last executing test programs: 2m19.904257725s ago: executing program 0 (id=80): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x0, 0x101080) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000100)=0x3) r2 = getpid() r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x9, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000040)=0x10001, 0x4) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x38, 0x3, 0x8, 0x101, 0x0, 0x0, {0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xdada}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x186f}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000200)={0xffffffffffffffff, r1, 0x7fff}) syz_pidfd_open(r2, 0x0) syz_open_procfs(r2, &(0x7f0000000140)='net/ip6_mr_cache\x00') r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = inotify_init() r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x0, 0x80000}, 0x20) r8 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r8, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) close_range(r6, 0xffffffffffffffff, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r5, &(0x7f0000003380)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="c542", 0x2}], 0x1}}], 0x1, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0xfa8, 0x6, 0xd, 0x4, 0xfffffffffffdfffd, 0xdf}, &(0x7f0000000180)={0x9, 0x8, 0x2, 0x8, 0x8000000000000000, 0x7ff, 0x4, 0x6}, 0x0, 0x0, 0x0) 2m19.768292101s ago: executing program 0 (id=81): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x4094642f, &(0x7f00000000c0)={'aio_aio12_8\x00', [0x8001, 0xa, 0x1, 0xfffffffb, 0x0, 0xcc7, 0x8, 0x7, 0xe, 0x2, 0x6, 0x1, 0x8, 0x4, 0x6, 0xffffffff, 0x1, 0x1a449, 0x3, 0x40000001, 0x89, 0x2, 0xf2b, 0x6, 0xc, 0x8, 0x8, 0xa000, 0x4, 0x1ae, 0xfffffff5]}) 2m19.709220684s ago: executing program 0 (id=82): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x70}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="0c0100001a0007000000000000000000ff020000000000000000000000000001e0000002000000000000000000000000ffff0000000000000000800002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x10c}}, 0x4000084) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206", @ANYRESOCT=r0], 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) syz_usb_ep_write(r2, 0x8, 0x9f, &(0x7f0000000140)="093f8dd8774ab92a64e34cf09327186e438ea2a5931617905bcd5afe2a80d5a0792c255498bfb5bf150f790148f35711d5a51adc91d20917b1c712b047dd5026b210dab4c43bf034578c928d6767c87a545b46fade3a01df4d32b82d10f231f780ea8b44c7bc7c2ed3e53909d3c719925a577d1a76bba892f07bcc76f111329f421282fffacdb71763ce770382c4a4d8706b263ee29d66b036444f422c3578") bind$rxrpc(r3, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) syz_usb_control_io$hid(r2, &(0x7f0000000480)={0x24, &(0x7f0000000300)={0x0, 0x1, 0x45, {0x45, 0x0, "c519f2f570c5b3411953117e84ea92caa4adabbc99e955eb44773f027a0dc6eeb8169010a9bba72787227985309e41bf21507299d5e67695ada77f6428b34b54c10993"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2445}}, &(0x7f0000000840)={0x0, 0x22, 0x29, {[@local=@item_4={0x3, 0x2, 0x0, "c6771c46"}, @local=@item_4={0x3, 0x2, 0x8, "d8c2e181"}, @local=@item_4={0x3, 0x2, 0x5, "50fd3953"}, @global=@item_012={0x2, 0x1, 0x8, "66bb"}, @local=@item_4={0x3, 0x2, 0x4, "276cab83"}, @main=@item_012={0x1, 0x0, 0xb, "1e"}, @local=@item_4={0x3, 0x2, 0x8, "8fed1d12"}, @local=@item_4={0x3, 0x2, 0x2, "73c5fb57"}, @local=@item_012={0x0, 0x2, 0x4}, @main=@item_4={0x3, 0x0, 0x8, "9de6aab1"}]}}, &(0x7f0000000440)={0x0, 0x21, 0x9, {0x9, 0x21, 0x800, 0x1, 0x1, {0x22, 0xe3b}}}}, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001759000000f10d048e508682e36c312824022c6d028b5bca94ad95931a1ca561f108c87453becb95c76c715dba212f2175ea3b3e8db5e7aff46b6c5509bbcf26843b4077423880cd73759c5ac3bf7fadcd3cb3560f4b8d0dc227dad7c6a9"], &(0x7f0000000540)={0x0, 0xa, 0x1, 0x1d}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000005c0)=ANY=[@ANYBLOB="2001d0000000cd90a69b5b888542a5d959bcea78c140a3ed28b99a25a36aa0a7638ecd57d57fb234e7596c918806ec2ea5b4abb9a02cc38328331db0776ce6924e83d5908ebe8f4b55b73148dce811ce8c96d06641310229b29dfb74192f0397ae170a273ec3dea2af01c5efd42b24df74b48e62d380d50ec667e1eb885e50d38c855e52327a4e033dbc6a123e285e4e05f75900a1edf5fafcaeea961b05afa2c34bcf143535753398957ebcd2059678d2558b3685fd5d49202fa602bd090f0b278f8ffa0f056399156f8949dd7a0200000000000000"], &(0x7f00000006c0)={0x20, 0x3, 0x1, 0x7}}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents(r4, 0x0, 0x18) getresgid(&(0x7f0000000740), &(0x7f0000000780)=0x0, &(0x7f00000007c0)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000800)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, r5}}, './file0\x00'}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x34, r8, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r11 = inotify_init1(0x800) r12 = fcntl$dupfd(r10, 0x406, r11) setsockopt$inet_mtu(r12, 0x111, 0xa, &(0x7f0000000000), 0x4) r13 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r13, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="201320000000195c24dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m16.576003985s ago: executing program 0 (id=93): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) r0 = socket(0x2, 0x3, 0x1) getsockopt(r0, 0xff, 0x100000000000001, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x4) 2m16.464350636s ago: executing program 0 (id=94): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) epoll_create(0x2) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002201"], 0x0}, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000000200)={0x14, &(0x7f00000003c0)={0x0, 0x0, 0x2, {0x2, 0x1}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x415}}}, &(0x7f0000000700)={0x34, &(0x7f0000000440)={0x20, 0x17, 0x3f, "432f17119d29f3ea6c29a115a1273a96640f652ab45ccd6628e3f714dc6c32129dd39594b016867f71c32fcc2c9933a3477e8c2671e98ffca4ae41b0e2296b"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x28}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000540)={0xc0, 0xa1, 0x4, 0x8}, &(0x7f00000005c0)={0x40, 0xa0, 0x4, 0x2a8cc07c}, &(0x7f00000006c0)={0xc0, 0xa2, 0x2f, "9566643e5138400c64ad78d528d32eae323519ef840d05638ccaf09aae76a20ff881c5e6c8f773296e686a4ccadc5c"}}) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 2m16.170752769s ago: executing program 0 (id=97): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = epoll_create(0x2) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000840)={{0x6, @rose}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) sendto$netrom(r3, 0x0, 0x0, 0x40, &(0x7f0000000000)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast]}, 0x48) fgetxattr(r2, &(0x7f0000000780)=@random={'btrfs.', '%\x00'}, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x38}}, 0x20000000) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002201"], 0x0}, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x4, 0x400000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), 0xffffffffffffffff) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000000200)={0x14, &(0x7f00000003c0)={0x0, 0x0, 0x3d, {0x3d, 0x1, "19f8e7e5a228926794fb785956fd41079510c1852b0e3b34a654effd1c1a6a2ae5fd46cc3c8d7541adf13c1fbdf3e5eeef86142aee4764b89036cb"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x415}}}, &(0x7f0000000700)={0x34, &(0x7f0000000440)={0x20, 0x17, 0x3f, "432f17119d29f3ea6c29a115a1273a96640f652ab45ccd6628e3f714dc6c32129dd39594b016867f71c32fcc2c9933a3477e8c2671e98ffca4ae41b0e2296b"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x28}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000540)={0xc0, 0xa1, 0x4, 0x8}, &(0x7f00000005c0)={0x40, 0xa0, 0x4, 0x2a8cc07c}, &(0x7f00000006c0)={0xc0, 0xa2, 0x2f, "9566643e5138400c64ad78d528d32eae323519ef840d05638ccaf09aae76a20ff881c5e6c8f773296e686a4ccadc5c"}}) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 2m15.990802818s ago: executing program 32 (id=97): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = epoll_create(0x2) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000840)={{0x6, @rose}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) sendto$netrom(r3, 0x0, 0x0, 0x40, &(0x7f0000000000)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast]}, 0x48) fgetxattr(r2, &(0x7f0000000780)=@random={'btrfs.', '%\x00'}, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x38}}, 0x20000000) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002201"], 0x0}, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x4, 0x400000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), 0xffffffffffffffff) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000000200)={0x14, &(0x7f00000003c0)={0x0, 0x0, 0x3d, {0x3d, 0x1, "19f8e7e5a228926794fb785956fd41079510c1852b0e3b34a654effd1c1a6a2ae5fd46cc3c8d7541adf13c1fbdf3e5eeef86142aee4764b89036cb"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x415}}}, &(0x7f0000000700)={0x34, &(0x7f0000000440)={0x20, 0x17, 0x3f, "432f17119d29f3ea6c29a115a1273a96640f652ab45ccd6628e3f714dc6c32129dd39594b016867f71c32fcc2c9933a3477e8c2671e98ffca4ae41b0e2296b"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x28}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000540)={0xc0, 0xa1, 0x4, 0x8}, &(0x7f00000005c0)={0x40, 0xa0, 0x4, 0x2a8cc07c}, &(0x7f00000006c0)={0xc0, 0xa2, 0x2f, "9566643e5138400c64ad78d528d32eae323519ef840d05638ccaf09aae76a20ff881c5e6c8f773296e686a4ccadc5c"}}) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 5.540738864s ago: executing program 2 (id=915): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xff) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000240)=0x3) read$dsp(r1, &(0x7f00000008c0)=""/4096, 0x1000) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000002c0)=0x7e) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="f21b2643aa783e588231fe2d0c2deccbfe7a07b5df62eeba8bd43b22ee78790da6ad9bbcff095d2c488b9af87bdfa0f08466b2a719c2c50d3681330ba7586a", @ANYRESOCT=r1], 0x54}, 0x1, 0x0, 0x0, 0x95}, 0x24004801) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x5) ioctl$KVM_SET_TSC_KHZ_cpu(r6, 0xaea2, 0x7ff) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)=0x4}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10e, 0xa, &(0x7f0000000040)=0x1, 0x4) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a14000000030a0101000000000000000001000000140000005100010000000000000000000700000a"], 0x3c}}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r8, &(0x7f0000002240)=[{&(0x7f0000000300)=""/254, 0xfe}], 0x1, 0x7, 0xfff) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x7e) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x4c, r10, 0x1, 0xffffffff, 0x400004, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10000000}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0xfffe}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r8}]}, 0x4c}, 0x1, 0x620b, 0x0, 0x24040040}, 0x4008000) read$dsp(r1, &(0x7f0000000500)=""/102, 0x66) syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f00000001c0)={0x9, {0xf8000002, 0xa, 0xf, 0xd}}) 5.101679387s ago: executing program 3 (id=918): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) epoll_create(0x2) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002201"], 0x0}, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000000200)={0x14, &(0x7f00000003c0)={0x0, 0x0, 0x11, {0x11, 0x1, "19f8e7e5a228926794fb785956fd41"}}, 0x0}, &(0x7f0000000700)={0x34, &(0x7f0000000440)={0x20, 0x17, 0x26, "432f17119d29f3ea6c29a115a1273a96640f652ab45ccd6628e3f714dc6c32129dd39594b016"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x28}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000540)={0xc0, 0xa1, 0x4, 0x8}, 0x0, &(0x7f00000006c0)={0xc0, 0xa2, 0x2f, "9566643e5138400c64ad78d528d32eae323519ef840d05638ccaf09aae76a20ff881c5e6c8f773296e686a4ccadc5c"}}) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 4.90872357s ago: executing program 2 (id=919): openat$drirender128(0xffffffffffffff9c, &(0x7f0000000480), 0x80080, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x2c, r1, 0x5, 0x2000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x2c}}, 0x0) 4.727980584s ago: executing program 2 (id=921): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @private1, 0x1}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0x4, @private1, 0x9}}, 0x7, 0x4, 0x2, 0x3, 0x54, 0x6, 0xf5}, &(0x7f0000000480)=0x9c) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f0000000040)={0x0, 0xffa6, &(0x7f0000000500)={&(0x7f00000001c0)={0x14, r2, 0x72b, 0x70bd2b}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3.824161071s ago: executing program 2 (id=928): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x41}], 0x1, 0x0, &(0x7f00000000c0)={[0x101]}, 0x8) 2.93874932s ago: executing program 2 (id=933): socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x448000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0) r7 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0xfffffffffffffffe) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x30, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x2}, @register_looper, @decrefs, @free_buffer={0x40086303, r7}, @enter_looper], 0x0, 0x0, 0x0}) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000640)="d88b22e41c79469fbcbedde69e7ded43dc0389445bb1a925030d2356cdcefda6b69bcb58c912cdef599ea062050fd4ddb7999042299655e268352be255b6fc669d9826765d7e73932db14b068ca17ca90e5693cd97ae7f2dab19a2c33d2b72992a9abba241d5cb54f4a0c50957c19466878a3f22d350acde589e37f44af202c091c7a72a96367b2f3b86cba81290091881d23bdb69884dc40106bde3704e717fb734ec98f8233c2708f9cc67978c437133b66d029ebd0e8589b7c33945a230050c16", 0x5f}, {&(0x7f0000000440)="3adacb9cb7f36576a1e2a49234dcab4b87ff25a91089bda69ac3515bc6ec1809cf3a3a9b9f97013933566753480886f9f101ccd6e3b42fe042ce9a1c5888929d3eb6bb793666860d61bf00f5265b35daecbc2837e037da9976123b10c7a7ccf361e7fca584a18dd05d6b99b6604351c4ceab6536bbbf91a4ebe02601dae2bb11d5ac282fbd584a82743d50b6cd238a641fb2173b5ce2811371663de96bffff647baf68ae6e946246d8848755e5045ceb7f80808b04a4d245e7b0d65108777a2981218e28da51a6cfba", 0xc9}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000540)={0x2, @pix_mp={0x5, 0x1, 0x2036315a, 0x1000000, 0xa, [{0xdb, 0x223e}, {0x4, 0xffffacc5}, {0x0, 0x81}, {0xa2, 0x1}, {0x34a, 0x6}, {0x80000000, 0xd5fb5de}, {0x0, 0x9}, {0xc, 0x100}], 0x81, 0x6, 0x8, 0x0, 0x7}}) 2.832048588s ago: executing program 4 (id=935): syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3) r0 = syz_usb_connect$cdc_ncm(0x2, 0x8f, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103050000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x80, 0x1c, {0xe, 0x2270, 0x0, 0x9, 0x44, 0x8000, 0xfffd, 0xec, 0x4, 0xf, 0xb, 0xfb}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000900)={0x14, 0x0, &(0x7f00000008c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 2.830417407s ago: executing program 3 (id=937): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1b, 0x61, 0xe3, 0x8, 0x16d0, 0x10a9, 0x3052, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x7f, 0x88, 0x0, [], [{{0x9, 0x5, 0x3, 0x2}}]}}]}}]}}, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002740)={0x2c, &(0x7f0000000580)={0x0, 0x7, 0x2c, "ad1ed83e16f0f67eb094a8a2aa216fafc3e245eba0210e7ddcab182416cf4c7a180d28ab1a42f9fa05ee3561"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0xc8}, &(0x7f0000002680)={0x20, 0x1, 0x54, "5c727afab9e4c68b0d153e80b0194ae25f634851b7410632f74a268f961f61847630c6074f9e56ddd3e233e31b102f50482264c02be498282405530a1b419e2e6ac600cba66e5855bc16e92b3719346acc64edf1"}, &(0x7f0000002700)={0x20, 0x3, 0x1, 0x80}}) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) 2.17978226s ago: executing program 4 (id=938): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r1, 0x80044dfb, &(0x7f0000000040)) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, &(0x7f0000000040)=0x44, 0x4) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000000)=0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, &(0x7f0000000180)) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r5, 0x7a9, &(0x7f0000000140)={{@host, 0x4}, 0x1, 0x8001, 0x1b52dcd2, 0x800, 0x48575c10, 0xbaa3, 0xbb66, 0x200}) getsockopt$inet6_tcp_int(r4, 0x6, 0x6, 0x0, &(0x7f0000000040)) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r6 = socket(0x840000000002, 0x3, 0x100) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000240)=0x3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x34, 0x0, &(0x7f0000000100)=0x2) listen(r2, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) r8 = accept(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SET_TIMERSLACK(0x1d, 0xfffffffffffffffd) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x44) r9 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, &(0x7f0000000200)={@any, 0x1}) 2.063982273s ago: executing program 1 (id=940): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'bridge_slave_0\x00', &(0x7f0000000140)=@ethtool_wolinfo={0x6, 0x3, 0x760c, "115e7c2ba9cf"}}) setresuid(0xee00, 0xee00, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x100010, r1, 0xa773e000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0xf000, 0x3, &(0x7f0000009000/0xf000)=nil) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mlock2(&(0x7f0000009000/0x4000)=nil, 0x4000, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)={0x5, 0x7}) write$P9_RREADDIR(r3, &(0x7f0000000640)={0xb, 0x29, 0x2, {0xf}}, 0xfffffc95) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ptrace$setregset(0x4205, 0x0, 0x200, &(0x7f00000000c0)={0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x4000081, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x7, 0x0, 0x2, 0xffffffffffffffff]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.988732984s ago: executing program 1 (id=942): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x440, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f00000002c0)={{0xa, 0x7}, 0x100, './file0\x00'}) socket$l2tp(0x2, 0x2, 0x73) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="08002abd7000fcdbdf250100000008000100", @ANYRES32=r6, @ANYBLOB="3c00028038000100240001e96c636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400fcfffbff"], 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) r7 = add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="30800201", 0x1001, r7) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB="2c726f6f746d6feabde1241930303030303f3034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) syz_fuse_handle_req(r8, &(0x7f0000009680)="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", 0x2000, &(0x7f0000002540)={&(0x7f0000004200)={0x50, 0x0, 0x3, {0x7, 0x2b, 0x9, 0x40903144, 0xa, 0x8, 0x7, 0xcdd, 0x0, 0x0, 0x80, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) readlink(&(0x7f0000002040)='./file0/file3\x00', &(0x7f0000002280)=""/31, 0x1f) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r1, &(0x7f00002b2000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f866c4f80cb8c85f54802ec7442400fe2700000044240200fd0000c7442406000000000f01142466bafc0cc4c2adac170f320f2e2d00000080b9800000c00f32350080000067f20f1afe", 0x63}], 0x1, 0x4a, 0x0, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) r11 = accept$alg(r10, 0x0, 0x0) recvmmsg(r11, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000240)=""/92, 0x5c}], 0x1}, 0x3fe}], 0x1, 0x2101, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r9, 0x4048ae9b, &(0x7f0000000b80)={0xe0003, 0x0, {[0x3, 0x1f8, 0x8e, 0x57a, 0x2, 0x80000000, 0x9, 0x4]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) setxattr$system_posix_acl(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='system.posix_acl_default\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="0200000001000200000000000400070000000000080000000000000020"], 0x24, 0x3) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000000040)) 1.903433225s ago: executing program 2 (id=943): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x2c, r3, 0x103, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r6, &(0x7f0000000000)={@val={0xa, 0x88a8}, @void, @eth={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x7, 0x4, 0x4, 0x54, [{0x4, 0x1, "9224168a8cb7"}]}}}}}}}, 0x52) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x11012, r5, 0x0) r9 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r9, 0x4147, 0x0) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000000)={0x50, r1, 0x50be6fea6f3bdfbb, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) syz_usb_connect(0x5, 0x8a6, &(0x7f00000006c0)={{0x12, 0x1, 0x310, 0xac, 0xf9, 0x90, 0x20, 0x55f, 0xd001, 0x29ad, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x894, 0x4, 0xa, 0xf1, 0x10, 0x37, [{{0x9, 0x4, 0x7, 0x4, 0x6, 0xbc, 0xcb, 0x1b, 0x5, [@uac_as={[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x400, 0x9, 0x7, "72ce9cc6a0da"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x3, 0x2, 0x0, 0x9}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x1, 0x3, 0xb, 0x1, "ba666352928abf371d"}]}, @cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "6dc494"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x7f, 0x5, 0x6, 0x10}, {0x6, 0x24, 0x1a, 0xff85, 0x9}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x30}]}], [{{0x9, 0x5, 0x4, 0x10, 0x3ff, 0xc4, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0x1ff0}, @generic={0xdd, 0xd, "ec28c837e07b7bcc2ed5e9b3627c8195c3193f5b6c05a321b9f665ca3186f0f38a715bd9cc36b224b55f8a706a95fc8aba4ba7490ea147c1ceebade56a9b53e1bf3baa16439530cc9c225ade2128be656901dfb8ea25438e93850845eee9c153a492fc31089bddfff4da2146473f002fcb9a089bfc6d08c0e884dc908288b0d98f049e8025274d754e0e09395117443e817c02b6a74b624cd27961458b26afc7508e035caf6d32e71862655258255dd52b2adf3f14075b33ab70411f4245fc74a8c19ba19dca8fbf407ef1d8d76b7800eb662ad34e3684ac6d7592"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x8, 0x0, 0x6, [@generic={0x95, 0x0, "665f92d3fd7c3735a3da2565e12dbdf3045fcb1e98849f88bef399be9a14f092f6f963c591cc88f03c6fb97d57529a197075db398fb94c2e849a21f0a30f8cea61dadbe7f37068388cbb3b29455bd74676e3d6ea82e6f5bac7e559ae32cb3be13d4036927c359c67a628eaeba45033cf4e5dd5bd122b07c65374e6e34a739d5439b1a373fd6761a975c3d6024da2a79d5d1f00"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0xfa, 0x5a, 0x5}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x3b, 0x8, 0x9}}, {{0x9, 0x5, 0xe, 0x8, 0x40, 0x7, 0x5c, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x7}]}}, {{0x9, 0x5, 0x1, 0x0, 0x0, 0x0, 0x9, 0x7}}]}}, {{0x9, 0x4, 0x3e, 0x7, 0xe, 0xff, 0x47, 0xd0, 0x90, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "857bb9"}, {0x5, 0x24, 0x0, 0xe26}, {0xd, 0x24, 0xf, 0x1, 0xfff, 0x4, 0x8, 0xc6}, {0x6, 0x24, 0x1a, 0x8701, 0x10}, [@mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x6, 0x95}, @dmm={0x7, 0x24, 0x14, 0x1, 0x6}, @dmm={0x7, 0x24, 0x14, 0x7, 0x83ba}, @mdlm={0x15, 0x24, 0x12, 0xa}]}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0xc0, 0x6, 0x1}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x4, 0x3, 0x2, 0x77}]}], [{{0x9, 0x5, 0xe, 0x2, 0x200, 0x7, 0xff, 0x9, [@generic={0x25, 0x30, "194d353470a49e8269607715f282c7e10b6681986275e02c53bf3095d22a80361a3279"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x80}]}}, {{0x9, 0x5, 0x1, 0x3, 0x3ff, 0x7, 0x6, 0x8, [@generic={0x7, 0x9, "50c1ca9805"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x8, 0x7f, 0xbf, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0xaf}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x6}]}}, {{0x9, 0x5, 0x0, 0x4, 0x400, 0x7, 0x5, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x8}, @generic={0x6e, 0x21, "01909d004b4282c03a00d5e49657ae351f5f104427fe373aab345ef85afc827daca6e1a1c4eb6eb46b1e5993f0e67fb5aaaac0d579b0b4e94dadd51617a9a5843f461ecc521346af6f144b20294f02532d6cc5e1a89672be01531764b6ee413428b376568e5d88c60774cec0"}]}}, {{0x9, 0x5, 0xb, 0x4, 0x400, 0x5, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x86, 0x6}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0xb, 0x7f, 0x2b, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x3}, @generic={0x3, 0x7, '#'}]}}, {{0x9, 0x5, 0x8, 0x8, 0x20, 0x8, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x41, 0x4, 0x446}, @generic={0x8b, 0xd, "ef5a32aa11de60352706bcd2a9bf7f0b58e1ee743d45b57cde91e235d2f436b8ee8ab85a03c765ebfb69d434d49debc3f0f24e60fda448bbc5c7d26cb3a582b86470787d2582eb79da961b95f4584849810e93a2f980cb54673aadc81f1282a1e7422ab73397459aa00deba98c9ac7efab5d762c9fd84164489f6ceaec1fea54f13d3c295bb3209e97"}]}}, {{0x9, 0x5, 0x7, 0x14, 0x400, 0x50, 0x0, 0x3}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0x0, 0xa, 0x40, [@generic={0xc2, 0xc, "bcac4f6ca493e2039deb28acfde614fba62bd9ff9bd1b48fff62a844da86528bcf44a13cf337c5acd0315fca06d7ce9caf66472774fcda660e79228b045d5cc636d74a54657ea7c4ce39b25f04404b65731aaa7ea9567dd6c5729d360573b38960d288de1373fdf2cbc3e9a9b69baa23b2837b46765c14c83cd6fa0c34efc3ffc15314bb3be7f05772e0e7fc529c2b776408ae5d4346912af0aa661a03f20ce540ebf86bb44bf39957b20193eb63fb3d7d7318d78dd9b13b32b1941b67be43d6"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x10, 0x3, 0x5}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0xe4, 0x9, 0x1}}, {{0x9, 0x5, 0xe, 0x4, 0x200, 0x1, 0x5, 0x7, [@generic={0x9, 0xa, "afbcd2f67b5857"}, @generic={0xbf, 0x30, "7a5f7e11662a1607020c3be5e2bb517f1701617741f8201bfab52c53a1fc53a128fc27df55c84b245641ab7654913ac9486f4bd73d07b36e167e440b259481a6748484d83319e85b984c42ded803e846bc0212b9a24c332fbd87bbe153ee2263004577cff34d1e1dc34ba899d6860af62e3fc9f3aac6187b66c8db6e570c5152098989a6bd3386b7a63ed96a650463e121c069edf26da96ea5937bfa1529fb603d575435e794c0770267593ce39fa14d533d7abaf04ef74b9fff5306ea"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x8, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x6a6c}]}}, {{0x9, 0x5, 0x5, 0x8, 0x0, 0x8, 0x6, 0x2}}]}}, {{0x9, 0x4, 0x54, 0x5, 0x9, 0x75, 0xb5, 0xc, 0x5, [], [{{0x9, 0x5, 0xb, 0x0, 0x0, 0x9, 0xe, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0xc000}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0xb, 0xffff}]}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x7, 0xfc, 0x8, [@generic={0x9a, 0x6, "bfdbb2db1267b9303078836a28822000af8694a43caf634f8271aa7c8e882f05ecfb22906b1070ce8518eae34e568e7fca19b25cecd7fe37e0223b4a666d0adcfb2d40352da92315eab31cbd54f7fcc80e2bda44e82af8ab04f739c5588fff95de7569b20f204412369e18e670c5214257cba87193dd3ed60d054f54f6498f74bd833414b827af02235b934710d4f4e0d8299e1ca752893a"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x37f, 0x10, 0x9, 0x81, [@generic={0x45, 0x6, "e372e2a167af8dc8362fe986579b8b324ebb214f6a8a4b43395273e5c2b8e59480964b249773529ad8e01be0b6202750506e5a6c85e38ba6f571345f36b44581a28bc9"}, @generic={0xb0, 0x7, "89a65ddefb967e40f8665ee1765168ed40995f5e5d8eec4963927c25dd9976f9587c4f969d17b246ea16b9be795b2f04b7c9dcebdca9cd91f2f528b9fc5fa92fec4331db98a11aaa8bb4bf6eb8fbf61cccbde7f7b50489390572235464c38fab09222c832c3521ad05a35ae138d77408b87283821ec9c72eaff85874e7e23da9faf18779a54641f62d64fe04c189f46da63051b02797b3c108aa6ba3b23788d902e1d71f61d015d7a74f18f80b22"}]}}, {{0x9, 0x5, 0xf, 0x2, 0x3ff, 0x7, 0x80, 0x1}}, {{0x9, 0x5, 0x6, 0x3, 0x400, 0x5, 0x5, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x10, 0xc3}]}}, {{0x9, 0x5, 0x6, 0x3, 0x10, 0x5, 0xb, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0xe}]}}, {{0x9, 0x5, 0x6, 0x2fd1f045a47d8018, 0x400, 0x4, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xa, 0x3d8f}]}}, {{0x9, 0x5, 0x5, 0x2, 0x200, 0x7, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x401}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0xc6a7}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0xb6, 0x5, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x7}, @generic={0x1b, 0x21, "0a07837ed4c441ef7f485155349a878e692f67b3e686ea2536"}]}}]}}, {{0x9, 0x4, 0x8, 0x7, 0x1, 0x17, 0x1c, 0xdc, 0x5, [@generic={0x5f, 0x22, "2243d91e43fd9b64e14214932a5e13d93944802602eef17ee53520c57db6f915669e956fb8b335f21dcbe9976369143d043c737902dbcf23fc6e9718940fb338a7d6e616441bfe5201176fe43107ed2ba85b0b2b84fbb440dc9237b20c"}], [{{0x9, 0x5, 0x8, 0x0, 0x40, 0xe, 0x3, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xd5, 0x6}]}}]}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x9, 0xc6, 0xe4, 0x20, 0x81}, 0x57, &(0x7f00000001c0)={0x5, 0xf, 0x57, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x4f, 0x10, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x0, 0x4, 0x4}, @ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x2, 0x5, 0x7fffffa, 0x0, 0x7, [0x3f30, 0x30, 0x0, 0x3f00, 0x3f]}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "767bdf580817a1677d588ac9e2a2b3b5"}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0xc, 0x9, 0x540e}]}, 0x4, [{0xbf, &(0x7f0000000380)=@string={0xbf, 0x3, "79e36c696752efa96903e95f7341b7c0b48f067da1022db7bc024fa3d4f7a375144819eb3d0385960f453af2c605231a83fc62e78cc665c78a9bdb371589e17329ea36ae3a32f55f918180e2720cb8c274889c775d807daaa3e0f243496b2e096c744f744b5bb348b09d8686b31400bdcae0a80bc158e8893b35930dec1fe830204d540f496bccf6b9f04f1e3dfd8e9e75f68d98cc64c3dcebb3eda248ef684d7213ab48c57773f4e92f7a61563c5b79f7ca521d570e4d95bf132ef27a"}}, {0xf1, &(0x7f0000000440)=@string={0xf1, 0x3, "5484d6ae99f4d2d1a1d997be55dc8bd59dca4772ac9ba5d6bf11b7ce1ceef98295d8a6d2213dc4cee1978127b6bbdb736d6c02b1328fe8ab9663e894db59cbdba54fb079b00b082b293ae09029412ffede21a944e5275b769b144625c538c74e09acc7ec2a6375148de7e64249e5e9c574a3ab2a3b4215291732422ba092f398b94e9c72ec5e22aa598f5954dcaba2a4dee3a7caefc07a982e867dbfa4f301405670c7d23589ff1bf9dd8e61880b12f2f320f42d2c1267fbcb822debabf92f5c30796371f5a149f22573b1e58e4c72d1ede6054adc9725069ffda134c99dcb5f6e041245bc0d0f1807e9faec303f04"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xc04}}]}) 1.812582551s ago: executing program 1 (id=944): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0xf65440cb9eb76954}], 0x1, 0x0, 0x0, 0x0) 1.305587848s ago: executing program 4 (id=945): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f", 0x35}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r3, 0x4010645e, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000005c0)=""/4163, 0x1043}], 0x1}, 0x40000000) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[], 0xfe33) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000140)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000240)=[r4], &(0x7f0000000180), 0x0, &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) 1.203434725s ago: executing program 3 (id=946): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x3}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x1, 0x2, 0x0, 0x4, 0x1, 0x81, 0x0, 0xc4, 0x5}, {0x50000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x6000, 0x0, 0xb, 0x0, 0x3, 0x1, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x6000, 0x4000, 0xf, 0xff, 0x3, 0xff, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x10, 0x54, 0x1, 0xff, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x9}, 0x40010000, 0x0, 0xffff1000, 0x300, 0x5, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0xff00, @ioapic={0x2000, 0x2, 0x9, 0xffffffff, 0x0, [{0x81, 0xb, 0x2, '\x00', 0xff}, {0x6, 0x3, 0x5, '\x00', 0xcf}, {0x1, 0x2, 0x91, '\x00', 0x6}, {0x4, 0xfd, 0x8, '\x00', 0x97}, {0x9, 0xb, 0x80, '\x00', 0x8}, {0xfa, 0x6, 0xf, '\x00', 0x6}, {0x7, 0x5, 0x4, '\x00', 0xcf}, {0x7, 0xd, 0xf, '\x00', 0x1}, {0x98, 0x0, 0x4, '\x00', 0xff}, {0x1, 0x1, 0xfb, '\x00', 0x9}, {0xd, 0xfd, 0x8f, '\x00', 0x9}, {0x2, 0x5, 0x10, '\x00', 0x5}, {0xf, 0x6, 0x42, '\x00', 0x7f}, {0x9, 0x1, 0x8, '\x00', 0x8}, {0x81, 0x10, 0x4, '\x00', 0x3d}, {0x1, 0xe, 0x2, '\x00', 0x20}, {0x0, 0xc, 0x20, '\x00', 0x5}, {0x20, 0x40, 0x8, '\x00', 0xfc}, {0xb, 0x2, 0x5, '\x00', 0x4}, {0x81, 0x5, 0x9, '\x00', 0x8}, {0x1, 0x6, 0x5, '\x00', 0xa}, {0x9, 0xfc, 0x90, '\x00', 0x21}, {0x4, 0xeb, 0xc0}, {0x6, 0x5, 0x0, '\x00', 0xb}]}}) 1.05643125s ago: executing program 4 (id=947): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) epoll_create(0x2) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002201"], 0x0}, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000000200)={0x14, &(0x7f00000003c0)={0x0, 0x0, 0x11, {0x11, 0x1, "19f8e7e5a228926794fb785956fd41"}}, 0x0}, &(0x7f0000000700)={0x34, &(0x7f0000000440)={0x20, 0x17, 0x26, "432f17119d29f3ea6c29a115a1273a96640f652ab45ccd6628e3f714dc6c32129dd39594b016"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x28}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000540)={0xc0, 0xa1, 0x4, 0x8}, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 1.030031101s ago: executing program 3 (id=948): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'ni_daq_700\x00', [0x8001, 0x6, 0x1, 0x0, 0x10002, 0xcc7, 0x8, 0x7, 0x8000000a, 0xfd, 0x2, 0xfffffffd, 0xa, 0x4, 0x10, 0xffffffff, 0x1, 0x1a449, 0x3, 0x0, 0xa9, 0x2, 0xf28, 0x6, 0x4000b, 0x8, 0x3, 0x8, 0xffffffff, 0x10000, 0xfffffff8]}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000200)={r0, &(0x7f0000000000)='ni_daq_700\x00', 0x8000, &(0x7f0000000040)={@_ha_fsid={[0x1, 0x1]}, {0xc33, 0x6, 0x2, 0x3}}, 0x4, &(0x7f0000000180), &(0x7f00000001c0)}) ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000240)) 980.070296ms ago: executing program 1 (id=949): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x54) close(r0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 908.551919ms ago: executing program 3 (id=950): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x2c, r2, 0x1, 0x70bd29, 0x25dfdbf8, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48001}, 0x4008048) 896.758809ms ago: executing program 3 (id=951): socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x448000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0) r7 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0xfffffffffffffffe) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x30, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x2}, @register_looper, @decrefs, @free_buffer={0x40086303, r7}, @enter_looper], 0x0, 0x0, 0x0}) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000640)="d88b22e41c79469fbcbedde69e7ded43dc0389445bb1a925030d2356cdcefda6b69bcb58c912cdef599ea062050fd4ddb7999042299655e268352be255b6fc669d9826765d7e73932db14b068ca17ca90e5693cd97ae7f2dab19a2c33d2b72992a9abba241d5cb54f4a0c50957c19466878a3f22d350acde589e37f44af202c091c7a72a96367b2f3b86cba81290091881d23bdb69884dc40106bde3704e717fb734ec98f8233c2708f9cc67978c437133b66d029ebd0e8589b7c33945a230050c16", 0x5f}, {&(0x7f0000000440)="3adacb9cb7f36576a1e2a49234dcab4b87ff25a91089bda69ac3515bc6ec1809cf3a3a9b9f97013933566753480886f9f101ccd6e3b42fe042ce9a1c5888929d3eb6bb793666860d61bf00f5265b35daecbc2837e037da9976123b10c7a7ccf361e7fca584a18dd05d6b99b6604351c4ceab6536bbbf91a4ebe02601dae2bb11d5ac282fbd584a82743d50b6cd238a641fb2173b5ce2811371663de96bffff647baf68ae6e946246d8848755e5045ceb7f80808b04a4d245e7b0d65108777a2981218e28da51a6cfba", 0xc9}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000540)={0x2, @pix_mp={0x5, 0x1, 0x2036315a, 0x1000000, 0xa, [{0xdb, 0x223e}, {0x4, 0xffffacc5}, {0x0, 0x81}, {0xa2, 0x1}, {0x34a, 0x6}, {0x80000000, 0xd5fb5de}, {0x0, 0x9}, {0xc, 0x100}], 0x81, 0x6, 0x8, 0x0, 0x7}}) 889.892914ms ago: executing program 1 (id=952): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x280, 0x1000, 0x0, 0x1, 0x0, {0x0, 0x9}, {0x350, 0x20002, 0xfffffffd}, {0xf4ef}, {0x4, 0x0, 0x7fe}, 0x1, 0x100, 0x0, 0xd611, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x19, 0x0, 0x0) r4 = dup(r1) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xc, 0xe652, 0x2, 0xcc, 0x4a, 0xff}, 0x9c) r5 = socket$pppl2tp(0x18, 0x1, 0x1) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='.\x00\x00\x00>\x00', 0x6}], 0x1, 0x0, 0x0, 0x39c}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000069"], 0xfe33) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x0, @local}, 0x2}}, 0x26) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r8, 0x1, 0x60bd27, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r11, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r10, 0x0, r4, 0x0, 0x7f, 0x2) write$P9_RREAD(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="0b000000750200fc790000"], 0xb) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xfffffff7, 0xfff, 0x8, 0x9, 0x64, 0x80000000, 0x5}, 0x9c) r12 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000020007fafb72d13b2a4a2719302000000030b43016c26236925000400fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9", 0x55}], 0x1}, 0x0) 452.171973ms ago: executing program 4 (id=953): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r1, 0x80044dfb, &(0x7f0000000040)) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, &(0x7f0000000040)=0x44, 0x4) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000000)=0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, &(0x7f0000000180)) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r5, 0x7a9, &(0x7f0000000140)={{@host, 0x4}, 0x1, 0x8001, 0x1b52dcd2, 0x800, 0x48575c10, 0xbaa3, 0xbb66, 0x200}) getsockopt$inet6_tcp_int(r4, 0x6, 0x6, 0x0, &(0x7f0000000040)) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r6 = socket(0x840000000002, 0x3, 0x100) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000240)=0x3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x34, 0x0, &(0x7f0000000100)=0x2) listen(r2, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SET_TIMERSLACK(0x1d, 0xfffffffffffffffd) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x44) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000200)={@any, 0x1}) 433.291522ms ago: executing program 4 (id=954): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1b, 0x61, 0xe3, 0x8, 0x16d0, 0x10a9, 0x3052, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x7f, 0x88, 0x0, [], [{{0x9, 0x5, 0x3, 0x2}}]}}]}}]}}, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) syz_usb_control_io$hid(r0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) 0s ago: executing program 1 (id=955): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x68, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r4, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0xe040) kernel console output (not intermixed with test programs): b_clone+0x212/0x3a0 [ 148.745617][ T7290] kmem_cache_alloc_noprof+0x87/0x650 [ 148.745647][ T7290] skb_clone+0x212/0x3a0 [ 148.745670][ T7290] __netlink_deliver_tap+0x424/0x8b0 [ 148.745699][ T7290] ? netlink_deliver_tap+0x2e/0x1b0 [ 148.745718][ T7290] netlink_deliver_tap+0x19c/0x1b0 [ 148.745736][ T7290] netlink_unicast+0x7e3/0x9b0 [ 148.745759][ T7290] ? __pfx_netlink_unicast+0x10/0x10 [ 148.745777][ T7290] ? netlink_sendmsg+0x650/0xb40 [ 148.745793][ T7290] ? skb_put+0x11b/0x210 [ 148.745814][ T7290] netlink_sendmsg+0x813/0xb40 [ 148.745839][ T7290] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.745859][ T7290] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 148.745883][ T7290] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.745899][ T7290] sock_sendmsg_nosec+0x18f/0x1d0 [ 148.745919][ T7290] ____sys_sendmsg+0x589/0x8c0 [ 148.745938][ T7290] ? irqentry_exit+0x59e/0x620 [ 148.745958][ T7290] ? trace_irq_disable+0x3b/0x150 [ 148.745985][ T7290] ? __pfx_____sys_sendmsg+0x10/0x10 [ 148.746013][ T7290] ? import_iovec+0x73/0xa0 [ 148.746034][ T7290] ___sys_sendmsg+0x2a5/0x360 [ 148.746058][ T7290] ? __pfx____sys_sendmsg+0x10/0x10 [ 148.746108][ T7290] ? __fget_files+0x2a/0x420 [ 148.746127][ T7290] ? __fget_files+0x3a0/0x420 [ 148.746154][ T7290] __x64_sys_sendmsg+0x1bd/0x2a0 [ 148.746177][ T7290] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 148.746205][ T7290] ? __pfx_ksys_write+0x10/0x10 [ 148.746230][ T7290] do_syscall_64+0x14d/0xf80 [ 148.746244][ T7290] ? trace_irq_disable+0x3b/0x150 [ 148.746262][ T7290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.746277][ T7290] ? clear_bhb_loop+0x40/0x90 [ 148.746296][ T7290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.746318][ T7290] RIP: 0033:0x7f957eb9bf79 [ 148.746334][ T7290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.746346][ T7290] RSP: 002b:00007f957faa8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.746363][ T7290] RAX: ffffffffffffffda RBX: 00007f957ee15fa0 RCX: 00007f957eb9bf79 [ 148.746374][ T7290] RDX: 0000000020004080 RSI: 0000200000000040 RDI: 0000000000000003 [ 148.746384][ T7290] RBP: 00007f957faa8090 R08: 0000000000000000 R09: 0000000000000000 [ 148.746393][ T7290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.746402][ T7290] R13: 00007f957ee16038 R14: 00007f957ee15fa0 R15: 00007ffd80289508 [ 148.746428][ T7290] [ 148.888614][ T937] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 148.897199][ T9] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 149.054814][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.060462][ T937] usb 5-1: config 0 has an invalid interface number: 79 but max is 0 [ 149.062972][ T9] usb 3-1: Product: syz [ 149.071883][ T937] usb 5-1: config 0 has no interface number 0 [ 149.075269][ T9] usb 3-1: Manufacturer: syz [ 149.075287][ T9] usb 3-1: SerialNumber: syz [ 149.088363][ T937] usb 5-1: config 0 interface 79 has no altsetting 0 [ 149.099277][ T9] usb 3-1: config 0 descriptor?? [ 149.108092][ T937] usb 5-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice=fc.92 [ 149.120127][ T937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.138949][ T7275] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 149.155852][ T937] usb 5-1: Product: syz [ 149.160719][ T937] usb 5-1: Manufacturer: syz [ 149.165988][ T937] usb 5-1: SerialNumber: syz [ 149.178279][ T937] usb 5-1: config 0 descriptor?? [ 149.186705][ T937] dvb-usb: found a 'WideView WT-220U PenType Receiver (Typhoon/Freecom)' in warm state. [ 149.197867][ T937] dvb-usb: bulk message failed: -22 (2/0) [ 149.203826][ T937] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 149.213410][ T937] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (Typhoon/Freecom)) [ 149.223825][ T937] usb 5-1: media controller created [ 149.230954][ T937] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 149.243343][ T937] usb 5-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 149.254531][ T937] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 149.319815][ T937] rc_core: IR keymap rc-dtt200u not found [ 149.325639][ T937] Registered IR keymap rc-empty [ 149.331973][ T937] rc rc0: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 149.346019][ T937] input: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input42 [ 149.362580][ T937] dvb-usb: schedule remote query interval to 300 msecs. [ 149.370962][ T937] dvb-usb: WideView WT-220U PenType Receiver (Typhoon/Freecom) successfully initialized and connected. [ 149.411363][ T5916] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 149.418213][ T937] usb 5-1: USB disconnect, device number 27 [ 149.457884][ T9] port100 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 149.484506][ T937] dvb-usb: WideView WT-220U PenType Receiver (Typh successfully deinitialized and disconnected. [ 149.490882][ T9] usb 3-1: USB disconnect, device number 32 [ 149.589075][ T5916] usb 2-1: Using ep0 maxpacket: 8 [ 149.596038][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 149.607121][ T5916] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 149.620041][ T5916] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 149.629193][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.637192][ T5916] usb 2-1: Product: syz [ 149.641607][ T5916] usb 2-1: Manufacturer: syz [ 149.646202][ T5916] usb 2-1: SerialNumber: syz [ 149.652935][ T5916] usb 2-1: config 0 descriptor?? [ 149.848794][ T9] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 150.000574][ T7304] tmpfs: Bad value for 'nr_blocks' [ 150.021092][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.032313][ T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 150.041486][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.051926][ T9] usb 3-1: config 0 descriptor?? [ 150.268207][ T5916] usb 2-1: USB disconnect, device number 34 [ 150.478185][ T9] keytouch 0003:0926:3333.001C: fixing up Keytouch IEC report descriptor [ 150.491553][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.001C/input/input43 [ 150.586979][ T9] keytouch 0003:0926:3333.001C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 150.958846][ T937] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 150.992896][ T5879] usb 3-1: USB disconnect, device number 33 [ 151.048635][ T24] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 151.110587][ T937] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 151.123168][ T937] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 151.132342][ T937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.142828][ T937] usb 4-1: Product: syz [ 151.146999][ T937] usb 4-1: Manufacturer: syz [ 151.151946][ T937] usb 4-1: SerialNumber: syz [ 151.162192][ T937] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 151.228397][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 151.235372][ T24] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 151.244369][ T24] usb 2-1: config 0 has no interface number 0 [ 151.253252][ T24] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 151.262324][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.270367][ T24] usb 2-1: Product: syz [ 151.274548][ T24] usb 2-1: Manufacturer: syz [ 151.279183][ T24] usb 2-1: SerialNumber: syz [ 151.286047][ T24] usb 2-1: config 0 descriptor?? [ 151.318610][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 151.468444][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 151.475170][ T9] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 151.483280][ T9] usb 5-1: config 0 has no interface number 0 [ 151.490512][ T9] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 151.502701][ T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 151.505248][ T24] radio-si470x 2-1:0.35: this is not a si470x device. [ 151.511941][ T9] usb 5-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 151.526940][ T9] usb 5-1: Product: syz [ 151.533830][ T9] usb 5-1: config 0 descriptor?? [ 151.554661][ T9] iowarrior 5-1:0.8: IOWarrior product=0x1512, serial= interface=8 now attached to iowarrior0 [ 151.578048][ T937] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 151.588494][ T7313] netlink: 'syz.3.433': attribute type 4 has an invalid length. [ 151.696578][ T7325] fuse: Unknown parameter 'u3oN0x0000000000000003' [ 151.714283][ T24] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 151.732635][ T24] usb 2-1: USB disconnect, device number 35 [ 151.758399][ T9] usb 5-1: USB disconnect, device number 28 [ 151.946499][ T7332] netlink: 16 bytes leftover after parsing attributes in process `syz.2.442'. [ 151.956372][ T7332] netlink: 16 bytes leftover after parsing attributes in process `syz.2.442'. [ 152.250674][ T24] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 152.408453][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 152.415032][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 152.424902][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 152.436442][ T24] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 152.445593][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.453683][ T24] usb 3-1: Product: syz [ 152.457842][ T24] usb 3-1: Manufacturer: syz [ 152.462471][ T24] usb 3-1: SerialNumber: syz [ 152.469068][ T24] usb 3-1: config 0 descriptor?? [ 152.568464][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 152.718488][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 152.725515][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 152.733177][ T9] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 152.742284][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.752075][ T9] usb 5-1: config 0 descriptor?? [ 153.068463][ T24] usb 3-1: USB disconnect, device number 34 [ 153.174691][ T9] corsair-psu 0003:1B1C:1C09.001D: hidraw0: USB HID v0.03 Device [HID 1b1c:1c09] on usb-dummy_hcd.4-1/input0 [ 153.478150][ T7357] netlink: 'syz.2.451': attribute type 11 has an invalid length. [ 153.494011][ T7357] netlink: 348 bytes leftover after parsing attributes in process `syz.2.451'. [ 153.750901][ T7362] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 153.765709][ T5893] usb 4-1: USB disconnect, device number 32 [ 153.774009][ T7342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.795914][ T7342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.811360][ T9] corsair-psu 0003:1B1C:1C09.001D: unable to initialize device (-71) [ 153.830704][ T9] corsair-psu 0003:1B1C:1C09.001D: probe with driver corsair-psu failed with error -71 [ 153.846067][ T9] usb 5-1: USB disconnect, device number 29 [ 153.998466][ T24] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 154.128461][ T24] usb 3-1: device descriptor read/64, error -71 [ 154.168553][ T5893] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 154.318649][ T5893] usb 4-1: Using ep0 maxpacket: 8 [ 154.326551][ T5893] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 154.337039][ T5893] usb 4-1: config 0 has no interface number 0 [ 154.343250][ T5893] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 154.357160][ T5893] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 154.369052][ T24] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 154.375183][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 154.385082][ T5893] usb 4-1: Product: syz [ 154.394159][ T5893] usb 4-1: config 0 descriptor?? [ 154.406574][ T5893] iowarrior 4-1:0.8: IOWarrior product=0x1512, serial= interface=8 now attached to iowarrior0 [ 154.508464][ T24] usb 3-1: device descriptor read/64, error -71 [ 154.606041][ T937] usb 4-1: USB disconnect, device number 33 [ 154.619694][ T24] usb usb3-port1: attempt power cycle [ 154.968485][ T24] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 154.988933][ T24] usb 3-1: device descriptor read/8, error -71 [ 155.228529][ T24] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 155.262481][ T24] usb 3-1: device descriptor read/8, error -71 [ 155.378658][ T24] usb usb3-port1: unable to enumerate USB device [ 155.385742][ T937] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 155.444628][ T7388] tmpfs: Bad value for 'huge' [ 155.450731][ T7388] fuse: Bad value for 'fd' [ 155.506092][ T7390] raw_sendmsg: syz.1.464 forgot to set AF_INET. Fix it! [ 155.550161][ T937] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 155.586789][ T937] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 155.598419][ T937] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 155.607586][ T937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.618692][ T7381] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 155.629355][ T937] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 155.839658][ T5893] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 155.913169][ T803] usb 4-1: USB disconnect, device number 34 [ 156.000355][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.011527][ T5893] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 156.021189][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.031297][ T5893] usb 5-1: config 0 descriptor?? [ 156.304545][ T7397] netlink: 12 bytes leftover after parsing attributes in process `syz.1.467'. [ 156.449720][ T5893] keytouch 0003:0926:3333.001E: fixing up Keytouch IEC report descriptor [ 156.464079][ T5893] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.001E/input/input44 [ 156.556280][ T5893] keytouch 0003:0926:3333.001E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 156.768649][ T937] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 156.928872][ T937] usb 4-1: Using ep0 maxpacket: 8 [ 156.945065][ T5893] usb 5-1: USB disconnect, device number 30 [ 156.945973][ T937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 156.974701][ T937] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 156.989404][ T937] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 157.009249][ T937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.017287][ T937] usb 4-1: Product: syz [ 157.022646][ T937] usb 4-1: Manufacturer: syz [ 157.031223][ T937] usb 4-1: SerialNumber: syz [ 157.044017][ T937] usb 4-1: config 0 descriptor?? [ 157.268449][ T803] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 157.418398][ T803] usb 3-1: Using ep0 maxpacket: 32 [ 157.425134][ T803] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 157.435537][ T803] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 157.447271][ T803] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 157.458426][ T803] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 157.473716][ T803] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 157.483059][ T803] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.492507][ T803] usb 3-1: Product: syz [ 157.496719][ T803] usb 3-1: Manufacturer: syz [ 157.501386][ T803] usb 3-1: SerialNumber: syz [ 157.517937][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 157.527878][ T803] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input45 [ 157.645204][ T7421] netlink: 56 bytes leftover after parsing attributes in process `syz.4.478'. [ 157.696451][ T937] usb 4-1: USB disconnect, device number 35 [ 157.739035][ T803] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 157.748280][ T803] (id 0x00) [ 157.832022][ T803] rc_core: IR keymap rc-imon-pad not found [ 157.839449][ T803] Registered IR keymap rc-empty [ 157.846841][ T803] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 157.860296][ T803] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 157.939500][ T803] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 157.951743][ T803] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input46 [ 157.965720][ T803] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:39> initialized [ 158.058440][ T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 158.096833][ T7433] netlink: 52 bytes leftover after parsing attributes in process `syz.3.483'. [ 158.106312][ T7433] netlink: 24 bytes leftover after parsing attributes in process `syz.3.483'. [ 158.198831][ T9] usb 5-1: device descriptor read/64, error -71 [ 158.232758][ T5149] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 158.438404][ T9] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 158.578479][ T9] usb 5-1: device descriptor read/64, error -71 [ 158.688853][ T9] usb usb5-port1: attempt power cycle [ 158.881205][ T7450] imon:send_packet: packet tx failed (-71) [ 158.881404][ T803] usb 3-1: USB disconnect, device number 39 [ 158.898562][ T7450] imon:vfd_write: send packet #2 failed [ 159.049173][ T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 159.069034][ T9] usb 5-1: device descriptor read/8, error -71 [ 159.316513][ T7457] loop6: detected capacity change from 0 to 2640 [ 159.325361][ T7457] Buffer I/O error on dev loop6, logical block 0, async page read [ 159.333956][ T9] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 159.339208][ T7457] Buffer I/O error on dev loop6, logical block 0, async page read [ 159.349514][ T7457] Buffer I/O error on dev loop6, logical block 0, async page read [ 159.357358][ T7457] Buffer I/O error on dev loop6, logical block 0, async page read [ 159.369632][ T7457] Buffer I/O error on dev loop6, logical block 0, async page read [ 159.377595][ T7457] Buffer I/O error on dev loop6, logical block 0, async page read [ 159.385829][ T7457] Buffer I/O error on dev loop6, logical block 0, async page read [ 159.386300][ T9] usb 5-1: device descriptor read/8, error -71 [ 159.394083][ T7457] Buffer I/O error on dev loop6, logical block 0, async page read [ 159.407974][ T7457] ldm_validate_partition_table(): Disk read failed. [ 159.414725][ T7457] Buffer I/O error on dev loop6, logical block 0, async page read [ 159.422785][ T7457] Buffer I/O error on dev loop6, logical block 0, async page read [ 159.431931][ T7457] Dev loop6: unable to read RDB block 0 [ 159.440390][ T7457] loop6: unable to read partition table [ 159.458293][ T7457] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 159.472416][ T7458] ldm_validate_partition_table(): Disk read failed. [ 159.481786][ T7458] Dev loop6: unable to read RDB block 0 [ 159.487677][ T7458] loop6: unable to read partition table [ 159.509022][ T9] usb usb5-port1: unable to enumerate USB device [ 159.662791][ T7468] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.929427][ T9] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 160.093195][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 160.103204][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 160.117409][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 160.126631][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.337881][ T9] usb 3-1: usb_control_msg returned -32 [ 160.343722][ T9] usbtmc 3-1:16.0: can't read capabilities [ 160.718419][ T937] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 160.871197][ T937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.882259][ T937] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 160.891392][ T937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.901206][ T937] usb 4-1: config 0 descriptor?? [ 161.314005][ T937] keytouch 0003:0926:3333.001F: fixing up Keytouch IEC report descriptor [ 161.325076][ T937] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.001F/input/input47 [ 161.416276][ T937] keytouch 0003:0926:3333.001F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 161.811372][ T9] usb 4-1: USB disconnect, device number 36 [ 162.671446][ T937] usb 3-1: USB disconnect, device number 40 [ 162.978743][ T803] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 163.098428][ T9] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 163.130099][ T803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.141058][ T803] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 163.150130][ T803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.159992][ T803] usb 5-1: config 0 descriptor?? [ 163.168767][ T5916] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 163.268381][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 163.275083][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 163.284900][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 163.296687][ T9] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 163.305941][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.314161][ T9] usb 4-1: Product: syz [ 163.318380][ T9] usb 4-1: Manufacturer: syz [ 163.322978][ T9] usb 4-1: SerialNumber: syz [ 163.331922][ T9] usb 4-1: config 0 descriptor?? [ 163.338418][ T5916] usb 3-1: Using ep0 maxpacket: 8 [ 163.346942][ T5916] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 163.355258][ T5916] usb 3-1: config 0 has no interface number 0 [ 163.362326][ T5916] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 163.379143][ T5916] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 163.388217][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 163.396418][ T7502] netlink: 56 bytes leftover after parsing attributes in process `syz.1.507'. [ 163.405819][ T5916] usb 3-1: Product: syz [ 163.419085][ T5916] usb 3-1: config 0 descriptor?? [ 163.438698][ T5916] iowarrior 3-1:0.8: IOWarrior product=0x1512, serial= interface=8 now attached to iowarrior0 [ 163.582054][ T803] keytouch 0003:0926:3333.0020: fixing up Keytouch IEC report descriptor [ 163.593547][ T803] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0020/input/input48 [ 163.629910][ T9] usb 3-1: USB disconnect, device number 41 [ 163.661889][ T7507] IPVS: set_ctl: invalid protocol: 224 224.0.0.2:20004 [ 163.703366][ T803] keytouch 0003:0926:3333.0020: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 163.756420][ T803] usb 4-1: USB disconnect, device number 37 [ 164.089157][ T803] usb 5-1: USB disconnect, device number 35 [ 164.167577][ T11] block nbd0: Possible stuck request ffff888027850000: control (read@0,1024B). Runtime 90 seconds [ 164.178495][ T11] block nbd0: Possible stuck request ffff888027850200: control (read@1024,1024B). Runtime 90 seconds [ 164.189670][ T11] block nbd0: Possible stuck request ffff888027850400: control (read@2048,1024B). Runtime 90 seconds [ 164.200811][ T11] block nbd0: Possible stuck request ffff888027850600: control (read@3072,1024B). Runtime 90 seconds [ 164.518419][ T803] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 164.668493][ T803] usb 3-1: Using ep0 maxpacket: 16 [ 164.675953][ T803] usb 3-1: unable to get BOS descriptor or descriptor too short [ 164.685195][ T803] usb 3-1: config 7 has an invalid interface number: 48 but max is 0 [ 164.695073][ T803] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 164.705414][ T803] usb 3-1: config 7 has no interface number 0 [ 164.711630][ T803] usb 3-1: config 7 interface 48 has no altsetting 0 [ 164.720959][ T803] usb 3-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=56.2c [ 164.730219][ T803] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.738295][ T803] usb 3-1: Product: syz [ 164.742664][ T803] usb 3-1: Manufacturer: syz [ 164.747328][ T803] usb 3-1: SerialNumber: syz [ 164.839612][ T7528] FAULT_INJECTION: forcing a failure. [ 164.839612][ T7528] name failslab, interval 1, probability 0, space 0, times 0 [ 164.852507][ T7528] CPU: 1 UID: 0 PID: 7528 Comm: syz.4.516 Not tainted syzkaller #0 PREEMPT(full) [ 164.852526][ T7528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 164.852532][ T7528] Call Trace: [ 164.852536][ T7528] [ 164.852541][ T7528] dump_stack_lvl+0xe8/0x150 [ 164.852559][ T7528] should_fail_ex+0x412/0x560 [ 164.852577][ T7528] should_failslab+0xa8/0x100 [ 164.852595][ T7528] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 164.852617][ T7528] kmem_cache_alloc_noprof+0x87/0x650 [ 164.852639][ T7528] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 164.852659][ T7528] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 164.852680][ T7528] __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 164.852699][ T7528] mmu_topup_memory_caches+0x21/0x170 [ 164.852714][ T7528] kvm_mmu_load+0x9d/0x22d0 [ 164.852725][ T7528] ? vmx_set_intercept_for_msr+0x2ea/0x3e0 [ 164.852746][ T7528] ? vmx_recalc_intercepts+0xed5/0x1b40 [ 164.852762][ T7528] ? kvm_apic_has_interrupt+0x73c/0x770 [ 164.852777][ T7528] ? kvm_deliver_exception_payload+0xcf/0x1f0 [ 164.852810][ T7528] vcpu_run+0x5faf/0x7b90 [ 164.852858][ T7528] ? __pfx_vcpu_run+0x10/0x10 [ 164.852867][ T7528] ? fpu_swap_kvm_fpstate+0xc1/0x4f0 [ 164.852889][ T7528] ? __srcu_check_read_flavor+0x10b/0x250 [ 164.852912][ T7528] kvm_arch_vcpu_ioctl_run+0x11e6/0x20d0 [ 164.852943][ T7528] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 164.852961][ T7528] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 164.852973][ T7528] ? register_lock_class+0x31/0x2e0 [ 164.852987][ T7528] ? __lock_acquire+0x6b5/0x2cf0 [ 164.853002][ T7528] ? kasan_quarantine_put+0xbb/0x1f0 [ 164.853013][ T7528] ? kvm_vcpu_ioctl+0x280/0xfd0 [ 164.853028][ T7528] ? do_raw_write_lock+0x11d/0x260 [ 164.853057][ T7528] kvm_vcpu_ioctl+0xa62/0xfd0 [ 164.853077][ T7528] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 164.853090][ T7528] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 164.853125][ T7528] ? __fget_files+0x2a/0x420 [ 164.853147][ T7528] ? __fget_files+0x2a/0x420 [ 164.853165][ T7528] ? __fget_files+0x3a0/0x420 [ 164.853178][ T7528] ? __fget_files+0x2a/0x420 [ 164.853197][ T7528] ? bpf_lsm_file_ioctl+0x9/0x20 [ 164.853215][ T7528] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 164.853231][ T7528] __se_sys_ioctl+0xfc/0x170 [ 164.853251][ T7528] do_syscall_64+0x14d/0xf80 [ 164.853264][ T7528] ? trace_irq_disable+0x3b/0x150 [ 164.853283][ T7528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.853299][ T7528] ? clear_bhb_loop+0x40/0x90 [ 164.853313][ T7528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.853322][ T7528] RIP: 0033:0x7f554879bf79 [ 164.853334][ T7528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.853346][ T7528] RSP: 002b:00007f5549658028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 164.853370][ T7528] RAX: ffffffffffffffda RBX: 00007f5548a15fa0 RCX: 00007f554879bf79 [ 164.853381][ T7528] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 164.853389][ T7528] RBP: 00007f5549658090 R08: 0000000000000000 R09: 0000000000000000 [ 164.853399][ T7528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 164.853408][ T7528] R13: 00007f5548a16038 R14: 00007f5548a15fa0 R15: 00007ffcdfe77068 [ 164.853436][ T7528] [ 165.880000][ T7542] netlink: 52 bytes leftover after parsing attributes in process `syz.3.521'. [ 165.890565][ T7542] netlink: 24 bytes leftover after parsing attributes in process `syz.3.521'. [ 166.068487][ T937] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 166.208440][ T5879] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 166.228418][ T937] usb 5-1: Using ep0 maxpacket: 8 [ 166.234951][ T937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 166.244957][ T937] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 166.256577][ T937] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 166.265726][ T937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.274013][ T937] usb 5-1: Product: syz [ 166.278182][ T937] usb 5-1: Manufacturer: syz [ 166.283043][ T937] usb 5-1: SerialNumber: syz [ 166.292715][ T937] usb 5-1: config 0 descriptor?? [ 166.380182][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.391180][ T5879] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 166.403057][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.418787][ T5879] usb 4-1: config 0 descriptor?? [ 166.713100][ T9] usb 5-1: USB disconnect, device number 36 [ 166.838789][ T5879] keytouch 0003:0926:3333.0021: fixing up Keytouch IEC report descriptor [ 166.860825][ T5879] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0021/input/input49 [ 166.973643][ T5879] keytouch 0003:0926:3333.0021: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 167.244743][ T803] cdc_phonet 3-1:7.48: probe with driver cdc_phonet failed with error -22 [ 167.285652][ T803] usb 3-1: USB disconnect, device number 42 [ 167.291217][ T7559] No source specified [ 167.354201][ T9] usb 4-1: USB disconnect, device number 38 [ 168.278787][ T803] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 168.430080][ T803] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.440300][ T803] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 168.450118][ T803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.458380][ T9] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 168.468006][ T803] usb 5-1: config 0 descriptor?? [ 168.475998][ T803] pwc: Askey VC010 type 2 USB webcam detected. [ 168.526030][ T7586] netlink: 'syz.1.540': attribute type 3 has an invalid length. [ 168.618386][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 168.624955][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 168.634717][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 168.647179][ T9] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 168.656989][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.665145][ T9] usb 4-1: Product: syz [ 168.669518][ T9] usb 4-1: Manufacturer: syz [ 168.674155][ T9] usb 4-1: SerialNumber: syz [ 168.681279][ T9] usb 4-1: config 0 descriptor?? [ 168.905675][ T803] pwc: recv_control_msg error -32 req 02 val 2b00 [ 169.068418][ T9] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 169.099493][ T5893] usb 4-1: USB disconnect, device number 39 [ 169.123604][ T7596] netlink: 48 bytes leftover after parsing attributes in process `syz.1.544'. [ 169.218456][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 169.227156][ T9] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 169.236671][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.245087][ T9] usb 3-1: Product: syz [ 169.249314][ T9] usb 3-1: Manufacturer: syz [ 169.253931][ T9] usb 3-1: SerialNumber: syz [ 169.261354][ T9] usb 3-1: config 0 descriptor?? [ 169.472889][ T9] speedtch 3-1:0.0: speedtch_bind: data interface not found! [ 169.480454][ T9] speedtch 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 169.683510][ T5893] usb 3-1: USB disconnect, device number 43 [ 169.920211][ T937] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 169.940142][ T7617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.950222][ T7617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.082111][ T937] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 170.092131][ T937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.100263][ T937] usb 4-1: Product: syz [ 170.104428][ T937] usb 4-1: Manufacturer: syz [ 170.109143][ T937] usb 4-1: SerialNumber: syz [ 170.115863][ T937] usb 4-1: config 0 descriptor?? [ 170.252727][ T7619] netlink: 12 bytes leftover after parsing attributes in process `syz.2.553'. [ 170.330961][ T937] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 170.370552][ T7622] FAULT_INJECTION: forcing a failure. [ 170.370552][ T7622] name failslab, interval 1, probability 0, space 0, times 0 [ 170.385601][ T7622] CPU: 1 UID: 0 PID: 7622 Comm: syz.2.554 Not tainted syzkaller #0 PREEMPT(full) [ 170.385625][ T7622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 170.385635][ T7622] Call Trace: [ 170.385642][ T7622] [ 170.385649][ T7622] dump_stack_lvl+0xe8/0x150 [ 170.385678][ T7622] should_fail_ex+0x412/0x560 [ 170.385705][ T7622] should_failslab+0xa8/0x100 [ 170.385726][ T7622] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 170.385745][ T7622] ? __alloc_skb+0x1d0/0x7d0 [ 170.385763][ T7622] ? __local_bh_enable_ip+0xd0/0x130 [ 170.385787][ T7622] __alloc_skb+0x1d0/0x7d0 [ 170.385810][ T7622] ovs_dp_cmd_new+0x184/0xb30 [ 170.385834][ T7622] ? rcu_is_watching+0x15/0xb0 [ 170.385856][ T7622] ? trace_kmalloc+0x2a/0x110 [ 170.385874][ T7622] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 170.385900][ T7622] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 170.385929][ T7622] genl_family_rcv_msg_doit+0x22a/0x330 [ 170.385957][ T7622] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 170.385990][ T7622] ? bpf_lsm_capable+0x9/0x20 [ 170.386009][ T7622] ? security_capable+0x7e/0x2c0 [ 170.386036][ T7622] genl_rcv_msg+0x61c/0x7a0 [ 170.386063][ T7622] ? __pfx_genl_rcv_msg+0x10/0x10 [ 170.386090][ T7622] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 170.386110][ T7622] ? __lock_acquire+0x6b5/0x2cf0 [ 170.386140][ T7622] netlink_rcv_skb+0x232/0x4b0 [ 170.386159][ T7622] ? __pfx_genl_rcv_msg+0x10/0x10 [ 170.386181][ T7622] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 170.386215][ T7622] ? down_read+0x272/0x2e0 [ 170.386230][ T7622] ? genl_rcv+0xd/0x40 [ 170.386252][ T7622] genl_rcv+0x28/0x40 [ 170.386271][ T7622] netlink_unicast+0x80f/0x9b0 [ 170.386296][ T7622] ? __pfx_netlink_unicast+0x10/0x10 [ 170.386315][ T7622] ? netlink_sendmsg+0x650/0xb40 [ 170.386331][ T7622] ? skb_put+0x11b/0x210 [ 170.386353][ T7622] netlink_sendmsg+0x813/0xb40 [ 170.386381][ T7622] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.386401][ T7622] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 170.386426][ T7622] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.386443][ T7622] sock_sendmsg_nosec+0x18f/0x1d0 [ 170.386464][ T7622] ____sys_sendmsg+0x589/0x8c0 [ 170.386493][ T7622] ? __pfx_____sys_sendmsg+0x10/0x10 [ 170.386522][ T7622] ? import_iovec+0x73/0xa0 [ 170.386543][ T7622] ___sys_sendmsg+0x2a5/0x360 [ 170.386569][ T7622] ? __pfx____sys_sendmsg+0x10/0x10 [ 170.386622][ T7622] ? __fget_files+0x2a/0x420 [ 170.386642][ T7622] ? __fget_files+0x3a0/0x420 [ 170.386671][ T7622] __x64_sys_sendmsg+0x1bd/0x2a0 [ 170.386695][ T7622] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 170.386724][ T7622] ? __pfx_ksys_write+0x10/0x10 [ 170.386752][ T7622] do_syscall_64+0x14d/0xf80 [ 170.386766][ T7622] ? trace_irq_disable+0x3b/0x150 [ 170.386786][ T7622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.386803][ T7622] ? clear_bhb_loop+0x40/0x90 [ 170.386822][ T7622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.386837][ T7622] RIP: 0033:0x7f17f999bf79 [ 170.386853][ T7622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.386866][ T7622] RSP: 002b:00007f17fa8c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.386889][ T7622] RAX: ffffffffffffffda RBX: 00007f17f9c15fa0 RCX: 00007f17f999bf79 [ 170.386900][ T7622] RDX: 0000000000004040 RSI: 0000200000000000 RDI: 0000000000000003 [ 170.386910][ T7622] RBP: 00007f17fa8c5090 R08: 0000000000000000 R09: 0000000000000000 [ 170.386920][ T7622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.386930][ T7622] R13: 00007f17f9c16038 R14: 00007f17f9c15fa0 R15: 00007ffcf928d4e8 [ 170.386957][ T7622] [ 170.940673][ T7633] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 171.061818][ T7638] netlink: 60 bytes leftover after parsing attributes in process `syz.4.561'. [ 171.079439][ T7638] netlink: 60 bytes leftover after parsing attributes in process `syz.4.561'. [ 171.096967][ T7603] ======================================================= [ 171.096967][ T7603] WARNING: The mand mount option has been deprecated and [ 171.096967][ T7603] and is ignored by this kernel. Remove the mand [ 171.096967][ T7603] option from the mount to silence this warning. [ 171.096967][ T7603] ======================================================= [ 171.132891][ T5879] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 171.144206][ T7603] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 171.170111][ T7603] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 171.204743][ T7640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.215720][ T7640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.288541][ T5879] usb 3-1: Using ep0 maxpacket: 8 [ 171.295765][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 171.305922][ T5879] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 171.319131][ T5879] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 171.328428][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.336471][ T5879] usb 3-1: Product: syz [ 171.340810][ T5879] usb 3-1: Manufacturer: syz [ 171.345420][ T5879] usb 3-1: SerialNumber: syz [ 171.352757][ T5879] usb 3-1: config 0 descriptor?? [ 171.780208][ T5893] usb 3-1: USB disconnect, device number 44 [ 171.980645][ T7652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.991605][ T7652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.416526][ T937] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 172.430278][ T937] usb 4-1: USB disconnect, device number 40 [ 172.552816][ T7665] sg_write: data in/out 295085/136 bytes for SCSI command 0x0-- guessing data in; [ 172.552816][ T7665] program syz.4.571 not setting count and/or reply_len properly [ 172.626045][ T7667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.628446][ T24] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 172.636333][ T7667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.653940][ T7667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.663230][ T7667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.788387][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 172.797050][ T24] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 172.807765][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.819469][ T24] usb 3-1: Product: syz [ 172.823644][ T24] usb 3-1: Manufacturer: syz [ 172.828243][ T24] usb 3-1: SerialNumber: syz [ 172.836615][ T24] r8152-cfgselector 3-1: Unknown version 0x0000 [ 172.843030][ T24] r8152-cfgselector 3-1: config 0 descriptor?? [ 173.057296][ T24] r8152-cfgselector 3-1: Unknown version 0x0000 [ 173.064287][ T24] r8152-cfgselector 3-1: bad CDC descriptors [ 173.208405][ T24] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 173.335932][ T7678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.344837][ T7678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.360421][ T24] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 173.370711][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.383133][ T24] usb 4-1: config 0 descriptor?? [ 173.592298][ T24] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 173.793707][ T24] [drm:udl_init] *ERROR* Selecting channel failed [ 173.813831][ T24] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 173.821538][ T24] [drm] Initialized udl on minor 2 [ 173.830086][ T24] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 173.846053][ T24] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 173.858224][ T937] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 173.866924][ T937] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 173.879162][ T24] usb 4-1: USB disconnect, device number 41 [ 173.920080][ T7685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.931109][ T7685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.936602][ T803] pwc: recv_control_msg error -110 req 02 val 2c00 [ 173.953840][ T803] pwc: recv_control_msg error -32 req 04 val 1000 [ 173.962263][ T803] pwc: recv_control_msg error -32 req 04 val 1300 [ 173.970777][ T803] pwc: recv_control_msg error -32 req 04 val 1400 [ 173.978411][ T803] pwc: recv_control_msg error -32 req 02 val 2000 [ 173.985129][ T803] pwc: recv_control_msg error -32 req 02 val 2100 [ 173.992084][ T803] pwc: recv_control_msg error -32 req 04 val 1500 [ 173.998986][ T803] pwc: recv_control_msg error -32 req 02 val 2500 [ 174.005715][ T803] pwc: recv_control_msg error -32 req 02 val 2400 [ 174.012583][ T803] pwc: recv_control_msg error -32 req 02 val 2600 [ 174.019661][ T803] pwc: recv_control_msg error -32 req 02 val 2900 [ 174.026523][ T803] pwc: recv_control_msg error -32 req 02 val 2800 [ 174.035731][ T803] pwc: recv_control_msg error -32 req 04 val 1100 [ 174.042730][ T803] pwc: recv_control_msg error -32 req 04 val 1200 [ 174.057304][ T803] pwc: Registered as video103. [ 174.067295][ T803] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input50 [ 174.511844][ T7694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.582'. [ 174.522158][ T7694] veth1_macvtap: left promiscuous mode [ 174.719953][ T7696] kvm: pic: non byte write [ 174.743258][ T7704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.754795][ T7704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.424850][ T803] r8152-cfgselector 3-1: USB disconnect, device number 45 [ 175.606718][ T1159] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 175.608493][ T7723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.630597][ T7723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.659740][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.667616][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.833974][ T7733] 9p: Bad value for 'rfdno' [ 175.870838][ T24] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 176.028434][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 176.034934][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 176.044812][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 176.056623][ T24] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 176.065851][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.073934][ T24] usb 3-1: Product: syz [ 176.078144][ T24] usb 3-1: Manufacturer: syz [ 176.085588][ T24] usb 3-1: SerialNumber: syz [ 176.091960][ T24] usb 3-1: config 0 descriptor?? [ 176.128474][ T803] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 176.268522][ T803] usb 4-1: device descriptor read/64, error -71 [ 176.509505][ T803] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 176.522014][ T24] usb 3-1: USB disconnect, device number 46 [ 176.601398][ T7752] netlink: 12 bytes leftover after parsing attributes in process `syz.4.603'. [ 176.660558][ T803] usb 4-1: device descriptor read/64, error -71 [ 176.769588][ T803] usb usb4-port1: attempt power cycle [ 176.811984][ T7754] netlink: 256 bytes leftover after parsing attributes in process `syz.4.604'. [ 176.823364][ T7754] ntfs3(loop4): try to read out of volume at offset 0x0 [ 177.128464][ T803] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 177.149346][ T803] usb 4-1: device descriptor read/8, error -71 [ 177.400270][ T803] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 177.427682][ T7770] (syz.2.611,7770,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 177.436791][ T7770] (syz.2.611,7770,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 177.441126][ T803] usb 4-1: device descriptor read/8, error -71 [ 177.558762][ T803] usb usb4-port1: unable to enumerate USB device [ 177.740503][ T803] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 177.921517][ T803] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.934096][ T803] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 177.944086][ T803] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.962136][ T803] usb 3-1: Product: syz [ 177.966349][ T803] usb 3-1: Manufacturer: syz [ 177.971932][ T803] usb 3-1: SerialNumber: syz [ 178.120018][ T7783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.130011][ T7783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.936547][ T7801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.948687][ T7801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.959120][ T7801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.973117][ T7801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.992126][ T7801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.003552][ T7801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.005496][ T803] cdc_ncm 3-1:1.0: bind() failure [ 179.016135][ T7801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.027927][ T7801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.030301][ T803] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 179.038158][ T7801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.049027][ T803] cdc_ncm 3-1:1.1: bind() failure [ 179.058137][ T7801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.092403][ T7801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.104591][ T7801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.209974][ T803] usb 3-1: USB disconnect, device number 47 [ 179.388405][ T5893] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 179.550402][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.561471][ T5893] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 179.570615][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.580386][ T5893] usb 4-1: config 0 descriptor?? [ 179.662894][ T7813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.671733][ T7813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.005749][ T5893] keytouch 0003:0926:3333.0022: fixing up Keytouch IEC report descriptor [ 180.032699][ T5893] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0022/input/input51 [ 180.143657][ T5893] keytouch 0003:0926:3333.0022: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 180.162702][ T7830] FAULT_INJECTION: forcing a failure. [ 180.162702][ T7830] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.187662][ T7830] CPU: 1 UID: 0 PID: 7830 Comm: syz.2.635 Not tainted syzkaller #0 PREEMPT(full) [ 180.187686][ T7830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 180.187695][ T7830] Call Trace: [ 180.187702][ T7830] [ 180.187709][ T7830] dump_stack_lvl+0xe8/0x150 [ 180.187736][ T7830] should_fail_ex+0x412/0x560 [ 180.187764][ T7830] _copy_from_user+0x2d/0xb0 [ 180.187783][ T7830] kstrtouint_from_user+0xd6/0x180 [ 180.187807][ T7830] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 180.187842][ T7830] proc_fail_nth_write+0x8e/0x210 [ 180.187872][ T7830] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 180.187897][ T7830] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 180.187918][ T7830] vfs_write+0x29a/0xb90 [ 180.187943][ T7830] ? __pfx_vfs_write+0x10/0x10 [ 180.187961][ T7830] ? __fget_files+0x2a/0x420 [ 180.187986][ T7830] ? __fget_files+0x3a0/0x420 [ 180.188005][ T7830] ? __fget_files+0x2a/0x420 [ 180.188032][ T7830] ksys_write+0x150/0x270 [ 180.188049][ T7830] ? __pfx_ksys_write+0x10/0x10 [ 180.188075][ T7830] do_syscall_64+0x14d/0xf80 [ 180.188090][ T7830] ? trace_irq_disable+0x3b/0x150 [ 180.188109][ T7830] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.188125][ T7830] ? clear_bhb_loop+0x40/0x90 [ 180.188145][ T7830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.188160][ T7830] RIP: 0033:0x7f17f995c84e [ 180.188177][ T7830] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 180.188190][ T7830] RSP: 002b:00007f17fa8c4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 180.188208][ T7830] RAX: ffffffffffffffda RBX: 00007f17fa8c56c0 RCX: 00007f17f995c84e [ 180.188219][ T7830] RDX: 0000000000000001 RSI: 00007f17fa8c50a0 RDI: 0000000000000005 [ 180.188229][ T7830] RBP: 00007f17fa8c5090 R08: 0000000000000000 R09: 0000000000000000 [ 180.188239][ T7830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.188249][ T7830] R13: 00007f17f9c16038 R14: 00007f17f9c15fa0 R15: 00007ffcf928d4e8 [ 180.188276][ T7830] [ 180.612780][ T7838] syzkaller1: entered promiscuous mode [ 180.619160][ T7838] syzkaller1: entered allmulticast mode [ 180.676353][ T7840] netlink: 'syz.1.639': attribute type 21 has an invalid length. [ 180.684296][ T7840] netlink: 164 bytes leftover after parsing attributes in process `syz.1.639'. [ 180.731474][ T5893] usb 4-1: USB disconnect, device number 46 [ 180.801228][ T7842] IPVS: set_ctl: invalid protocol: 47 172.30.0.5:20002 [ 180.988273][ T7851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.997568][ T7851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.058416][ T5874] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 181.208406][ T5874] usb 3-1: Using ep0 maxpacket: 16 [ 181.215318][ T5874] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 181.227246][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 181.241283][ T5874] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 181.252668][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.260760][ T5874] usb 3-1: Product: syz [ 181.268721][ T5874] usb 3-1: Manufacturer: syz [ 181.276602][ T5874] usb 3-1: SerialNumber: syz [ 181.285006][ T5874] usb 3-1: config 0 descriptor?? [ 181.296261][ T5874] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 181.306997][ T5874] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 181.563078][ T7859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.571922][ T7859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.598445][ T5879] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 181.748391][ T5879] usb 4-1: Using ep0 maxpacket: 8 [ 181.754999][ T5879] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.766548][ T5879] usb 4-1: config 0 has no interfaces? [ 181.773303][ T5879] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 181.782482][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 181.790851][ T5879] usb 4-1: Product: syz [ 181.797171][ T5879] usb 4-1: config 0 descriptor?? [ 181.901088][ T5874] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 181.907741][ T5874] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 182.008060][ T5893] usb 4-1: USB disconnect, device number 47 [ 182.222443][ T7865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.231755][ T7865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.785033][ T5893] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 182.926336][ T5874] em28xx 3-1:0.0: AC97 vendor ID = 0x00fc00fe [ 182.932877][ T7882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.944398][ T7882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.949032][ T5893] usb 4-1: Using ep0 maxpacket: 8 [ 182.960777][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 182.980898][ T7882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.989677][ T5893] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 183.003032][ T7882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.011803][ T5893] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 183.020920][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.020944][ T5893] usb 4-1: Product: syz [ 183.020956][ T5893] usb 4-1: Manufacturer: syz [ 183.020969][ T5893] usb 4-1: SerialNumber: syz [ 183.034467][ T5893] usb 4-1: config 0 descriptor?? [ 183.126049][ T5874] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 183.140505][ T5874] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 183.147510][ T5874] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 183.154703][ T5874] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 183.162934][ T7893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.164264][ T5874] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 183.182808][ T7893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.190796][ T5874] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 183.211318][ T5874] usb 3-1: USB disconnect, device number 48 [ 183.283507][ T7895] netlink: 14 bytes leftover after parsing attributes in process `syz.1.663'. [ 183.461328][ T5874] usb 4-1: USB disconnect, device number 48 [ 183.958399][ T5874] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 184.120962][ T5874] usb 3-1: Using ep0 maxpacket: 8 [ 184.131511][ T5874] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.152716][ T5874] usb 3-1: config 0 has no interfaces? [ 184.161132][ T5874] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 184.173961][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 184.182797][ T5874] usb 3-1: Product: syz [ 184.190025][ T5874] usb 3-1: config 0 descriptor?? [ 184.409300][ T5874] usb 3-1: USB disconnect, device number 49 [ 184.498488][ T5879] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 184.650281][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.661496][ T5879] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 184.672919][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.685432][ T5879] usb 4-1: config 0 descriptor?? [ 185.112378][ T5879] keytouch 0003:0926:3333.0023: fixing up Keytouch IEC report descriptor [ 185.140431][ T5879] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0023/input/input52 [ 185.245777][ T5879] keytouch 0003:0926:3333.0023: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 185.422510][ T7921] gretap0: entered allmulticast mode [ 185.627981][ T5879] usb 4-1: USB disconnect, device number 49 [ 185.741099][ T5874] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 185.898518][ T5874] usb 3-1: Using ep0 maxpacket: 8 [ 185.908003][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 185.918336][ T5874] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 185.950016][ T5874] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 185.961714][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.970028][ T5874] usb 3-1: Product: syz [ 185.974308][ T5874] usb 3-1: Manufacturer: syz [ 185.980398][ T5874] usb 3-1: SerialNumber: syz [ 185.987737][ T5874] usb 3-1: config 0 descriptor?? [ 186.123553][ T7931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.134681][ T7931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.414802][ T5874] usb 3-1: USB disconnect, device number 50 [ 186.541695][ T5149] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 186.646369][ T7944] FAULT_INJECTION: forcing a failure. [ 186.646369][ T7944] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.666940][ T7944] CPU: 0 UID: 0 PID: 7944 Comm: syz.3.684 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.666964][ T7944] Tainted: [L]=SOFTLOCKUP [ 186.666970][ T7944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 186.666979][ T7944] Call Trace: [ 186.666986][ T7944] [ 186.666993][ T7944] dump_stack_lvl+0xe8/0x150 [ 186.667019][ T7944] should_fail_ex+0x412/0x560 [ 186.667045][ T7944] _copy_from_user+0x2d/0xb0 [ 186.667063][ T7944] video_usercopy+0x36f/0x14b0 [ 186.667085][ T7944] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 186.667103][ T7944] ? __pfx___video_do_ioctl+0x10/0x10 [ 186.667122][ T7944] ? __pfx_video_usercopy+0x10/0x10 [ 186.667149][ T7944] ? __fget_files+0x2a/0x420 [ 186.667171][ T7944] ? __fget_files+0x2a/0x420 [ 186.667190][ T7944] ? __fget_files+0x3a0/0x420 [ 186.667212][ T7944] v4l2_ioctl+0x18d/0x1e0 [ 186.667230][ T7944] ? __pfx_v4l2_ioctl+0x10/0x10 [ 186.667246][ T7944] __se_sys_ioctl+0xfc/0x170 [ 186.667266][ T7944] do_syscall_64+0x14d/0xf80 [ 186.667280][ T7944] ? trace_irq_disable+0x3b/0x150 [ 186.667300][ T7944] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.667316][ T7944] ? clear_bhb_loop+0x40/0x90 [ 186.667336][ T7944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.667351][ T7944] RIP: 0033:0x7fea4b39bf79 [ 186.667367][ T7944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.667380][ T7944] RSP: 002b:00007fea495ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 186.667398][ T7944] RAX: ffffffffffffffda RBX: 00007fea4b615fa0 RCX: 00007fea4b39bf79 [ 186.667417][ T7944] RDX: 0000200000000180 RSI: 00000000c0405602 RDI: 0000000000000003 [ 186.667427][ T7944] RBP: 00007fea495ee090 R08: 0000000000000000 R09: 0000000000000000 [ 186.667438][ T7944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.667447][ T7944] R13: 00007fea4b616038 R14: 00007fea4b615fa0 R15: 00007fffbae5bf68 [ 186.667474][ T7944] [ 186.893130][ T7946] tipc: Started in network mode [ 186.898213][ T7946] tipc: Node identity ac141441, cluster identity 4711 [ 186.925788][ T7946] tipc: Enabled bearer , priority 10 [ 187.168479][ T24] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 187.328829][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 187.335662][ T7964] netlink: 'syz.4.691': attribute type 11 has an invalid length. [ 187.336887][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 187.355907][ T24] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 187.366466][ T24] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 187.378422][ T24] usb 4-1: Product: syz [ 187.382684][ T24] usb 4-1: Manufacturer: syz [ 187.387443][ T24] usb 4-1: SerialNumber: syz [ 187.393411][ T5879] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 187.404376][ T24] usb 4-1: config 0 descriptor?? [ 187.410693][ T7948] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 187.560251][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.571433][ T5879] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 187.580630][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.591563][ T5879] usb 3-1: config 0 descriptor?? [ 187.653593][ T7969] capability: warning: `syz.4.693' uses deprecated v2 capabilities in a way that may be insecure [ 187.672829][ T7948] kvm: kvm [7947]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0xfffffffffffffffd [ 187.798091][ T7972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.811456][ T7972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.821189][ T24] usb 4-1: USB disconnect, device number 50 [ 188.016951][ T5879] keytouch 0003:0926:3333.0024: fixing up Keytouch IEC report descriptor [ 188.029244][ T5879] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0024/input/input53 [ 188.042541][ T24] tipc: Node number set to 2886997057 [ 188.143243][ T5879] keytouch 0003:0926:3333.0024: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 188.521356][ T7982] No source specified [ 188.526298][ T5893] usb 3-1: USB disconnect, device number 51 [ 188.531952][ T7984] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 188.623211][ T7986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.631996][ T7986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.077917][ T7993] CIFS mount error: No usable UNC path provided in device string! [ 189.077917][ T7993] [ 189.092112][ T7993] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 189.106402][ T7993] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 189.114386][ T7993] overlayfs: failed to set xattr on upper [ 189.127776][ T7993] overlayfs: ...falling back to index=off. [ 189.134999][ T7993] overlayfs: ...falling back to uuid=null. [ 189.227858][ T7997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.240237][ T7997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.250235][ T7997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.259802][ T7997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.458417][ T803] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 189.608407][ T803] usb 3-1: Using ep0 maxpacket: 8 [ 189.615079][ T803] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 189.623459][ T803] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.633825][ T803] usb 3-1: config 0 has no interface number 0 [ 189.642248][ T803] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 189.652380][ T803] usb 3-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 189.660668][ T803] usb 3-1: Product: syz [ 189.666686][ T803] usb 3-1: config 0 descriptor?? [ 189.673678][ T803] iowarrior 3-1:0.8: no interrupt-in endpoint found [ 189.805156][ T8008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.813987][ T8008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.832706][ T8008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.841577][ T8008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.875958][ T803] usb 3-1: USB disconnect, device number 52 [ 190.436569][ T8018] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 190.508461][ T803] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 190.570959][ T8027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.580317][ T8027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.698377][ T803] usb 4-1: Using ep0 maxpacket: 32 [ 190.704844][ T803] usb 4-1: config 0 has an invalid interface number: 136 but max is 0 [ 190.713128][ T803] usb 4-1: config 0 has no interface number 0 [ 190.719243][ T803] usb 4-1: config 0 interface 136 altsetting 31 has an invalid descriptor for endpoint zero, skipping [ 190.730350][ T803] usb 4-1: config 0 interface 136 altsetting 31 has an endpoint descriptor with address 0xBD, changing to 0x8D [ 190.742172][ T803] usb 4-1: config 0 interface 136 altsetting 31 endpoint 0x8D has an invalid bInterval 129, changing to 11 [ 190.753694][ T803] usb 4-1: config 0 interface 136 altsetting 31 endpoint 0x8D has invalid maxpacket 10062, setting to 1024 [ 190.765216][ T803] usb 4-1: config 0 interface 136 altsetting 31 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 190.779871][ T803] usb 4-1: config 0 interface 136 has no altsetting 0 [ 190.788414][ T5879] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 190.788640][ T803] usb 4-1: New USB device found, idVendor=1199, idProduct=9041, bcdDevice=15.1b [ 190.805069][ T803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.813128][ T803] usb 4-1: Product: syz [ 190.817289][ T803] usb 4-1: Manufacturer: syz [ 190.821981][ T803] usb 4-1: SerialNumber: syz [ 190.828563][ T803] usb 4-1: config 0 descriptor?? [ 190.834305][ T8016] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 190.841987][ T8016] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 190.938456][ T5879] usb 3-1: Using ep0 maxpacket: 32 [ 190.945478][ T5879] usb 3-1: config 0 interface 0 has no altsetting 0 [ 190.954163][ T5879] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 190.963385][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.971457][ T5879] usb 3-1: Product: syz [ 190.976751][ T5879] usb 3-1: Manufacturer: syz [ 190.981479][ T5879] usb 3-1: SerialNumber: syz [ 190.988270][ T5879] usb 3-1: config 0 descriptor?? [ 191.060729][ T803] usb 4-1: USB disconnect, device number 51 [ 191.201854][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 191.204006][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 191.264601][ T8034] netlink: ct family unspecified [ 191.272147][ T8034] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.285506][ T8034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.295144][ T8034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.398566][ T5879] gs_usb 3-1:0.0: Couldn't get device config: (err=-121) [ 191.405732][ T5879] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -121 [ 191.846160][ T8044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.854983][ T8044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.991584][ T8045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.001200][ T8045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.182305][ T10] usb 3-1: USB disconnect, device number 53 [ 192.448226][ T8055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.460251][ T8055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.560067][ T10] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 192.729672][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.741165][ T10] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 192.750243][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.761116][ T10] usb 3-1: config 0 descriptor?? [ 193.176098][ T10] keytouch 0003:0926:3333.0025: fixing up Keytouch IEC report descriptor [ 193.190476][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0025/input/input54 [ 193.287644][ T10] keytouch 0003:0926:3333.0025: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 193.697181][ T5874] usb 3-1: USB disconnect, device number 54 [ 193.858455][ T10] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 193.938875][ T8091] FAULT_INJECTION: forcing a failure. [ 193.938875][ T8091] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.953435][ T8091] CPU: 0 UID: 0 PID: 8091 Comm: syz.4.741 Tainted: G L syzkaller #0 PREEMPT(full) [ 193.953460][ T8091] Tainted: [L]=SOFTLOCKUP [ 193.953464][ T8091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 193.953470][ T8091] Call Trace: [ 193.953474][ T8091] [ 193.953479][ T8091] dump_stack_lvl+0xe8/0x150 [ 193.953497][ T8091] should_fail_ex+0x412/0x560 [ 193.953515][ T8091] _copy_to_user+0x31/0xb0 [ 193.953527][ T8091] simple_read_from_buffer+0xe1/0x170 [ 193.953543][ T8091] proc_fail_nth_read+0x1bb/0x230 [ 193.953558][ T8091] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 193.953572][ T8091] ? rw_verify_area+0x2a6/0x4d0 [ 193.953582][ T8091] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 193.953595][ T8091] vfs_read+0x20c/0xa70 [ 193.953603][ T8091] ? fdget_pos+0x246/0x320 [ 193.953618][ T8091] ? __pfx___mutex_lock+0x10/0x10 [ 193.953629][ T8091] ? __pfx_vfs_read+0x10/0x10 [ 193.953639][ T8091] ? __fget_files+0x2a/0x420 [ 193.953657][ T8091] ? __fget_files+0x3a0/0x420 [ 193.953669][ T8091] ? __fget_files+0x2a/0x420 [ 193.953686][ T8091] ksys_read+0x150/0x270 [ 193.953696][ T8091] ? __pfx_ksys_read+0x10/0x10 [ 193.953711][ T8091] do_syscall_64+0x14d/0xf80 [ 193.953720][ T8091] ? trace_irq_disable+0x3b/0x150 [ 193.953734][ T8091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.953744][ T8091] ? clear_bhb_loop+0x40/0x90 [ 193.953755][ T8091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.953765][ T8091] RIP: 0033:0x7f554875c84e [ 193.953775][ T8091] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 193.953783][ T8091] RSP: 002b:00007f5549657fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 193.953794][ T8091] RAX: ffffffffffffffda RBX: 00007f55496586c0 RCX: 00007f554875c84e [ 193.953801][ T8091] RDX: 000000000000000f RSI: 00007f55496580a0 RDI: 0000000000000004 [ 193.953807][ T8091] RBP: 00007f5549658090 R08: 0000000000000000 R09: 0000000000000000 [ 193.953812][ T8091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.953817][ T8091] R13: 00007f5548a16038 R14: 00007f5548a15fa0 R15: 00007ffcdfe77068 [ 193.953832][ T8091] [ 194.188598][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 194.195738][ T10] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 194.203842][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.215741][ T10] usb 4-1: config 0 has no interface number 0 [ 194.222537][ T10] usb 4-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 194.236508][ T10] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 194.254642][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.261105][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.272124][ T10] usb 4-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 194.286352][ T10] usb 4-1: Product: syz [ 194.316389][ T10] usb 4-1: config 0 descriptor?? [ 194.324524][ T11] block nbd0: Possible stuck request ffff888027850000: control (read@0,1024B). Runtime 120 seconds [ 194.339867][ T11] block nbd0: Possible stuck request ffff888027850200: control (read@1024,1024B). Runtime 120 seconds [ 194.345214][ T8095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.350985][ T11] block nbd0: Possible stuck request ffff888027850400: control (read@2048,1024B). Runtime 120 seconds [ 194.370759][ T11] block nbd0: Possible stuck request ffff888027850600: control (read@3072,1024B). Runtime 120 seconds [ 194.393873][ T8095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.394703][ T10] iowarrior 4-1:0.8: no interrupt-in endpoint found [ 194.473551][ T8102] netlink: 'syz.2.745': attribute type 2 has an invalid length. [ 194.511073][ T8103] netlink: 28 bytes leftover after parsing attributes in process `syz.1.746'. [ 194.535134][ T10] usb 4-1: USB disconnect, device number 52 [ 194.581379][ T8106] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 195.418396][ T5879] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 195.570524][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.585108][ T5879] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 195.594889][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.617273][ T5879] usb 4-1: config 0 descriptor?? [ 195.880794][ T8141] overlayfs: failed to clone upperpath [ 195.943423][ T8148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.954443][ T8148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.035798][ T5879] keytouch 0003:0926:3333.0026: fixing up Keytouch IEC report descriptor [ 196.051805][ T5879] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0026/input/input55 [ 196.135905][ T5879] keytouch 0003:0926:3333.0026: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 196.168521][ T24] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 196.328460][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 196.335240][ T24] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 196.343803][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.354029][ T24] usb 3-1: config 0 has no interface number 0 [ 196.360490][ T24] usb 3-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 196.374995][ T24] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 196.384226][ T24] usb 3-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 196.392762][ T24] usb 3-1: Product: syz [ 196.399602][ T24] usb 3-1: config 0 descriptor?? [ 196.408472][ T24] iowarrior 3-1:0.8: no interrupt-in endpoint found [ 196.531564][ T24] usb 4-1: USB disconnect, device number 53 [ 196.611294][ T5879] usb 3-1: USB disconnect, device number 55 [ 197.490751][ T8172] 9p: Unknown access argument : -22 [ 197.634902][ T8177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.646755][ T8177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.888481][ T5879] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 198.038377][ T5879] usb 3-1: Using ep0 maxpacket: 8 [ 198.038377][ T10] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 198.053074][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 198.063343][ T5879] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 198.075329][ T5879] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 198.084477][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.092561][ T5879] usb 3-1: Product: syz [ 198.096719][ T5879] usb 3-1: Manufacturer: syz [ 198.101374][ T5879] usb 3-1: SerialNumber: syz [ 198.107878][ T5879] usb 3-1: config 0 descriptor?? [ 198.200106][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.211248][ T10] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 198.220541][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.233669][ T10] usb 4-1: config 0 descriptor?? [ 198.360674][ T8192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.534255][ T5879] usb 3-1: USB disconnect, device number 56 [ 198.669667][ T10] keytouch 0003:0926:3333.0027: fixing up Keytouch IEC report descriptor [ 198.681926][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0027/input/input56 [ 198.776029][ T10] keytouch 0003:0926:3333.0027: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 199.174595][ T10] usb 4-1: USB disconnect, device number 54 [ 199.384822][ T5149] Bluetooth: hci3: Malformed LE Event: 0x0b [ 199.407112][ T8211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.424321][ T8211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.455339][ T8211] netlink: 8 bytes leftover after parsing attributes in process `syz.4.784'. [ 199.678512][ T10] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 199.718053][ T8220] comedi comedi3: pcl812: I/O port conflict (0x8001,16) [ 199.751654][ T8222] netlink: 12 bytes leftover after parsing attributes in process `syz.3.789'. [ 199.761629][ T8222] netlink: 12 bytes leftover after parsing attributes in process `syz.3.789'. [ 199.828398][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 199.835863][ T10] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 199.847751][ T10] usb 3-1: config 0 has no interface number 0 [ 199.855457][ T10] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 199.869904][ T10] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 199.880157][ T10] usb 3-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 199.891964][ T10] usb 3-1: Product: syz [ 199.926781][ T10] usb 3-1: config 0 descriptor?? [ 199.944912][ T10] iowarrior 3-1:0.8: no interrupt-in endpoint found [ 200.053352][ T8230] Invalid source name [ 200.146307][ T5893] usb 3-1: USB disconnect, device number 57 [ 200.188695][ T10] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 200.349919][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.359824][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 200.372777][ T10] usb 4-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 200.381857][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.391701][ T10] usb 4-1: config 0 descriptor?? [ 200.806477][ T10] elecom 0003:056E:00FC.0028: unknown global tag 0xc [ 200.813310][ T10] elecom 0003:056E:00FC.0028: item 0 0 1 12 parsing failed [ 200.821148][ T10] elecom 0003:056E:00FC.0028: probe with driver elecom failed with error -22 [ 200.963458][ T8242] FAULT_INJECTION: forcing a failure. [ 200.963458][ T8242] name failslab, interval 1, probability 0, space 0, times 0 [ 200.977291][ T937] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 200.985805][ T8242] CPU: 1 UID: 0 PID: 8242 Comm: syz.4.796 Tainted: G L syzkaller #0 PREEMPT(full) [ 200.985822][ T8242] Tainted: [L]=SOFTLOCKUP [ 200.985825][ T8242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 200.985832][ T8242] Call Trace: [ 200.985837][ T8242] [ 200.985841][ T8242] dump_stack_lvl+0xe8/0x150 [ 200.985864][ T8242] should_fail_ex+0x412/0x560 [ 200.985881][ T8242] should_failslab+0xa8/0x100 [ 200.985899][ T8242] __kmalloc_noprof+0xe8/0x760 [ 200.985909][ T8242] ? ovl_alloc_entry+0x22/0x80 [ 200.985924][ T8242] ovl_alloc_entry+0x22/0x80 [ 200.985935][ T8242] ovl_lookup+0x147b/0x1c80 [ 200.985961][ T8242] ? __pfx_ovl_lookup+0x10/0x10 [ 200.985974][ T8242] ? __pfx_d_alloc_parallel+0x10/0x10 [ 200.985984][ T8242] ? d_lookup+0x1f/0xa0 [ 200.985994][ T8242] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 200.986012][ T8242] path_openat+0x11ac/0x3860 [ 200.986029][ T8242] ? __pfx_stack_trace_save+0x10/0x10 [ 200.986047][ T8242] ? __pfx_path_openat+0x10/0x10 [ 200.986055][ T8242] ? __x64_sys_open+0x11e/0x150 [ 200.986072][ T8242] ? __lock_acquire+0x6b5/0x2cf0 [ 200.986088][ T8242] do_file_open+0x23e/0x4a0 [ 200.986100][ T8242] ? __pfx_do_file_open+0x10/0x10 [ 200.986120][ T8242] ? _raw_spin_unlock+0x28/0x50 [ 200.986133][ T8242] ? alloc_fd+0x64b/0x6c0 [ 200.986151][ T8242] do_sys_openat2+0x113/0x200 [ 200.986165][ T8242] ? __pfx_do_sys_openat2+0x10/0x10 [ 200.986178][ T8242] ? ksys_write+0x242/0x270 [ 200.986188][ T8242] ? __pfx_ksys_write+0x10/0x10 [ 200.986200][ T8242] __x64_sys_open+0x11e/0x150 [ 200.986214][ T8242] do_syscall_64+0x14d/0xf80 [ 200.986223][ T8242] ? trace_irq_disable+0x3b/0x150 [ 200.986236][ T8242] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.986245][ T8242] ? clear_bhb_loop+0x40/0x90 [ 200.986257][ T8242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.986266][ T8242] RIP: 0033:0x7f554879bf79 [ 200.986276][ T8242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.986284][ T8242] RSP: 002b:00007f5549658028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 200.986295][ T8242] RAX: ffffffffffffffda RBX: 00007f5548a15fa0 RCX: 00007f554879bf79 [ 200.986302][ T8242] RDX: 0000000000000001 RSI: 0000000000020000 RDI: 0000200000000200 [ 200.986308][ T8242] RBP: 00007f5549658090 R08: 0000000000000000 R09: 0000000000000000 [ 200.986314][ T8242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 200.986319][ T8242] R13: 00007f5548a16038 R14: 00007f5548a15fa0 R15: 00007ffcdfe77068 [ 200.986333][ T8242] [ 201.329995][ T937] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.340279][ T937] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 201.350917][ T937] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 201.361443][ T937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 201.369876][ T937] usb 3-1: SerialNumber: syz [ 201.574071][ T8253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.588046][ T937] usb 3-1: 0:2 : does not exist [ 201.596420][ T8253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.627803][ T937] usb 3-1: USB disconnect, device number 58 [ 201.652995][ T5941] udevd[5941]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 202.183466][ T8259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.192327][ T8259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.388465][ T24] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 202.538364][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 202.546261][ T24] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 202.554648][ T24] usb 3-1: config 0 has no interface number 0 [ 202.561113][ T24] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 202.573064][ T24] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 202.583228][ T24] usb 3-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 202.591486][ T24] usb 3-1: Product: syz [ 202.597555][ T24] usb 3-1: config 0 descriptor?? [ 202.604618][ T24] iowarrior 3-1:0.8: no interrupt-in endpoint found [ 202.808027][ T24] usb 3-1: USB disconnect, device number 59 [ 202.831709][ T10] usb 4-1: USB disconnect, device number 55 [ 202.900541][ T8269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.933872][ T8269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.232480][ T29] audit: type=1326 audit(1771296049.723:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8278 comm="syz.1.812" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f957eb9bf79 code=0x0 [ 203.298418][ T10] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 203.470113][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.486826][ T10] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 203.497271][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.505309][ T8284] netlink: 12 bytes leftover after parsing attributes in process `syz.4.814'. [ 203.508203][ T29] audit: type=1326 audit(1771296049.993:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8283 comm="syz.4.814" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f554879bf79 code=0x0 [ 203.519089][ T10] usb 4-1: config 0 descriptor?? [ 203.955927][ T10] keytouch 0003:0926:3333.0029: fixing up Keytouch IEC report descriptor [ 203.972846][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0029/input/input57 [ 204.068848][ T10] keytouch 0003:0926:3333.0029: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 204.383265][ T8301] FAULT_INJECTION: forcing a failure. [ 204.383265][ T8301] name failslab, interval 1, probability 0, space 0, times 0 [ 204.396974][ T8301] CPU: 1 UID: 0 PID: 8301 Comm: syz.4.820 Tainted: G L syzkaller #0 PREEMPT(full) [ 204.396999][ T8301] Tainted: [L]=SOFTLOCKUP [ 204.397005][ T8301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 204.397014][ T8301] Call Trace: [ 204.397021][ T8301] [ 204.397027][ T8301] dump_stack_lvl+0xe8/0x150 [ 204.397054][ T8301] should_fail_ex+0x412/0x560 [ 204.397080][ T8301] should_failslab+0xa8/0x100 [ 204.397100][ T8301] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 204.397118][ T8301] ? __alloc_skb+0x1d0/0x7d0 [ 204.397135][ T8301] ? __local_bh_enable_ip+0xd0/0x130 [ 204.397159][ T8301] __alloc_skb+0x1d0/0x7d0 [ 204.397182][ T8301] hci_mgmt_cmd+0x1c5/0xfa0 [ 204.397203][ T8301] ? hci_sock_sendmsg+0x4d9/0xf40 [ 204.397223][ T8301] ? __local_bh_enable_ip+0xd0/0x130 [ 204.397240][ T8301] hci_sock_sendmsg+0x6dd/0xf40 [ 204.397264][ T8301] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 204.397288][ T8301] ? __pfx_aa_file_perm+0x10/0x10 [ 204.397308][ T8301] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 204.397327][ T8301] sock_sendmsg_nosec+0x18f/0x1d0 [ 204.397342][ T8301] sock_write_iter+0x302/0x410 [ 204.397353][ T8301] ? __pfx_sock_write_iter+0x10/0x10 [ 204.397368][ T8301] ? bpf_lsm_file_permission+0x9/0x20 [ 204.397380][ T8301] ? security_file_permission+0x75/0x260 [ 204.397400][ T8301] vfs_write+0x61d/0xb90 [ 204.397425][ T8301] ? __pfx_vfs_write+0x10/0x10 [ 204.397451][ T8301] ? __fget_files+0x2a/0x420 [ 204.397480][ T8301] ksys_write+0x150/0x270 [ 204.397499][ T8301] ? __pfx_ksys_write+0x10/0x10 [ 204.397514][ T8301] do_syscall_64+0x14d/0xf80 [ 204.397523][ T8301] ? trace_irq_disable+0x3b/0x150 [ 204.397537][ T8301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.397550][ T8301] ? clear_bhb_loop+0x40/0x90 [ 204.397570][ T8301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.397586][ T8301] RIP: 0033:0x7f554879bf79 [ 204.397602][ T8301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.397615][ T8301] RSP: 002b:00007f5549658028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 204.397633][ T8301] RAX: ffffffffffffffda RBX: 00007f5548a15fa0 RCX: 00007f554879bf79 [ 204.397643][ T8301] RDX: 0000000000000006 RSI: 0000200000000000 RDI: 0000000000000004 [ 204.397652][ T8301] RBP: 00007f5549658090 R08: 0000000000000000 R09: 0000000000000000 [ 204.397662][ T8301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.397671][ T8301] R13: 00007f5548a16038 R14: 00007f5548a15fa0 R15: 00007ffcdfe77068 [ 204.397698][ T8301] [ 204.506937][ T10] usb 4-1: USB disconnect, device number 56 [ 204.639045][ T24] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 204.693531][ T8303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.710856][ T8303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.818509][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 204.829232][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 204.850779][ T24] usb 3-1: too many configurations: 167, using maximum allowed: 8 [ 204.867301][ T24] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 204.877777][ T24] usb 3-1: can't read configurations, error -71 [ 205.291297][ T8314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.825'. [ 205.485302][ T8321] overlayfs: failed to clone upperpath [ 205.948433][ T24] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 206.100387][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.120287][ T24] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 206.131397][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.149586][ T24] usb 4-1: config 0 descriptor?? [ 206.173961][ T8338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.182886][ T8338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.422134][ T8345] syz.2.835: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 206.437878][ T8345] CPU: 0 UID: 0 PID: 8345 Comm: syz.2.835 Tainted: G L syzkaller #0 PREEMPT(full) [ 206.437906][ T8345] Tainted: [L]=SOFTLOCKUP [ 206.437912][ T8345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 206.437923][ T8345] Call Trace: [ 206.437930][ T8345] [ 206.437938][ T8345] dump_stack_lvl+0xe8/0x150 [ 206.437966][ T8345] warn_alloc+0x249/0x340 [ 206.437987][ T8345] ? stack_trace_save+0xa9/0x100 [ 206.438008][ T8345] ? __pfx_warn_alloc+0x10/0x10 [ 206.438033][ T8345] ? kasan_save_track+0x4f/0x80 [ 206.438049][ T8345] ? kasan_save_track+0x3e/0x80 [ 206.438064][ T8345] ? __kasan_kmalloc+0x93/0xb0 [ 206.438080][ T8345] ? __kmalloc_cache_noprof+0x31c/0x660 [ 206.438096][ T8345] ? xskq_create+0x56/0x170 [ 206.438115][ T8345] ? xsk_setsockopt+0x54c/0x990 [ 206.438133][ T8345] ? do_sock_setsockopt+0x17c/0x1b0 [ 206.438153][ T8345] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 206.438172][ T8345] ? do_syscall_64+0x14d/0xf80 [ 206.438190][ T8345] __vmalloc_node_range_noprof+0x132/0x1730 [ 206.438235][ T8345] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 206.438258][ T8345] ? __kasan_kmalloc+0x93/0xb0 [ 206.438315][ T8345] vmalloc_user_noprof+0xad/0xe0 [ 206.438331][ T8345] ? xskq_create+0xbf/0x170 [ 206.438351][ T8345] xskq_create+0xbf/0x170 [ 206.438373][ T8345] xsk_init_queue+0x8a/0xe0 [ 206.438395][ T8345] xsk_setsockopt+0x54c/0x990 [ 206.438417][ T8345] ? __pfx_xsk_setsockopt+0x10/0x10 [ 206.438437][ T8345] ? __pfx_aa_sk_perm+0x10/0x10 [ 206.438460][ T8345] ? aa_sock_opt_perm+0xff/0x1a0 [ 206.438485][ T8345] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 206.438502][ T8345] ? __pfx_xsk_setsockopt+0x10/0x10 [ 206.438523][ T8345] do_sock_setsockopt+0x17c/0x1b0 [ 206.438547][ T8345] __x64_sys_setsockopt+0x13d/0x1b0 [ 206.438570][ T8345] do_syscall_64+0x14d/0xf80 [ 206.438584][ T8345] ? trace_irq_disable+0x3b/0x150 [ 206.438605][ T8345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.438621][ T8345] ? clear_bhb_loop+0x40/0x90 [ 206.438641][ T8345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.438657][ T8345] RIP: 0033:0x7f17f999bf79 [ 206.438674][ T8345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.438688][ T8345] RSP: 002b:00007f17fa8a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 206.438706][ T8345] RAX: ffffffffffffffda RBX: 00007f17f9c16090 RCX: 00007f17f999bf79 [ 206.438718][ T8345] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 206.438727][ T8345] RBP: 00007f17f9a327e0 R08: 0000000000000004 R09: 0000000000000000 [ 206.438738][ T8345] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.438749][ T8345] R13: 00007f17f9c16128 R14: 00007f17f9c16090 R15: 00007ffcf928d4e8 [ 206.438777][ T8345] [ 206.718231][ T8345] Mem-Info: [ 206.727525][ T24] keytouch 0003:0926:3333.002A: fixing up Keytouch IEC report descriptor [ 206.739239][ T8345] active_anon:14341 inactive_anon:1 isolated_anon:0 [ 206.739239][ T8345] active_file:14754 inactive_file:40016 isolated_file:0 [ 206.739239][ T8345] unevictable:768 dirty:51 writeback:0 [ 206.739239][ T8345] slab_reclaimable:10940 slab_unreclaimable:92293 [ 206.739239][ T8345] mapped:26015 shmem:1369 pagetables:1523 [ 206.739239][ T8345] sec_pagetables:0 bounce:0 [ 206.739239][ T8345] kernel_misc_reclaimable:0 [ 206.739239][ T8345] free:1322740 free_pcp:7449 free_cma:0 [ 206.758595][ T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.002A/input/input58 [ 206.785798][ T8345] Node 0 active_anon:57364kB inactive_anon:4kB active_file:58968kB inactive_file:159860kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:104012kB dirty:188kB writeback:0kB shmem:3940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11856kB pagetables:5944kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 206.801627][ T8348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.835'. [ 206.828441][ T8345] Node 1 active_anon:0kB inactive_anon:0kB active_file:48kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 206.828496][ T8345] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 206.828543][ T8345] lowmem_reserve[]: 0 2481 2482 2482 2482 [ 206.828582][ T8345] Node 0 DMA32 free:1332056kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB free_highatomic:0KB active_anon:57420kB inactive_anon:4kB active_file:58968kB inactive_file:159860kB unevictable:1536kB writepending:172kB zspages:0kB present:3129332kB managed:2540552kB mlocked:0kB bounce:0kB free_pcp:28172kB local_pcp:19228kB free_cma:0kB [ 206.828635][ T8345] lowmem_reserve[]: 0 0 1 1 1 [ 206.828670][ T8345] Node 0 Normal free:4kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1676kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB [ 206.973494][ T8345] lowmem_reserve[]: 0 0 0 0 0 [ 206.973544][ T8345] Node 1 Normal free:3943476kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:48kB inactive_file:204kB unevictable:1536kB writepending:16kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:1492kB local_pcp:1492kB free_cma:0kB [ 206.973595][ T8345] lowmem_reserve[]: 0 0 0 0 0 [ 206.973631][ T8345] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 206.973746][ T8345] Node 0 DMA32: 2100*4kB (UM) 2171*8kB (UME) 765*16kB (UME) 116*32kB (UME) 19*64kB (UME) 45*128kB (UME) 75*256kB (UM) 23*512kB (UME) 17*1024kB (UM) 7*2048kB (UM) 297*4096kB (M) = 1327928kB [ 206.973906][ T8345] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 206.974028][ T8345] Node 1 Normal: 3*4kB (UM) 19*8kB (UME) 17*16kB (UE) 12*32kB (UME) 14*64kB (UME) 7*128kB (UM) 8*256kB (UME) 7*512kB (UME) 3*1024kB (UM) 2*2048kB (ME) 959*4096kB (M) = 3943476kB [ 206.974211][ T8345] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 206.974228][ T8345] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 206.974242][ T8345] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 206.974256][ T8345] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 206.974271][ T8345] 56136 total pagecache pages [ 206.974279][ T8345] 1 pages in swap cache [ 206.974286][ T8345] Free swap = 124992kB [ 206.974294][ T8345] Total swap = 124996kB [ 206.974302][ T8345] 2097051 pages RAM [ 206.974307][ T8345] 0 pages HighMem/MovableOnly [ 206.974314][ T8345] 429879 pages reserved [ 206.974321][ T8345] 0 pages cma reserved [ 207.109824][ T24] keytouch 0003:0926:3333.002A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 207.304080][ T8354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.316149][ T8354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.328612][ T24] usb 4-1: USB disconnect, device number 57 [ 207.891280][ T8365] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 208.288408][ T24] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 208.438398][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 208.445109][ T24] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 208.453582][ T24] usb 3-1: config 0 has no interface number 0 [ 208.460000][ T24] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 208.471157][ T24] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 208.483572][ T24] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 208.494231][ T24] usb 3-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 208.502461][ T24] usb 3-1: Product: syz [ 208.508612][ T24] usb 3-1: config 0 descriptor?? [ 208.516712][ T24] iowarrior 3-1:0.8: IOWarrior product=0x1512, serial= interface=8 now attached to iowarrior0 [ 208.717390][ T8372] iowarrior 3-1:0.8: Error -90 while submitting URB [ 208.725152][ T24] usb 3-1: USB disconnect, device number 62 [ 209.208419][ T9] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 209.370497][ T9] usb 4-1: config 3 has an invalid interface number: 145 but max is 0 [ 209.379589][ T9] usb 4-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 209.388365][ T9] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 209.398568][ T9] usb 4-1: config 3 has no interface number 0 [ 209.404665][ T9] usb 4-1: config 3 interface 145 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 209.416137][ T9] usb 4-1: config 3 interface 145 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 209.431019][ T9] usb 4-1: New USB device found, idVendor=8086, idProduct=0b5c, bcdDevice=23.13 [ 209.440213][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.448207][ T9] usb 4-1: Product: syz [ 209.452464][ T9] usb 4-1: Manufacturer: syz [ 209.457054][ T9] usb 4-1: SerialNumber: syz [ 209.467881][ T9] uvcvideo 4-1:3.145: Found UVC 0.00 device syz (8086:0b5c) [ 209.475245][ T9] uvcvideo 4-1:3.145: No valid video chain found. [ 209.670326][ T24] usb 4-1: USB disconnect, device number 58 [ 210.388515][ T9] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 210.540338][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 210.551882][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.562057][ T9] usb 3-1: New USB device found, idVendor=1e71, idProduct=2011, bcdDevice= 0.00 [ 210.571304][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.574975][ T8401] No control pipe specified [ 210.582782][ T9] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 210.593119][ T9] usb 3-1: no configuration chosen from 1 choice [ 211.298554][ T24] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 211.390425][ T8409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.401292][ T8409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.458848][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 211.466556][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 211.476021][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.488431][ T24] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 211.497524][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.505576][ T24] usb 4-1: Product: syz [ 211.509768][ T24] usb 4-1: Manufacturer: syz [ 211.514343][ T24] usb 4-1: SerialNumber: syz [ 211.647842][ T8411] fuse: Unknown parameter 'wgoup_id' [ 211.734619][ T8405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.743708][ T8405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.762222][ T24] usb 4-1: USB disconnect, device number 59 [ 212.981140][ T8436] fuse: Bad value for 'group_id' [ 212.986125][ T8436] fuse: Bad value for 'group_id' [ 213.029284][ T8438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.042333][ T8438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.108019][ T8442] netlink: 'syz.1.874': attribute type 1 has an invalid length. [ 213.174777][ T9] usb 3-1: USB disconnect, device number 63 [ 213.558446][ T9] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 213.713997][ T9] usb 3-1: config 0 has an invalid interface number: 43 but max is 0 [ 213.724332][ T9] usb 3-1: config 0 has no interface number 0 [ 213.734432][ T9] usb 3-1: config 0 interface 43 altsetting 0 has an endpoint descriptor with address 0x97, changing to 0x87 [ 213.752348][ T9] usb 3-1: config 0 interface 43 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 213.765290][ T9] usb 3-1: config 0 interface 43 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 213.779351][ T8457] binder: 8452:8457 ioctl c0306201 0 returned -14 [ 213.789521][ T9] usb 3-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=ed.9e [ 213.801428][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.824926][ T9] usb 3-1: config 0 descriptor?? [ 213.834969][ T9] HFC-S_USB 3-1:0.43: probe with driver HFC-S_USB failed with error -5 [ 214.033123][ T9] usb 3-1: USB disconnect, device number 64 [ 214.378498][ T5879] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 214.511072][ T5879] usb 4-1: device descriptor read/64, error -71 [ 214.591554][ T8474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.883'. [ 214.591571][ T8470] hma(sha224): entered promiscuous mode [ 214.698560][ T8479] overlay: Unknown parameter 'fsname' [ 214.758818][ T5879] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 214.888438][ T5879] usb 4-1: device descriptor read/64, error -71 [ 214.998751][ T5879] usb usb4-port1: attempt power cycle [ 215.338428][ T5879] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 215.359128][ T5879] usb 4-1: device descriptor read/8, error -71 [ 215.540981][ T8484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.550469][ T8484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.599324][ T5879] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 215.618779][ T5879] usb 4-1: device descriptor read/8, error -71 [ 215.728701][ T5879] usb usb4-port1: unable to enumerate USB device [ 215.738428][ T24] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 215.888485][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 215.897183][ T24] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 215.906493][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.914536][ T24] usb 3-1: Product: syz [ 215.918894][ T24] usb 3-1: Manufacturer: syz [ 215.923500][ T24] usb 3-1: SerialNumber: syz [ 215.931833][ T24] usb 3-1: config 0 descriptor?? [ 217.024206][ T8491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.034424][ T8491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.550727][ T24] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 217.621162][ T8497] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 217.637534][ T8499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.648257][ T8499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.730496][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.742155][ T24] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 217.751307][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.761230][ T24] usb 4-1: config 0 descriptor?? [ 217.975054][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 217.981132][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 217.991118][ T24] usb 4-1: USB disconnect, device number 64 [ 218.196134][ T8505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.209758][ T8505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.428412][ T10] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 218.518814][ T9] usb 3-1: USB disconnect, device number 65 [ 218.555382][ T8507] FAULT_INJECTION: forcing a failure. [ 218.555382][ T8507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.575516][ T8507] CPU: 1 UID: 0 PID: 8507 Comm: syz.2.898 Tainted: G L syzkaller #0 PREEMPT(full) [ 218.575542][ T8507] Tainted: [L]=SOFTLOCKUP [ 218.575548][ T8507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 218.575558][ T8507] Call Trace: [ 218.575564][ T8507] [ 218.575571][ T8507] dump_stack_lvl+0xe8/0x150 [ 218.575599][ T8507] should_fail_ex+0x412/0x560 [ 218.575625][ T8507] _copy_from_iter+0x1d3/0x1670 [ 218.575649][ T8507] ? rcu_is_watching+0x15/0xb0 [ 218.575675][ T8507] ? kmem_cache_alloc_node_noprof+0x3ce/0x690 [ 218.575693][ T8507] ? __pfx__copy_from_iter+0x10/0x10 [ 218.575717][ T8507] ? sk_rmem_schedule+0xef/0x140 [ 218.575737][ T8507] ? tcp_try_rmem_schedule+0xe3/0x1810 [ 218.575761][ T8507] skb_copy_datagram_from_iter+0xf5/0x710 [ 218.575788][ T8507] ? skb_put+0x11b/0x210 [ 218.575811][ T8507] tcp_send_rcvq+0x277/0x520 [ 218.575835][ T8507] ? __pfx_tcp_send_rcvq+0x10/0x10 [ 218.575866][ T8507] tcp_sendmsg_locked+0x4d24/0x5490 [ 218.575886][ T8507] ? tcp_sendmsg_locked+0x351/0x5490 [ 218.575907][ T8507] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 218.575927][ T8507] ? __lock_acquire+0x6b5/0x2cf0 [ 218.575953][ T8507] ? __lock_acquire+0x6b5/0x2cf0 [ 218.575976][ T8507] ? __lock_acquire+0x6b5/0x2cf0 [ 218.576009][ T8507] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 218.576033][ T8507] ? tcp_sendmsg+0x21/0x50 [ 218.576050][ T8507] ? __local_bh_enable_ip+0xd0/0x130 [ 218.576073][ T8507] tcp_sendmsg+0x2f/0x50 [ 218.576089][ T8507] sock_sendmsg_nosec+0x8e/0x1d0 [ 218.576110][ T8507] __sys_sendto+0x3ff/0x590 [ 218.576132][ T8507] ? __pfx___sys_sendto+0x10/0x10 [ 218.576173][ T8507] ? exc_page_fault+0x6a/0xc0 [ 218.576199][ T8507] ? do_user_addr_fault+0xc6f/0x1340 [ 218.576223][ T8507] __x64_sys_sendto+0xde/0x100 [ 218.576252][ T8507] do_syscall_64+0x14d/0xf80 [ 218.576266][ T8507] ? trace_irq_disable+0x3b/0x150 [ 218.576286][ T8507] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.576302][ T8507] ? clear_bhb_loop+0x40/0x90 [ 218.576321][ T8507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.576337][ T8507] RIP: 0033:0x7f17f995c84e [ 218.576353][ T8507] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 218.576367][ T8507] RSP: 002b:00007f17fa8c3e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 218.576384][ T8507] RAX: ffffffffffffffda RBX: 00007f17fa8c56c0 RCX: 00007f17f995c84e [ 218.576395][ T8507] RDX: 0000000000000020 RSI: 00007f17fa8c4000 RDI: 0000000000000004 [ 218.576406][ T8507] RBP: 0000000000000000 R08: 00007f17fa8c3f04 R09: 000000000000000c [ 218.576416][ T8507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 218.576425][ T8507] R13: 00007f17fa8c3f58 R14: 00007f17fa8c4000 R15: 0000000000000000 [ 218.576452][ T8507] [ 218.584208][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 218.866572][ T10] usb 4-1: config index 0 descriptor too short (expected 36, got 27) [ 218.874764][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 218.887966][ T10] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 218.898623][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.909202][ T10] usb 4-1: config 0 descriptor?? [ 218.920138][ T10] ldusb 4-1:0.0: Interrupt in endpoint not found [ 218.934657][ T10] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 219.066301][ T8519] binder: 8516:8519 ioctl c0306201 0 returned -14 [ 219.124820][ T24] usb 4-1: USB disconnect, device number 65 [ 219.158816][ T9] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 219.338354][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 219.370311][ T9] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 219.380975][ T9] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 219.390952][ T9] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 219.404201][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 219.473261][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4af, bcdDevice= 0.40 [ 219.482848][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.491394][ T9] usb 3-1: Product: syz [ 219.495603][ T9] usb 3-1: Manufacturer: syz [ 219.500326][ T9] usb 3-1: SerialNumber: syz [ 219.692633][ T8527] 9p: Bad value for 'rfdno' [ 219.721175][ T9] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 66 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4AF [ 219.856299][ T8534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.866054][ T8534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.919472][ T8511] x_tables: ip_tables: udp match: only valid for protocol 17 [ 219.930042][ T5879] usb 3-1: USB disconnect, device number 66 [ 219.942418][ T5879] usblp0: removed [ 219.968508][ T9] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 220.118367][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 220.125301][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 220.135129][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 220.146827][ T9] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 220.156010][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.164715][ T9] usb 4-1: Product: syz [ 220.168929][ T9] usb 4-1: Manufacturer: syz [ 220.173607][ T9] usb 4-1: SerialNumber: syz [ 220.180944][ T9] usb 4-1: config 0 descriptor?? [ 220.601571][ T5874] usb 4-1: USB disconnect, device number 66 [ 220.794170][ T8552] kvm: user requested TSC rate below hardware speed [ 221.445651][ T9] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 221.612713][ T8566] 9p: Unknown access argument : -22 [ 221.631559][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.643355][ T9] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 221.652839][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.675556][ T9] usb 4-1: config 0 descriptor?? [ 222.094795][ T9] keytouch 0003:0926:3333.002B: fixing up Keytouch IEC report descriptor [ 222.106751][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.002B/input/input59 [ 222.205378][ T9] keytouch 0003:0926:3333.002B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 222.596211][ T9] usb 4-1: USB disconnect, device number 67 [ 222.711877][ T8593] tmpfs: Unknown parameter '' [ 222.816908][ T8595] FAULT_INJECTION: forcing a failure. [ 222.816908][ T8595] name failslab, interval 1, probability 0, space 0, times 0 [ 222.831281][ T8595] CPU: 1 UID: 0 PID: 8595 Comm: syz.4.932 Tainted: G L syzkaller #0 PREEMPT(full) [ 222.831308][ T8595] Tainted: [L]=SOFTLOCKUP [ 222.831314][ T8595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 222.831323][ T8595] Call Trace: [ 222.831329][ T8595] [ 222.831336][ T8595] dump_stack_lvl+0xe8/0x150 [ 222.831363][ T8595] should_fail_ex+0x412/0x560 [ 222.831389][ T8595] should_failslab+0xa8/0x100 [ 222.831410][ T8595] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 222.831428][ T8595] ? __alloc_skb+0x1d0/0x7d0 [ 222.831446][ T8595] ? __local_bh_enable_ip+0xd0/0x130 [ 222.831469][ T8595] __alloc_skb+0x1d0/0x7d0 [ 222.831486][ T8595] ? netlink_ack_tlv_len+0x6c/0x210 [ 222.831505][ T8595] netlink_ack+0x146/0xa50 [ 222.831519][ T8595] ? __pfx_genl_rcv_msg+0x10/0x10 [ 222.831549][ T8595] ? __lock_acquire+0x6b5/0x2cf0 [ 222.831577][ T8595] netlink_rcv_skb+0x2b6/0x4b0 [ 222.831595][ T8595] ? __pfx_genl_rcv_msg+0x10/0x10 [ 222.831615][ T8595] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 222.831636][ T8595] ? down_read+0x272/0x2e0 [ 222.831645][ T8595] ? genl_rcv+0xd/0x40 [ 222.831658][ T8595] genl_rcv+0x28/0x40 [ 222.831671][ T8595] netlink_unicast+0x80f/0x9b0 [ 222.831685][ T8595] ? __pfx_netlink_unicast+0x10/0x10 [ 222.831695][ T8595] ? netlink_sendmsg+0x650/0xb40 [ 222.831705][ T8595] ? skb_put+0x11b/0x210 [ 222.831719][ T8595] netlink_sendmsg+0x813/0xb40 [ 222.831734][ T8595] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.831747][ T8595] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 222.831761][ T8595] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.831772][ T8595] sock_sendmsg_nosec+0x18f/0x1d0 [ 222.831784][ T8595] ____sys_sendmsg+0x589/0x8c0 [ 222.831804][ T8595] ? __pfx_____sys_sendmsg+0x10/0x10 [ 222.831821][ T8595] ? import_iovec+0x73/0xa0 [ 222.831834][ T8595] ___sys_sendmsg+0x2a5/0x360 [ 222.831850][ T8595] ? __pfx____sys_sendmsg+0x10/0x10 [ 222.831879][ T8595] ? __fget_files+0x2a/0x420 [ 222.831893][ T8595] ? __fget_files+0x3a0/0x420 [ 222.831910][ T8595] __x64_sys_sendmsg+0x1bd/0x2a0 [ 222.831925][ T8595] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 222.831942][ T8595] ? __pfx_ksys_write+0x10/0x10 [ 222.831958][ T8595] do_syscall_64+0x14d/0xf80 [ 222.831965][ T8595] ? trace_irq_disable+0x3b/0x150 [ 222.831979][ T8595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.831988][ T8595] ? clear_bhb_loop+0x40/0x90 [ 222.831999][ T8595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.832008][ T8595] RIP: 0033:0x7f554879bf79 [ 222.832019][ T8595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.832026][ T8595] RSP: 002b:00007f5549658028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.832037][ T8595] RAX: ffffffffffffffda RBX: 00007f5548a15fa0 RCX: 00007f554879bf79 [ 222.832044][ T8595] RDX: 0000000020004080 RSI: 00002000000011c0 RDI: 0000000000000004 [ 222.832050][ T8595] RBP: 00007f5549658090 R08: 0000000000000000 R09: 0000000000000000 [ 222.832055][ T8595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.832061][ T8595] R13: 00007f5548a16038 R14: 00007f5548a15fa0 R15: 00007ffcdfe77068 [ 222.832075][ T8595] [ 223.426909][ T8605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.436797][ T8605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.494847][ T8609] binder: 8600:8609 ioctl c0306201 0 returned -14 [ 223.668378][ T9] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 223.838776][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 223.850198][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 223.861168][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 223.873427][ T9] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 223.883736][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.892239][ T9] usb 4-1: Product: syz [ 223.910838][ T9] usb 4-1: Manufacturer: syz [ 223.920870][ T9] usb 4-1: SerialNumber: syz [ 223.940517][ T9] usb 4-1: config 0 descriptor?? [ 224.275354][ T8619] fuse: Unknown parameter 'rootmo$00000?040000' [ 224.431880][ T5874] usb 4-1: USB disconnect, device number 68 [ 224.708497][ T24] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 224.858417][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 224.866168][ T24] usb 3-1: config 10 has an invalid interface number: 7 but max is 3 [ 224.875171][ T24] usb 3-1: config 10 has an invalid interface number: 62 but max is 3 [ 224.884213][ T24] usb 3-1: config 10 has an invalid interface number: 84 but max is 3 [ 224.892531][ T24] usb 3-1: config 10 has an invalid interface number: 8 but max is 3 [ 224.908341][ T24] usb 3-1: config 10 has no interface number 0 [ 224.914518][ T24] usb 3-1: config 10 has no interface number 1 [ 224.928469][ T24] usb 3-1: config 10 has no interface number 2 [ 224.934674][ T24] usb 3-1: config 10 has no interface number 3 [ 224.957805][ T8626] netlink: 'syz.4.945': attribute type 2 has an invalid length. [ 224.968246][ T11] block nbd0: Possible stuck request ffff888027850000: control (read@0,1024B). Runtime 150 seconds [ 224.968380][ T24] usb 3-1: config 10 interface 7 altsetting 4 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 224.979820][ T11] block nbd0: Possible stuck request ffff888027850200: control (read@1024,1024B). Runtime 150 seconds [ 224.992951][ T24] usb 3-1: config 10 interface 7 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 225.008387][ T11] block nbd0: Possible stuck request ffff888027850400: control (read@2048,1024B). Runtime 150 seconds [ 225.015069][ T24] usb 3-1: config 10 interface 7 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 225.024432][ T11] block nbd0: Possible stuck request ffff888027850600: control (read@3072,1024B). Runtime 150 seconds [ 225.052951][ T8626] netlink: 'syz.4.945': attribute type 1 has an invalid length. [ 225.061267][ T8626] netlink: 'syz.4.945': attribute type 8 has an invalid length. [ 225.062013][ T24] usb 3-1: config 10 interface 7 altsetting 4 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 225.074010][ T8626] netlink: 44 bytes leftover after parsing attributes in process `syz.4.945'. [ 225.097074][ T24] usb 3-1: config 10 interface 7 altsetting 4 endpoint 0x1 has invalid wMaxPacketSize 0 [ 225.146387][ T24] usb 3-1: config 10 interface 62 altsetting 7 has a duplicate endpoint with address 0xE, skipping [ 225.158223][ T24] usb 3-1: config 10 interface 62 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 225.178064][ T8630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.187455][ T8630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.208579][ T24] usb 3-1: config 10 interface 62 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 225.219649][ T24] usb 3-1: config 10 interface 62 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 225.248448][ T24] usb 3-1: config 10 interface 62 altsetting 7 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 225.264539][ T24] usb 3-1: config 10 interface 62 altsetting 7 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 225.275921][ T24] usb 3-1: config 10 interface 62 altsetting 7 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 225.292493][ T24] usb 3-1: config 10 interface 62 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 225.307022][ T8634] 9p: Bad value for 'wfdno' [ 225.311757][ T24] usb 3-1: config 10 interface 62 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 225.336926][ T24] usb 3-1: config 10 interface 62 altsetting 7 has a duplicate endpoint with address 0xE, skipping [ 225.349545][ T24] usb 3-1: config 10 interface 62 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 225.365590][ T24] usb 3-1: config 10 interface 62 altsetting 7 has a duplicate endpoint with address 0x5, skipping [ 225.382515][ T24] usb 3-1: config 10 interface 84 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 225.393403][ T24] usb 3-1: config 10 interface 84 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 225.405292][ T24] usb 3-1: config 10 interface 84 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 225.416273][ T24] usb 3-1: config 10 interface 84 altsetting 5 bulk endpoint 0xF has invalid maxpacket 1023 [ 225.426417][ T24] usb 3-1: config 10 interface 84 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 225.437160][ T24] usb 3-1: config 10 interface 84 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 225.454673][ T8642] netlink: 'syz.1.952': attribute type 4 has an invalid length. [ 225.462506][ T8642] netlink: 17 bytes leftover after parsing attributes in process `syz.1.952'. [ 225.473916][ T24] usb 3-1: config 10 interface 84 altsetting 5 has a duplicate endpoint with address 0x5, skipping [ 225.486422][ T24] usb 3-1: config 10 interface 84 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 225.497670][ T24] usb 3-1: config 10 interface 8 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 225.511195][ T24] usb 3-1: config 10 interface 7 has no altsetting 0 [ 225.517974][ T24] usb 3-1: config 10 interface 62 has no altsetting 0 [ 225.526223][ T24] usb 3-1: config 10 interface 84 has no altsetting 0 [ 225.533166][ T24] usb 3-1: config 10 interface 8 has no altsetting 0 [ 225.542588][ T24] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=29.ad [ 225.552065][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.573056][ T8644] binder: 8637:8644 ioctl c0306201 0 returned -14 [ 225.586806][ T24] usb 3-1: Product: ᠌ [ 225.628613][ T24] usb 3-1: Manufacturer: 葔껖퇒뺗햋쪝片鮬횥ᆿ캷苹튦㴡컄韡➁뮶珛汭넂輲ꯨ掖铨姛侥禰ர⬈㨩郠䄩︯⇞䒩⟥癛ᒛ╆㣅仇갉挪ᑵ䋦엩ꍴ⪫䈻⤕㈗⭂銠飳亹犜廬ꨢ轙呙ꯜ꒢쪧샯顺蘮뽽䀁灖틇褵᯿憎ஈ⃳ⷴሬﭧ苋嶺尯礰煣ꇵ猥䲎텲䨅韜إﶟ㒡鷉忋Ѯ䔒඼᠏㼰 [ 225.681759][ T24] usb 3-1: SerialNumber: ఄ [ 225.844297][ T8648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.856113][ T8648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.952854][ T24] usb 3-1: USB disconnect, device number 67 [ 226.240363][ T30] INFO: task poweroff:5942 blocked for more than 143 seconds. [ 226.247950][ T30] Tainted: G L syzkaller #0 [ 226.255071][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 226.264072][ T30] task:poweroff state:D stack:23328 pid:5942 tgid:5942 ppid:5185 task_flags:0x400000 flags:0x00080000 [ 226.276369][ T30] Call Trace: [ 226.281274][ T30] [ 226.285657][ T30] __schedule+0x1585/0x5340 [ 226.290710][ T30] ? __pfx___schedule+0x10/0x10 [ 226.295958][ T30] ? schedule+0x90/0x360 [ 226.302988][ T30] schedule+0x164/0x360 [ 226.307239][ T30] schedule_preempt_disabled+0x13/0x30 [ 226.315300][ T30] __mutex_lock+0x7fe/0x1300 [ 226.320325][ T30] ? __mutex_lock+0x5ac/0x1300 [ 226.325238][ T30] ? sync_bdevs+0x27e/0x470 [ 226.330984][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 226.338839][ T30] ? iput+0x47f/0xe80 [ 226.342933][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 226.348149][ T30] sync_bdevs+0x27e/0x470 [ 226.353008][ T30] __ia32_sys_sync+0xc5/0x120 [ 226.360959][ T30] ? __pfx___ia32_sys_sync+0x10/0x10 [ 226.373803][ T30] ? do_syscall_64+0xa3/0xf80 [ 226.382835][ T30] do_syscall_64+0x14d/0xf80 [ 226.387463][ T30] ? trace_irq_disable+0x3b/0x150 [ 226.397407][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.408383][ T30] ? clear_bhb_loop+0x40/0x90 [ 226.413200][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.428487][ T30] RIP: 0033:0x7fecf43f9f37 [ 226.432943][ T30] RSP: 002b:00007fff7a666a48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 226.448359][ T30] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fecf43f9f37 [ 226.456408][ T30] RDX: ffffffffffffff88 RSI: 00007fecf4592e51 RDI: 00000000ffffff9c [ 226.464810][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 226.472835][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.480956][ T30] R13: 00007fff7a666ba8 R14: 00007fecf45dc000 R15: 0000562a26b93d98 [ 226.489061][ T30] [ 226.492181][ T30] [ 226.492181][ T30] Showing all locks held in the system: [ 226.499933][ T30] 1 lock held by khungtaskd/30: [ 226.504791][ T30] #0: ffffffff8e9602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 226.515124][ T30] 3 locks held by kworker/u8:5/88: [ 226.520516][ T30] #0: ffff8880b843ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb6/0x150 [ 226.548328][ T30] #1: ffff8880b8524588 (psi_seq){-.-.}-{0:0}, at: process_one_work+0x87c/0x1650 [ 226.557524][ T30] #2: ffffffff8e7ef3d0 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x12/0x20 [ 226.588345][ T30] 2 locks held by getty/5593: [ 226.593054][ T30] #0: ffff888035b830a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 226.604042][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 226.614756][ T30] 1 lock held by udevd/5929: [ 226.619384][ T30] #0: ffff8880273c3358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 226.628754][ T30] 1 lock held by udevd/5941: [ 226.633343][ T30] #0: ffff8880b843ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb6/0x150 [ 226.643345][ T30] 1 lock held by poweroff/5942: [ 226.648192][ T30] #0: ffff8880273c3358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x27e/0x470 [ 226.657623][ T30] [ 226.659976][ T30] ============================================= [ 226.659976][ T30] [ 226.668450][ T30] NMI backtrace for cpu 0 [ 226.668468][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 226.668489][ T30] Tainted: [L]=SOFTLOCKUP [ 226.668495][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 226.668504][ T30] Call Trace: [ 226.668511][ T30] [ 226.668517][ T30] dump_stack_lvl+0xe8/0x150 [ 226.668541][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 226.668559][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 226.668581][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 226.668602][ T30] sys_info+0x135/0x170 [ 226.668618][ T30] watchdog+0xfd9/0x1030 [ 226.668644][ T30] ? watchdog+0x21a/0x1030 [ 226.668672][ T30] kthread+0x388/0x470 [ 226.668687][ T30] ? __pfx_watchdog+0x10/0x10 [ 226.668706][ T30] ? __pfx_kthread+0x10/0x10 [ 226.668723][ T30] ret_from_fork+0x51e/0xb90 [ 226.668744][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 226.668761][ T30] ? __switch_to+0xc7d/0x1450 [ 226.668782][ T30] ? __pfx_kthread+0x10/0x10 [ 226.668799][ T30] ret_from_fork_asm+0x1a/0x30 [ 226.668833][ T30] [ 226.668839][ T30] Sending NMI from CPU 0 to CPUs 1: [ 226.784641][ C1] NMI backtrace for cpu 1 [ 226.784659][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 226.784680][ C1] Tainted: [L]=SOFTLOCKUP [ 226.784685][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 226.784695][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 226.784723][ C1] Code: 2e 72 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 8d 0e 00 fb f4 7c ea 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 226.784738][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242 [ 226.784752][ C1] RAX: 000000000034ed0b RBX: ffffffff819ae24d RCX: 0000000080000001 [ 226.784764][ C1] RDX: 0000000000000001 RSI: ffffffff8e014d0e RDI: ffffffff8c2a0b80 [ 226.784775][ C1] RBP: ffffc90000197f10 R08: ffff8880b853395b R09: 1ffff110170a672b [ 226.784786][ C1] R10: dffffc0000000000 R11: ffffed10170a672c R12: ffffffff9033c4b0 [ 226.784798][ C1] R13: 1ffff11003bd2000 R14: 0000000000000001 R15: 0000000000000001 [ 226.784808][ C1] FS: 0000000000000000(0000) GS:ffff888125102000(0000) knlGS:0000000000000000 [ 226.784821][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 226.784831][ C1] CR2: 00007f17f9be7198 CR3: 00000000348b4000 CR4: 00000000003526f0 [ 226.784846][ C1] Call Trace: [ 226.784853][ C1] [ 226.784859][ C1] default_idle+0x9/0x20 [ 226.784874][ C1] default_idle_call+0x72/0xb0 [ 226.784891][ C1] do_idle+0x1bd/0x500 [ 226.784912][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 226.784935][ C1] ? __pfx_do_idle+0x10/0x10 [ 226.784959][ C1] cpu_startup_entry+0x43/0x60 [ 226.784979][ C1] start_secondary+0x101/0x110 [ 226.784998][ C1] common_startup_64+0x13e/0x147 [ 226.785020][ C1] [ 226.958210][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 226.965055][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 226.975720][ T30] Tainted: [L]=SOFTLOCKUP [ 226.980052][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 226.990103][ T30] Call Trace: [ 226.993379][ T30] [ 226.996312][ T30] vpanic+0x56c/0xa60 [ 227.000296][ T30] ? __pfx___schedule+0x10/0x10 [ 227.005137][ T30] ? __pfx_vpanic+0x10/0x10 [ 227.009630][ T30] ? __pfx_console_unlock+0x10/0x10 [ 227.014826][ T30] panic+0xc5/0xd0 [ 227.018549][ T30] ? __pfx_panic+0x10/0x10 [ 227.023051][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 227.028435][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 227.034578][ T30] watchdog+0x1023/0x1030 [ 227.038919][ T30] ? watchdog+0x21a/0x1030 [ 227.043331][ T30] kthread+0x388/0x470 [ 227.047387][ T30] ? __pfx_watchdog+0x10/0x10 [ 227.052053][ T30] ? __pfx_kthread+0x10/0x10 [ 227.056628][ T30] ret_from_fork+0x51e/0xb90 [ 227.061208][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 227.066308][ T30] ? __switch_to+0xc7d/0x1450 [ 227.070974][ T30] ? __pfx_kthread+0x10/0x10 [ 227.075550][ T30] ret_from_fork_asm+0x1a/0x30 [ 227.080313][ T30] [ 227.083713][ T30] Kernel Offset: disabled [ 227.088022][ T30] Rebooting in 86400 seconds..