last executing test programs: 11.809977703s ago: executing program 4 (id=1518): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4800) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) 10.671923431s ago: executing program 2 (id=1520): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 10.448980701s ago: executing program 4 (id=1522): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000023c0)=ANY=[@ANYBLOB="28060000", @ANYRES16=r2, @ANYBLOB="010029bd7000030002000100000008000100", @ANYRES32=r3, @ANYBLOB="0c06088048000080200004000a004e21000000000000000000000000000000000000000100100000240001"], 0x628}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mprotect(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)) 10.384553568s ago: executing program 2 (id=1523): r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc95b4b88e2afb55ae6f1229bcf13ecf", 0x9f, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 10.211964328s ago: executing program 2 (id=1525): r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000040)=0x603, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) bind$nfc_llcp(r0, &(0x7f0000000200)={0x27, r1, 0xffffffffffffffff, 0x6, 0xf9, 0x40, "037f6540f401a34cf88079dfb14eb850bc2d401f18ea07a567ae1cdffd6bfe05b73ec6eb11386cdd41b00dca93deea8bcf46670a1e12f44892386fa0f39720", 0x22}, 0x60) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) openat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r4, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0xf9) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000001c0)=0xd) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000280)=0xb3) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c000200"], 0x20}}, 0x800) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000140)=0x5) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)={r3, r2, 0x8, 0x0, 0x0, 0x82, 0xd7, 0x15c2, 0x5886, 0x800, 0x0, 0x3f, 'syz1\x00'}) 10.192155987s ago: executing program 4 (id=1526): r0 = syz_open_dev$vcsa(&(0x7f0000000340), 0x3, 0x100) pread64(r0, &(0x7f0000000780)=""/4096, 0x1000, 0x0) 10.068283281s ago: executing program 4 (id=1528): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009210000000122220009058103"], 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf, 0xfffffffffffff801}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a300000"], 0x110}}, 0x0) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c0000005e0001002abd7000fcdbdf2500000000", @ANYRES32=r6, @ANYBLOB="9b"], 0x1c}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) r7 = fsmount(r1, 0x0, 0x1) fchdir(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x48, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x3e}}}}]}]}, 0x48}}, 0x20000800) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r9, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[], 0x2c, 0x1) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r10, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200000049e9b31ce93ee9070c000000290495b9585dde83"], 0x0}, 0x0) 7.452009744s ago: executing program 1 (id=1532): syz_usb_connect(0x1, 0x1b, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x5b, 0xaa, 0x7f, 0x20, 0x458, 0x706e, 0x3564, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x9}}]}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) 6.286625786s ago: executing program 2 (id=1537): ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000002c80)=ANY=[@ANYBLOB="2008010081006086f2dd61417b48034a6f80de76d4041d29a6ec8aa6566b81aa841dc0ccd91c7c6d30c0a01dc1a764ad14fe6dae1633993265fb47d26801891b349cfe501a697eb65a13f2270a229b2821d8195d56b5cfa1da919f2fb52d440e818fcb3f8e68c160e376c1b20848fe4411a923ac70ab3ab9c3d5c02fed9c7a3f847abddd699f7e5d3a012864e8ef5c5549a6faf8dd5a8c82158821306f591bf6c04d466569b3e454ebea2680ca5e3ab8835f67ca13dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001340)={0x84, &(0x7f0000000e80)={0x20, 0x15, 0xb, "79f0999dee4c9fcdb1fd92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000180)={0x0, 0xe, 0x2, "c59f"}, 0x0, 0x0}) clock_gettime(0x2, &(0x7f00000002c0)={0x0, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r4, 0xc04064aa, &(0x7f00000003c0)={&(0x7f0000001280), 0x0, r5, 0x0, '\x00', 0x1ffffffffffffd64, 0x300}) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000002c40)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002c00)={&(0x7f0000002b00)={0xec, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'veth1_vlan\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2885}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "6cc6ac02a89434cc658ced161261cb303d9b04ad70261d23c598f94f67ff09e92f28baf8"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4}, 0x20000845) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000840)={r2, r3/1000+60000}, 0x10) recvmmsg(r0, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2, 0x0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x4c) setresuid(0x0, r10, r10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002880)=[{&(0x7f00000022c0)="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", 0xfd}, {&(0x7f0000002540)="ef2ff6c95abf4924867c109c2dd5d8211f4f765187944fdcb6f372b6c03fb7b63e6b578fd284035e72f061c49d54163b04d3c163e4586e88e7837c76d087c9f94c5fa6687fe24b788fcf0fc4da41ec2f1eb54ef8f07422be6ee162edbda3115ce712b8f6bbc170783797b826c97cdb9c088499258f0f78b7c3a63997c361028a873753c9a4528d71e9e73e63e0f726a3a1c841d12c44144b7dd5d71c1f7e1e8d6f8bff6b0a5dedf0c452f0a10a8185ffe9611ba5a2d286fe16f1a570518989c1cefa5f8af2dd79a2e01a4cdc18967a9c", 0xd0}, {&(0x7f0000002640)="5d81e2be8b858e3b663ac177d3dff1cddca34b360362cc4bd0d9baae69546f4ba1cb23eb0426f2e85a2b9bf591db7d05fd0148c6a12aade26ff4c4a404028dec14d69812f2fac4c7cf7306dd2f7ced88bf3cf9b7d090d5dc02c5becfccb58708461d1796a775e125f976bb16a01d394d8f5a2af6839a7447fc1fc1a288d0916219c0ceed0d6346be015c343fca3b6f1a4eb5d335da93fd0e51d4bb0c1516ce", 0x9f}, {&(0x7f00000001c0)="f310711aeebbbb9de5032d0fa1bbabb9d274378234a1414753e271e13a85681f59dcbbe50f280c46f71359b08b276ee117075ddf79adfea685ea3056562664b41ebb4009dee65107f916aa3d84d6d839af9dad7aa8f0df00333c8e8163c7d853fb0f1553a92684d67a948de2fcc61a", 0x6f}, {&(0x7f00000023c0)="37500cf7e9a8bbd03275076adc599244c7", 0x11}, {&(0x7f0000002700)="975138171e88ee5ac9a5b15301cc9c1629db329a57901d065cefc06d0322d02c15766069698dc8f7225268c623144781d7fcefbb2c89305c9a82b856ea4cd91d2d3c855dd54eddee879e748aa22c8cb882fc177f5c7e0631b2e86e3272f95861adc8509191b8c75abdd809f3738973e2ebd634555f19b1c0a2e204afebce06b3cf918b724b816e5e4caf735283627cb2580fb3210800d0049f03285a5b", 0x9d}, {&(0x7f00000027c0)="71c8104c2fd088a2044b6bd26c8af4d4024d3226310fff8318e304d5763f41666ba1b8e1d2420e4ce2262496f2d7c204b0cde2961e2ed6aa65e7b2676054b340b34002bec3c5d52d6c2ae16df8fc920c077bfc1e365624cef35fed2e8f0d27291667c7483fbe74727539478308193426a718d7380180a393fc9b2baf6af2710c67b365f36952f0a8f83969624d1d6fac45acf1fd526e2c25780410f44bb24faebc9873c39a1e570d00e6", 0xaa}], 0x7, &(0x7f0000002900)=[@mark={{0x14}}], 0x18}, 0x4000810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002980)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r9, &(0x7f0000002a40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002dbe7000fddbdf257300000008000300", @ANYRES32=r11, @ANYBLOB="0800ef00020000000500ee00790000000800ef00000000000500ee00d3000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x80) setresuid(0xffffffffffffffff, r10, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) write$FUSE_STATX(r6, &(0x7f0000002400)={0x130, 0x0, r7, {0x8, 0x7f, 0x0, '\x00', {0x1, 0x7, 0x3, 0x401, r10, r8, 0x6000, '\x00', 0x9, 0xfffffffffffffff8, 0x600000000000, 0x0, {0x9, 0x7}, {0x6fca0000000000, 0x5}, {0x10, 0x3}, {0x2, 0x101}, 0x8, 0x4, 0x3, 0x8}}}, 0x130) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) 6.246711529s ago: executing program 3 (id=1539): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 6.173498165s ago: executing program 4 (id=1540): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009210000000122220009058103"], 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf, 0xfffffffffffff801}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a300000"], 0x110}}, 0x0) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c0000005e0001002abd7000fcdbdf2500000000", @ANYRES32=r6, @ANYBLOB="9b"], 0x1c}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) r7 = fsmount(r1, 0x0, 0x1) fchdir(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x48, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x3e}}}}]}]}, 0x48}}, 0x20000800) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r9, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[], 0x2c, 0x1) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r10, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200000049e9b31ce93ee9070c000000290495b9585dde83"], 0x0}, 0x0) 5.893328576s ago: executing program 0 (id=1543): r0 = socket(0x28, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r1 = epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r2 = getpid() r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r3, 0x3b65, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x3, 0x0, 'queue0\x00'}) write$sndseq(r6, &(0x7f00000001c0)=[{0x0, 0xe1, 0x0, 0x0, @time={0x0, 0x1}, {}, {}, @result={0x0, 0x1}}], 0x1c) r7 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x311200, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) r8 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r9, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r8, 0xc01864b1, &(0x7f0000000300)={r10, 0x3, 0x101, 0x0, &(0x7f0000000180)}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r7, 0xc01864b0, &(0x7f00000003c0)={0x0, r10, 0xb, 0x800000, 0x6}) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) socket(0xa, 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000380)={0x20179e01}) socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180)) 5.593149971s ago: executing program 0 (id=1544): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x1) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000154bd00850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f00000001c0)="0101000071b08310c79916a488a8", 0x0, 0x8, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r2, 0x0, 0x118) sendmsg$AUDIT_GET(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x415e2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x3e8, 0x1, 0x70bd2d, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x8800) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x7, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611050000000000007000000000000009500800000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0x4c, 0x7fff0000}]}) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x101) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="720aaeff00000000070000000000000088a9bc451826440095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) getsockopt$inet6_tcp_int(r0, 0x6, 0x9, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000300)=0x4, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x3, 0x0, &(0x7f00000001c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xfffffffe, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) accept4(r0, &(0x7f0000000200)=@l2, &(0x7f0000000100)=0x80, 0x800) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x21ac6, 0x8}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x400, 0x1}) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x122}, 0x1, 0x0, 0x0, 0x4000040}, 0x40040) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) 5.363935624s ago: executing program 0 (id=1545): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = fcntl$getown(r0, 0x9) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f0000001bc0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000080)=0x6, 0x4) sendto$inet(r2, &(0x7f0000000340)="01a4", 0x2, 0x4080, 0x0, 0x0) ptrace$peek(0x2, r1, &(0x7f0000000000)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000015000504e1ff4319918e00352d"], 0x2c}}, 0x60040050) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffff, 0x2}, {0xfff2, 0xe}, {0xfff3, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c8d1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="1802000000070000080000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x900}, 0x60) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x25, r5}, 0x94) 4.601743465s ago: executing program 3 (id=1546): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r1, 0x6, 0x9, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x1, &(0x7f00000000c0)=0x9, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r4 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r4, 0x0, 0xcf, 0x0, &(0x7f0000000380)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)) 4.406812168s ago: executing program 0 (id=1547): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) syz_io_uring_setup(0x2, &(0x7f0000000180)={0x0, 0x9bb6, 0x10000, 0x1, 0x24a}, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x104}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) unshare(0x2c020400) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="180000d901000000000000000700000085100000fd"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x8, &(0x7f0000000040)=""/8, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100002}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) open_tree(r0, &(0x7f0000000640)='\x00', 0x9901) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003441eb4023398a716af6b593a0010902240001000040000904ee0202949da000090504020000000000090588"], 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000200)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xff, 0xbef7, 0x3, 0x3, 0x0, "864ab6b7fdea0eef588bb274fe2634bae94c7c7c4583c02b417752cf288a58a3ae671a52109e934940788090aa863217cc317f121878efde0c6176eec2e60b2ec0de394537a128c7102fc46b4ac2293bb055a413ac9e2d43b3b4eca12a27fd1f643c46ad3f5cd0dc725ba77ca3f4242c9cabd2b1ae70ae310f356aebd397ef9b"}) 3.232352153s ago: executing program 3 (id=1548): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r1, r0, 0x8, 0x0, 0x0, 0x82, 0xd7, 0x15c2, 0x5886, 0x800, 0x0, 0x3f, 'syz1\x00'}) 3.124361557s ago: executing program 1 (id=1549): r0 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040), &(0x7f0000000340)) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000040)=@id, 0x10) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000005c0)=""/32, 0x20}], 0x1, &(0x7f0000000b00)=""/55, 0x37}, 0x8}], 0x1, 0x21, 0x0) io_uring_register$IORING_REGISTER_MEM_REGION(r0, 0x22, &(0x7f0000000080)={&(0x7f0000000000)={&(0x7f0000000380)=';', 0x1, 0x1}}, 0x1) 2.943376379s ago: executing program 3 (id=1550): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24004455) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.92094351s ago: executing program 1 (id=1551): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r1, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000000)='syzkaller\x00', 0x9}, 0x94) 2.838666429s ago: executing program 3 (id=1552): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = fcntl$getown(r0, 0x9) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f0000001bc0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000080)=0x6, 0x4) sendto$inet(r2, &(0x7f0000000340)="01a4", 0x2, 0x4080, 0x0, 0x0) ptrace$peek(0x2, r1, &(0x7f0000000000)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000015000504e1ff4319918e00352d"], 0x2c}}, 0x60040050) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffff, 0x2}, {0xfff2, 0xe}, {0xfff3, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c8d1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="1802000000070000080000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x900}, 0x60) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x94) 2.795726763s ago: executing program 1 (id=1553): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40000000000029a, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r5 = dup(r4) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) gettid() r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x3c}, 0x2, @in=@empty, 0x3504, 0x4, 0x3, 0x0, 0x0, 0xfffffffe, 0x20000}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) ioctl$XFS_IOC_START_COMMIT(r5, 0x80585882, &(0x7f0000000240)) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x20000000) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000180)={0x1, 0x3, [0xbc8, 0x1df, 0x854, 0xc5e]}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 2.730912928s ago: executing program 2 (id=1554): r0 = socket(0x28, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r1 = epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r2 = getpid() r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r3, 0x3b65, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x3, 0x0, 'queue0\x00'}) write$sndseq(r6, &(0x7f00000001c0)=[{0x0, 0xe1, 0x0, 0x0, @time={0x0, 0x1}, {}, {}, @result={0x0, 0x1}}], 0x1c) r7 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x311200, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) r8 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r9, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r8, 0xc01864b1, &(0x7f0000000300)={r10, 0x3, 0x101, 0x0, &(0x7f0000000180)}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r7, 0xc01864b0, &(0x7f00000003c0)={0x0, r10, 0xb, 0x800000, 0x6}) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) socket(0xa, 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000380)={0x20179e01}) socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180)) 1.677546063s ago: executing program 1 (id=1555): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000914e7"], 0x30}, 0x1, 0x0, 0x0, 0xbe9b70533f0d9e1}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='net/dev_mcast\x00') pread64(r3, &(0x7f000004b680)=""/102363, 0x18fdb, 0x4000000002) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_stall_count', 0x20aa22, 0x0) lseek(r4, 0x80000001, 0x4) (async) lseek(r4, 0x80000001, 0x4) ioctl$VHOST_VDPA_SET_CONFIG(r4, 0x4008af74, &(0x7f00000006c0)=ANY=[@ANYRES64=r1]) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f00000000c0)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="38000000c2a68c7200"/20, @ANYRES32=0x0, @ANYBLOB="02000000000002001800128008000100767469000c0002800800060005000000"], 0x38}}, 0x20000010) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="6497e66dc7ae3bedb5f704d8dfa7010000000000000000000c00000092000180080001004f1d76978f9d92c5c9deea8c59cf90e54bf3192a9c888318c038f2773bd389e76767b909e46a6d12b7b9f6a79346565f5e25ac1c67be27c3451929b417b37cf1e8ab1bd6ca402168697fd4e12475021ee5c124ee2bd48e0c3f4de09625006a6fc10700b38b5baf27e4eebc3e8fcefc", @ANYRES32=r8, @ANYBLOB="0800038004000380"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000010) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x65, &(0x7f0000000240)=ANY=[@ANYRES32=r8], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r10, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r11 = socket$inet_udp(0x2, 0x2, 0x0) getsockname$unix(r3, &(0x7f00000002c0), &(0x7f0000000580)=0x6e) (async) getsockname$unix(r3, &(0x7f00000002c0), &(0x7f0000000580)=0x6e) bind$inet(r11, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r12 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r12, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r11, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0xfffffe01, @mcast1}}}, 0x32) sendmmsg(r12, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) (async) sendmmsg(r12, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) connect$inet(r11, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) 626.825982ms ago: executing program 3 (id=1556): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 522.245817ms ago: executing program 4 (id=1557): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000a00)={0x5, 0x4, 0x0, 0x200000, 0x0, 0xfffffffc}) syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) get_mempolicy(0x0, &(0x7f0000000000), 0x6, &(0x7f0000bbf000/0x4000)=nil, 0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x120}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) unshare(0x62040200) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201100100000020ac050a034000010203010902240001012a40002100000001220000090581030000000000f0987f03633f487fa9bc599857fc6968077a690d13d61f1f0263a40c170fbfd65d10518fd27cee97a9fc015071c85394a6b24a0f98cbd359f3ffbffe8211c81a4cfcaa8e6864d908c984cab2a5586a654ee2c16e"], 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7001008000003400000008007300000000000e0001006e657464657673696d0000000f0002"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) openat$adsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0) renameat(0xffffffffffffff9c, &(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) dup2(0xffffffffffffffff, r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x0, 0xed, &(0x7f0000000140)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x70, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 436.571492ms ago: executing program 2 (id=1558): r0 = socket(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000183b9220b113420016519a02030109021b00010000000009040000012e459e000905c435a3"], 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x100, 0x3, @empty, 0x4}, 0x1c) syz_open_dev$mouse(&(0x7f0000000340), 0x7fffffffffffffff, 0xa02) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r1, 0x18000000000002a0, 0xb90, 0x0, &(0x7f0000000680)="b9ff030060be250d698cbe512490", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='jffs2\x00', 0x8000, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00'}) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1) sendmsg$nl_route_sched(r2, 0x0, 0x4) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f00000002c0)=0x7) r3 = socket(0x18, 0xa, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000040)={'raw\x00', 0x0, [0x5c, 0x4f, 0xe35, 0xe7, 0x7]}, &(0x7f00000000c0)=0x54) 110.092171ms ago: executing program 0 (id=1559): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8500, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000003000)=""/122, &(0x7f0000003080)=0x7a) 361.441µs ago: executing program 1 (id=1560): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 0 (id=1561): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r1, r0, 0x8, 0x0, 0x0, 0x82, 0xd7, 0x15c2, 0x5886, 0x800, 0x0, 0x3f, 'syz1\x00'}) kernel console output (not intermixed with test programs): leftover after parsing attributes in process `syz.4.1292'. [ 358.300488][ T9858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1294'. [ 358.896018][ T9874] warning: `syz.2.1299' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 361.295245][ T9893] netlink: 2088 bytes leftover after parsing attributes in process `syz.1.1303'. [ 361.470117][ T9899] ICMPv6: NA: aa:aa:aa:aa:aa:bb advertised our address fe80::aa on syz_tun! [ 361.771039][ T9904] fuse: Bad value for 'fd' [ 362.317045][ T9906] syz.0.1306 (9906) used greatest stack depth: 17568 bytes left [ 363.366174][ T5857] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 363.673001][ T5857] usb 2-1: Using ep0 maxpacket: 16 [ 363.674660][ T5857] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 363.674684][ T5857] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 363.713930][ T5857] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 363.713961][ T5857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.713979][ T5857] usb 2-1: Product: syz [ 363.713992][ T5857] usb 2-1: Manufacturer: syz [ 363.714005][ T5857] usb 2-1: SerialNumber: syz [ 363.890854][ T9934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1315'. [ 363.899887][ T9935] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 364.044967][ T31] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 364.365905][ T31] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 364.365936][ T31] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 364.365955][ T31] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 364.366000][ T31] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 364.366025][ T31] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 364.367959][ T31] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 364.367987][ T31] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 364.368014][ T31] usb 5-1: Product: syz [ 364.368028][ T31] usb 5-1: Manufacturer: syz [ 364.378912][ T31] cdc_wdm 5-1:1.0: skipping garbage [ 364.378932][ T31] cdc_wdm 5-1:1.0: skipping garbage [ 364.382293][ T31] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 364.382311][ T31] cdc_wdm 5-1:1.0: Unknown control protocol [ 365.080564][ T9931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.094950][ T9945] netlink: 'syz.1.1311': attribute type 1 has an invalid length. [ 365.114382][ T9931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.125032][ T9931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.125512][ T9931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.138487][ T5988] usb 5-1: USB disconnect, device number 53 [ 365.173178][ T5857] usb 2-1: 0:2 : does not exist [ 365.187769][ T9945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.188270][ T9945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.473471][ T5857] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 365.550992][ T5857] usb 2-1: USB disconnect, device number 53 [ 365.636192][ T5935] udevd[5935]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 365.925122][ T9956] FAULT_INJECTION: forcing a failure. [ 365.925122][ T9956] name failslab, interval 1, probability 0, space 0, times 0 [ 365.925146][ T9956] CPU: 1 UID: 0 PID: 9956 Comm: syz.2.1322 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 365.925160][ T9956] Tainted: [L]=SOFTLOCKUP [ 365.925164][ T9956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 365.925170][ T9956] Call Trace: [ 365.925175][ T9956] [ 365.925180][ T9956] dump_stack_lvl+0xe8/0x150 [ 365.925200][ T9956] should_fail_ex+0x46b/0x600 [ 365.925219][ T9956] should_failslab+0xa8/0x100 [ 365.925244][ T9956] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 365.925258][ T9956] ? __alloc_skb+0x1d0/0x7d0 [ 365.925269][ T9956] ? lockdep_hardirqs_on+0x7a/0x110 [ 365.925286][ T9956] __alloc_skb+0x1d0/0x7d0 [ 365.925299][ T9956] netlink_sendmsg+0x5d4/0xb40 [ 365.925315][ T9956] ? __pfx_netlink_sendmsg+0x10/0x10 [ 365.925329][ T9956] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 365.925345][ T9956] ____sys_sendmsg+0xa4e/0xac0 [ 365.925364][ T9956] ? __pfx_____sys_sendmsg+0x10/0x10 [ 365.925385][ T9956] ? import_iovec+0x73/0xa0 [ 365.925400][ T9956] ___sys_sendmsg+0x2a5/0x360 [ 365.925415][ T9956] ? __pfx____sys_sendmsg+0x10/0x10 [ 365.925444][ T9956] ? __fget_files+0x2a/0x420 [ 365.925456][ T9956] ? __fget_files+0x3a6/0x420 [ 365.925472][ T9956] __x64_sys_sendmsg+0x1c3/0x2a0 [ 365.925486][ T9956] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 365.925503][ T9956] ? __pfx_ksys_write+0x10/0x10 [ 365.925522][ T9956] do_syscall_64+0x14d/0xf80 [ 365.925535][ T9956] ? trace_irq_disable+0x3b/0x150 [ 365.925546][ T9956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.925556][ T9956] ? clear_bhb_loop+0x40/0x90 [ 365.925569][ T9956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.925579][ T9956] RIP: 0033:0x7f8945a0c799 [ 365.925590][ T9956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.925599][ T9956] RSP: 002b:00007f8943c5e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 365.925611][ T9956] RAX: ffffffffffffffda RBX: 00007f8945c85fa0 RCX: 00007f8945a0c799 [ 365.925618][ T9956] RDX: 0000000002000040 RSI: 0000200000000280 RDI: 0000000000000003 [ 365.925624][ T9956] RBP: 00007f8943c5e090 R08: 0000000000000000 R09: 0000000000000000 [ 365.925630][ T9956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.925636][ T9956] R13: 00007f8945c86038 R14: 00007f8945c85fa0 R15: 00007ffc9c0e83b8 [ 365.925657][ T9956] [ 366.178944][ T9961] fuse: Bad value for 'fd' [ 366.816130][ T9976] qnx4: unable to read the superblock [ 367.247735][ T60] Bluetooth: hci4: unexpected event for opcode 0x2028 [ 368.936974][ T9990] capability: warning: `syz.2.1332' uses deprecated v2 capabilities in a way that may be insecure [ 369.312953][ T31] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 369.392908][ T5857] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 369.462988][ T5988] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 369.475887][ T31] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 369.475914][ T31] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 369.475933][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 369.475979][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 369.476004][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 369.479238][ T31] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 369.479266][ T31] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 369.479286][ T31] usb 2-1: Product: syz [ 369.479299][ T31] usb 2-1: Manufacturer: syz [ 369.490150][ T31] cdc_wdm 2-1:1.0: skipping garbage [ 369.490168][ T31] cdc_wdm 2-1:1.0: skipping garbage [ 369.492402][ T31] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 369.492417][ T31] cdc_wdm 2-1:1.0: Unknown control protocol [ 369.595200][ T5857] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 369.595230][ T5857] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 369.595248][ T5857] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 369.595317][ T5857] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 369.595330][ T5857] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 369.596893][ T5857] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 369.596917][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 369.596927][ T5857] usb 3-1: Product: syz [ 369.596935][ T5857] usb 3-1: Manufacturer: syz [ 369.612916][ T5988] usb 5-1: Using ep0 maxpacket: 16 [ 369.615221][ T5988] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 369.615244][ T5988] usb 5-1: config 0 has no interface number 0 [ 369.617626][ T5988] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 369.617651][ T5988] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.617669][ T5988] usb 5-1: Product: syz [ 369.617682][ T5988] usb 5-1: Manufacturer: syz [ 369.617695][ T5988] usb 5-1: SerialNumber: syz [ 369.626638][ T5988] usb 5-1: config 0 descriptor?? [ 369.634251][ T5988] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 369.744984][ T5857] cdc_wdm 3-1:1.0: skipping garbage [ 369.745005][ T5857] cdc_wdm 3-1:1.0: skipping garbage [ 369.749957][ T5857] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 369.749976][ T5857] cdc_wdm 3-1:1.0: Unknown control protocol [ 369.851442][T10005] veth0: entered promiscuous mode [ 369.894729][T10006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.898083][T10006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.908870][T10006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.912435][T10006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.919488][ T31] usb 3-1: USB disconnect, device number 27 [ 369.937424][ T9993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.940423][ T9993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.953695][ C1] cdc_wdm 2-1:1.0: Unexpected error -71 [ 369.953770][ C1] wdm_int_callback: 798 callbacks suppressed [ 369.953786][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 369.953802][ C1] wdm_int_callback: 798 callbacks suppressed [ 369.953816][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 369.954035][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 369.954054][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 369.954270][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 369.954288][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 369.954514][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 369.954531][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 369.954748][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 369.954766][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 369.954981][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 369.954999][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 369.955214][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 369.955231][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 369.955450][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 369.955469][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 369.955697][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 369.955715][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 369.956106][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 369.956125][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 369.956679][ T36] usb 2-1: USB disconnect, device number 54 [ 369.956775][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 371.033112][ T36] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 371.156104][ T5988] gspca_spca1528: reg_w err -71 [ 371.156173][ T5988] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 371.163822][ T5988] usb 5-1: USB disconnect, device number 54 [ 371.183212][ T36] usb 3-1: Using ep0 maxpacket: 8 [ 371.203612][ T36] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 371.203643][ T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.203662][ T36] usb 3-1: Product: syz [ 371.203675][ T36] usb 3-1: Manufacturer: syz [ 371.203688][ T36] usb 3-1: SerialNumber: syz [ 371.216142][ T36] usb 3-1: config 0 descriptor?? [ 371.247495][ T36] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 371.696521][ T36] gspca_sonixj: reg_r err -32 [ 371.696619][ T36] sonixj 3-1:0.0: probe with driver sonixj failed with error -32 [ 372.677871][T10026] loop8: detected capacity change from 0 to 8 [ 372.717798][T10026] Dev loop8: unable to read RDB block 8 [ 372.717829][T10026] loop8: unable to read partition table [ 372.717953][T10026] loop8: partition table beyond EOD, truncated [ 372.717981][T10026] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 372.853891][T10004] veth0: left promiscuous mode [ 372.894432][T10033] netlink: 1832 bytes leftover after parsing attributes in process `syz.1.1346'. [ 373.032960][ T5988] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 373.163018][ T5988] usb 5-1: device descriptor read/64, error -71 [ 373.402990][ T5988] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 373.532982][ T5988] usb 5-1: device descriptor read/64, error -71 [ 373.643235][ T5988] usb usb5-port1: attempt power cycle [ 373.722183][ T5857] usb 3-1: USB disconnect, device number 28 [ 373.983057][ T36] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 373.984833][ T5988] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 374.012033][ T5988] usb 5-1: device descriptor read/8, error -71 [ 374.137086][ T36] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.137144][ T36] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 374.137157][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.140577][ T36] usb 2-1: config 0 descriptor?? [ 374.332066][ T5857] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 374.847503][ T5857] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 374.847533][ T5857] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 374.847551][ T5857] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 374.847596][ T5857] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 374.847621][ T5857] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 374.854405][ T5857] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 374.854436][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 374.854456][ T5857] usb 3-1: Product: syz [ 374.854470][ T5857] usb 3-1: Manufacturer: syz [ 374.968827][ T36] pwc: Askey VC010 type 2 USB webcam detected. [ 375.009815][ T5857] cdc_wdm 3-1:1.0: skipping garbage [ 375.009838][ T5857] cdc_wdm 3-1:1.0: skipping garbage [ 375.022925][ T5988] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 375.036816][ T5857] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 375.036836][ T5857] cdc_wdm 3-1:1.0: Unknown control protocol [ 375.044255][ T5988] usb 5-1: device descriptor read/8, error -71 [ 375.266354][ T36] pwc: recv_control_msg error -32 req 02 val 2b00 [ 375.267067][ T5988] usb usb5-port1: unable to enumerate USB device [ 375.288825][T10053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.290666][ T36] pwc: recv_control_msg error -32 req 02 val 2700 [ 375.291982][ T36] pwc: recv_control_msg error -32 req 02 val 2c00 [ 375.293934][T10053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.296191][ T36] pwc: recv_control_msg error -32 req 04 val 1000 [ 375.297068][ T36] pwc: recv_control_msg error -32 req 04 val 1300 [ 375.297725][ T36] pwc: recv_control_msg error -32 req 04 val 1400 [ 375.298496][ T36] pwc: recv_control_msg error -32 req 02 val 2000 [ 375.299283][ T36] pwc: recv_control_msg error -32 req 02 val 2100 [ 375.299934][ T36] pwc: recv_control_msg error -32 req 04 val 1500 [ 375.300759][ T36] pwc: recv_control_msg error -32 req 02 val 2500 [ 375.301514][ T36] pwc: recv_control_msg error -32 req 02 val 2400 [ 375.302158][ T36] pwc: recv_control_msg error -32 req 02 val 2600 [ 375.302978][ T36] pwc: recv_control_msg error -32 req 02 val 2900 [ 375.303759][ T36] pwc: recv_control_msg error -32 req 02 val 2800 [ 375.307095][T10053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.310098][T10053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.313256][ C0] wdm_int_callback: 3 callbacks suppressed [ 375.313277][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 375.313294][ C0] wdm_int_callback: 3 callbacks suppressed [ 375.313308][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 375.313530][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 375.313549][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 375.313768][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 375.313787][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 375.314005][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 375.314023][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 375.316433][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 375.316453][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 375.316681][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 375.316699][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 375.316932][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 375.316952][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 375.317169][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 375.317188][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 375.317395][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 375.317412][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 375.317618][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 375.317633][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 375.319166][ T5988] usb 3-1: USB disconnect, device number 29 [ 375.319173][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 376.100597][ T36] pwc: recv_control_msg error -71 req 04 val 1200 [ 376.127816][ T36] pwc: Registered as video103. [ 376.141184][ T36] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input30 [ 376.326602][ T36] usb 2-1: USB disconnect, device number 55 [ 377.785794][T10072] veth0: entered promiscuous mode [ 377.810721][T10076] netlink: 1832 bytes leftover after parsing attributes in process `syz.4.1358'. [ 377.953638][ T1230] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 378.108435][ T1230] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 378.108465][ T1230] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 378.108483][ T1230] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 378.108501][ T1230] usb 3-1: config 220 has no interface number 2 [ 378.108587][ T1230] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 378.108610][ T1230] usb 3-1: config 220 interface 0 has no altsetting 0 [ 378.108621][ T1230] usb 3-1: config 220 interface 76 has no altsetting 0 [ 378.108630][ T1230] usb 3-1: config 220 interface 1 has no altsetting 0 [ 378.111252][ T1230] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 378.111281][ T1230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.111301][ T1230] usb 3-1: Product: syz [ 378.111314][ T1230] usb 3-1: Manufacturer: syz [ 378.111327][ T1230] usb 3-1: SerialNumber: syz [ 378.349152][T10071] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1356'. [ 378.377635][ T1230] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 378.377679][ T1230] uvcvideo 3-1:220.0: No valid video chain found. [ 378.377734][ T1230] usb 3-1: selecting invalid altsetting 0 [ 378.510813][ T1230] usb 3-1: selecting invalid altsetting 0 [ 378.510851][ T1230] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 378.547013][ T1230] usb 3-1: USB disconnect, device number 30 [ 378.610257][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.610324][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.878564][ T31] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 380.797949][T10072] veth0: left promiscuous mode [ 380.867485][T10093] FAULT_INJECTION: forcing a failure. [ 380.867485][T10093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 380.867520][T10093] CPU: 0 UID: 0 PID: 10093 Comm: syz.2.1363 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 380.867546][T10093] Tainted: [L]=SOFTLOCKUP [ 380.867554][T10093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 380.867566][T10093] Call Trace: [ 380.867573][T10093] [ 380.867581][T10093] dump_stack_lvl+0xe8/0x150 [ 380.867615][T10093] should_fail_ex+0x46b/0x600 [ 380.867651][T10093] _copy_to_user+0x31/0xb0 [ 380.867676][T10093] simple_read_from_buffer+0xe1/0x170 [ 380.867701][T10093] proc_fail_nth_read+0x1be/0x230 [ 380.867722][T10093] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 380.867745][T10093] ? rw_verify_area+0x2ac/0x4e0 [ 380.867769][T10093] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 380.867790][T10093] vfs_read+0x212/0xa80 [ 380.867825][T10093] ? __pfx_vfs_read+0x10/0x10 [ 380.867853][T10093] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 380.867881][T10093] ? lockdep_hardirqs_on+0x7a/0x110 [ 380.867908][T10093] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 380.867934][T10093] ? mutex_lock_nested+0x152/0x1d0 [ 380.867953][T10093] ? fdget_pos+0x252/0x320 [ 380.867985][T10093] ksys_read+0x156/0x270 [ 380.868014][T10093] ? __pfx_ksys_read+0x10/0x10 [ 380.868060][T10093] do_syscall_64+0x14d/0xf80 [ 380.868086][T10093] ? trace_irq_disable+0x3b/0x150 [ 380.868108][T10093] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.868126][T10093] ? clear_bhb_loop+0x40/0x90 [ 380.868146][T10093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.868165][T10093] RIP: 0033:0x7f89459ccfce [ 380.868183][T10093] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 380.868200][T10093] RSP: 002b:00007f8943c1bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 380.868220][T10093] RAX: ffffffffffffffda RBX: 00007f8943c1c6c0 RCX: 00007f89459ccfce [ 380.868233][T10093] RDX: 000000000000000f RSI: 00007f8943c1c0a0 RDI: 0000000000000007 [ 380.868244][T10093] RBP: 00007f8943c1c090 R08: 0000000000000000 R09: 0000000000000000 [ 380.868255][T10093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.868265][T10093] R13: 00007f8945c86218 R14: 00007f8945c86180 R15: 00007ffc9c0e83b8 [ 380.868294][T10093] [ 382.147270][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 382.183210][ T31] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 382.183239][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.183257][ T31] usb 2-1: Product: syz [ 382.183270][ T31] usb 2-1: Manufacturer: syz [ 382.183282][ T31] usb 2-1: SerialNumber: syz [ 382.194752][ T31] usb 2-1: config 0 descriptor?? [ 382.234431][ T31] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 382.306362][ T5857] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 382.453386][ T5857] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.453441][ T5857] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 382.453465][ T5857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.461584][ T5857] usb 5-1: config 0 descriptor?? [ 382.475977][ T5857] pwc: Askey VC010 type 2 USB webcam detected. [ 382.553943][ T31] gspca_sonixj: reg_w1 err -71 [ 382.554036][ T31] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 382.564905][ T31] usb 2-1: USB disconnect, device number 56 [ 383.291384][ T5857] pwc: recv_control_msg error -32 req 02 val 2b00 [ 383.292333][ T5857] pwc: recv_control_msg error -32 req 02 val 2700 [ 383.293206][ T5857] pwc: recv_control_msg error -32 req 02 val 2c00 [ 383.293928][ T5857] pwc: recv_control_msg error -32 req 04 val 1000 [ 383.294641][ T5857] pwc: recv_control_msg error -32 req 04 val 1300 [ 383.295509][ T5857] pwc: recv_control_msg error -32 req 04 val 1400 [ 383.296209][ T5857] pwc: recv_control_msg error -32 req 02 val 2000 [ 383.345330][ T5857] pwc: recv_control_msg error -32 req 02 val 2100 [ 383.346367][ T5857] pwc: recv_control_msg error -32 req 04 val 1500 [ 383.347409][ T5857] pwc: recv_control_msg error -32 req 02 val 2500 [ 383.348299][ T5857] pwc: recv_control_msg error -32 req 02 val 2400 [ 383.349092][ T5857] pwc: recv_control_msg error -32 req 02 val 2600 [ 383.349837][ T5857] pwc: recv_control_msg error -32 req 02 val 2900 [ 383.350549][ T5857] pwc: recv_control_msg error -32 req 02 val 2800 [ 383.465695][ T5885] dvb-usb: did not find the firmware file 'dvb-usb-digivox-02.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 383.505982][ T5885] usb 4-1: USB disconnect, device number 45 [ 383.549943][ T5870] dvb-usb: did not find the firmware file 'dvb-usb-digivox-02.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 383.551728][ T5857] pwc: recv_control_msg error -71 req 04 val 1200 [ 383.578641][ T5870] usb 1-1: USB disconnect, device number 38 [ 383.580584][ T5857] pwc: Registered as video103. [ 383.624556][ T5857] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input31 [ 383.693120][ T5857] usb 5-1: USB disconnect, device number 59 [ 383.802131][ T5988] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 383.849601][ T31] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 384.001864][ T5870] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 384.242486][ T5870] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 384.242518][ T5870] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 384.242537][ T5870] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 384.242585][ T5870] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 384.242610][ T5870] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 384.245679][ T5870] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 384.245707][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 384.245727][ T5870] usb 1-1: Product: syz [ 384.245742][ T5870] usb 1-1: Manufacturer: syz [ 384.340604][ T5988] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 384.340637][ T5988] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.340709][ T5988] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 384.340751][ T5988] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 384.340772][ T5988] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.357847][ T31] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 384.357874][ T31] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 384.357892][ T31] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 384.357910][ T31] usb 3-1: config 220 has no interface number 2 [ 384.357990][ T31] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 384.358017][ T31] usb 3-1: config 220 interface 0 has no altsetting 0 [ 384.358034][ T31] usb 3-1: config 220 interface 76 has no altsetting 0 [ 384.358050][ T31] usb 3-1: config 220 interface 1 has no altsetting 0 [ 384.366288][ T31] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 384.366317][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.366336][ T31] usb 3-1: Product: syz [ 384.366349][ T31] usb 3-1: Manufacturer: syz [ 384.366362][ T31] usb 3-1: SerialNumber: syz [ 384.653330][ T5988] usb 2-1: config 0 descriptor?? [ 384.656950][ T5870] cdc_wdm 1-1:1.0: skipping garbage [ 384.656970][ T5870] cdc_wdm 1-1:1.0: skipping garbage [ 384.687895][ T5870] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 384.687916][ T5870] cdc_wdm 1-1:1.0: Unknown control protocol [ 384.849392][T10122] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1373'. [ 384.915660][ T31] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 384.915686][ T31] uvcvideo 3-1:220.0: No valid video chain found. [ 384.915804][ T31] usb 3-1: selecting invalid altsetting 0 [ 385.085934][T10140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.092349][T10140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.123201][T10141] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1372'. [ 385.212240][ C0] wdm_int_callback: 8 callbacks suppressed [ 385.212263][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 385.212279][ C0] wdm_int_callback: 8 callbacks suppressed [ 385.212290][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 385.212497][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 385.212511][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 385.212709][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 385.212722][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 385.212927][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 385.212941][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 385.213140][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 385.213154][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 385.213357][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 385.213371][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 385.213580][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 385.213595][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 385.213801][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 385.213823][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 385.214019][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 385.214032][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 385.214244][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 385.214260][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 385.432864][ T5808] usb 1-1: USB disconnect, device number 39 [ 385.433033][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 385.746115][ T31] usb 3-1: selecting invalid altsetting 0 [ 385.746138][ T31] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 385.795104][ T31] usb 3-1: USB disconnect, device number 31 [ 386.101392][ T5988] hid-multitouch 0003:0457:07DA.000C: unknown main item tag 0x0 [ 386.101428][ T5988] hid-multitouch 0003:0457:07DA.000C: unknown main item tag 0x0 [ 386.101457][ T5988] hid-multitouch 0003:0457:07DA.000C: unknown main item tag 0x0 [ 386.101484][ T5988] hid-multitouch 0003:0457:07DA.000C: unknown main item tag 0x0 [ 386.101511][ T5988] hid-multitouch 0003:0457:07DA.000C: unknown main item tag 0x0 [ 386.101537][ T5988] hid-multitouch 0003:0457:07DA.000C: unknown main item tag 0x0 [ 386.101562][ T5988] hid-multitouch 0003:0457:07DA.000C: unknown main item tag 0x0 [ 386.101588][ T5988] hid-multitouch 0003:0457:07DA.000C: unknown main item tag 0x0 [ 386.101613][ T5988] hid-multitouch 0003:0457:07DA.000C: unknown main item tag 0x0 [ 386.101638][ T5988] hid-multitouch 0003:0457:07DA.000C: unknown main item tag 0x0 [ 386.196051][ T5988] hid-multitouch 0003:0457:07DA.000C: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.1-1/input0 [ 386.333234][ T5988] usb 2-1: USB disconnect, device number 57 [ 386.380099][T10150] fido_id[10150]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 386.440059][ T5870] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 386.595335][ T5870] usb 5-1: Using ep0 maxpacket: 8 [ 386.597427][ T5870] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 386.597452][ T5870] usb 5-1: config 179 has no interface number 0 [ 386.597587][ T5870] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 386.597614][ T5870] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 386.597641][ T5870] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 386.597664][ T5870] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 386.597715][ T5870] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 386.597737][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.699569][T10149] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 386.932184][T10155] syzkaller1: entered promiscuous mode [ 386.932207][T10155] syzkaller1: entered allmulticast mode [ 386.933032][T10149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.960341][T10149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.242524][ T5808] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 387.941152][ T5808] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 387.941183][ T5808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.037551][ T5808] usb 3-1: config 0 descriptor?? [ 388.218956][ T5808] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 390.005456][T10159] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1379'. [ 390.718170][ T5808] gspca_stv06xx: I2C: Read error writing address: -71 [ 390.780882][ T5808] usb 3-1: USB disconnect, device number 32 [ 391.674670][ T5885] usb 5-1: USB disconnect, device number 60 [ 391.947224][ T5808] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 392.032027][ T5857] usb 3-1: new low-speed USB device number 33 using dummy_hcd [ 392.154783][ T5808] usb 4-1: Using ep0 maxpacket: 8 [ 392.184610][ T5808] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 392.184640][ T5808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.184659][ T5808] usb 4-1: Product: syz [ 392.184672][ T5808] usb 4-1: Manufacturer: syz [ 392.184686][ T5808] usb 4-1: SerialNumber: syz [ 392.191881][ T5808] usb 4-1: config 0 descriptor?? [ 392.194717][ T5857] usb 3-1: LPM exit latency is zeroed, disabling LPM. [ 392.196203][ T5857] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 392.199307][ T5857] usb 3-1: string descriptor 0 read error: -22 [ 392.199449][ T5857] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 392.199471][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.206645][T10176] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 392.217674][ T5857] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 392.224757][ T5808] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 392.556060][ T5857] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 392.703933][ T5857] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 392.703956][ T5857] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 392.703966][ T5857] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 392.703993][ T5857] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 392.704024][ T5857] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 392.709537][ T5857] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 392.709566][ T5857] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 392.709585][ T5857] usb 5-1: Product: syz [ 392.709598][ T5857] usb 5-1: Manufacturer: syz [ 392.711222][ T31] usb 3-1: USB disconnect, device number 33 [ 392.856554][ T5857] cdc_wdm 5-1:1.0: skipping garbage [ 392.857834][ T5857] cdc_wdm 5-1:1.0: skipping garbage [ 392.914628][ T5857] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 392.914642][ T5857] cdc_wdm 5-1:1.0: Unknown control protocol [ 392.987864][ T5808] gspca_sonixj: reg_r err -32 [ 392.987952][ T5808] sonixj 4-1:0.0: probe with driver sonixj failed with error -32 [ 393.340230][T10183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.340902][T10183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.343477][T10183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.343941][T10183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.345401][ C0] wdm_int_callback: 125 callbacks suppressed [ 393.345422][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 393.345440][ C0] wdm_int_callback: 125 callbacks suppressed [ 393.345456][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 393.345695][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 393.345715][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 393.345960][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 393.345978][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 393.347904][ T5808] usb 5-1: USB disconnect, device number 61 [ 393.347931][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 393.347959][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 393.347976][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 393.745631][ T5885] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 393.869483][ T5857] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 393.900504][ T5885] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 393.900533][ T5885] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 393.900552][ T5885] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 393.900569][ T5885] usb 3-1: config 220 has no interface number 2 [ 393.900616][ T5885] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 393.900630][ T5885] usb 3-1: config 220 interface 0 has no altsetting 0 [ 393.900640][ T5885] usb 3-1: config 220 interface 76 has no altsetting 0 [ 393.900651][ T5885] usb 3-1: config 220 interface 1 has no altsetting 0 [ 393.902829][ T5885] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 393.902857][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.902873][ T5885] usb 3-1: Product: syz [ 393.902881][ T5885] usb 3-1: Manufacturer: syz [ 393.902888][ T5885] usb 3-1: SerialNumber: syz [ 393.926347][ T5870] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 394.016511][ T5857] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 394.016540][ T5857] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 394.016557][ T5857] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 394.016620][ T5857] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 394.016634][ T5857] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 394.018406][ T5857] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 394.018430][ T5857] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 394.018474][ T5857] usb 1-1: Product: syz [ 394.018482][ T5857] usb 1-1: Manufacturer: syz [ 394.068828][ T5857] cdc_wdm 1-1:1.0: skipping garbage [ 394.069748][ T5857] cdc_wdm 1-1:1.0: skipping garbage [ 394.084865][ T5857] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 394.085242][ T5857] cdc_wdm 1-1:1.0: Unknown control protocol [ 394.090593][ T5870] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 394.090620][ T5870] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 394.090637][ T5870] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 394.090726][ T5870] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 394.090752][ T5870] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 394.096509][ T5870] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 394.096536][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 394.096599][ T5870] usb 2-1: Product: syz [ 394.096613][ T5870] usb 2-1: Manufacturer: syz [ 394.135554][T10186] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1386'. [ 394.198402][ T5870] cdc_wdm 2-1:1.0: skipping garbage [ 394.198422][ T5870] cdc_wdm 2-1:1.0: skipping garbage [ 394.218184][ T5870] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 394.218204][ T5870] cdc_wdm 2-1:1.0: Unknown control protocol [ 394.227244][ T5885] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 394.227277][ T5885] uvcvideo 3-1:220.0: No valid video chain found. [ 394.227334][ T5885] usb 3-1: selecting invalid altsetting 0 [ 394.293887][ T5885] usb 3-1: selecting invalid altsetting 0 [ 394.293925][ T5885] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 394.328089][ T5885] usb 3-1: USB disconnect, device number 34 [ 394.340894][T10189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.341855][T10189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.424956][T10192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.426193][T10192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.468411][ T5870] usb 2-1: USB disconnect, device number 58 [ 394.539109][T10189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.539662][T10189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.562607][ T5857] usb 1-1: USB disconnect, device number 40 [ 395.260527][ T5885] usb 4-1: USB disconnect, device number 46 [ 395.485448][T10205] fuse: Unknown parameter 'fd00000000000000000000003' [ 395.736351][ T5885] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 395.895965][ T5885] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 395.896001][ T5885] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 395.896048][ T5885] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 395.896170][ T5885] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 395.896203][ T5885] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 396.158216][ T5885] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 396.158260][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 396.158319][ T5885] usb 2-1: Product: syz [ 396.158334][ T5885] usb 2-1: Manufacturer: syz [ 396.525656][ T5885] cdc_wdm 2-1:1.0: skipping garbage [ 396.525678][ T5885] cdc_wdm 2-1:1.0: skipping garbage [ 396.528338][ T5885] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 396.528358][ T5885] cdc_wdm 2-1:1.0: Unknown control protocol [ 396.840757][ T5885] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 397.591396][T10220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.591837][T10220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.610438][T10220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.610866][T10220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.614793][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 397.614810][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 397.615009][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 397.615020][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 397.615202][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 397.615212][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 397.615392][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 397.615403][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 397.615583][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 397.615593][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 397.615773][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 397.615782][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 397.695989][ T5885] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 397.696176][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.926281][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 397.931936][ T5870] usb 2-1: USB disconnect, device number 59 [ 397.960454][ T5885] usb 3-1: config 0 descriptor?? [ 397.976314][ T5885] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 398.183779][ T10] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 398.345874][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 398.350312][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.351636][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.351664][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 398.352948][ T10] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 398.352973][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.365481][ T10] usb 1-1: config 0 descriptor?? [ 398.579228][T10225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.579513][T10225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.775136][T10225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.775756][T10225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.021997][ T31] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 400.167382][ T31] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 400.167406][ T31] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 400.167416][ T31] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 400.167426][ T31] usb 2-1: config 220 has no interface number 2 [ 400.167497][ T31] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 400.167522][ T31] usb 2-1: config 220 interface 0 has no altsetting 0 [ 400.167540][ T31] usb 2-1: config 220 interface 76 has no altsetting 0 [ 400.167558][ T31] usb 2-1: config 220 interface 1 has no altsetting 0 [ 400.169737][ T31] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 400.169764][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.169781][ T31] usb 2-1: Product: syz [ 400.169789][ T31] usb 2-1: Manufacturer: syz [ 400.169796][ T31] usb 2-1: SerialNumber: syz [ 400.213957][T10212] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1394'. [ 400.215107][ T5885] gspca_stv06xx: I2C: Read error writing address: -71 [ 400.312490][ T5885] usb 3-1: USB disconnect, device number 35 [ 400.528451][T10237] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1400'. [ 400.601114][ T31] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 400.601150][ T31] uvcvideo 2-1:220.0: No valid video chain found. [ 400.601875][ T31] usb 2-1: selecting invalid altsetting 0 [ 400.656676][ T31] usb 2-1: selecting invalid altsetting 0 [ 400.656820][ T31] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 400.723895][ T31] usb 2-1: USB disconnect, device number 60 [ 401.002944][ T5988] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 401.145825][ T5988] usb 4-1: Using ep0 maxpacket: 8 [ 401.268450][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 401.268571][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 402.059473][ T10] usb 1-1: USB disconnect, device number 41 [ 402.091887][ T5988] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 402.091906][ T5988] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.091917][ T5988] usb 4-1: Product: syz [ 402.091924][ T5988] usb 4-1: Manufacturer: syz [ 402.091931][ T5988] usb 4-1: SerialNumber: syz [ 402.137492][ T5988] usb 4-1: config 0 descriptor?? [ 402.187860][ T5988] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 402.469826][ T10] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 402.552803][T10253] FAULT_INJECTION: forcing a failure. [ 402.552803][T10253] name failslab, interval 1, probability 0, space 0, times 0 [ 402.552866][T10253] CPU: 1 UID: 0 PID: 10253 Comm: syz.2.1404 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 402.552895][T10253] Tainted: [L]=SOFTLOCKUP [ 402.552902][T10253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 402.552914][T10253] Call Trace: [ 402.552924][T10253] [ 402.552932][T10253] dump_stack_lvl+0xe8/0x150 [ 402.552963][T10253] should_fail_ex+0x46b/0x600 [ 402.553007][T10253] should_failslab+0xa8/0x100 [ 402.553047][T10253] __kmalloc_cache_node_noprof+0x8a/0x6c0 [ 402.553079][T10253] ? __get_vm_area_node+0x171/0x350 [ 402.553105][T10253] ? rcu_is_watching+0x15/0xb0 [ 402.553130][T10253] __get_vm_area_node+0x171/0x350 [ 402.553162][T10253] __vmalloc_node_range_noprof+0x372/0x1730 [ 402.553191][T10253] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 402.553250][T10253] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 402.553293][T10253] ? irqentry_exit+0x59e/0x620 [ 402.553326][T10253] ? lockdep_hardirqs_on+0x7a/0x110 [ 402.553366][T10253] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 402.553390][T10253] __vmalloc_noprof+0xd2/0x120 [ 402.553417][T10253] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 402.553445][T10253] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 402.553475][T10253] bpf_prog_alloc+0x3c/0x1a0 [ 402.553502][T10253] bpf_prog_load+0x7ba/0x1ae0 [ 402.553545][T10253] ? __pfx_bpf_prog_load+0x10/0x10 [ 402.553569][T10253] ? rcu_is_watching+0x15/0xb0 [ 402.553608][T10253] ? rep_movs_alternative+0x4a/0x90 [ 402.553626][T10253] ? bpf_lsm_bpf+0x9/0x20 [ 402.553644][T10253] ? security_bpf+0x7e/0x2d0 [ 402.553674][T10253] __sys_bpf+0x618/0x950 [ 402.553700][T10253] ? __pfx___sys_bpf+0x10/0x10 [ 402.553740][T10253] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 402.553774][T10253] __x64_sys_bpf+0x7c/0x90 [ 402.553842][T10253] do_syscall_64+0x14d/0xf80 [ 402.553869][T10253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.553889][T10253] ? clear_bhb_loop+0x40/0x90 [ 402.553914][T10253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.553934][T10253] RIP: 0033:0x7f8945a0c799 [ 402.553952][T10253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.553969][T10253] RSP: 002b:00007f8943c1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 402.553996][T10253] RAX: ffffffffffffffda RBX: 00007f8945c86180 RCX: 00007f8945a0c799 [ 402.554011][T10253] RDX: 0000000000000080 RSI: 0000200000000200 RDI: 0000000000000005 [ 402.554024][T10253] RBP: 00007f8943c1c090 R08: 0000000000000000 R09: 0000000000000000 [ 402.554036][T10253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.554047][T10253] R13: 00007f8945c86218 R14: 00007f8945c86180 R15: 00007ffc9c0e83b8 [ 402.554087][T10253] [ 402.554363][T10253] syz.2.1404: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 402.557627][T10253] CPU: 1 UID: 0 PID: 10253 Comm: syz.2.1404 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 402.557655][T10253] Tainted: [L]=SOFTLOCKUP [ 402.557662][T10253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 402.557674][T10253] Call Trace: [ 402.557682][T10253] [ 402.557690][T10253] dump_stack_lvl+0xe8/0x150 [ 402.557725][T10253] warn_alloc+0x263/0x3e0 [ 402.557764][T10253] ? __pfx_warn_alloc+0x10/0x10 [ 402.557793][T10253] ? __kmalloc_cache_node_noprof+0x27d/0x6c0 [ 402.557824][T10253] ? __get_vm_area_node+0x171/0x350 [ 402.557855][T10253] ? __get_vm_area_node+0x2e1/0x350 [ 402.557888][T10253] __vmalloc_node_range_noprof+0x397/0x1730 [ 402.557946][T10253] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 402.557978][T10253] ? irqentry_exit+0x59e/0x620 [ 402.558012][T10253] ? lockdep_hardirqs_on+0x7a/0x110 [ 402.558044][T10253] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 402.558069][T10253] __vmalloc_noprof+0xd2/0x120 [ 402.558096][T10253] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 402.558124][T10253] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 402.558153][T10253] bpf_prog_alloc+0x3c/0x1a0 [ 402.558180][T10253] bpf_prog_load+0x7ba/0x1ae0 [ 402.558219][T10253] ? __pfx_bpf_prog_load+0x10/0x10 [ 402.558242][T10253] ? rcu_is_watching+0x15/0xb0 [ 402.558281][T10253] ? rep_movs_alternative+0x4a/0x90 [ 402.558299][T10253] ? bpf_lsm_bpf+0x9/0x20 [ 402.558316][T10253] ? security_bpf+0x7e/0x2d0 [ 402.558347][T10253] __sys_bpf+0x618/0x950 [ 402.558372][T10253] ? __pfx___sys_bpf+0x10/0x10 [ 402.558413][T10253] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 402.558448][T10253] __x64_sys_bpf+0x7c/0x90 [ 402.558469][T10253] do_syscall_64+0x14d/0xf80 [ 402.558495][T10253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.558515][T10253] ? clear_bhb_loop+0x40/0x90 [ 402.558540][T10253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.558560][T10253] RIP: 0033:0x7f8945a0c799 [ 402.558578][T10253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.558594][T10253] RSP: 002b:00007f8943c1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 402.558614][T10253] RAX: ffffffffffffffda RBX: 00007f8945c86180 RCX: 00007f8945a0c799 [ 402.558629][T10253] RDX: 0000000000000080 RSI: 0000200000000200 RDI: 0000000000000005 [ 402.558641][T10253] RBP: 00007f8943c1c090 R08: 0000000000000000 R09: 0000000000000000 [ 402.558654][T10253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.558665][T10253] R13: 00007f8945c86218 R14: 00007f8945c86180 R15: 00007ffc9c0e83b8 [ 402.558697][T10253] [ 402.558761][T10253] Mem-Info: [ 402.558834][T10253] active_anon:257 inactive_anon:9569 isolated_anon:0 [ 402.558834][T10253] active_file:11273 inactive_file:44164 isolated_file:0 [ 402.558834][T10253] unevictable:768 dirty:191 writeback:10 [ 402.558834][T10253] slab_reclaimable:11878 slab_unreclaimable:102661 [ 402.558834][T10253] mapped:33602 shmem:4210 pagetables:1301 [ 402.558834][T10253] sec_pagetables:0 bounce:0 [ 402.558834][T10253] kernel_misc_reclaimable:0 [ 402.558834][T10253] free:1303441 free_pcp:9066 free_cma:0 [ 402.558919][T10253] Node 0 active_anon:1028kB inactive_anon:38276kB active_file:44552kB inactive_file:176656kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:134180kB dirty:736kB writeback:32kB shmem:15304kB kernel_stack:13740kB pagetables:5072kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 402.559010][T10253] Node 1 active_anon:0kB inactive_anon:0kB active_file:540kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:228kB dirty:28kB writeback:8kB shmem:1536kB kernel_stack:96kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 402.559074][T10253] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 402.559207][T10253] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 402.559397][T10253] Node 0 DMA32 free:1266452kB boost:0kB min:3932kB low:6468kB high:9004kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1028kB inactive_anon:38276kB active_file:44552kB inactive_file:176656kB unevictable:1536kB writepending:768kB zspages:0kB present:3129332kB managed:2566628kB mlocked:0kB bounce:0kB free_pcp:36264kB local_pcp:16172kB free_cma:0kB [ 402.559501][T10253] lowmem_reserve[]: 0 0 0 0 0 [ 402.559675][T10253] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:420kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 402.559766][T10253] lowmem_reserve[]: 0 0 0 0 0 [ 402.559790][T10253] Node 1 Normal free:3931952kB boost:0kB min:6364kB low:10472kB high:14580kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:540kB inactive_file:0kB unevictable:1536kB writepending:36kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 402.559876][T10253] lowmem_reserve[]: 0 0 0 0 0 [ 402.560086][T10253] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 402.560626][T10253] Node 0 DMA32: 1294*4kB (UE) 1829*8kB (UME) 682*16kB (UE) 6*32kB (ME) 14*64kB (UME) 85*128kB (UM) 114*256kB (UME) 49*512kB (UM) 22*1024kB (UME) 10*2048kB (UME) 275*4096kB (M) = 1266368kB [ 402.561380][T10253] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 402.561788][T10253] Node 1 Normal: 2*4kB (UE) 5*8kB (UME) 12*16kB (UE) 10*32kB (UME) 8*64kB (UE) 6*128kB (UME) 2*256kB (ME) 5*512kB (UME) 1*1024kB (M) 1*2048kB (E) 958*4096kB (M) = 3931952kB [ 402.562534][T10253] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 402.562572][T10253] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 402.562610][T10253] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 402.562646][T10253] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 402.562684][T10253] 59643 total pagecache pages [ 402.562736][T10253] 0 pages in swap cache [ 402.562764][T10253] Free swap = 124996kB [ 402.562792][T10253] Total swap = 124996kB [ 402.562820][T10253] 2097051 pages RAM [ 402.562847][T10253] 0 pages HighMem/MovableOnly [ 402.562874][T10253] 423674 pages reserved [ 402.562900][T10253] 0 pages cma reserved [ 402.599896][T10253] openvswitch: netlink: Flow actions attr not present in new flow. [ 403.101159][T10249] [U]  [ 403.429050][ T10] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 403.429079][ T10] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 403.429097][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 403.429146][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 403.429171][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 403.484839][ T10] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 403.484870][ T10] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 403.484889][ T10] usb 1-1: Product: syz [ 403.484903][ T10] usb 1-1: Manufacturer: syz [ 403.722922][ T5988] gspca_sonixj: reg_r err -32 [ 403.723013][ T5988] sonixj 4-1:0.0: probe with driver sonixj failed with error -32 [ 403.884189][T10256] openvswitch: netlink: Flow actions attr not present in new flow. [ 404.250797][T10252] [U]  [ 404.788503][ T5988] usb 4-1: USB disconnect, device number 47 [ 404.823614][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 404.823634][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 404.853356][T10248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.872255][T10248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.936042][T10266] fuse: Unknown parameter 'fd00000000000000000000003' [ 405.065190][ T10] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 405.065210][ T10] cdc_wdm 1-1:1.0: Unknown control protocol [ 405.085278][ T10] usb 1-1: USB disconnect, device number 42 [ 405.347560][ T5959] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 405.365639][ T5988] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 405.460871][ T10] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 405.492838][ T5959] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 405.492867][ T5959] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 405.492879][ T5959] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 405.492906][ T5959] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 405.492919][ T5959] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 405.497702][ T5959] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 405.497725][ T5959] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 405.497735][ T5959] usb 2-1: Product: syz [ 405.497742][ T5959] usb 2-1: Manufacturer: syz [ 405.511657][ T5988] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.511715][ T5988] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 405.511783][ T5988] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.522519][ T5959] cdc_wdm 2-1:1.0: skipping garbage [ 405.522541][ T5959] cdc_wdm 2-1:1.0: skipping garbage [ 405.531184][ T5988] usb 4-1: config 0 descriptor?? [ 405.533857][ T5959] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 405.533877][ T5959] cdc_wdm 2-1:1.0: Unknown control protocol [ 405.551094][ T5988] pwc: Askey VC010 type 2 USB webcam detected. [ 405.644693][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 405.644727][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.644748][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 405.644789][ T10] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 405.644810][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.651014][ T5808] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 405.716292][ T10] usb 3-1: config 0 descriptor?? [ 405.800716][ T5808] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 405.800746][ T5808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.838368][ T5808] usb 5-1: config 0 descriptor?? [ 405.873006][ T5808] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 405.877530][T10286] FAULT_INJECTION: forcing a failure. [ 405.877530][T10286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 405.877564][T10286] CPU: 0 UID: 0 PID: 10286 Comm: syz.0.1413 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 405.877590][T10286] Tainted: [L]=SOFTLOCKUP [ 405.877597][T10286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 405.877618][T10286] Call Trace: [ 405.877625][T10286] [ 405.877632][T10286] dump_stack_lvl+0xe8/0x150 [ 405.877661][T10286] should_fail_ex+0x46b/0x600 [ 405.877693][T10286] _copy_to_user+0x31/0xb0 [ 405.877715][T10286] __se_sys_cachestat+0x9f3/0xaf0 [ 405.877741][T10286] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 405.877764][T10286] ? __se_sys_cachestat+0x3d9/0xaf0 [ 405.877790][T10286] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 405.877808][T10286] ? __pfx___se_sys_cachestat+0x10/0x10 [ 405.877839][T10286] ? fput+0xa0/0xd0 [ 405.877877][T10286] do_syscall_64+0x14d/0xf80 [ 405.877902][T10286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.877922][T10286] ? clear_bhb_loop+0x40/0x90 [ 405.877945][T10286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.877963][T10286] RIP: 0033:0x7f7db184c799 [ 405.877980][T10286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.877996][T10286] RSP: 002b:00007f7dafa85028 EFLAGS: 00000246 ORIG_RAX: 00000000000001c3 [ 405.878016][T10286] RAX: ffffffffffffffda RBX: 00007f7db1ac6090 RCX: 00007f7db184c799 [ 405.878029][T10286] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000006 [ 405.878042][T10286] RBP: 00007f7dafa85090 R08: 0000000000000000 R09: 0000000000000000 [ 405.878054][T10286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.878065][T10286] R13: 00007f7db1ac6128 R14: 00007f7db1ac6090 R15: 00007ffeea855998 [ 405.878095][T10286] [ 405.956238][ T5988] pwc: recv_control_msg error -32 req 02 val 2b00 [ 406.237479][T10287] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1411'. [ 406.439611][ T5988] pwc: recv_control_msg error -32 req 02 val 2700 [ 406.449246][ T5988] pwc: recv_control_msg error -32 req 02 val 2c00 [ 406.452979][ T5988] pwc: recv_control_msg error -32 req 04 val 1000 [ 406.459365][ T5988] pwc: recv_control_msg error -32 req 04 val 1300 [ 406.465419][T10285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.596410][T10285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.598544][ T5988] pwc: recv_control_msg error -32 req 04 val 1400 [ 406.624812][ T5988] pwc: recv_control_msg error -32 req 02 val 2000 [ 406.650998][ T5988] pwc: recv_control_msg error -32 req 02 val 2100 [ 406.657070][ T5988] pwc: recv_control_msg error -32 req 04 val 1500 [ 406.737719][T10285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.738674][T10285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.741253][ C0] wdm_int_callback: 1336 callbacks suppressed [ 406.741279][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 406.741296][ C0] wdm_int_callback: 1336 callbacks suppressed [ 406.741311][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 406.741717][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 406.741738][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 406.741955][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 406.741975][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 406.742368][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 406.742387][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 406.742609][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 406.742628][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 406.742850][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 406.742869][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 406.743102][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 406.743120][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 406.743421][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 406.743444][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 406.743589][ T5885] usb 2-1: USB disconnect, device number 61 [ 406.743675][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 406.743694][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 406.743711][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 406.914679][ T5988] pwc: recv_control_msg error -32 req 02 val 2400 [ 406.926425][ T5988] pwc: recv_control_msg error -32 req 02 val 2600 [ 406.928389][ T5988] pwc: recv_control_msg error -32 req 02 val 2900 [ 406.945717][ T5988] pwc: recv_control_msg error -32 req 02 val 2800 [ 406.958396][ T5988] pwc: recv_control_msg error -32 req 04 val 1100 [ 406.959681][ T10] hid-multitouch 0003:0457:07DA.000D: unknown main item tag 0x0 [ 406.959717][ T10] hid-multitouch 0003:0457:07DA.000D: unknown main item tag 0x0 [ 406.959745][ T10] hid-multitouch 0003:0457:07DA.000D: unknown main item tag 0x0 [ 406.959771][ T10] hid-multitouch 0003:0457:07DA.000D: unknown main item tag 0x0 [ 406.959796][ T10] hid-multitouch 0003:0457:07DA.000D: unknown main item tag 0x0 [ 406.959821][ T10] hid-multitouch 0003:0457:07DA.000D: unknown main item tag 0x0 [ 406.959846][ T10] hid-multitouch 0003:0457:07DA.000D: unknown main item tag 0x0 [ 406.959873][ T10] hid-multitouch 0003:0457:07DA.000D: unknown main item tag 0x0 [ 406.959978][ T10] hid-multitouch 0003:0457:07DA.000D: unknown main item tag 0x0 [ 406.960005][ T10] hid-multitouch 0003:0457:07DA.000D: unknown main item tag 0x0 [ 406.962509][ T5988] pwc: recv_control_msg error -32 req 04 val 1200 [ 406.981315][ T10] hid-multitouch 0003:0457:07DA.000D: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.2-1/input0 [ 407.093747][ T5988] pwc: Registered as video103. [ 407.141580][ T5988] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input32 [ 407.186722][ T5885] usb 3-1: USB disconnect, device number 36 [ 407.208348][T10290] fido_id[10290]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0457:07DA.000D/report_descriptor': No such file or directory [ 407.244789][ T5988] usb 4-1: USB disconnect, device number 48 [ 407.555823][ T10] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 407.701187][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 407.701221][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.701243][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 407.701276][ T10] usb 1-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 407.701288][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.710257][ T10] usb 1-1: config 0 descriptor?? [ 407.822464][ T5988] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 408.128878][T10303] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1414'. [ 408.498019][T10278] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1412'. [ 408.525875][ T5988] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 408.525904][ T5988] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 408.525922][ T5988] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 408.527113][ T5988] usb 2-1: config 220 has no interface number 2 [ 408.527662][ T5988] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 408.527689][ T5988] usb 2-1: config 220 interface 0 has no altsetting 0 [ 408.527706][ T5988] usb 2-1: config 220 interface 76 has no altsetting 0 [ 408.547089][ T5808] gspca_stv06xx: I2C: Read error writing address: -71 [ 408.572821][ T5988] usb 2-1: config 220 interface 1 has no altsetting 0 [ 408.625483][ T5988] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 408.625515][ T5988] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.625534][ T5988] usb 2-1: Product: syz [ 408.625547][ T5988] usb 2-1: Manufacturer: syz [ 408.625560][ T5988] usb 2-1: SerialNumber: syz [ 408.670866][ T5808] usb 5-1: USB disconnect, device number 62 [ 408.822616][ T5885] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 408.902094][T10295] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1415'. [ 408.937781][ T5988] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 408.937815][ T5988] uvcvideo 2-1:220.0: No valid video chain found. [ 408.937873][ T5988] usb 2-1: selecting invalid altsetting 0 [ 408.965515][ T5885] usb 4-1: Using ep0 maxpacket: 8 [ 408.967955][ T5988] usb 2-1: selecting invalid altsetting 0 [ 408.967990][ T5988] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 408.968512][ T5885] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 408.968541][ T5885] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 408.968617][ T5885] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 408.968641][ T5885] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 408.968680][ T5885] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 408.968700][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.078380][ T5988] usb 2-1: USB disconnect, device number 62 [ 409.180126][T10307] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 409.346562][ T5885] usb 4-1: usb_control_msg returned -32 [ 409.346609][ T5885] usbtmc 4-1:16.0: can't read capabilities [ 409.420454][ T10] hid-multitouch 0003:0457:07DA.000E: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.0-1/input0 [ 409.766831][ T5988] usb 1-1: USB disconnect, device number 43 [ 409.958439][ T5959] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 410.108431][ T5959] usb 3-1: Using ep0 maxpacket: 8 [ 410.112023][ T5959] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 410.112040][ T5959] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.112050][ T5959] usb 3-1: Product: syz [ 410.112057][ T5959] usb 3-1: Manufacturer: syz [ 410.112064][ T5959] usb 3-1: SerialNumber: syz [ 410.115991][ T5959] usb 3-1: config 0 descriptor?? [ 410.180527][ T5959] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 410.318912][ T5885] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 410.460916][ T5885] usb 2-1: Using ep0 maxpacket: 16 [ 410.472895][ T5885] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 410.472921][ T5885] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 410.475343][ T5885] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 410.475371][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.475390][ T5885] usb 2-1: Product: syz [ 410.475403][ T5885] usb 2-1: Manufacturer: syz [ 410.475417][ T5885] usb 2-1: SerialNumber: syz [ 410.923438][ T5885] usb 2-1: 0:2 : does not exist [ 410.948653][ T5959] gspca_sonixj: reg_r err -32 [ 410.948762][ T5959] sonixj 3-1:0.0: probe with driver sonixj failed with error -32 [ 411.018786][ T10] usb 4-1: USB disconnect, device number 49 [ 411.337433][T10325] netlink: 'syz.1.1420': attribute type 1 has an invalid length. [ 411.746741][ T5885] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 411.879758][ T5885] usb 2-1: USB disconnect, device number 63 [ 412.042228][ T36] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 412.046486][ T5935] udevd[5935]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 412.198193][ T36] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 412.198223][ T36] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 412.198239][ T36] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 412.198283][ T36] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 412.198303][ T36] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 412.200012][ T36] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 412.200037][ T36] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 412.200053][ T36] usb 4-1: Product: syz [ 412.200066][ T36] usb 4-1: Manufacturer: syz [ 412.292800][ T36] cdc_wdm 4-1:1.0: skipping garbage [ 412.292820][ T36] cdc_wdm 4-1:1.0: skipping garbage [ 412.295126][ T36] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 412.295143][ T36] cdc_wdm 4-1:1.0: Unknown control protocol [ 412.544312][T10362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.546194][T10362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.566958][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 412.566988][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 412.567218][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 412.567241][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 412.567470][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 412.567489][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 412.567889][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 412.567912][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 412.568141][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 412.568164][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 412.568454][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 412.568475][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 412.571550][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 412.571577][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 412.571812][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 412.571839][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 412.572090][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 412.572112][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 412.573174][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 412.573199][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 412.574515][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 412.574577][ T36] usb 4-1: USB disconnect, device number 50 [ 412.822945][ T5870] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 412.968199][ T5870] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 412.968229][ T5870] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 412.968247][ T5870] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 412.968295][ T5870] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 412.968320][ T5870] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 412.970450][ T5870] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 412.970476][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 412.970494][ T5870] usb 2-1: Product: syz [ 412.970508][ T5870] usb 2-1: Manufacturer: syz [ 412.999533][ T5870] cdc_wdm 2-1:1.0: skipping garbage [ 412.999554][ T5870] cdc_wdm 2-1:1.0: skipping garbage [ 413.009620][ T5870] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 413.009642][ T5870] cdc_wdm 2-1:1.0: Unknown control protocol [ 413.372372][ T10] usb 3-1: USB disconnect, device number 37 [ 413.391252][T10359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.391747][T10359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.397744][T10359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.398236][T10359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.286683][ T5808] usb 2-1: USB disconnect, device number 64 [ 416.123538][ T5947] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 416.469932][ T5947] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 416.469961][ T5947] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 416.469979][ T5947] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 416.469996][ T5947] usb 3-1: config 220 has no interface number 2 [ 416.470061][ T5947] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 416.470087][ T5947] usb 3-1: config 220 interface 0 has no altsetting 0 [ 416.470103][ T5947] usb 3-1: config 220 interface 76 has no altsetting 0 [ 416.470119][ T5947] usb 3-1: config 220 interface 1 has no altsetting 0 [ 416.481215][ T5947] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 416.481303][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.481322][ T5947] usb 3-1: Product: syz [ 416.481335][ T5947] usb 3-1: Manufacturer: syz [ 416.481349][ T5947] usb 3-1: SerialNumber: syz [ 416.502763][ T37] kauditd_printk_skb: 771 callbacks suppressed [ 416.502781][ T37] audit: type=1326 audit(1772341523.543:3512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10388 comm="syz.1.1434" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4f061dc799 code=0x0 [ 416.669326][T10392] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1435'. [ 416.789939][T10392] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1435'. [ 417.521645][ T5947] usb 3-1: can't set config #220, error -71 [ 417.534862][ T5947] usb 3-1: USB disconnect, device number 38 [ 417.747700][T10399] FAULT_INJECTION: forcing a failure. [ 417.747700][T10399] name failslab, interval 1, probability 0, space 0, times 0 [ 417.747758][T10399] CPU: 1 UID: 0 PID: 10399 Comm: syz.0.1436 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 417.747787][T10399] Tainted: [L]=SOFTLOCKUP [ 417.747794][T10399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 417.747807][T10399] Call Trace: [ 417.747814][T10399] [ 417.747823][T10399] dump_stack_lvl+0xe8/0x150 [ 417.747858][T10399] should_fail_ex+0x46b/0x600 [ 417.747896][T10399] should_failslab+0xa8/0x100 [ 417.747928][T10399] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 417.747975][T10399] ? __alloc_skb+0x1d0/0x7d0 [ 417.747997][T10399] ? __local_bh_enable_ip+0x1c2/0x2b0 [ 417.748029][T10399] __alloc_skb+0x1d0/0x7d0 [ 417.748056][T10399] netlink_sendmsg+0x5d4/0xb40 [ 417.748079][T10399] ? irqentry_exit+0x59e/0x620 [ 417.748112][T10399] ? __pfx_netlink_sendmsg+0x10/0x10 [ 417.748141][T10399] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 417.748172][T10399] ____sys_sendmsg+0xa4e/0xac0 [ 417.748208][T10399] ? __pfx_____sys_sendmsg+0x10/0x10 [ 417.748243][T10399] ? import_iovec+0x73/0xa0 [ 417.748270][T10399] ___sys_sendmsg+0x2a5/0x360 [ 417.748301][T10399] ? __pfx____sys_sendmsg+0x10/0x10 [ 417.748331][T10399] ? __schedule+0x1511/0x52c0 [ 417.748383][T10399] ? __fget_files+0x2a/0x420 [ 417.748405][T10399] ? __fget_files+0x3a6/0x420 [ 417.748442][T10399] __x64_sys_sendmsg+0x1c3/0x2a0 [ 417.748472][T10399] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 417.748522][T10399] do_syscall_64+0x14d/0xf80 [ 417.748549][T10399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.748569][T10399] ? clear_bhb_loop+0x40/0x90 [ 417.748593][T10399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.748613][T10399] RIP: 0033:0x7f7db184c799 [ 417.748631][T10399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.748648][T10399] RSP: 002b:00007f7dafa64028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 417.748669][T10399] RAX: ffffffffffffffda RBX: 00007f7db1ac6180 RCX: 00007f7db184c799 [ 417.748684][T10399] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 417.748697][T10399] RBP: 00007f7dafa64090 R08: 0000000000000000 R09: 0000000000000000 [ 417.748709][T10399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.748721][T10399] R13: 00007f7db1ac6218 R14: 00007f7db1ac6180 R15: 00007ffeea855998 [ 417.748752][T10399] [ 419.331467][T10403] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1438'. [ 419.415211][ T5959] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 419.633120][ T5959] usb 3-1: Using ep0 maxpacket: 32 [ 419.658389][ T5959] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 419.658415][ T5959] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 419.685643][ T5959] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice=4b.70 [ 419.685673][ T5959] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.685692][ T5959] usb 3-1: Product: syz [ 419.685706][ T5959] usb 3-1: Manufacturer: syz [ 419.685720][ T5959] usb 3-1: SerialNumber: syz [ 419.762280][ T5959] usb 3-1: config 0 descriptor?? [ 421.119308][ T5885] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 421.223885][ T10] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 421.261980][ T5885] usb 5-1: Using ep0 maxpacket: 8 [ 421.267723][ T5885] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 421.267754][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.267772][ T5885] usb 5-1: Product: syz [ 421.267785][ T5885] usb 5-1: Manufacturer: syz [ 421.267800][ T5885] usb 5-1: SerialNumber: syz [ 421.278897][ T5885] usb 5-1: config 0 descriptor?? [ 421.309710][ T5885] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 421.366334][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 421.366381][ T36] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 421.369833][ T10] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 421.369859][ T10] usb 1-1: config 0 has no interface number 0 [ 421.369903][ T10] usb 1-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 421.370048][ T10] usb 1-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 421.370076][ T10] usb 1-1: config 0 interface 12 has no altsetting 0 [ 421.373239][ T10] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 421.373267][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.373340][ T10] usb 1-1: Product: syz [ 421.373355][ T10] usb 1-1: Manufacturer: syz [ 421.373367][ T10] usb 1-1: SerialNumber: syz [ 421.397135][ T10] usb 1-1: config 0 descriptor?? [ 421.433720][ T10] f81534 1-1:0.12: unsupported endpoint max packet size [ 421.556880][ T36] usb 2-1: Using ep0 maxpacket: 8 [ 421.559221][ T36] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 421.559254][ T36] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 421.559329][ T36] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 421.559353][ T36] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 421.559394][ T36] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 421.559480][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.192627][ T5885] gspca_sonixj: reg_r err -32 [ 422.192724][ T5885] sonixj 5-1:0.0: probe with driver sonixj failed with error -32 [ 422.445961][ T36] usb 2-1: usb_control_msg returned -32 [ 422.446058][ T36] usbtmc 2-1:16.0: can't read capabilities [ 422.892276][ T5959] usb 3-1: USB disconnect, device number 39 [ 423.271682][ T5959] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 423.291151][T10439] dns_resolver: Unsupported server list version (0) [ 423.416902][ T5959] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 423.416931][ T5959] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 423.416949][ T5959] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 423.416982][ T5959] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 423.416996][ T5959] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 423.418782][ T5959] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 423.418810][ T5959] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 423.418829][ T5959] usb 4-1: Product: syz [ 423.418842][ T5959] usb 4-1: Manufacturer: syz [ 423.502561][ T5959] cdc_wdm 4-1:1.0: skipping garbage [ 423.502574][ T5959] cdc_wdm 4-1:1.0: skipping garbage [ 423.510579][ T5959] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device [ 423.510599][ T5959] cdc_wdm 4-1:1.0: Unknown control protocol [ 423.595272][ T10] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 423.766634][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 423.770198][ T10] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 423.770224][ T10] usb 3-1: config 179 has no interface number 0 [ 423.770275][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 423.770301][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 423.770327][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 423.770353][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 423.770378][ T10] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 423.770527][ T10] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 423.770551][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.816083][T10433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.816634][T10433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.896656][T10433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.897172][T10433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.899306][ T5959] usb 4-1: USB disconnect, device number 51 [ 423.923719][T10439] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 423.993259][ T36] usb 2-1: USB disconnect, device number 65 [ 424.373660][ T36] usb 1-1: USB disconnect, device number 44 [ 424.565633][ T5959] usb 5-1: USB disconnect, device number 63 [ 427.582543][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 427.582612][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 427.582992][ T1230] usb 3-1: USB disconnect, device number 40 [ 427.747842][ T5870] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 427.862538][ T5885] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 427.913704][ T5870] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 427.913734][ T5870] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 427.913754][ T5870] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 427.913853][ T5870] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 427.913879][ T5870] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 427.916474][ T5870] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 427.916552][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 427.916572][ T5870] usb 4-1: Product: syz [ 427.916586][ T5870] usb 4-1: Manufacturer: syz [ 428.042372][ T36] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 428.076155][ T1230] usb 3-1: new low-speed USB device number 41 using dummy_hcd [ 428.107351][ T5870] cdc_wdm 4-1:1.0: skipping garbage [ 428.107369][ T5870] cdc_wdm 4-1:1.0: skipping garbage [ 428.113129][ T5870] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 428.113150][ T5870] cdc_wdm 4-1:1.0: Unknown control protocol [ 428.699400][ T1230] usb 3-1: LPM exit latency is zeroed, disabling LPM. [ 428.702544][ T5885] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.702602][ T5885] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 428.702625][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.713597][ T1230] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 428.730082][ T1230] usb 3-1: string descriptor 0 read error: -22 [ 428.730239][ T1230] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 428.730264][ T1230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.739168][ T5885] usb 2-1: config 0 descriptor?? [ 428.797974][T10466] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 428.807386][T10457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.812736][T10457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.826093][ T5870] usb 4-1: USB disconnect, device number 52 [ 428.835416][ T5885] pwc: Askey VC010 type 2 USB webcam detected. [ 428.858687][ T1230] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 428.997605][ T36] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 428.997637][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.997655][ T36] usb 1-1: Product: syz [ 428.997668][ T36] usb 1-1: Manufacturer: syz [ 428.997682][ T36] usb 1-1: SerialNumber: syz [ 429.088981][ T36] usb 1-1: config 0 descriptor?? [ 429.127306][ T1230] usb 3-1: USB disconnect, device number 41 [ 429.217997][ T5885] pwc: recv_control_msg error -32 req 02 val 2b00 [ 429.224836][ T5885] pwc: recv_control_msg error -32 req 02 val 2700 [ 429.239676][ T5885] pwc: recv_control_msg error -32 req 02 val 2c00 [ 429.240345][ T5885] pwc: recv_control_msg error -32 req 04 val 1000 [ 429.242918][ T5885] pwc: recv_control_msg error -32 req 04 val 1300 [ 429.247750][ T5885] pwc: recv_control_msg error -32 req 04 val 1400 [ 429.248940][ T5885] pwc: recv_control_msg error -32 req 02 val 2000 [ 429.252855][ T5885] pwc: recv_control_msg error -32 req 02 val 2100 [ 429.254761][ T5885] pwc: recv_control_msg error -32 req 04 val 1500 [ 429.386181][ T5870] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 429.454994][ T5885] pwc: recv_control_msg error -32 req 02 val 2400 [ 429.460438][ T5885] pwc: recv_control_msg error -32 req 02 val 2600 [ 429.461999][ T5885] pwc: recv_control_msg error -32 req 02 val 2900 [ 429.504042][ C0] Unknown status report in ack skb [ 429.507558][ T5885] pwc: recv_control_msg error -32 req 02 val 2800 [ 429.508533][ T5885] pwc: recv_control_msg error -32 req 04 val 1100 [ 429.536559][ T5885] pwc: recv_control_msg error -32 req 04 val 1200 [ 429.541576][ T5885] pwc: Registered as video103. [ 429.544573][ T5885] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input33 [ 429.561720][ T5885] usb 2-1: USB disconnect, device number 66 [ 429.579414][ T5870] usb 5-1: config 68 has an invalid descriptor of length 0, skipping remainder of the config [ 429.579442][ T5870] usb 5-1: config 68 has 0 interfaces, different from the descriptor's value: 1 [ 429.585266][ T5870] usb 5-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice=67.7a [ 429.585297][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.585317][ T5870] usb 5-1: Product: syz [ 429.585330][ T5870] usb 5-1: Manufacturer: syz [ 429.585344][ T5870] usb 5-1: SerialNumber: syz [ 429.947561][ T36] usb 1-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 429.947591][ T36] usb 1-1: Firmware version (0.0) predates our first public release. [ 429.947608][ T36] usb 1-1: Please update to version 0.2 or newer [ 430.015467][ T1230] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 430.192816][ T1230] usb 4-1: unable to get BOS descriptor or descriptor too short [ 430.193890][ T1230] usb 4-1: not running at top speed; connect to a high speed hub [ 430.195350][ T1230] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 430.195374][ T1230] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 430.222279][ T1230] usb 4-1: string descriptor 0 read error: -22 [ 430.222428][ T1230] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 430.222450][ T1230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.288664][ T1230] usb 4-1: 0:2 : does not exist [ 430.348027][ T5959] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 430.437123][ T36] usb 1-1: USB disconnect, device number 45 [ 430.493625][ T5959] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 430.493654][ T5959] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 430.493673][ T5959] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 430.493720][ T5959] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 430.493745][ T5959] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 430.496120][ T5959] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 430.496149][ T5959] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 430.496168][ T5959] usb 2-1: Product: syz [ 430.496182][ T5959] usb 2-1: Manufacturer: syz [ 430.612135][ T5959] cdc_wdm 2-1:1.0: skipping garbage [ 430.612541][ T5959] cdc_wdm 2-1:1.0: skipping garbage [ 430.632677][ T5959] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 430.632699][ T5959] cdc_wdm 2-1:1.0: Unknown control protocol [ 431.130139][T10485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.131101][T10485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.134519][T10485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.135024][T10485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.181456][ T5959] usb 2-1: USB disconnect, device number 67 [ 431.396405][ T1230] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 431.429999][ T1230] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 431.483314][ T1230] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 431.664766][ T1230] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 432.596953][ T1230] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 432.622915][ T1230] usb 4-1: USB disconnect, device number 53 [ 432.694201][ T36] usb 5-1: USB disconnect, device number 64 [ 433.167720][ T1230] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 433.310243][ T1230] usb 1-1: Using ep0 maxpacket: 32 [ 433.312566][ T1230] usb 1-1: unable to get BOS descriptor or descriptor too short [ 433.316677][ T1230] usb 1-1: New USB device found, idVendor=04b4, idProduct=931d, bcdDevice= 0.40 [ 433.316705][ T1230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.316722][ T1230] usb 1-1: Product: syz [ 433.316734][ T1230] usb 1-1: Manufacturer: syz [ 433.316757][ T1230] usb 1-1: SerialNumber: syz [ 433.321917][T10552] FAULT_INJECTION: forcing a failure. [ 433.321917][T10552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 433.321966][T10552] CPU: 1 UID: 0 PID: 10552 Comm: syz.2.1468 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 433.321993][T10552] Tainted: [L]=SOFTLOCKUP [ 433.322000][T10552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 433.322015][T10552] Call Trace: [ 433.322027][T10552] [ 433.322035][T10552] dump_stack_lvl+0xe8/0x150 [ 433.322070][T10552] should_fail_ex+0x46b/0x600 [ 433.322106][T10552] _copy_from_iter+0x1d3/0x1670 [ 433.322138][T10552] ? __pfx__copy_from_iter+0x10/0x10 [ 433.322157][T10552] ? trace_kmalloc+0x2a/0x110 [ 433.322187][T10552] ? rcu_is_watching+0x15/0xb0 [ 433.322217][T10552] file_tty_write+0x4ca/0xa30 [ 433.322246][T10552] vfs_write+0x629/0xba0 [ 433.322284][T10552] ? __pfx_vfs_write+0x10/0x10 [ 433.322319][T10552] ? __fget_files+0x2a/0x420 [ 433.322350][T10552] ksys_write+0x156/0x270 [ 433.322378][T10552] ? __pfx_ksys_write+0x10/0x10 [ 433.322415][T10552] do_syscall_64+0x14d/0xf80 [ 433.322441][T10552] ? trace_irq_disable+0x3b/0x150 [ 433.322461][T10552] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.322480][T10552] ? clear_bhb_loop+0x40/0x90 [ 433.322511][T10552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.322529][T10552] RIP: 0033:0x7f8945a0c799 [ 433.322547][T10552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.322564][T10552] RSP: 002b:00007f8943c3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 433.322584][T10552] RAX: ffffffffffffffda RBX: 00007f8945c86090 RCX: 00007f8945a0c799 [ 433.322598][T10552] RDX: 000000000000ff2e RSI: 0000200000000000 RDI: 0000000000000006 [ 433.322610][T10552] RBP: 00007f8943c3d090 R08: 0000000000000000 R09: 0000000000000000 [ 433.322621][T10552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.322633][T10552] R13: 00007f8945c86128 R14: 00007f8945c86090 R15: 00007ffc9c0e83b8 [ 433.322664][T10552] [ 433.413994][ T10] usb 4-1: new low-speed USB device number 54 using dummy_hcd [ 433.656621][ T10] usb 4-1: LPM exit latency is zeroed, disabling LPM. [ 433.657873][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 433.685618][ T10] usb 4-1: string descriptor 0 read error: -22 [ 433.686023][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 433.686049][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.731942][T10546] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 433.749546][ T10] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 433.923761][T10536] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 434.010012][ T5959] usb 4-1: USB disconnect, device number 54 [ 434.187966][ T1230] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 434.297656][ T1230] usb 1-1: USB disconnect, device number 46 [ 434.461816][T10563] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1472'. [ 434.551453][ T5943] udevd[5943]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 434.710718][ T5959] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 434.881641][ T5959] usb 5-1: Using ep0 maxpacket: 16 [ 434.883597][ T5959] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.883628][ T5959] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.883648][ T5959] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 434.883682][ T5959] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 434.883694][ T5959] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.887727][ T5959] usb 5-1: config 0 descriptor?? [ 435.048320][T10584] FAULT_INJECTION: forcing a failure. [ 435.048320][T10584] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 435.048362][T10584] CPU: 0 UID: 0 PID: 10584 Comm: syz.0.1479 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 435.048387][T10584] Tainted: [L]=SOFTLOCKUP [ 435.048393][T10584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 435.048405][T10584] Call Trace: [ 435.048413][T10584] [ 435.048423][T10584] dump_stack_lvl+0xe8/0x150 [ 435.048458][T10584] should_fail_ex+0x46b/0x600 [ 435.048494][T10584] prepare_alloc_pages+0x22a/0x6b0 [ 435.048534][T10584] __alloc_frozen_pages_noprof+0x12f/0x380 [ 435.048557][T10584] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 435.048580][T10584] ? __pfx_policy_nodemask+0x10/0x10 [ 435.048611][T10584] ? filemap_get_entry+0x2ac/0x320 [ 435.048635][T10584] ? __pfx_filemap_get_entry+0x10/0x10 [ 435.048661][T10584] alloc_pages_mpol+0xd1/0x380 [ 435.048691][T10584] folio_alloc_mpol_noprof+0x39/0xe0 [ 435.048722][T10584] shmem_get_folio_gfp+0x644/0x1a80 [ 435.048763][T10584] ? __pfx___schedule+0x10/0x10 [ 435.048792][T10584] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 435.048814][T10584] ? do_raw_spin_lock+0x12b/0x2f0 [ 435.048842][T10584] shmem_write_begin+0x166/0x320 [ 435.048868][T10584] generic_perform_write+0x2af/0x8b0 [ 435.048899][T10584] ? __pfx_generic_perform_write+0x10/0x10 [ 435.048919][T10584] ? __rcu_read_unlock+0x83/0xe0 [ 435.048941][T10584] ? rt_spin_unlock+0x160/0x200 [ 435.048957][T10584] ? mnt_put_write_access_file+0xc6/0x100 [ 435.048980][T10584] ? file_update_time_flags+0x406/0x4b0 [ 435.049004][T10584] shmem_file_write_iter+0xfb/0x120 [ 435.049023][T10584] iter_file_splice_write+0x9a6/0x10f0 [ 435.049061][T10584] ? __pfx_iter_file_splice_write+0x10/0x10 [ 435.049095][T10584] ? __pfx_iter_file_splice_write+0x10/0x10 [ 435.049115][T10584] do_splice+0xef8/0x1940 [ 435.049154][T10584] ? __pfx_do_splice+0x10/0x10 [ 435.049183][T10584] __se_sys_splice+0x353/0x490 [ 435.049215][T10584] ? __pfx___se_sys_splice+0x10/0x10 [ 435.049247][T10584] ? __x64_sys_splice+0x21/0xf0 [ 435.049267][T10584] do_syscall_64+0x14d/0xf80 [ 435.049288][T10584] ? trace_irq_disable+0x3b/0x150 [ 435.049307][T10584] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.049323][T10584] ? clear_bhb_loop+0x40/0x90 [ 435.049344][T10584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.049359][T10584] RIP: 0033:0x7f7db184c799 [ 435.049376][T10584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.049390][T10584] RSP: 002b:00007f7dafa85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 435.049408][T10584] RAX: ffffffffffffffda RBX: 00007f7db1ac6090 RCX: 00007f7db184c799 [ 435.049419][T10584] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 435.049429][T10584] RBP: 00007f7dafa85090 R08: 0000000000000001 R09: 0000000000000006 [ 435.049439][T10584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.049449][T10584] R13: 00007f7db1ac6128 R14: 00007f7db1ac6090 R15: 00007ffeea855998 [ 435.049476][T10584] [ 435.081765][ T5808] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 435.084764][T10583] qnx4: unable to read the superblock [ 435.111067][T10567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.111353][T10567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.224735][ T5808] usb 4-1: device descriptor read/64, error -71 [ 435.313330][T10567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.313810][T10567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.086587][ T5808] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 436.434181][ T5808] usb 4-1: device descriptor read/64, error -71 [ 436.539365][ T5808] usb usb4-port1: attempt power cycle [ 436.853339][ T36] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 436.862831][ T5808] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 436.883029][ T5808] usb 4-1: device descriptor read/8, error -71 [ 436.998983][ T36] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 436.999012][ T36] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 436.999030][ T36] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 436.999100][ T36] usb 1-1: config 220 has no interface number 2 [ 436.999169][ T36] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 436.999195][ T36] usb 1-1: config 220 interface 0 has no altsetting 0 [ 436.999270][ T36] usb 1-1: config 220 interface 76 has no altsetting 0 [ 436.999287][ T36] usb 1-1: config 220 interface 1 has no altsetting 0 [ 437.003342][ T36] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 437.003593][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.003614][ T36] usb 1-1: Product: syz [ 437.003629][ T36] usb 1-1: Manufacturer: syz [ 437.003642][ T36] usb 1-1: SerialNumber: syz [ 437.111154][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 437.111220][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 437.112015][ T5808] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 437.134489][ T5808] usb 4-1: device descriptor read/8, error -71 [ 437.231403][T10591] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1482'. [ 437.236628][ T5808] usb usb4-port1: unable to enumerate USB device [ 437.281527][ T36] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 437.281549][ T36] uvcvideo 1-1:220.0: No valid video chain found. [ 437.281586][ T36] usb 1-1: selecting invalid altsetting 0 [ 437.324781][ T36] usb 1-1: selecting invalid altsetting 0 [ 437.324806][ T36] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 437.379241][ T5959] usbhid 5-1:0.0: can't add hid device: -71 [ 437.379361][ T5959] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 437.382884][ T36] usb 1-1: USB disconnect, device number 47 [ 437.476823][ T5959] usb 5-1: USB disconnect, device number 65 [ 437.891634][ T36] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 438.036853][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 438.036894][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.036915][ T36] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 438.036957][ T36] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 438.036979][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.047071][ T36] usb 4-1: config 0 descriptor?? [ 439.211583][T10630] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1488'. [ 440.169591][ T36] hid_parser_main: 10 callbacks suppressed [ 440.169615][ T36] hid-multitouch 0003:0457:07DA.000F: unknown main item tag 0x0 [ 440.169643][ T36] hid-multitouch 0003:0457:07DA.000F: unknown main item tag 0x0 [ 440.169678][ T36] hid-multitouch 0003:0457:07DA.000F: unknown main item tag 0x0 [ 440.169705][ T36] hid-multitouch 0003:0457:07DA.000F: unknown main item tag 0x0 [ 440.169729][ T36] hid-multitouch 0003:0457:07DA.000F: unknown main item tag 0x0 [ 440.169754][ T36] hid-multitouch 0003:0457:07DA.000F: unknown main item tag 0x0 [ 440.169778][ T36] hid-multitouch 0003:0457:07DA.000F: unknown main item tag 0x0 [ 440.169804][ T36] hid-multitouch 0003:0457:07DA.000F: unknown main item tag 0x0 [ 440.169832][ T36] hid-multitouch 0003:0457:07DA.000F: unknown main item tag 0x0 [ 440.169867][ T36] hid-multitouch 0003:0457:07DA.000F: unknown main item tag 0x0 [ 440.381200][ T36] hid-multitouch 0003:0457:07DA.000F: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.3-1/input0 [ 440.480410][ T10] usb 4-1: USB disconnect, device number 59 [ 440.543320][T10652] fido_id[10652]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 440.847557][T10660] FAULT_INJECTION: forcing a failure. [ 440.847557][T10660] name failslab, interval 1, probability 0, space 0, times 0 [ 440.847593][T10660] CPU: 1 UID: 0 PID: 10660 Comm: syz.4.1501 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 440.847621][T10660] Tainted: [L]=SOFTLOCKUP [ 440.847627][T10660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 440.847639][T10660] Call Trace: [ 440.847650][T10660] [ 440.847714][T10660] dump_stack_lvl+0xe8/0x150 [ 440.847750][T10660] should_fail_ex+0x46b/0x600 [ 440.847786][T10660] should_failslab+0xa8/0x100 [ 440.847818][T10660] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 440.847846][T10660] ? __alloc_skb+0x1d0/0x7d0 [ 440.847868][T10660] ? lockdep_hardirqs_on+0x7a/0x110 [ 440.847899][T10660] __alloc_skb+0x1d0/0x7d0 [ 440.847922][T10660] netlink_sendmsg+0x5d4/0xb40 [ 440.847950][T10660] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.847978][T10660] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 440.848008][T10660] ____sys_sendmsg+0xa4e/0xac0 [ 440.848043][T10660] ? __pfx_____sys_sendmsg+0x10/0x10 [ 440.848078][T10660] ? import_iovec+0x73/0xa0 [ 440.848104][T10660] ___sys_sendmsg+0x2a5/0x360 [ 440.848135][T10660] ? __pfx____sys_sendmsg+0x10/0x10 [ 440.848194][T10660] ? __fget_files+0x2a/0x420 [ 440.848216][T10660] ? __fget_files+0x3a6/0x420 [ 440.848248][T10660] __x64_sys_sendmsg+0x1c3/0x2a0 [ 440.848277][T10660] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 440.848311][T10660] ? __pfx_ksys_write+0x10/0x10 [ 440.848350][T10660] do_syscall_64+0x14d/0xf80 [ 440.848376][T10660] ? trace_irq_disable+0x3b/0x150 [ 440.848398][T10660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.848417][T10660] ? clear_bhb_loop+0x40/0x90 [ 440.848441][T10660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.848460][T10660] RIP: 0033:0x7f48e0a1c799 [ 440.848479][T10660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.848496][T10660] RSP: 002b:00007f48debe8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 440.848517][T10660] RAX: ffffffffffffffda RBX: 00007f48e0c96090 RCX: 00007f48e0a1c799 [ 440.848531][T10660] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 440.848543][T10660] RBP: 00007f48debe8090 R08: 0000000000000000 R09: 0000000000000000 [ 440.848556][T10660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.848567][T10660] R13: 00007f48e0c96128 R14: 00007f48e0c96090 R15: 00007ffe1bd7eb08 [ 440.848598][T10660] [ 440.931765][ T10] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 441.179381][ T10] usb 2-1: device descriptor read/64, error -71 [ 441.367646][T10666] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 441.482647][ T10] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 441.691708][ T5959] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 441.812692][ T10] usb 2-1: device descriptor read/64, error -71 [ 441.848331][ T5959] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 441.848362][ T5959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.075112][ T5959] usb 3-1: config 0 descriptor?? [ 442.242848][ T10] usb usb2-port1: attempt power cycle [ 442.581026][ T5959] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 442.930025][ T10] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 442.949703][ T10] usb 2-1: device descriptor read/8, error -71 [ 443.187446][ T10] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 443.206411][ T10] usb 2-1: device descriptor read/8, error -71 [ 443.311226][ T10] usb usb2-port1: unable to enumerate USB device [ 443.694216][ T10] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 443.858623][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 443.859440][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 443.861322][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 443.861347][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 443.882398][ T1230] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 443.928756][ T10] usb 2-1: string descriptor 0 read error: -22 [ 443.928906][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 443.928930][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.988950][ T10] usb 2-1: 0:2 : does not exist [ 444.049830][ T1230] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.049935][ T1230] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 444.049963][ T1230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.088764][ T1230] usb 1-1: config 0 descriptor?? [ 444.109821][T10667] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1504'. [ 444.125136][ T1230] pwc: Askey VC010 type 2 USB webcam detected. [ 444.144680][ T5959] gspca_stv06xx: I2C: Read error writing address: -71 [ 444.255485][ T5959] usb 3-1: USB disconnect, device number 42 [ 444.519114][ T1230] pwc: recv_control_msg error -32 req 02 val 2b00 [ 444.528493][ T1230] pwc: recv_control_msg error -32 req 02 val 2700 [ 444.538734][ T1230] pwc: recv_control_msg error -32 req 02 val 2c00 [ 444.547781][ T1230] pwc: recv_control_msg error -32 req 04 val 1000 [ 444.560674][ T1230] pwc: recv_control_msg error -32 req 04 val 1300 [ 444.565864][ T1230] pwc: recv_control_msg error -32 req 04 val 1400 [ 444.581642][ T1230] pwc: recv_control_msg error -32 req 02 val 2000 [ 444.583979][ T1230] pwc: recv_control_msg error -32 req 02 val 2100 [ 444.588026][ T1230] pwc: recv_control_msg error -32 req 04 val 1500 [ 444.608148][ T1230] pwc: recv_control_msg error -32 req 02 val 2500 [ 444.705834][ T1230] pwc: recv_control_msg error -32 req 02 val 2400 [ 444.789403][ T1230] pwc: recv_control_msg error -32 req 02 val 2600 [ 444.790826][ T1230] pwc: recv_control_msg error -32 req 02 val 2900 [ 445.653865][ T1230] pwc: recv_control_msg error -71 req 04 val 1100 [ 445.654538][ T1230] pwc: recv_control_msg error -71 req 04 val 1200 [ 445.860792][ T1230] pwc: Registered as video103. [ 445.884894][ T10] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 445.889423][ T10] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 445.895309][ T1230] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input34 [ 445.928994][ T10] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 445.954242][ T1230] usb 1-1: USB disconnect, device number 48 [ 446.018261][ T10] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 446.058788][ T10] usb 2-1: USB disconnect, device number 72 [ 446.844529][ T5988] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 446.990714][ T5988] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 446.990748][ T5988] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.990770][ T5988] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 446.990809][ T5988] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 446.990831][ T5988] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.069638][ T5988] usb 5-1: config 0 descriptor?? [ 447.895851][T10777] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1528'. [ 449.433793][ T5988] hid-multitouch 0003:0457:07DA.0010: unknown main item tag 0x0 [ 449.433831][ T5988] hid-multitouch 0003:0457:07DA.0010: unknown main item tag 0x0 [ 449.433859][ T5988] hid-multitouch 0003:0457:07DA.0010: unknown main item tag 0x0 [ 449.433885][ T5988] hid-multitouch 0003:0457:07DA.0010: unknown main item tag 0x0 [ 449.433911][ T5988] hid-multitouch 0003:0457:07DA.0010: unknown main item tag 0x0 [ 449.433937][ T5988] hid-multitouch 0003:0457:07DA.0010: unknown main item tag 0x0 [ 449.433962][ T5988] hid-multitouch 0003:0457:07DA.0010: unknown main item tag 0x0 [ 449.433993][ T5988] hid-multitouch 0003:0457:07DA.0010: unknown main item tag 0x0 [ 449.434018][ T5988] hid-multitouch 0003:0457:07DA.0010: unknown main item tag 0x0 [ 449.434042][ T5988] hid-multitouch 0003:0457:07DA.0010: unknown main item tag 0x0 [ 449.680262][ T5988] hid-multitouch 0003:0457:07DA.0010: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.4-1/input0 [ 449.755539][ T1230] usb 5-1: USB disconnect, device number 66 [ 449.816277][ T5885] usb 2-1: new low-speed USB device number 73 using dummy_hcd [ 449.978818][ T5885] usb 2-1: Invalid ep0 maxpacket: 32 [ 449.981069][T10792] fido_id[10792]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 450.102409][ T5885] usb 2-1: new low-speed USB device number 74 using dummy_hcd [ 450.245200][ T5885] usb 2-1: Invalid ep0 maxpacket: 32 [ 450.245547][ T5885] usb usb2-port1: attempt power cycle [ 450.320854][T10804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1538'. [ 450.438296][T10811] netlink: 2088 bytes leftover after parsing attributes in process `syz.3.1539'. [ 450.559517][ T10] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 450.587775][ T5885] usb 2-1: new low-speed USB device number 75 using dummy_hcd [ 450.618562][ T5885] usb 2-1: Invalid ep0 maxpacket: 32 [ 450.635310][ T5959] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 450.733561][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 450.736133][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 450.737616][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 450.737651][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 450.759056][ T5885] usb 2-1: new low-speed USB device number 76 using dummy_hcd [ 450.783888][ T10] usb 3-1: string descriptor 0 read error: -22 [ 450.784032][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 450.784056][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.815831][ T5885] usb 2-1: Invalid ep0 maxpacket: 32 [ 450.821938][ T5885] usb usb2-port1: unable to enumerate USB device [ 450.845439][ T10] usb 3-1: 0:2 : does not exist [ 450.932955][ T5959] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 450.932990][ T5959] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.933012][ T5959] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 450.933052][ T5959] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 450.933073][ T5959] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.939700][ T5959] usb 5-1: config 0 descriptor?? [ 451.331198][T10823] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1540'. [ 453.223551][ T10] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 453.257820][ T10] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 453.274052][ T10] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 453.371033][ T10] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 453.441624][ T10] usb 3-1: USB disconnect, device number 43 [ 453.571631][ T5959] hid-multitouch 0003:0457:07DA.0011: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.4-1/input0 [ 453.759735][ T5959] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 453.783486][ T10] usb 5-1: USB disconnect, device number 67 [ 453.896064][ T5959] usb 1-1: device descriptor read/64, error -71 [ 455.067969][ T5959] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 455.332713][ T5959] usb 1-1: device descriptor read/64, error -71 [ 455.455088][ T5959] usb usb1-port1: attempt power cycle [ 455.904946][T10858] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1555'. [ 456.080002][T10864] capability: warning: `syz.4.1557' uses 32-bit capabilities (legacy support in use) [ 456.086975][T10865] netlink: 2088 bytes leftover after parsing attributes in process `syz.3.1556'. [ 456.457071][ T5885] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 456.473882][ T5988] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 456.609433][ T5885] usb 3-1: Using ep0 maxpacket: 32 [ 456.613245][ T5885] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 456.613265][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 456.615383][ T5885] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.[ 456.615383][ T5885] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 456.615411][ T5885] usb 3-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 456.615425][ T5885] usb 3-1: Product: syz [ 456.615433][ T5885] usb 3-1: Manufacturer: syz [ 456.615440][ T5885] usb 3-1: SerialNumber: syz [ 456.621199][ T5885] usb 3-1: config 0 descriptor?? [ 456.648532][ T5988] usb 5-1: Using ep0 maxpacket: 32 [ 456.655387][ T1230] BUG: kernel NULL pointer dereference, address: 0000000000000010 [ 456.655409][ T1230] #PF: supervisor read access in kernel mode [ 456.655419][ T1230] #PF: error_code(0x0000) - not-present page [ 456.655430][ T1230] PGD 80000000617ab067 P4D 80000000617ab067 PUD 0 [ 456.655458][ T1230] Oops: Oops: 0000 [#1] SMP KASAN PTI [ 456.655481][ T1230] CPU: 0 UID: 0 PID: 1230 Comm: kworker/0:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 456.655507][ T1230] Tainted: [L]=SOFTLOCKUP [ 456.655514][ T1230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 456.655526][ T1230] Workqueue: usb_hub_wq hub_event [ 456.655555][ T1230] RIP: 0010:kcov_remote_start+0x2a1/0x710 [ 456.655580][ T1230] Code: 7f 8d 4c 8b b8 18 94 4e 92 bd 00 00 04 00 eb 4f 41 8b ae a4 00 00 00 49 c7 c7 00 9a e2 8d 4d 8b 3f 49 81 ff 00 9a e2 8d 74 4c <41> 39 6f 10 75 ee 4c 89 ff e8 f1 f9 e2 02 84 c0 74 0e 49 8b 07 49 [ 456.655596][ T1230] RSP: 0018:ffffc90005a7f7e8 EFLAGS: 00010207 [ 456.655612][ T1230] RAX: 0000000000000000 RBX: ffff88802894bc80 RCX: 0000000000000000 [ 456.655625][ T1230] RDX: 00000000851a7d00 RSI: 0000000000000001 RDI: ffffffff8ba64720 [ 456.655637][ T1230] RBP: 0000000000100000 R08: ffffffff8b244250 R09: ffffffff8ddcd780 [ 456.655651][ T1230] R10: dffffc0000000000 R11: fffffbfff1ed4617 R12: 0000000000000002 [ 456.655663][ T1230] R13: 0000000000000001 R14: ffff888034626b00 R15: 0000000000000000 [ 456.655676][ T1230] FS: 0000000000000000(0000) GS:ffff888126340000(0000) knlGS:0000000000000000 [ 456.655691][ T1230] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 456.655704][ T1230] CR2: 0000000000000010 CR3: 000000003477a000 CR4: 00000000003526f0 [ 456.655720][ T1230] Call Trace: [ 456.655726][ T1230] [ 456.655736][ T1230] hub_event+0x150/0x4f60 [ 456.655763][ T1230] ? __lock_acquire+0x6b5/0x2cf0 [ 456.655781][ T1230] ? __lock_acquire+0x6b5/0x2cf0 [ 456.655797][ T1230] ? look_up_lock_class+0x57/0x110 [ 456.655823][ T1230] ? register_lock_class+0x31/0x2e0 [ 456.655852][ T1230] ? __lock_acquire+0x6b5/0x2cf0 [ 456.655874][ T1230] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 456.655900][ T1230] ? __pfx_hub_event+0x10/0x10 [ 456.655928][ T1230] ? process_scheduled_works+0xa25/0x1830 [ 456.655953][ T1230] ? process_scheduled_works+0xa25/0x1830 [ 456.655977][ T1230] process_scheduled_works+0xb02/0x1830 [ 456.656012][ T1230] ? __pfx_process_scheduled_works+0x10/0x10 [ 456.656039][ T1230] ? assign_work+0x3d5/0x5e0 [ 456.656064][ T1230] worker_thread+0xa50/0xfc0 [ 456.656099][ T1230] kthread+0x388/0x470 [ 456.656117][ T1230] ? __pfx_worker_thread+0x10/0x10 [ 456.656141][ T1230] ? __pfx_kthread+0x10/0x10 [ 456.656159][ T1230] ret_from_fork+0x51e/0xb90 [ 456.656186][ T1230] ? __pfx_ret_from_fork+0x10/0x10 [ 456.656209][ T1230] ? __switch_to+0xc7d/0x1450 [ 456.656240][ T1230] ? __pfx_kthread+0x10/0x10 [ 456.656258][ T1230] ret_from_fork_asm+0x1a/0x30 [ 456.656281][ T1230] [ 456.656292][ T1230] Modules linked in: [ 456.656310][ T1230] CR2: 0000000000000010 [ 456.656326][ T1230] ---[ end trace 0000000000000000 ]--- [ 456.656335][ T1230] RIP: 0010:kcov_remote_start+0x2a1/0x710 [ 456.656356][ T1230] Code: 7f 8d 4c 8b b8 18 94 4e 92 bd 00 00 04 00 eb 4f 41 8b ae a4 00 00 00 49 c7 c7 00 9a e2 8d 4d 8b 3f 49 81 ff 00 9a e2 8d 74 4c <41> 39 6f 10 75 ee 4c 89 ff e8 f1 f9 e2 02 84 c0 74 0e 49 8b 07 49 [ 456.656372][ T1230] RSP: 0018:ffffc90005a7f7e8 EFLAGS: 00010207 [ 456.656387][ T1230] RAX: 0000000000000000 RBX: ffff88802894bc80 RCX: 0000000000000000 [ 456.656399][ T1230] RDX: 00000000851a7d00 RSI: 0000000000000001 RDI: ffffffff8ba64720 [ 456.656411][ T1230] RBP: 0000000000100000 R08: ffffffff8b244250 R09: ffffffff8ddcd780 [ 456.656425][ T1230] R10: dffffc0000000000 R11: fffffbfff1ed4617 R12: 0000000000000002 [ 456.656438][ T1230] R13: 0000000000000001 R14: ffff888034626b00 R15: 0000000000000000 [ 456.656450][ T1230] FS: 0000000000000000(0000) GS:ffff888126340000(0000) knlGS:0000000000000000 [ 456.656465][ T1230] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 456.656478][ T1230] CR2: 0000000000000010 CR3: 000000003477a000 CR4: 00000000003526f0 [ 456.656500][ T1230] Kernel panic - not syncing: Fatal exception [ 456.656635][ T1230] Kernel Offset: disabled