T5933] usb 1-1: Using ep0 maxpacket: 32 [ 147.246643][ T5933] usb 1-1: unable to get BOS descriptor or descriptor too short [ 147.273159][ T5933] usb 1-1: config 128 has an invalid interface number: 6 but max is 3 [ 147.285614][ T5933] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 147.320448][ T5933] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 147.354050][ T5933] usb 1-1: config 128 has no interface number 0 [ 147.376693][ T5933] usb 1-1: config 128 interface 6 altsetting 0 endpoint 0x5 has an invalid bInterval 132, changing to 11 [ 147.409527][ T5933] usb 1-1: config 128 interface 6 altsetting 0 endpoint 0x5 has invalid maxpacket 8762, setting to 1024 [ 147.447108][ T5933] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 147.469533][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.481309][ T5933] usb 1-1: Product: syz [ 147.486931][ T5933] usb 1-1: Manufacturer: syz [ 147.492292][ T5933] usb 1-1: SerialNumber: syz [ 147.643680][ T7121] tmpfs: Bad value for 'mpol' [ 147.652250][ T7121] program syz.1.420 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 147.841500][ T5933] usb 1-1: USB disconnect, device number 17 [ 147.866630][ T5864] udevd[5864]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.6/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 147.960047][ T7128] binder: BINDER_SET_CONTEXT_MGR already set [ 147.966323][ T7128] binder: 7127:7128 ioctl 4018620d 200000004a80 returned -16 [ 148.029703][ T808] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 148.180162][ T808] usb 3-1: Using ep0 maxpacket: 32 [ 148.192188][ T808] usb 3-1: config 4 has an invalid interface number: 44 but max is 0 [ 148.213081][ T808] usb 3-1: config 4 has no interface number 0 [ 148.222767][ T808] usb 3-1: config 4 interface 44 has no altsetting 0 [ 148.233835][ T808] usb 3-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice= a.ee [ 148.253298][ T808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.271544][ T808] usb 3-1: Product: syz [ 148.279934][ T808] usb 3-1: Manufacturer: syz [ 148.296596][ T808] usb 3-1: SerialNumber: syz [ 148.567451][ T7146] ./cgroup: Can't lookup blockdev [ 148.574987][ T7125] netlink: 'syz.2.422': attribute type 27 has an invalid length. [ 148.635478][ T808] kl5kusb105 3-1:4.44: KL5KUSB105D / PalmConnect converter detected [ 148.711541][ T808] usb 3-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 148.752426][ T808] usb 3-1: USB disconnect, device number 9 [ 148.848158][ T808] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 148.877290][ T808] kl5kusb105 3-1:4.44: device disconnected [ 148.986142][ T7151] binder: BINDER_SET_CONTEXT_MGR already set [ 149.009543][ T7151] binder: 7150:7151 ioctl 4018620d 200000004a80 returned -16 [ 149.780337][ T7177] binder: 7175:7177 ioctl 4018620d 0 returned -22 [ 149.854717][ T7181] binder: BINDER_SET_CONTEXT_MGR already set [ 149.861530][ T7181] binder: 7180:7181 ioctl 4018620d 200000004a80 returned -16 [ 149.950512][ T808] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 150.109710][ T808] usb 2-1: Using ep0 maxpacket: 8 [ 150.128402][ T808] usb 2-1: config 2 has an invalid interface number: 152 but max is 0 [ 150.156721][ T808] usb 2-1: config 2 has no interface number 0 [ 150.178258][ T808] usb 2-1: config 2 interface 152 has no altsetting 0 [ 150.204482][ T808] usb 2-1: New USB device found, idVendor=0bda, idProduct=8155, bcdDevice=c3.4d [ 150.231052][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.260588][ T808] usb 2-1: Product: syz [ 150.274205][ T808] usb 2-1: Manufacturer: syz [ 150.285421][ T808] usb 2-1: SerialNumber: syz [ 150.309108][ T808] r8152-cfgselector 2-1: Unknown version 0x0000 [ 150.456779][ T7202] loop6: detected capacity change from 0 to 2640 [ 150.481903][ T7202] buffer_io_error: 11 callbacks suppressed [ 150.481922][ T7202] Buffer I/O error on dev loop6, logical block 0, async page read [ 150.497177][ T7202] Buffer I/O error on dev loop6, logical block 0, async page read [ 150.506173][ T5857] Buffer I/O error on dev loop6, logical block 0, async page read [ 150.516575][ T5857] Buffer I/O error on dev loop6, logical block 0, async page read [ 150.536834][ T808] r8152 2-1:2.152: Expected endpoints are not found [ 150.557228][ T5857] Buffer I/O error on dev loop6, logical block 0, async page read [ 150.591739][ T7202] Buffer I/O error on dev loop6, logical block 0, async page read [ 150.605332][ T808] r8152-cfgselector 2-1: USB disconnect, device number 6 [ 150.619065][ T7202] Buffer I/O error on dev loop6, logical block 0, async page read [ 150.651384][ T5857] Buffer I/O error on dev loop6, logical block 0, async page read [ 150.674650][ T7202] Buffer I/O error on dev loop6, logical block 0, async page read [ 150.698308][ T7202] Buffer I/O error on dev loop6, logical block 0, async page read [ 150.718222][ T7202] ldm_validate_partition_table(): Disk read failed. [ 150.745386][ T7202] Dev loop6: unable to read RDB block 0 [ 150.783865][ T7202] loop6: unable to read partition table [ 150.797129][ T7205] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 150.806361][ T7202] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 150.936145][ T7207] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 150.949802][ T7211] binder: 7209:7211 ioctl c0306201 0 returned -14 [ 151.152086][ T7216] binder: 7215:7216 ioctl 4018620d 0 returned -22 [ 151.462437][ T30] audit: type=1800 audit(1775196698.903:3): pid=7229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.459" name="bus" dev="overlay" ino=642 res=0 errno=0 [ 151.677305][ T7239] binder: 7237:7239 ioctl c0306201 0 returned -14 [ 151.703147][ T7240] netlink: 165 bytes leftover after parsing attributes in process `syz.3.461'. [ 152.042452][ T7242] netlink: 'syz.0.463': attribute type 4 has an invalid length. [ 152.280645][ T7260] binder: 7259:7260 ioctl c0306201 0 returned -14 [ 152.410633][ T7265] fuse: Bad value for 'group_id' [ 152.415765][ T7265] fuse: Bad value for 'group_id' [ 152.451671][ T7267] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 152.776412][ T7287] syzkaller1: entered promiscuous mode [ 152.782264][ T7287] syzkaller1: entered allmulticast mode [ 153.160971][ T5934] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 153.320233][ T5933] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 153.333416][ T5934] usb 4-1: too many configurations: 109, using maximum allowed: 8 [ 153.342965][ T5934] usb 4-1: config index 0 descriptor too short (expected 72, got 55) [ 153.351357][ T5934] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 153.359156][ T5934] usb 4-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 153.373525][ T5934] usb 4-1: config index 1 descriptor too short (expected 72, got 55) [ 153.381786][ T5852] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 153.389702][ T5934] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 153.397910][ T5934] usb 4-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 153.413574][ T5934] usb 4-1: config index 2 descriptor too short (expected 72, got 55) [ 153.421870][ T5934] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 153.429309][ T5934] usb 4-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 153.443471][ T5934] usb 4-1: config index 3 descriptor too short (expected 72, got 55) [ 153.452275][ T5934] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 153.459640][ T5934] usb 4-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 153.475201][ T5934] usb 4-1: config index 4 descriptor too short (expected 72, got 55) [ 153.484613][ T5934] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 153.492662][ T5933] usb 3-1: Using ep0 maxpacket: 8 [ 153.497948][ T5934] usb 4-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 153.514479][ T5934] usb 4-1: config index 5 descriptor too short (expected 72, got 55) [ 153.523974][ T5933] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 153.533881][ T5933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.542492][ T5934] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 153.551899][ T5934] usb 4-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 153.571441][ T5852] usb 2-1: Using ep0 maxpacket: 8 [ 153.585859][ T5852] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 153.595090][ T5933] pvrusb2: Hardware description: Terratec Grabster AV400 [ 153.603140][ T5852] usb 2-1: config 0 has no interface number 0 [ 153.610286][ T5934] usb 4-1: config index 6 descriptor too short (expected 72, got 55) [ 153.619052][ T5933] pvrusb2: ********** [ 153.623728][ T5934] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 153.631964][ T5852] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 153.643532][ T5933] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 153.656087][ T5934] usb 4-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 153.670498][ T5933] pvrusb2: Important functionality might not be entirely working. [ 153.679050][ T5852] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 153.691849][ T5933] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 153.711021][ T5852] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 153.723864][ T5934] usb 4-1: config index 7 descriptor too short (expected 72, got 55) [ 153.732324][ T5933] pvrusb2: ********** [ 153.736633][ T5934] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 153.744665][ T5852] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 153.759389][ T5934] usb 4-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 153.773486][ T5852] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 153.783217][ T5852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.794293][ T5934] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 153.804599][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.816606][ T5852] usb 2-1: config 0 descriptor?? [ 153.822663][ T5934] usb 4-1: Product: syz [ 153.827510][ T5934] usb 4-1: Manufacturer: syz [ 153.843071][ T5852] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 153.851976][ T5934] usb 4-1: SerialNumber: syz [ 153.883450][ T2363] pvrusb2: Invalid write control endpoint [ 153.921387][ T5934] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 154.160047][ T5934] usb 2-1: USB disconnect, device number 7 [ 154.166296][ C0] ldusb 2-1:0.55: usb_submit_urb failed (-19) [ 154.210590][ T5852] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 154.229253][ T7354] pvrusb2: Invalid write control endpoint [ 154.258580][ T5934] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 154.285735][ T2363] pvrusb2: Invalid write control endpoint [ 154.293188][ T7312] evm: overlay not supported [ 154.314674][ T2363] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 154.334255][ T5940] usb 3-1: USB disconnect, device number 10 [ 154.366781][ T2363] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 154.385083][ T2363] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 154.402475][ T2363] pvrusb2: Device being rendered inoperable [ 154.428111][ T2363] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 154.436187][ T2363] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 154.454861][ T7294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.480427][ T7294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.503640][ T2363] pvrusb2: Attached sub-driver cx25840 [ 154.511730][ T2363] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 154.525439][ T2363] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 154.670005][ T7392] fuse: Bad value for 'group_id' [ 154.675300][ T7392] fuse: Bad value for 'group_id' [ 154.936257][ T5940] usb 4-1: USB disconnect, device number 13 [ 155.067425][ T7411] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 155.076346][ T7411] binder: 7409:7411 ioctl 4018620d 200000000100 returned -1 [ 155.168754][ T7419] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 155.175831][ T7419] binder: 7418:7419 ioctl 4018620d 200000000100 returned -1 [ 155.237711][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 155.310073][ T5852] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 155.317671][ T5852] ath9k_htc: Failed to initialize the device [ 155.327634][ T5940] usb 4-1: ath9k_htc: USB layer deinitialized [ 155.339666][ T5897] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 155.493525][ T7435] fuse: Bad value for 'group_id' [ 155.499538][ T5897] usb 1-1: Using ep0 maxpacket: 16 [ 155.506113][ T7435] fuse: Bad value for 'group_id' [ 155.515041][ T5897] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.529397][ T5897] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 155.548282][ T5897] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 155.585079][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.606555][ T5897] usb 1-1: Product: syz [ 155.619883][ T5897] usb 1-1: Manufacturer: syz [ 155.632990][ T5897] usb 1-1: SerialNumber: syz [ 155.662634][ T5897] usb 1-1: 0:2 : does not exist [ 155.866384][ T7413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.882724][ T7413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.967849][ T7464] netlink: 'syz.0.492': attribute type 2 has an invalid length. [ 156.664698][ T7482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.676299][ T7482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.744437][ T7485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.755489][ T7485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.428576][ T7491] FAULT_INJECTION: forcing a failure. [ 157.428576][ T7491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.443030][ T7491] CPU: 1 UID: 0 PID: 7491 Comm: syz.2.506 Not tainted syzkaller #0 PREEMPT(full) [ 157.443057][ T7491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 157.443069][ T7491] Call Trace: [ 157.443077][ T7491] [ 157.443086][ T7491] dump_stack_lvl+0xe8/0x150 [ 157.443122][ T7491] should_fail_ex+0x412/0x560 [ 157.443161][ T7491] _copy_to_user+0x31/0xb0 [ 157.443183][ T7491] simple_read_from_buffer+0xe1/0x170 [ 157.443216][ T7491] proc_fail_nth_read+0x1bb/0x230 [ 157.443246][ T7491] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 157.443275][ T7491] ? rw_verify_area+0x2a6/0x4d0 [ 157.443297][ T7491] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 157.443319][ T7491] vfs_read+0x20c/0xa70 [ 157.443340][ T7491] ? fdget_pos+0x246/0x320 [ 157.443368][ T7491] ? __pfx___mutex_lock+0x10/0x10 [ 157.443391][ T7491] ? __pfx_vfs_read+0x10/0x10 [ 157.443414][ T7491] ? __fget_files+0x2a/0x420 [ 157.443437][ T7491] ? __fget_files+0x3a0/0x420 [ 157.443455][ T7491] ? __fget_files+0x2a/0x420 [ 157.443480][ T7491] ksys_read+0x150/0x270 [ 157.443496][ T7491] ? __pfx_ksys_read+0x10/0x10 [ 157.443508][ T7491] ? __pfx_binder_ioctl+0x10/0x10 [ 157.443529][ T7491] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.443545][ T7491] do_syscall_64+0x15f/0xf80 [ 157.443574][ T7491] ? trace_irq_disable+0x3b/0x140 [ 157.443592][ T7491] ? clear_bhb_loop+0x40/0x90 [ 157.443610][ T7491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.443624][ T7491] RIP: 0033:0x7f32dc15d04e [ 157.443638][ T7491] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 157.443650][ T7491] RSP: 002b:00007f32dcfaafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 157.443665][ T7491] RAX: ffffffffffffffda RBX: 00007f32dcfab6c0 RCX: 00007f32dc15d04e [ 157.443676][ T7491] RDX: 000000000000000f RSI: 00007f32dcfab0a0 RDI: 0000000000000007 [ 157.443685][ T7491] RBP: 00007f32dcfab090 R08: 0000000000000000 R09: 0000000000000000 [ 157.443693][ T7491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.443701][ T7491] R13: 00007f32dc416038 R14: 00007f32dc415fa0 R15: 00007ffda9774c48 [ 157.443725][ T7491] [ 157.677014][ T7381] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 157.866209][ T7500] fuse: Bad value for 'group_id' [ 157.886481][ T7500] fuse: Bad value for 'group_id' [ 157.971489][ T7505] netlink: 'syz.2.510': attribute type 12 has an invalid length. [ 158.378974][ T7532] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 158.392012][ T1165] Bluetooth: hci4: Frame reassembly failed (-84) [ 158.513925][ T7540] FAULT_INJECTION: forcing a failure. [ 158.513925][ T7540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.542069][ T7540] CPU: 0 UID: 0 PID: 7540 Comm: syz.2.519 Not tainted syzkaller #0 PREEMPT(full) [ 158.542096][ T7540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 158.542108][ T7540] Call Trace: [ 158.542116][ T7540] [ 158.542125][ T7540] dump_stack_lvl+0xe8/0x150 [ 158.542162][ T7540] should_fail_ex+0x412/0x560 [ 158.542198][ T7540] _copy_to_user+0x31/0xb0 [ 158.542221][ T7540] simple_read_from_buffer+0xe1/0x170 [ 158.542264][ T7540] proc_fail_nth_read+0x1bb/0x230 [ 158.542298][ T7540] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 158.542330][ T7540] ? rw_verify_area+0x2a6/0x4d0 [ 158.542365][ T7540] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 158.542395][ T7540] vfs_read+0x20c/0xa70 [ 158.542424][ T7540] ? fdget_pos+0x246/0x320 [ 158.542455][ T7540] ? __pfx___mutex_lock+0x10/0x10 [ 158.542485][ T7540] ? __pfx_vfs_read+0x10/0x10 [ 158.542517][ T7540] ? __fget_files+0x2a/0x420 [ 158.542548][ T7540] ? __fget_files+0x3a0/0x420 [ 158.542573][ T7540] ? __fget_files+0x2a/0x420 [ 158.542608][ T7540] ksys_read+0x150/0x270 [ 158.542630][ T7540] ? __pfx_ksys_read+0x10/0x10 [ 158.542648][ T7540] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 158.542678][ T7540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.542701][ T7540] do_syscall_64+0x15f/0xf80 [ 158.542727][ T7540] ? trace_irq_disable+0x3b/0x140 [ 158.542751][ T7540] ? clear_bhb_loop+0x40/0x90 [ 158.542777][ T7540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.542797][ T7540] RIP: 0033:0x7f32dc15d04e [ 158.542816][ T7540] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 158.542833][ T7540] RSP: 002b:00007f32dcfaafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 158.542855][ T7540] RAX: ffffffffffffffda RBX: 00007f32dcfab6c0 RCX: 00007f32dc15d04e [ 158.542869][ T7540] RDX: 000000000000000f RSI: 00007f32dcfab0a0 RDI: 0000000000000006 [ 158.542881][ T7540] RBP: 00007f32dcfab090 R08: 0000000000000000 R09: 0000000000000000 [ 158.542893][ T7540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.542905][ T7540] R13: 00007f32dc416038 R14: 00007f32dc415fa0 R15: 00007ffda9774c48 [ 158.542938][ T7540] [ 158.934703][ T7553] binder: BINDER_SET_CONTEXT_MGR already set [ 158.940851][ T7553] binder: 7551:7553 ioctl 4018620d 200000004a80 returned -16 [ 158.960290][ T7557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.974507][ T7557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.986949][ T7557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.022534][ T7557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.047854][ T7557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.088523][ T7557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.121014][ T7557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.146177][ T7557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.186754][ T7557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.198701][ T7557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.211807][ T7557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.222660][ T7557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.680614][ T7602] binder: BINDER_SET_CONTEXT_MGR already set [ 159.701259][ T7602] binder: 7601:7602 ioctl 4018620d 200000000100 returned -16 [ 159.723163][ T7602] binder: BINDER_SET_CONTEXT_MGR already set [ 159.729291][ T7602] binder: 7601:7602 ioctl 4018620d 200000000100 returned -16 [ 159.737481][ T7610] binder: BINDER_SET_CONTEXT_MGR already set [ 159.743878][ T7602] binder: BINDER_SET_CONTEXT_MGR already set [ 159.750908][ T7610] binder: 7601:7610 ioctl 4018620d 200000000300 returned -16 [ 159.758397][ T7602] binder: 7601:7602 ioctl 4018620d 200000000100 returned -16 [ 159.776510][ T7602] binder: BINDER_SET_CONTEXT_MGR already set [ 159.783027][ T7602] binder: 7601:7602 ioctl 4018620d 200000000100 returned -16 [ 159.794510][ T7602] binder: BINDER_SET_CONTEXT_MGR already set [ 159.800946][ T7602] binder: 7601:7602 ioctl 4018620d 200000000100 returned -16 [ 159.808810][ T7602] binder: BINDER_SET_CONTEXT_MGR already set [ 159.815187][ T7602] binder: 7601:7602 ioctl 4018620d 200000000100 returned -16 [ 159.823767][ T7602] binder: BINDER_SET_CONTEXT_MGR already set [ 159.830169][ T7602] binder: 7601:7602 ioctl 4018620d 200000000100 returned -16 [ 159.837983][ T7602] binder: BINDER_SET_CONTEXT_MGR already set [ 159.844593][ T7602] binder: 7601:7602 ioctl 4018620d 200000000100 returned -16 [ 159.854392][ T7602] binder: BINDER_SET_CONTEXT_MGR already set [ 159.861288][ T7602] binder: 7601:7602 ioctl 4018620d 200000000100 returned -16 [ 159.869057][ T7602] binder: BINDER_SET_CONTEXT_MGR already set [ 159.888159][ T7602] binder: 7601:7602 ioctl 4018620d 200000000100 returned -16 [ 159.959616][ T5934] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 159.992479][ T7616] binder: BINDER_SET_CONTEXT_MGR already set [ 160.017375][ T7616] binder: 7615:7616 ioctl 4018620d 200000000100 returned -16 [ 160.043840][ T7616] binder: BINDER_SET_CONTEXT_MGR already set [ 160.053834][ T7616] binder: 7615:7616 ioctl 4018620d 200000004a80 returned -16 [ 160.133831][ T5934] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 160.150845][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.169671][ T5934] usb 3-1: Product: syz [ 160.179170][ T5934] usb 3-1: Manufacturer: syz [ 160.189762][ T5934] usb 3-1: SerialNumber: syz [ 160.205970][ T5934] usb 3-1: config 0 descriptor?? [ 160.366341][ T7639] comedi comedi0: Minor 47 could not be opened [ 160.430366][ T5853] Bluetooth: hci4: command 0x1003 tx timeout [ 160.438660][ T5851] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 160.471267][ T5934] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 160.678557][ T5897] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 161.067158][ T5851] Bluetooth: hci3: connection err: -111 [ 161.349652][ T1223] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 161.533406][ T1223] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.544301][ T1223] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 161.558283][ T1223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.575199][ T1223] usb 4-1: config 0 descriptor?? [ 161.589861][ T1223] pwc: Askey VC010 type 2 USB webcam detected. [ 161.724736][ T5897] IPVS: starting estimator thread 0... [ 161.839731][ T7703] IPVS: using max 27 ests per chain, 64800 per kthread [ 161.963377][ T7717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.982267][ T5934] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 161.998115][ T1223] pwc: recv_control_msg error -32 req 02 val 2b00 [ 162.006748][ T7717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.018008][ T1223] pwc: recv_control_msg error -32 req 02 val 2700 [ 162.028678][ T5934] usb 3-1: USB disconnect, device number 11 [ 162.042163][ T7717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.062913][ T7717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.080660][ T7717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.098485][ T7717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.130962][ T7717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.153283][ T7717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.170816][ T7717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.182897][ T7717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.219640][ T7681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.232022][ T7681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.244861][ T1223] pwc: recv_control_msg error -32 req 02 val 2c00 [ 162.254142][ T1223] pwc: recv_control_msg error -32 req 04 val 1000 [ 162.262051][ T1223] pwc: recv_control_msg error -32 req 04 val 1300 [ 162.272841][ T1223] pwc: recv_control_msg error -32 req 04 val 1400 [ 162.293051][ T1223] pwc: recv_control_msg error -32 req 02 val 2000 [ 162.400164][ T7717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.412973][ T7717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.572186][ T1223] pwc: recv_control_msg error -71 req 04 val 1500 [ 162.595355][ T1223] pwc: recv_control_msg error -71 req 02 val 2500 [ 162.612886][ T1223] pwc: recv_control_msg error -71 req 02 val 2400 [ 162.620783][ T1223] pwc: recv_control_msg error -71 req 02 val 2600 [ 162.627938][ T1223] pwc: recv_control_msg error -71 req 02 val 2900 [ 162.638656][ T1223] pwc: recv_control_msg error -71 req 02 val 2800 [ 162.647698][ T1223] pwc: recv_control_msg error -71 req 04 val 1100 [ 162.655311][ T1223] pwc: recv_control_msg error -71 req 04 val 1200 [ 162.677485][ T1223] pwc: Registered as video103. [ 162.695188][ T1223] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input15 [ 162.738392][ T1223] usb 4-1: USB disconnect, device number 14 [ 163.071211][ T5934] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 163.097091][ T7774] binder: BINDER_SET_CONTEXT_MGR already set [ 163.111155][ T7774] binder: 7773:7774 ioctl 4018620d 200000000100 returned -16 [ 163.232598][ T5934] usb 3-1: too many configurations: 109, using maximum allowed: 8 [ 163.249988][ T5934] usb 3-1: config index 0 descriptor too short (expected 72, got 55) [ 163.265946][ T5934] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 163.285751][ T5934] usb 3-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 163.308619][ T5934] usb 3-1: config index 1 descriptor too short (expected 72, got 55) [ 163.319906][ T5934] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 163.333811][ T5934] usb 3-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 163.350030][ T5934] usb 3-1: config index 2 descriptor too short (expected 72, got 55) [ 163.361231][ T5934] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 163.369099][ T5934] usb 3-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 163.385125][ T5934] usb 3-1: config index 3 descriptor too short (expected 72, got 55) [ 163.400993][ T5934] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 163.416785][ T5934] usb 3-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 163.431483][ T7784] netlink: 212384 bytes leftover after parsing attributes in process `syz.0.558'. [ 163.441658][ T7784] openvswitch: netlink: Message has 6 unknown bytes. [ 163.451652][ T5934] usb 3-1: config index 4 descriptor too short (expected 72, got 55) [ 163.460697][ T5934] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 163.475748][ T5934] usb 3-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 163.509553][ T5934] usb 3-1: config index 5 descriptor too short (expected 72, got 55) [ 163.519132][ T5934] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 163.526903][ T5934] usb 3-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 163.542128][ T5934] usb 3-1: config index 6 descriptor too short (expected 72, got 55) [ 163.557711][ T5934] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 163.575802][ T5934] usb 3-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 163.617334][ T5934] usb 3-1: config index 7 descriptor too short (expected 72, got 55) [ 163.631260][ T5934] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 163.648481][ T5934] usb 3-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 163.668577][ T5934] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 163.679651][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.695527][ T5934] usb 3-1: Product: syz [ 163.701782][ T5934] usb 3-1: Manufacturer: syz [ 163.708267][ T5934] usb 3-1: SerialNumber: syz [ 163.725847][ T5934] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 163.743633][ T1223] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 164.020378][ T7754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.042486][ T7754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.394193][ T7827] comedi comedi0: Minor 47 could not be opened [ 164.487549][ T808] usb 3-1: USB disconnect, device number 12 [ 164.559999][ T5934] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 164.741724][ T5934] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.752236][ T5934] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 164.761795][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.773023][ T5934] usb 2-1: config 0 descriptor?? [ 164.786356][ T5934] pwc: Askey VC010 type 2 USB webcam detected. [ 164.839654][ T1223] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 164.846988][ T1223] ath9k_htc: Failed to initialize the device [ 164.853848][ T808] usb 3-1: ath9k_htc: USB layer deinitialized [ 165.188813][ T5934] pwc: recv_control_msg error -32 req 02 val 2b00 [ 165.200566][ T7821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.218375][ T7821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.245959][ T7821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.255771][ T7821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.266233][ T5934] pwc: recv_control_msg error -32 req 02 val 2700 [ 165.273895][ T5934] pwc: recv_control_msg error -32 req 02 val 2c00 [ 165.281331][ T5934] pwc: recv_control_msg error -32 req 04 val 1000 [ 165.299171][ T5934] pwc: recv_control_msg error -32 req 04 val 1300 [ 165.310757][ T5934] pwc: recv_control_msg error -32 req 04 val 1400 [ 165.318305][ T5934] pwc: recv_control_msg error -32 req 02 val 2000 [ 165.326822][ T5934] pwc: recv_control_msg error -32 req 02 val 2100 [ 165.334278][ T5934] pwc: recv_control_msg error -32 req 04 val 1500 [ 165.545404][ T5934] pwc: recv_control_msg error -32 req 02 val 2400 [ 165.636742][ T7875] binder: 7874:7875 ioctl 4018620d 0 returned -22 [ 165.764065][ T5934] pwc: recv_control_msg error -71 req 02 val 2900 [ 165.786321][ T5934] pwc: recv_control_msg error -71 req 02 val 2800 [ 165.805561][ T5934] pwc: recv_control_msg error -71 req 04 val 1100 [ 165.814715][ T5934] pwc: recv_control_msg error -71 req 04 val 1200 [ 165.826994][ T5934] pwc: Registered as video103. [ 165.845224][ T5934] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input16 [ 165.885542][ T5934] usb 2-1: USB disconnect, device number 8 [ 165.932109][ T6710] udevd[6710]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 166.030052][ T5897] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 166.190344][ T5897] usb 3-1: Using ep0 maxpacket: 8 [ 166.200718][ T5897] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 166.210118][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.218273][ T5897] usb 3-1: Product: syz [ 166.223951][ T5897] usb 3-1: Manufacturer: syz [ 166.228634][ T5897] usb 3-1: SerialNumber: syz [ 166.238484][ T5897] usb 3-1: config 0 descriptor?? [ 166.356718][ T7903] netlink: 'syz.1.574': attribute type 3 has an invalid length. [ 166.366248][ T7903] FAULT_INJECTION: forcing a failure. [ 166.366248][ T7903] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.381809][ T7903] CPU: 1 UID: 0 PID: 7903 Comm: syz.1.574 Not tainted syzkaller #0 PREEMPT(full) [ 166.381835][ T7903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 166.381847][ T7903] Call Trace: [ 166.381855][ T7903] [ 166.381863][ T7903] dump_stack_lvl+0xe8/0x150 [ 166.381904][ T7903] should_fail_ex+0x412/0x560 [ 166.381938][ T7903] _copy_to_user+0x31/0xb0 [ 166.381960][ T7903] simple_read_from_buffer+0xe1/0x170 [ 166.381993][ T7903] proc_fail_nth_read+0x1bb/0x230 [ 166.382026][ T7903] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 166.382059][ T7903] ? rw_verify_area+0x2a6/0x4d0 [ 166.382090][ T7903] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 166.382120][ T7903] vfs_read+0x20c/0xa70 [ 166.382150][ T7903] ? fdget_pos+0x246/0x320 [ 166.382181][ T7903] ? __pfx___mutex_lock+0x10/0x10 [ 166.382210][ T7903] ? __pfx_vfs_read+0x10/0x10 [ 166.382243][ T7903] ? __fget_files+0x2a/0x420 [ 166.382274][ T7903] ? __fget_files+0x3a0/0x420 [ 166.382299][ T7903] ? __fget_files+0x2a/0x420 [ 166.382335][ T7903] ksys_read+0x150/0x270 [ 166.382356][ T7903] ? __pfx_ksys_read+0x10/0x10 [ 166.382384][ T7903] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.382407][ T7903] do_syscall_64+0x15f/0xf80 [ 166.382437][ T7903] ? clear_bhb_loop+0x40/0x90 [ 166.382462][ T7903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.382482][ T7903] RIP: 0033:0x7f0d3b95d04e [ 166.382503][ T7903] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 166.382519][ T7903] RSP: 002b:00007f0d3c7b4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 166.382540][ T7903] RAX: ffffffffffffffda RBX: 00007f0d3c7b56c0 RCX: 00007f0d3b95d04e [ 166.382561][ T7903] RDX: 000000000000000f RSI: 00007f0d3c7b50a0 RDI: 0000000000000007 [ 166.382574][ T7903] RBP: 00007f0d3c7b5090 R08: 0000000000000000 R09: 0000000000000000 [ 166.382585][ T7903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.382597][ T7903] R13: 00007f0d3bc16038 R14: 00007f0d3bc15fa0 R15: 00007fffe4fa3148 [ 166.382631][ T7903] [ 166.610178][ T5897] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 167.158086][ T7919] fuse: Unknown parameter 'grou00000000000000000000' [ 167.165111][ T5934] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 167.223219][ T5897] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 167.242034][ T5897] usb 3-1: USB disconnect, device number 13 [ 167.331315][ T5934] usb 2-1: config 0 has no interfaces? [ 167.337833][ T5934] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 167.347808][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.372695][ T5934] usb 2-1: config 0 descriptor?? [ 167.399645][ T7929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.411311][ T7929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.424509][ T7929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.438221][ T7929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.606434][ T5897] usb 2-1: USB disconnect, device number 9 [ 167.828695][ T7948] FAULT_INJECTION: forcing a failure. [ 167.828695][ T7948] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.865241][ T7948] CPU: 0 UID: 0 PID: 7948 Comm: syz.2.581 Not tainted syzkaller #0 PREEMPT(full) [ 167.865262][ T7948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 167.865278][ T7948] Call Trace: [ 167.865284][ T7948] [ 167.865290][ T7948] dump_stack_lvl+0xe8/0x150 [ 167.865318][ T7948] should_fail_ex+0x412/0x560 [ 167.865343][ T7948] _copy_to_user+0x31/0xb0 [ 167.865359][ T7948] autofs_dev_ioctl+0x4f4/0xad0 [ 167.865381][ T7948] ? __pfx_autofs_dev_ioctl_setpipefd+0x10/0x10 [ 167.865401][ T7948] ? __pfx_autofs_dev_ioctl+0x10/0x10 [ 167.865414][ T7948] ? __fget_files+0x2a/0x420 [ 167.865434][ T7948] ? __fget_files+0x2a/0x420 [ 167.865456][ T7948] ? bpf_lsm_file_ioctl+0x9/0x20 [ 167.865471][ T7948] ? __pfx_autofs_dev_ioctl+0x10/0x10 [ 167.865485][ T7948] __se_sys_ioctl+0xfc/0x170 [ 167.865500][ T7948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.865516][ T7948] do_syscall_64+0x15f/0xf80 [ 167.865538][ T7948] ? trace_irq_disable+0x3b/0x140 [ 167.865556][ T7948] ? clear_bhb_loop+0x40/0x90 [ 167.865574][ T7948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.865589][ T7948] RIP: 0033:0x7f32dc19c819 [ 167.865603][ T7948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.865615][ T7948] RSP: 002b:00007f32dcfab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 167.865630][ T7948] RAX: ffffffffffffffda RBX: 00007f32dc415fa0 RCX: 00007f32dc19c819 [ 167.865641][ T7948] RDX: 0000200000000280 RSI: 00000000c0189378 RDI: 000000000000000a [ 167.865650][ T7948] RBP: 00007f32dcfab090 R08: 0000000000000000 R09: 0000000000000000 [ 167.865659][ T7948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.865667][ T7948] R13: 00007f32dc416038 R14: 00007f32dc415fa0 R15: 00007ffda9774c48 [ 167.865689][ T7948] [ 168.298937][ T7968] netlink: 'syz.0.584': attribute type 3 has an invalid length. [ 168.363349][ T7976] netlink: 204 bytes leftover after parsing attributes in process `syz.0.585'. [ 168.375242][ T7973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.385669][ T7973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.419681][ T1223] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 168.534698][ T7981] fuse: Unknown parameter 'grou00000000000000000000' [ 168.589620][ T1223] usb 3-1: Using ep0 maxpacket: 8 [ 168.601675][ T1223] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 168.621975][ T1223] usb 3-1: config 2 has no interface number 0 [ 168.635950][ T1223] usb 3-1: config 2 interface 31 has no altsetting 0 [ 168.653903][ T1223] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 168.668091][ T1223] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.686957][ T1223] usb 3-1: Product: syz [ 168.694888][ T1223] usb 3-1: Manufacturer: syz [ 168.710165][ T1223] usb 3-1: SerialNumber: syz [ 169.109568][ T29] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 169.149935][ T5897] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 169.260309][ T29] usb 4-1: too many configurations: 109, using maximum allowed: 8 [ 169.261689][ T29] usb 4-1: config index 0 descriptor too short (expected 72, got 55) [ 169.261717][ T29] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 169.261766][ T29] usb 4-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 169.286847][ T29] usb 4-1: config index 1 descriptor too short (expected 72, got 55) [ 169.286948][ T29] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 169.286996][ T29] usb 4-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 169.301057][ T5897] usb 2-1: Using ep0 maxpacket: 16 [ 169.309953][ T29] usb 4-1: config index 2 descriptor too short (expected 72, got 55) [ 169.309986][ T29] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 169.310036][ T29] usb 4-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 169.320041][ T29] usb 4-1: config index 3 descriptor too short (expected 72, got 55) [ 169.320107][ T29] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 169.320155][ T29] usb 4-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 169.320663][ T5897] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 169.320688][ T5897] usb 2-1: config 0 has no interface number 0 [ 169.320758][ T5897] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 169.335369][ T29] usb 4-1: config index 4 descriptor too short (expected 72, got 55) [ 169.335401][ T29] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 169.335450][ T29] usb 4-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 169.336560][ T5897] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 169.336589][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 169.336609][ T5897] usb 2-1: Product: syz [ 169.336624][ T5897] usb 2-1: SerialNumber: syz [ 169.340067][ T5897] usb 2-1: config 0 descriptor?? [ 169.340346][ T29] usb 4-1: config index 5 descriptor too short (expected 72, got 55) [ 169.340373][ T29] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 169.340488][ T29] usb 4-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 169.342722][ T29] usb 4-1: config index 6 descriptor too short (expected 72, got 55) [ 169.342750][ T29] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 169.342870][ T29] usb 4-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 169.345744][ T29] usb 4-1: config index 7 descriptor too short (expected 72, got 55) [ 169.345774][ T29] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 169.345829][ T29] usb 4-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 169.350692][ T29] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 169.350724][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.350747][ T29] usb 4-1: Product: syz [ 169.350764][ T29] usb 4-1: Manufacturer: syz [ 169.350779][ T29] usb 4-1: SerialNumber: syz [ 169.365899][ T5897] cm109 2-1:0.8: invalid payload size 24, expected 4 [ 169.373213][ T1223] ch9200 3-1:2.31: probe with driver ch9200 failed with error -22 [ 169.386172][ T5897] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input17 [ 169.395908][ T1223] usb 3-1: USB disconnect, device number 14 [ 169.402403][ T29] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 169.451632][ T5940] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 169.703575][ T7996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.704977][ T7996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.994914][ T8036] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 170.114312][ T1223] usb 4-1: USB disconnect, device number 15 [ 170.126745][ T8045] fuse: Unknown parameter 'grou00000000000000000000' [ 170.406177][ T8057] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 170.474834][ T8057] mkiss: ax0: crc mode is auto. [ 170.493099][ T8061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.507310][ T8061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.514602][ T5940] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 170.540560][ T5940] ath9k_htc: Failed to initialize the device [ 170.563770][ T1223] usb 4-1: ath9k_htc: USB layer deinitialized [ 170.940629][ T8081] netlink: 132 bytes leftover after parsing attributes in process `syz.3.602'. [ 171.032264][ T8085] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 171.047008][ T8085] netlink: 56 bytes leftover after parsing attributes in process `syz.3.603'. [ 171.343755][ T8095] fuse: Unknown parameter 'group_i00000000000000000000' [ 171.677849][ T8125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.611'. [ 171.759821][ T5934] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 171.855161][ T8138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.868139][ T8138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.046451][ C1] cm109 2-1:0.8: cm109_urb_irq_callback: urb status -71 [ 172.053610][ C1] ------------[ cut here ]------------ [ 172.059493][ C1] URB ffff888029244000 submitted while active [ 172.065655][ C1] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x7b/0x18b0, CPU#1: kworker/1:4/5897 [ 172.075866][ C1] Modules linked in: [ 172.080061][ C1] CPU: 1 UID: 0 PID: 5897 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 172.089549][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 172.099649][ C1] Workqueue: wg-crypt-wg1 wg_packet_decrypt_worker [ 172.106407][ C1] RIP: 0010:usb_submit_urb+0x7e/0x18b0 [ 172.111989][ C1] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 27 b3 ea fa 49 83 3e 00 74 40 e8 4c 4a 81 fa 48 8d 3d 75 f7 fb 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 31 4a 81 fa eb 05 e8 2a 4a [ 172.131946][ C1] RSP: 0018:ffffc90000a08a00 EFLAGS: 00010087 [ 172.138403][ C1] RAX: ffffffff87452744 RBX: ffff888029244000 RCX: 0000000000040000 [ 172.146406][ C1] RDX: ffffc90002292000 RSI: ffff888029244000 RDI: ffffffff90411ec0 [ 172.154404][ C1] RBP: 000000000000000f R08: 0000000000000003 R09: 0000000000000004 [ 172.162409][ C1] R10: dffffc0000000000 R11: fffff52000141140 R12: 0000000000000820 [ 172.170418][ C1] R13: ffff8880213e4830 R14: ffff888029244008 R15: dffffc0000000000 [ 172.178510][ C1] FS: 0000000000000000(0000) GS:ffff888125304000(0000) knlGS:0000000000000000 [ 172.187470][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 172.194083][ C1] CR2: 00005555828b04e8 CR3: 000000006a6e6000 CR4: 00000000003526f0 [ 172.202211][ C1] Call Trace: [ 172.205531][ C1] [ 172.208410][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 172.214255][ C1] ? ___ratelimit+0x58c/0x8d0 [ 172.218969][ C1] cm109_urb_irq_callback+0x6e2/0xc90 [ 172.224387][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 172.229833][ C1] dummy_timer+0xbc0/0x4650 [ 172.234424][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 172.239530][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 172.245035][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 172.250186][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 172.255244][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 172.260233][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 172.266185][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 172.271228][ C1] __hrtimer_run_queues+0x3c0/0xa20 [ 172.276486][ C1] hrtimer_run_softirq+0x17a/0x240 [ 172.281645][ C1] handle_softirqs+0x22a/0x840 [ 172.286537][ C1] ? __irq_exit_rcu+0xca/0x220 [ 172.291345][ C1] __irq_exit_rcu+0xca/0x220 [ 172.296159][ C1] irq_exit_rcu+0x9/0x30 [ 172.300532][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 172.306379][ C1] [ 172.309334][ C1] [ 172.312371][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 172.318378][ C1] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 172.324230][ C1] Code: 90 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 2a 88 e5 f5 48 89 df e8 32 fd e5 f5 e8 dd 68 11 f6 fb bf 01 00 00 00 42 96 d7 f5 65 8b 05 6b a7 84 07 85 c0 74 07 5b e9 d1 47 00 00 [ 172.344315][ C1] RSP: 0018:ffffc90004097ad0 EFLAGS: 00000206 [ 172.350426][ C1] RAX: 000000000003ab63 RBX: ffff8880b873a580 RCX: 0000000080000001 [ 172.358618][ C1] RDX: 0000000000000000 RSI: ffffffff8e106c7e RDI: 0000000000000001 [ 172.366638][ C1] RBP: ffffc90004097ce8 R08: ffffffff9033bef7 R09: 1ffffffff20677de [ 172.374834][ C1] R10: dffffc0000000000 R11: fffffbfff20677df R12: 0000000001800000 [ 172.383045][ C1] R13: ffffe8ffffd3db38 R14: dffffc0000000000 R15: ffff8880319c7c18 [ 172.391442][ C1] process_scheduled_works+0x953/0x1860 [ 172.397061][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 172.403122][ C1] ? assign_work+0x3d5/0x5e0 [ 172.407881][ C1] worker_thread+0xa53/0xfc0 [ 172.412735][ C1] kthread+0x388/0x470 [ 172.416839][ C1] ? __pfx_worker_thread+0x10/0x10 [ 172.422000][ C1] ? __pfx_kthread+0x10/0x10 [ 172.426631][ C1] ret_from_fork+0x514/0xb70 [ 172.431451][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 172.436657][ C1] ? __switch_to+0xc79/0x1410 [ 172.441651][ C1] ? __pfx_kthread+0x10/0x10 [ 172.446309][ C1] ret_from_fork_asm+0x1a/0x30 [ 172.451215][ C1] [ 172.454360][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 172.461671][ C1] CPU: 1 UID: 0 PID: 5897 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 172.471329][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 172.481417][ C1] Workqueue: wg-crypt-wg1 wg_packet_decrypt_worker [ 172.488092][ C1] Call Trace: [ 172.491696][ C1] [ 172.494592][ C1] vpanic+0x56c/0xa60 [ 172.498630][ C1] ? __pfx__printk+0x10/0x10 [ 172.503370][ C1] ? __pfx_vpanic+0x10/0x10 [ 172.507916][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 172.513242][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 172.518490][ C1] panic+0xc5/0xd0 [ 172.522252][ C1] ? __pfx_panic+0x10/0x10 [ 172.526715][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 172.531694][ C1] __warn+0x315/0x4c0 [ 172.535724][ C1] ? usb_submit_urb+0x7b/0x18b0 [ 172.540707][ C1] ? usb_submit_urb+0x7b/0x18b0 [ 172.545690][ C1] __report_bug+0x29a/0x540 [ 172.550424][ C1] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 172.555883][ C1] ? usb_submit_urb+0x7b/0x18b0 [ 172.560806][ C1] ? __pfx___report_bug+0x10/0x10 [ 172.565901][ C1] ? mark_lock+0x180/0x190 [ 172.570401][ C1] ? dev_printk_emit+0xee/0x140 [ 172.575327][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 172.580357][ C1] report_bug_entry+0x19a/0x290 [ 172.585283][ C1] ? usb_submit_urb+0x7e/0x18b0 [ 172.590183][ C1] ? usb_submit_urb+0x83/0x18b0 [ 172.595081][ C1] handle_bug+0xce/0x200 [ 172.599463][ C1] exc_invalid_op+0x1a/0x50 [ 172.604101][ C1] asm_exc_invalid_op+0x1a/0x20 [ 172.608989][ C1] RIP: 0010:usb_submit_urb+0x7e/0x18b0 [ 172.614478][ C1] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 27 b3 ea fa 49 83 3e 00 74 40 e8 4c 4a 81 fa 48 8d 3d 75 f7 fb 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 31 4a 81 fa eb 05 e8 2a 4a [ 172.634120][ C1] RSP: 0018:ffffc90000a08a00 EFLAGS: 00010087 [ 172.640312][ C1] RAX: ffffffff87452744 RBX: ffff888029244000 RCX: 0000000000040000 [ 172.648311][ C1] RDX: ffffc90002292000 RSI: ffff888029244000 RDI: ffffffff90411ec0 [ 172.656327][ C1] RBP: 000000000000000f R08: 0000000000000003 R09: 0000000000000004 [ 172.664363][ C1] R10: dffffc0000000000 R11: fffff52000141140 R12: 0000000000000820 [ 172.672722][ C1] R13: ffff8880213e4830 R14: ffff888029244008 R15: dffffc0000000000 [ 172.680747][ C1] ? usb_submit_urb+0x74/0x18b0 [ 172.685683][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 172.691843][ C1] ? ___ratelimit+0x58c/0x8d0 [ 172.696768][ C1] cm109_urb_irq_callback+0x6e2/0xc90 [ 172.702199][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 172.707628][ C1] dummy_timer+0xbc0/0x4650 [ 172.712220][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 172.717226][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 172.722826][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 172.727804][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 172.732905][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 172.737883][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 172.743749][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 172.748754][ C1] __hrtimer_run_queues+0x3c0/0xa20 [ 172.754447][ C1] hrtimer_run_softirq+0x17a/0x240 [ 172.759782][ C1] handle_softirqs+0x22a/0x840 [ 172.765032][ C1] ? __irq_exit_rcu+0xca/0x220 [ 172.769858][ C1] __irq_exit_rcu+0xca/0x220 [ 172.774587][ C1] irq_exit_rcu+0x9/0x30 [ 172.778885][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 172.784581][ C1] [ 172.787574][ C1] [ 172.790626][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 172.796822][ C1] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 172.802681][ C1] Code: 90 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 2a 88 e5 f5 48 89 df e8 32 fd e5 f5 e8 dd 68 11 f6 fb bf 01 00 00 00 42 96 d7 f5 65 8b 05 6b a7 84 07 85 c0 74 07 5b e9 d1 47 00 00 [ 172.823734][ C1] RSP: 0018:ffffc90004097ad0 EFLAGS: 00000206 [ 172.830022][ C1] RAX: 000000000003ab63 RBX: ffff8880b873a580 RCX: 0000000080000001 [ 172.838130][ C1] RDX: 0000000000000000 RSI: ffffffff8e106c7e RDI: 0000000000000001 [ 172.846490][ C1] RBP: ffffc90004097ce8 R08: ffffffff9033bef7 R09: 1ffffffff20677de [ 172.854849][ C1] R10: dffffc0000000000 R11: fffffbfff20677df R12: 0000000001800000 [ 172.862858][ C1] R13: ffffe8ffffd3db38 R14: dffffc0000000000 R15: ffff8880319c7c18 [ 172.870901][ C1] process_scheduled_works+0x953/0x1860 [ 172.876605][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 172.882712][ C1] ? assign_work+0x3d5/0x5e0 [ 172.887472][ C1] worker_thread+0xa53/0xfc0 [ 172.892142][ C1] kthread+0x388/0x470 [ 172.896330][ C1] ? __pfx_worker_thread+0x10/0x10 [ 172.901507][ C1] ? __pfx_kthread+0x10/0x10 [ 172.906307][ C1] ret_from_fork+0x514/0xb70 [ 172.910949][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 172.916168][ C1] ? __switch_to+0xc79/0x1410 [ 172.920958][ C1] ? __pfx_kthread+0x10/0x10 [ 172.925579][ C1] ret_from_fork_asm+0x1a/0x30 [ 172.930377][ C1] [ 172.934323][ C1] Kernel Offset: disabled [ 172.938655][ C1] Rebooting in 86400 seconds..