last executing test programs: 8.545048371s ago: executing program 0 (id=153): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x23, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) 7.0726143s ago: executing program 2 (id=159): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x44a02, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x15) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) syz_ublk_setup_io_uring(0x714c, &(0x7f0000000040)={0x0, 0x1a77, 0x1000, 0x0, 0x325}, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl(r0, 0xc0384707, &(0x7f0000000200)) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04221001000000000000890306e92824ff03072488cc9e7fb085cc4c49250e49a443e2982d085805f909bf70f0797be0ca77368abdda05dd13b157f848f8e7bd01e916a4f430d06a08fc465f46ef7a447596b3930073f727fadf992867a59498c8ac3062e6217e676c67e912a06558f944611549a644a2ff38106388cb8e5fede0b3fe176e35f7c947f727583ec56ace83888a5218c000"/164], 0x13) 6.879151706s ago: executing program 0 (id=160): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x14, 0x1, 0x3, "2742528909000000ce0198666a0084feea0be6b8a80052d763e61f9d13f019e3"}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x9, 0x4, 0x20fff}) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x6}]}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) socket(0x2b, 0x1, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r1, 0x100000000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) read$FUSE(r3, &(0x7f00000002c0)={0x2020}, 0x2020) 6.780749027s ago: executing program 2 (id=161): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000540)={0x20, 0xd, 0x3, "741f26"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 6.593774988s ago: executing program 0 (id=162): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)=ANY=[@ANYBLOB="200e02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)=ANY=[@ANYBLOB="001602"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 6.28918553s ago: executing program 1 (id=163): ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r2, 0x0, 0x0) 5.359314105s ago: executing program 3 (id=166): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000500), 0x1) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x20000010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000140)={0x2, 0x3, 0x0, 0x2, 0x4}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="87", 0x1, 0x40488a0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r0, r3, 0x80000) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000880)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_recovery\x00', 0x1, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) 5.346163881s ago: executing program 1 (id=167): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd4}}, 0x0) 5.252897941s ago: executing program 3 (id=168): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x23, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) 5.251502409s ago: executing program 1 (id=169): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000138)='\x00\x00\x00\x00\x00\x00\x00\x00create_thin', 0x13) ioctl(r0, 0xc138fd12, &(0x7f0000000000)="0400000000000000000000006001000038010000000000000000000000000000000000000000000000000000000000006d79706f") 5.143774242s ago: executing program 1 (id=170): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000002c0)={0x0, 'netdevsim0\x00'}) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_usb_connect$uac1(0x3, 0xba, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000200000020630712204000010203010902a80003060000950904000000010100000a2401d4003d000201020a240703060001de3fc509240602060103000407240401f347ec0924030205030205fc09240303060301060807240801810087090401000001020000090401010101020000072401f5f900000e2402010604b1020c47148017f30905010910"], 0x0) 5.138924065s ago: executing program 2 (id=171): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000500), 0x1) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x20000010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet6(r0, &(0x7f00000001c0)="1a", 0x1, 0x20044084, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000140)="87", 0x1, 0x20004000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000200)={0x0, 0x9, 0x1, "ae"}, 0x9) 5.004287946s ago: executing program 2 (id=172): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)=ANY=[@ANYBLOB="200e02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000200)={0x40, 0x9, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) 4.193825721s ago: executing program 3 (id=173): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000500), 0x1) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x20000010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet6(r0, &(0x7f00000001c0)="1a", 0x1, 0x20044084, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000140)="87", 0x1, 0x20004000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000200)={0x0, 0x9, 0x1, "ae"}, 0x9) (fail_nth: 2) 4.061006145s ago: executing program 3 (id=174): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) creat(&(0x7f0000000040)='./file0\x00', 0x81) mount$afs(&(0x7f00000008c0), &(0x7f0000000900)='./file0\x00', &(0x7f0000000940), 0x0, 0x0) r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000200000040f20c50620000010203010902240001010080fa09040000f007064600090581020002000000090502020002000000f1075782970f202f208c1d8165706cc4834a2185510da7f6dab8609c0cd19cb8003240ff879385542edc519ec36fdeb41741c0e53f7c3580698830cbc93c75ecc84486a9543e1419df601e34c9408f32b89932bccfccb0"], 0x0) (async) r2 = epoll_create1(0x80000) epoll_pwait(r2, &(0x7f0000000040)=[{}], 0x1, 0xfffffffd, 0x0, 0x0) (async) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x1, 0x5f) (async) syz_usb_ep_read(r1, 0x2, 0x1f, &(0x7f0000000080)=""/31) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x80}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) 3.860418404s ago: executing program 1 (id=175): ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000100), 0x0) 3.457124996s ago: executing program 0 (id=176): r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000500)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) ioctl$KVM_GET_TSC_KHZ_vm(r1, 0xaea3) r2 = openat$cgroup_devices(r1, &(0x7f0000000800)='devices.allow\x00', 0x2, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000140)={0xa, {0x9, 0x0, 0x200000000002, 0x8, 0x10001}}) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40003, 0x2) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r1, 0x2, &(0x7f0000000780)={0x0, 0x5}, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000000)={0x1f, 0x1, 0x0, "6906001022366ccee4ba5686b4f801fef4372f2c74f6024305f11fd3454ad23d", 0x32314d48}) syz_open_dev$ublk_chdev(&(0x7f0000002000), 0x0, 0x2) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r4, 0x10c, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) r5 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYRES8=r4, @ANYRES16=0x0, @ANYRES8=r0], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x18d1, 0x502d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x10, 0x10, 0x40, "", [{{0x9, 0x4, 0x0, 0xc0, 0x2, 0x3, 0x1, 0x5, 0x9, {0x9, 0x21, 0x5fa, 0x0, 0x1, {0x22, 0xc8b}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x33, 0x10, 0x40}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x3, 0x1, 0x7}}]}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x200, 0x5, 0x2, 0xc, 0x8, 0xf8}, 0x2f, &(0x7f0000000280)={0x5, 0xf, 0x2f, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x3, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x81, 0x8, 0xa1}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xb, 0x5, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0xe, 0xf, 0x5}, @wireless={0xb, 0x10, 0x1, 0x4, 0x18, 0x3, 0xf9, 0x1a, 0x9}]}, 0x5, [{0xea, &(0x7f00000002c0)=@string={0xea, 0x3, "81ec41a694e33a9707aa440a688a2a4ea5c2e1788df0e088a4a2e2cb33011b325d4d05316d913bcc27c6652949519dc033300265348270f231c652ef453b5d3f56ffca957383ec12ff637f9f4f98930bbe47775da1a16eb5493c272b3d227f289f9d7b5457fa77548fc3d525ff0708f4a10934d3cc3f380b9892bc8d98a15d1f313a86885a98c84d8fe93b80867e121364b20de689658eef9a37e510a97bd0965b1f5fbcfc2b23e0b1d22f05b87b02327a0b3b0d508c42916e89ad3a0521225a2ac39031298285a7b4e4c57e0eab5ddb3ec2775f89c4bac25642f6b355ce089699a3674c660c15d4"}}, {0xeb, &(0x7f0000000400)=@string={0xeb, 0x3, "bbb774625d834153535c2f589dbf11a35b128c91e3cb79d93c093ad03884b6ff2c6cb498e1a27fc6191d8a786400521892986e36e799af97cc852a668633ea955bdc8e2058bddf15a0f0bc6f2689fa9abfaade2fcbe5cfde81c65568afb848f5a9a9d3b645e6be2f078e72a6093847bb3c3816c480d1b3f02d5e5925ef1c4813ae82ef8ee3e1a33c373e5944c790b9d9e92a7a91804236d417bc413d55f9b76f67260cb385e1c76898b544a7b8f538a37f22a1d7573b91b644992cc96a91ba69a56212925bd7c5cc1675e231fa02ee7f8b5c001295338aeec71652a436f030fbe9eff498c1e010658e"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x804}}, {0x6b, &(0x7f0000000580)=@string={0x6b, 0x3, "279e04c091f82a1695dab28b86fd776e4dac10008e337aaa26eda00e3fc1204970231d6d2dfbe955a4e08bda9a3b125cf80360843aef34161cc6fc6ccff33e7643bc336a7a3bdf4f721a99585c4ab17d83d1b26a62a18db06b0dc769a36e8cae61b05dbf645335a637"}}, {0xb0, &(0x7f0000000600)=@string={0xb0, 0x3, "a8ca870c9463a48f7b62dcbd135529c7d5e3c44c55a3868c521241257a514d43b0456686bb87614a41e00de7fec7d1e77b14c9b54ddbe91311ce720a800b2dba022b87eaaec183a86a5787ae7303a7e9fdaac56563b250773beb84c8440a3795873b132e601ece983258b24e760691bdf88b258bb130d62b1cc78dca72f4d028ed869451a11bc906572d0021ea37f37ec89d460e26d248686afd56c7a025e7d43a7c67c78c5011a71a5eb8052f12"}}]}) syz_usb_control_io$hid(r6, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRESDEC=r0], 0x0}, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r7, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000100)=0x4) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r8, 0x6, 0x1, &(0x7f0000001b00)={0x4bcf, 0x7ff, 0x59, 0x3, 0x3, 0x7f, 0x2}, 0xc) r9 = socket(0x10, 0x3, 0x0) sendmsg(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="5c00000030000504010000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000400000000000000000100005800c00018008e40300e803000008000a0078563412", 0x5c}], 0x1}, 0x0) pwritev(r7, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) pwritev(r7, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c00000000400600000a0000010a0000020050005000000b0100000b01601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) syz_open_dev$ublk_chdev(&(0x7f00000007c0), 0x0, 0xa2400) 2.892361406s ago: executing program 1 (id=177): syz_usb_connect(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYBLOB="41884b22a8b07121efec5a75def0a6395038a90545b4b452f6983217cf6b904f2eb2d5365fbe0acc0324899db3d2555148fdf7496e3c3e6d58d067baa413d61be64491c7de81", @ANYRES32=0x0, @ANYRES32], 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000003c0)={'pcmmio\x00', [0x140, 0x2, 0x3, 0x0, 0x1, 0x10000, 0x7ffd, 0x6, 0x1007, 0xf, 0x4, 0x10, 0xf8, 0x8, 0x4ce, 0x9e9b, 0x101, 0x401, 0x9, 0x8, 0x4, 0x0, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x1000200, 0x0, 0x4]}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000004c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000500)={0x48, 0x2, r2}) ioctl(r0, 0x3b92, &(0x7f0000000580)="10") r3 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='gre0\x00', 0x10) syz_usb_connect$cdc_ncm(0x3, 0x71, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x2, 0x1, 0x90, 0xb0, 0x5, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "e14363"}, {0x5, 0x24, 0x0, 0x971}, {0xd, 0x24, 0xf, 0x1, 0xffffffeb, 0x3, 0x6}, {0x6, 0x24, 0x1a, 0x9, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x4, 0x3, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9, 0xf, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x49, 0x4, 0x9}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x7, 0x3, 0x6, 0x10, 0x4}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x5, [{0xe6, &(0x7f00000001c0)=@string={0xe6, 0x3, "fab4bbabf7276ad1508ee74a81db8043a9204d7f3c4054cc6650e873204b87c2c4c234559566ebac46a2b3f4156dc348b82a2e9880a228a1c6a9198d7437b5df84f6f63156a941189d0e2895c953dc751c9d3b7fffdbe50854576ebb9eb6d0e07d8ec34a1ae7843addb61a84a2bf58755fd354cab2e758c0ffa00ba1914232aaea5e916d96701c095e4901bb31e7234acf884e8db3f721da6eef6ef07c0b2896790d221834c0038eb27ddb8f86245414afbbb997fa3fe6efaf64e24fb2fcec99100bf531de83eaca4ce6c8be8ca6aec50c6c26bcc8802181f82ba48b6d546baffd5d06a5"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x407}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x41a}}, {0x62, &(0x7f0000000340)=@string={0x62, 0x3, "487966638ed59e933614248402b69918a89987f8ca71e57c3512cdce35fc26d3dcb3239a6c13a24c87004f996381855788fe5b19206700b94d2ba1f24958062c338151a28d18f9c4674e1d633ce4ea311f8018f4448eab7f8a4adc0b328a6b23"}}, {0xb5, &(0x7f00000003c0)=@string={0xb5, 0x3, "41cc834ae123615d74b8f184b9abfbd901d6f3cff16ea5bd9cb480bcb97b173f52840ea847447d72bc6bceb689e3f59a906d0ad37151a002cbc87091f104d44bb769d9a76b4641f9ac6993e99f0609350edcb1e66515b4f3407b0059ba96a456638bdc81417c98c6bab8bb4379a40490a746a8b7a15247e5123e7d7efbae1089e274ad8db5b2104c51087477b47db3cfe0c976f0a12a2ea5de66865f85e971035a2a5193aee5d8f8d9d0ee061a722801ab7f35"}}]}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0) 1.926404345s ago: executing program 2 (id=178): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a090400000000000000000200fffe0900010073797a30000000000900020073797a32000000008800048020000180070001006374000014000280080001400000001308000240000000012c0001800a0001006d617463680000001c00028008686173686c696d69740000003800018008000100647570002c00028008000240000000130800024000000003080002400000001108000240000000030800024000000011140000001100010000000000000000000700000a00"/220], 0xdc}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000890) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7a, 0x2) prctl$PR_SET_MM_MAP(0x49, 0xe, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x3, 0x2, 0x1, 0x0, 0x2}) r5 = syz_open_dev$mouse(&(0x7f0000000100), 0x5, 0x60001) ioctl$vim2m_VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f0000000200)=@fd={0x6, 0x1, 0x4, 0x3b333f66247d5e8c, 0x7, {0x0, 0xea60}, {0x4, 0x2, 0x8, 0x1, 0x6, 0x2, "0dee97b2"}, 0xa5e, 0x4, {}, 0x8, 0x0, r5}) r6 = ioctl$USERFAULTFD_IOC_NEW(r2, 0xaa00) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x16c}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000001080)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x2, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$sock_inet6_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000140)) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r8 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) ioprio_set$pid(0x1, 0x0, 0x6000) io_submit(r9, 0x1, &(0x7f0000000700)=[&(0x7f0000000100)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r8, 0x0, 0x0, 0xf, 0x0, 0x0, r8}]) r10 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x20001, 0x128) lseek(r10, 0x200, 0x1) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x81, 0x7, 0xf5, 0x7, 0x5, 0x2, 0x80, 0x3, 0x5, 0xaf, 0x8, 0x9, 0x10, 0x3, 0x4, 0x80}}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0xffff, 0x9, 0x3, 0x0, 0x81, 0x7, 0x2, 0x80000004000080, 0x0, 0x8, 0x6, 0x4, 0x800009, 0x1], 0x0, 0x3c4310}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1.567012181s ago: executing program 2 (id=179): rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1405, 0x1, 0x70bd2b, 0x25dfdbfd, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8}}]}, 0x50}}, 0x20004010) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000700)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @loopback}, r2, 0x3e8}}, 0x48) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000800)={0x4, 0x8, 0xfa00, {r2, 0x3e8}}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) futex(&(0x7f00000000c0)=0x1, 0x5, 0x2, &(0x7f0000000180), &(0x7f0000000380), 0x2) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r2}}, 0x120) r3 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x582, 0x25, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x3, 0x1, 0xf8, 0x10, 0x5, {0x8, 0xb, 0x2, 0x0, 0x1, 0x5, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xfffd, 0xa, 0x11, 0x47}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x0, 0xb, 0x7f}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x2, 0x4, 0xd8, {0x8, 0x25, 0x1, 0x2, 0x30, 0xcc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xd, 0x7, 0x0, {0x8, 0x25, 0x1, 0x1, 0xf, 0x4, 0x10}}}}}}}}]}}, 0x0) syz_usb_control_io$uac2(r3, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac2(r3, 0x0, 0x0) syz_usb_control_io$uac2(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 959.750871ms ago: executing program 3 (id=180): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl0\x00', r3, 0x29, 0x5, 0x4, 0x9, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x20, 0x700, 0x7, 0x31}}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x11c, r1, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x2d}, @ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x6}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x77}, @ETHTOOL_A_LINKINFO_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x6}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x9}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4081}, 0x0) bind$netlink(r4, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbfe, 0x2000000}, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x21, 0x4000ffc, 0x4a}, 0x2c) 921.179041ms ago: executing program 3 (id=181): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x23, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) 278.2307ms ago: executing program 0 (id=182): socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket(0x840000000002, 0x3, 0x100) socket$netlink(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) socket$key(0xf, 0x3, 0x2) pipe2(&(0x7f0000000580), 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r0, r1, &(0x7f0000000180)={0x0, 0x2, 0x0, 0xfffffffe, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x40, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x2800, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcf78, 0x20000, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3948, 0xa000, 0x1, 0x2b2}}], 0x1, 0x0, 0x0) 0s ago: executing program 0 (id=183): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (async) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000040)=""/83, 0x0, 0x1000}, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1d) (async) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000ac0)={0x0, &(0x7f0000000440)=[@nested_amd_vmload={0x182, 0x18, 0x3}, @nested_amd_vmload={0x182, 0x18}, @nested_amd_stgi={0x17e, 0x10}, @enable_nested={0x12c, 0x18}, @set_irq_handler={0xc8, 0x20, {0x51, 0x2}}, @in_dx={0x69, 0x20, {0xda1, 0x4}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @ro64=0x2400, 0xfff, 0xb, 0xc}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x50, 0x5, 0x7ff}}, @nested_load_syzos={0x136, 0x88, {0x2, 0x37, [@nested_amd_invlpga={0x17d, 0x20, {0x57000, 0x9}}, @nested_vmresume={0x130, 0x18, 0x1}, @enable_nested={0x12c, 0x18}, @nested_vmlaunch={0x12f, 0x18, 0x2}]}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @host_nat=0x6c0c, 0x9, 0x5, 0x1ce3}}, @nested_amd_clgi={0x17f, 0x10}, @nested_load_code={0x12e, 0x5d, {0x3, "c744240002000000c74424026c000000c7442406000000000f011c2447ab26440f01c966b8c8008ec836f342a72e4628b64fd50000f2470f1010400f00d50f05c4229d08cf"}}, @nested_amd_clgi={0x17f, 0x10}, @nested_load_syzos={0x136, 0x202, {0x3, 0x700000000000000, [@nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @guest64=0x280d, 0xa901, 0x4, 0xc2fa}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x6c760d28, 0x5d}}, @code={0xa, 0x73, {"dee9d0ebb9800000c00f3235000400000f30c42149daf10f8f8e45c0e266baf80cb86ed39d8fef66bafc0c66edf0312bc744240004000000c7442402111bb443c7442406000000000f011424b9b70a0000b89e7cf29fba000000000f30420fc77106"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @control_nat=0x6002, 0x8, 0x7, 0x9}}, @nested_amd_clgi={0x17f, 0x10}, @wrmsr={0x65, 0x20, {0x949, 0x11d521f}}, @uexit={0x0, 0x18, 0x1}, @nested_load_code={0x12e, 0x87, {0x3, "b9c40a0000b800000000ba0b0000b50f3048b80f000000000000000f23c00f21f835000005000f23f866baf80cb8c4c6c786ef66bafc0c66edf32e3645e6dac46105f1a220000000f344da9c18bfc1c502b9800000c00f3235000400000f300f013d040000003e640f34c441f1dd0e"}}]}}, @out_dx={0x6a, 0x28, {0xef9e, 0x5, 0x100000001}}, @wr_drn={0x68, 0x20, {0x2}}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @enable_nested={0x12c, 0x18}, @nested_amd_vmload={0x182, 0x18, 0x3}, @in_dx={0x69, 0x20, {0x656c, 0x2}}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0x98, 0x2, 0x3, 0x1}}, @nested_amd_invlpga={0x17d, 0x20, {0xe000, 0x3844}}, @in_dx={0x69, 0x20, {0xd1ba, 0x5}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_clgi={0x17f, 0x10}, @nested_vmresume={0x130, 0x18, 0x1}, @wrmsr={0x65, 0x20, {0x862, 0xa1}}, @rdmsr={0x66, 0x18, {0x3a3}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x101, 0x976c}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x11, 0x1, 0x0, 0x2}}], 0x657}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f000054b000/0x18000)=nil, &(0x7f0000000b80)=[@text64={0x40, &(0x7f0000000b00)="48b80b000000000000000f23d00f21f835000000090f23f8b805000000b9903100000f01c18fc978c7a80f00000064c1e55eb9cc080000b8d7c7a245bacc066d3e0f30470f01c50fe3820000000066baf80cb804944083ef66bafc0ced66baf80cb8f025c78eef66bafc0ced0f01f8", 0x6f}], 0x1, 0xca99e705be2548de, &(0x7f0000000bc0), 0x0) (async) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xfffffdff, 0x9}) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:04.0/enable\x00', 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d80000001c0081044e81f782db44b9040a1d08020a000000401296a1180002000f00000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d3227e7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x40000) (async) write$char_usb(r4, &(0x7f0000000300)='A', 0x1) kernel console output (not intermixed with test programs): 310] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.318267][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.921305][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.921459][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.921583][ T5609] bridge_slave_0: entered allmulticast mode [ 71.923462][ T5609] bridge_slave_0: entered promiscuous mode [ 71.930193][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.930336][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.930448][ T5609] bridge_slave_1: entered allmulticast mode [ 71.932029][ T5609] bridge_slave_1: entered promiscuous mode [ 71.957866][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.957965][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.958073][ T5607] bridge_slave_0: entered allmulticast mode [ 71.959814][ T5607] bridge_slave_0: entered promiscuous mode [ 71.963287][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.963379][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.963731][ T5607] bridge_slave_1: entered allmulticast mode [ 71.966262][ T5607] bridge_slave_1: entered promiscuous mode [ 72.029785][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.029912][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.029985][ T5610] bridge_slave_0: entered allmulticast mode [ 72.030942][ T5610] bridge_slave_0: entered promiscuous mode [ 72.070407][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.070542][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.070969][ T5610] bridge_slave_1: entered allmulticast mode [ 72.072240][ T5610] bridge_slave_1: entered promiscuous mode [ 72.091668][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.111469][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.126173][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.147798][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.150152][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.184939][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.192811][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.192867][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.193067][ T5608] bridge_slave_0: entered allmulticast mode [ 72.193951][ T5608] bridge_slave_0: entered promiscuous mode [ 72.223961][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.224056][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.224496][ T5608] bridge_slave_1: entered allmulticast mode [ 72.226800][ T5608] bridge_slave_1: entered promiscuous mode [ 72.230396][ T5609] team0: Port device team_slave_0 added [ 72.233342][ T5607] team0: Port device team_slave_0 added [ 72.272708][ T5609] team0: Port device team_slave_1 added [ 72.275453][ T5607] team0: Port device team_slave_1 added [ 72.278066][ T5610] team0: Port device team_slave_0 added [ 72.280846][ T5610] team0: Port device team_slave_1 added [ 72.323753][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.355231][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.355902][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.355920][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.355942][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.367287][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.367300][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.367323][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.383163][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.383177][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.383200][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.388477][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.388491][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.388514][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.409186][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.409199][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.409222][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.412767][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.412779][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.412802][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.416246][ T5608] team0: Port device team_slave_0 added [ 72.438149][ T5608] team0: Port device team_slave_1 added [ 72.495959][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.495973][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.495997][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.527136][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.527150][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.527174][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.540155][ T5625] Bluetooth: hci2: command tx timeout [ 72.547716][ T5609] hsr_slave_0: entered promiscuous mode [ 72.550387][ T5609] hsr_slave_1: entered promiscuous mode [ 72.594770][ T4929] Bluetooth: hci0: command tx timeout [ 72.594978][ T5625] Bluetooth: hci3: command tx timeout [ 72.604830][ T5625] Bluetooth: hci1: command tx timeout [ 72.608344][ T5607] hsr_slave_0: entered promiscuous mode [ 72.609261][ T5607] hsr_slave_1: entered promiscuous mode [ 72.609945][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 72.610018][ T5607] Cannot create hsr debugfs directory [ 72.797824][ T5610] hsr_slave_0: entered promiscuous mode [ 72.798392][ T5610] hsr_slave_1: entered promiscuous mode [ 72.798787][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 72.798804][ T5610] Cannot create hsr debugfs directory [ 72.856464][ T5608] hsr_slave_0: entered promiscuous mode [ 72.857028][ T5608] hsr_slave_1: entered promiscuous mode [ 72.857406][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 72.857424][ T5608] Cannot create hsr debugfs directory [ 73.255500][ T5607] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.265507][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.266324][ T5607] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.274807][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.277373][ T5607] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.287894][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.290561][ T5607] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.296866][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.372551][ T5609] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.376858][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.377557][ T5609] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.386701][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.398252][ T5609] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.409964][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.413689][ T5609] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.421395][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.479349][ T5610] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.490728][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.507720][ T5610] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.510999][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.513804][ T5610] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.524541][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.545137][ T5610] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.547824][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.564011][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.577140][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.621263][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.621352][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.649231][ T5608] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.651911][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.653873][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.653964][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.686195][ T5608] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.689555][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.706319][ T5608] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.711796][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.723658][ T5608] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.733008][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.845300][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.898404][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.903423][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.939278][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.939369][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.971953][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.982344][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.982458][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.018843][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.018934][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.051475][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.051572][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.070497][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.148949][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.182469][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.182569][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.202193][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.202290][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.527356][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.594727][ T5625] Bluetooth: hci2: command tx timeout [ 74.610266][ T5607] veth0_vlan: entered promiscuous mode [ 74.635745][ T5607] veth1_vlan: entered promiscuous mode [ 74.674837][ T4929] Bluetooth: hci0: command tx timeout [ 74.674866][ T4929] Bluetooth: hci1: command tx timeout [ 74.674973][ T5625] Bluetooth: hci3: command tx timeout [ 74.723077][ T5607] veth0_macvtap: entered promiscuous mode [ 74.748332][ T5607] veth1_macvtap: entered promiscuous mode [ 74.800800][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.818605][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.895139][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.896068][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.055294][ T43] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.055623][ T43] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.056049][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.056069][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.177997][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.178017][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.263211][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.286958][ T5607] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.298084][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.402705][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.437562][ T5610] veth0_vlan: entered promiscuous mode [ 75.451803][ T5609] veth0_vlan: entered promiscuous mode [ 75.468057][ T5610] veth1_vlan: entered promiscuous mode [ 75.486829][ T5609] veth1_vlan: entered promiscuous mode [ 75.531956][ T5608] veth0_vlan: entered promiscuous mode [ 75.549495][ T5608] veth1_vlan: entered promiscuous mode [ 75.573038][ T5610] veth0_macvtap: entered promiscuous mode [ 75.587508][ T5610] veth1_macvtap: entered promiscuous mode [ 75.593004][ T5609] veth0_macvtap: entered promiscuous mode [ 75.602191][ T5609] veth1_macvtap: entered promiscuous mode [ 75.620445][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.632459][ T5608] veth0_macvtap: entered promiscuous mode [ 75.660242][ T5608] veth1_macvtap: entered promiscuous mode [ 75.669649][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.683453][ T5687] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 75.704069][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.724607][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.730170][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.751798][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.774563][ T43] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.835657][ T5687] usb 3-1: Using ep0 maxpacket: 32 [ 75.839203][ T5687] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 75.860780][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.860798][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.861403][ T5687] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 75.861426][ T5687] usb 3-1: config 0 has no interface number 0 [ 75.861465][ T5687] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 75.881461][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.882588][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.882633][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.882666][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.882697][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.882729][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.882762][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.882793][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.949821][ T314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.949837][ T314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.989859][ T5687] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.989882][ T5687] usb 3-1: Product: syz [ 75.989897][ T5687] usb 3-1: Manufacturer: syz [ 75.989912][ T5687] usb 3-1: SerialNumber: syz [ 76.034025][ T5687] usb 3-1: config 0 descriptor?? [ 76.041284][ T5758] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 76.044032][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.044045][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.075616][ T43] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.076372][ T43] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.076500][ T43] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.141628][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.141645][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.232546][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.232573][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.269107][ T5758] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 76.293647][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.293666][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.675407][ T5625] Bluetooth: hci2: command tx timeout [ 76.755101][ T5611] Bluetooth: hci1: command tx timeout [ 76.755132][ T5611] Bluetooth: hci0: command tx timeout [ 76.755233][ T5625] Bluetooth: hci3: command tx timeout [ 76.864272][ T10] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 76.864356][ T5762] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 76.890834][ T5687] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 76.891506][ T5687] asix 3-1:0.188: probe with driver asix failed with error -32 [ 76.937331][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 77.014951][ T10] usb 1-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 77.015898][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.015943][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.018176][ T10] usb 1-1: config 0 descriptor?? [ 77.025537][ T10] hub 1-1:0.0: bad descriptor, ignoring hub [ 77.025559][ T10] hub 1-1:0.0: probe with driver hub failed with error -5 [ 77.026670][ T10] sierra 1-1:0.0: Sierra USB modem converter detected [ 77.052815][ T5762] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 77.055220][ T5762] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0 [ 77.055245][ T5762] usb 2-1: config 0 interface 0 has no altsetting 0 [ 77.057086][ T5762] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 77.057107][ T5762] usb 2-1: Product: syz [ 77.057120][ T5762] usb 2-1: Manufacturer: syz [ 77.057133][ T5762] usb 2-1: SerialNumber: syz [ 77.060864][ T5762] usb 2-1: config 0 descriptor?? [ 77.069237][ T5762] usb 2-1: selecting invalid altsetting 0 [ 77.146914][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 77.147734][ T9] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 77.148699][ T9] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 77.148721][ T9] usb 4-1: config 0 has no interface number 0 [ 77.148757][ T9] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 77.151058][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.151080][ T9] usb 4-1: Product: syz [ 77.151177][ T9] usb 4-1: Manufacturer: syz [ 77.151193][ T9] usb 4-1: SerialNumber: syz [ 77.216699][ T9] usb 4-1: config 0 descriptor?? [ 77.218946][ T5781] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 77.300563][ T5761] usb 2-1: USB disconnect, device number 2 [ 77.426172][ T5781] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 77.613567][ T10] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 77.648172][ T10] usb 1-1: USB disconnect, device number 2 [ 77.666226][ T10] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 77.667090][ T10] sierra 1-1:0.0: device disconnected [ 77.871854][ T5791] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 78.273087][ T9] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 78.273118][ T9] asix 4-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 78.273333][ T9] asix 4-1:0.188: probe with driver asix failed with error -61 [ 78.418597][ T10] usb 3-1: USB disconnect, device number 2 [ 78.574232][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 78.724935][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 78.725887][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.725916][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.730375][ T9] usb 2-1: config 0 descriptor?? [ 78.755614][ T5625] Bluetooth: hci2: command tx timeout [ 78.778290][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 78.834325][ T4929] Bluetooth: hci0: command tx timeout [ 78.834358][ T4929] Bluetooth: hci1: command tx timeout [ 78.834398][ T5625] Bluetooth: hci3: command tx timeout [ 78.904246][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 79.054332][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 79.055055][ T10] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 79.057505][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 79.057553][ T10] usb 3-1: config 0 has no interface number 0 [ 79.057592][ T10] usb 3-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.057616][ T10] usb 3-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.057628][ T10] usb 3-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 79.057641][ T10] usb 3-1: config 0 interface 1 has no altsetting 0 [ 79.057659][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.060298][ T10] usb 3-1: config 0 descriptor?? [ 79.150758][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 79.151920][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 79.152471][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 79.153177][ T10] usbhid 3-1:0.1: fixing wrong optional hid class descriptors count [ 79.153327][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 79.153969][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 79.198427][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 79.199068][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 79.199849][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 79.200560][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 79.201602][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 79.279302][ T5812] FAULT_INJECTION: forcing a failure. [ 79.279302][ T5812] name failslab, interval 1, probability 0, space 0, times 1 [ 79.279342][ T5812] CPU: 0 UID: 0 PID: 5812 Comm: syz.0.14 Not tainted syzkaller #0 PREEMPT(full) [ 79.279374][ T5812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.279393][ T5812] Call Trace: [ 79.279403][ T5812] [ 79.279411][ T5812] dump_stack_lvl+0xe8/0x150 [ 79.279445][ T5812] should_fail_ex+0x3eb/0x540 [ 79.279475][ T5812] ? __alloc_skb+0x1db/0x7a0 [ 79.279499][ T5812] should_failslab+0xa8/0x100 [ 79.279520][ T5812] ? __alloc_skb+0x1db/0x7a0 [ 79.279536][ T5812] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 79.279563][ T5812] ? __alloc_skb+0x18d/0x7a0 [ 79.279581][ T5812] ? __alloc_skb+0x1db/0x7a0 [ 79.279605][ T5812] __alloc_skb+0x1db/0x7a0 [ 79.279626][ T5812] netlink_ack+0x136/0xb30 [ 79.279648][ T5812] ? __pfx_genl_rcv_msg+0x10/0x10 [ 79.279691][ T5812] netlink_rcv_skb+0x2a4/0x4a0 [ 79.279716][ T5812] ? __pfx_genl_rcv_msg+0x10/0x10 [ 79.279746][ T5812] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 79.279783][ T5812] ? down_read+0x2b9/0x320 [ 79.279808][ T5812] genl_rcv+0x28/0x40 [ 79.279833][ T5812] netlink_unicast+0x7bd/0x940 [ 79.279864][ T5812] netlink_sendmsg+0x7c3/0xae0 [ 79.279895][ T5812] ? __pfx_netlink_sendmsg+0x10/0x10 [ 79.279927][ T5812] ? apparmor_socket_sendmsg+0x98/0x360 [ 79.279949][ T5812] ? __pfx_netlink_sendmsg+0x10/0x10 [ 79.279972][ T5812] sock_sendmsg_nosec+0x13a/0x180 [ 79.280001][ T5812] ____sys_sendmsg+0x54e/0x850 [ 79.280028][ T5812] ? __pfx_____sys_sendmsg+0x10/0x10 [ 79.280058][ T5812] ? import_iovec+0x73/0xa0 [ 79.280086][ T5812] ___sys_sendmsg+0x2a5/0x360 [ 79.280106][ T5812] ? __lock_acquire+0x747/0x2de0 [ 79.280137][ T5812] ? __pfx____sys_sendmsg+0x10/0x10 [ 79.280192][ T5812] ? __fget_files+0x2a/0x420 [ 79.280214][ T5812] ? __fget_files+0x3a2/0x420 [ 79.280247][ T5812] __x64_sys_sendmsg+0x1b1/0x290 [ 79.280272][ T5812] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 79.280313][ T5812] do_syscall_64+0x166/0x520 [ 79.280331][ T5812] ? trace_irq_disable+0x3b/0x140 [ 79.280362][ T5812] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.280383][ T5812] ? clear_bhb_loop+0x70/0xc0 [ 79.280406][ T5812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.280425][ T5812] RIP: 0033:0x7ff5fe19e159 [ 79.280446][ T5812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.280462][ T5812] RSP: 002b:00007ff5feff5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.280486][ T5812] RAX: ffffffffffffffda RBX: 00007ff5fe425fa0 RCX: 00007ff5fe19e159 [ 79.280500][ T5812] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 79.280512][ T5812] RBP: 00007ff5feff5090 R08: 0000000000000000 R09: 0000000000000000 [ 79.280524][ T5812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.280536][ T5812] R13: 00007ff5fe426038 R14: 00007ff5fe425fa0 R15: 00007ffd96001118 [ 79.280566][ T5812] [ 79.406449][ T9] pwc: recv_control_msg error -32 req 02 val 2600 [ 79.407226][ T9] pwc: recv_control_msg error -32 req 02 val 2900 [ 79.408048][ T9] pwc: recv_control_msg error -32 req 02 val 2800 [ 79.575327][ T10] elan 0003:04F3:074D.0001: failed to start in urb: -90 [ 79.610405][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 79.631723][ T9] pwc: Registered as video103. [ 79.638155][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 79.651196][ T5688] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 79.667058][ T9] usb 2-1: USB disconnect, device number 3 [ 79.742705][ T5762] usb 4-1: USB disconnect, device number 2 [ 79.795236][ T5688] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 79.796211][ T5688] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0 [ 79.796237][ T5688] usb 1-1: config 0 interface 0 has no altsetting 0 [ 79.799416][ T5688] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 79.799439][ T5688] usb 1-1: Product: syz [ 79.799453][ T5688] usb 1-1: Manufacturer: syz [ 79.799467][ T5688] usb 1-1: SerialNumber: syz [ 79.808681][ T5688] usb 1-1: config 0 descriptor?? [ 79.891401][ T5688] usb 1-1: selecting invalid altsetting 0 [ 79.950849][ T5820] syzkaller1: entered promiscuous mode [ 79.950870][ T5820] syzkaller1: entered allmulticast mode [ 79.971246][ T5820] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.070731][ T9] usb 1-1: USB disconnect, device number 3 [ 80.097060][ T10] elan 0003:04F3:074D.0001: Set report error for parm 7: -71 [ 80.126672][ T10] elan 0003:04F3:074D.0001: hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.2-1/input1 [ 80.126705][ T10] elan 0003:04F3:074D.0001: Input device is not registered [ 80.159639][ T10] elan 0003:04F3:074D.0001: probe with driver elan failed with error -119 [ 80.184525][ T10] usb 3-1: USB disconnect, device number 3 [ 80.314743][ T5821] fido_id[5821]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 80.797739][ T5837] rust_binder: 5836:5837 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 80.934354][ T5687] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 81.064228][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 81.084350][ T5687] usb 1-1: Using ep0 maxpacket: 32 [ 81.085024][ T5687] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 81.087038][ T5687] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 81.087060][ T5687] usb 1-1: config 0 has no interface number 0 [ 81.087100][ T5687] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 81.091296][ T5687] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.091318][ T5687] usb 1-1: Product: syz [ 81.091332][ T5687] usb 1-1: Manufacturer: syz [ 81.091346][ T5687] usb 1-1: SerialNumber: syz [ 81.097371][ T5687] usb 1-1: config 0 descriptor?? [ 81.098331][ T5834] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 81.244227][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 81.251661][ T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 81.252647][ T9] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 81.252670][ T9] usb 2-1: config 0 has no interface number 0 [ 81.252718][ T9] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 81.288059][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.288084][ T9] usb 2-1: Product: syz [ 81.288099][ T9] usb 2-1: Manufacturer: syz [ 81.288113][ T9] usb 2-1: SerialNumber: syz [ 81.293867][ T9] usb 2-1: config 0 descriptor?? [ 81.294789][ T5840] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 81.311505][ T5834] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 81.519564][ T5840] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 81.626813][ T5836] workqueue: work func _RNvXs8_NtCsbuTvttuFvbr_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCswPamI0U300_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 81.808556][ T5837] syz.2.24 (5837) used greatest stack depth: 19248 bytes left [ 81.931313][ T5687] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 81.931536][ T5687] asix 1-1:0.188: probe with driver asix failed with error -32 [ 82.285231][ T5688] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 82.358373][ T9] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 82.358392][ T9] asix 2-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 82.358515][ T9] asix 2-1:0.188: probe with driver asix failed with error -61 [ 82.451708][ T5688] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 82.458198][ T5688] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.458243][ T5688] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.462101][ T5688] usb 3-1: config 0 descriptor?? [ 82.470010][ T5688] pwc: Askey VC010 type 2 USB webcam detected. [ 82.888734][ T5688] pwc: recv_control_msg error -32 req 02 val 2b00 [ 82.889596][ T5688] pwc: recv_control_msg error -32 req 02 val 2700 [ 82.890238][ T5688] pwc: recv_control_msg error -32 req 02 val 2c00 [ 82.890957][ T5688] pwc: recv_control_msg error -32 req 04 val 1000 [ 82.891528][ T5688] pwc: recv_control_msg error -32 req 04 val 1300 [ 82.892316][ T5688] pwc: recv_control_msg error -32 req 04 val 1400 [ 82.893028][ T5688] pwc: recv_control_msg error -32 req 02 val 2000 [ 82.893818][ T5688] pwc: recv_control_msg error -32 req 02 val 2100 [ 82.895184][ T5688] pwc: recv_control_msg error -32 req 04 val 1500 [ 82.896433][ T5688] pwc: recv_control_msg error -32 req 02 val 2500 [ 83.098975][ T5688] pwc: recv_control_msg error -32 req 02 val 2600 [ 83.099580][ T5688] pwc: recv_control_msg error -32 req 02 val 2900 [ 83.100299][ T5688] pwc: recv_control_msg error -32 req 02 val 2800 [ 83.302478][ T5688] pwc: recv_control_msg error -71 req 04 val 1200 [ 83.308995][ T5688] pwc: Registered as video103. [ 83.311143][ T5688] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7 [ 83.330365][ T5688] usb 3-1: USB disconnect, device number 4 [ 83.484266][ T5613] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 83.645713][ T5613] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 83.646622][ T5613] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0 [ 83.646647][ T5613] usb 4-1: config 0 interface 0 has no altsetting 0 [ 83.649247][ T5613] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 83.649269][ T5613] usb 4-1: Product: syz [ 83.649282][ T5613] usb 4-1: Manufacturer: syz [ 83.649296][ T5613] usb 4-1: SerialNumber: syz [ 83.653183][ T5613] usb 4-1: config 0 descriptor?? [ 83.659110][ T5613] usb 4-1: selecting invalid altsetting 0 [ 83.756068][ T5613] usb 1-1: USB disconnect, device number 4 [ 83.846689][ T9] usb 2-1: USB disconnect, device number 4 [ 83.920284][ T5762] usb 4-1: USB disconnect, device number 3 [ 84.003481][ T5876] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 84.058257][ T5878] fuseblk: fd is not a fuse device [ 84.224252][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 84.374213][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 84.374952][ T9] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 84.376836][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 84.376855][ T9] usb 2-1: config 0 has no interface number 0 [ 84.376877][ T9] usb 2-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.376891][ T9] usb 2-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.376902][ T9] usb 2-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 84.376915][ T9] usb 2-1: config 0 interface 1 has no altsetting 0 [ 84.376940][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.380380][ T9] usb 2-1: config 0 descriptor?? [ 84.412281][ T9] usbhid 2-1:0.1: fixing wrong optional hid class descriptors count [ 84.827961][ T9] elan 0003:04F3:074D.0002: failed to start in urb: -90 [ 85.415416][ T9] elan 0003:04F3:074D.0002: Set report error for parm 7: -71 [ 85.422294][ T9] elan 0003:04F3:074D.0002: hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.1-1/input1 [ 85.422323][ T9] elan 0003:04F3:074D.0002: Input device is not registered [ 85.469118][ T9] elan 0003:04F3:074D.0002: probe with driver elan failed with error -119 [ 85.487202][ T9] usb 2-1: USB disconnect, device number 5 [ 85.558147][ T5895] fido_id[5895]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 85.704264][ T5762] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 85.775030][ T5761] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 85.854231][ T5762] usb 4-1: Using ep0 maxpacket: 32 [ 85.854835][ T5762] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 85.855913][ T5762] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 85.855928][ T5762] usb 4-1: config 0 has no interface number 0 [ 85.855950][ T5762] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 85.857823][ T5762] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.857837][ T5762] usb 4-1: Product: syz [ 85.857844][ T5762] usb 4-1: Manufacturer: syz [ 85.857852][ T5762] usb 4-1: SerialNumber: syz [ 85.863124][ T5762] usb 4-1: config 0 descriptor?? [ 85.866254][ T5894] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 85.944296][ T5761] usb 1-1: Using ep0 maxpacket: 16 [ 85.949622][ T5761] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 85.950648][ T5761] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 85.950671][ T5761] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 85.950690][ T5761] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 85.950708][ T5761] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 85.950727][ T5761] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 85.950746][ T5761] usb 1-1: config 0 has no interface number 0 [ 85.950788][ T5761] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 85.950814][ T5761] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 85.950835][ T5761] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 85.950866][ T5761] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 85.950899][ T5761] usb 1-1: config 0 interface 125 has no altsetting 0 [ 85.950916][ T5761] usb 1-1: config 0 interface 125 has no altsetting 2 [ 86.001550][ T5761] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.001576][ T5761] usb 1-1: Product: syz [ 86.001591][ T5761] usb 1-1: Manufacturer: syz [ 86.001604][ T5761] usb 1-1: SerialNumber: syz [ 86.078405][ T5894] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 86.099515][ T5761] usb 1-1: config 0 descriptor?? [ 86.122300][ T5761] usb 1-1: selecting invalid altsetting 2 [ 86.275740][ T5688] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 86.404378][ T5695] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 86.424851][ T5688] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 86.425753][ T5688] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.425822][ T5688] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.429962][ T5688] usb 3-1: config 0 descriptor?? [ 86.434133][ T5688] pwc: Askey VC010 type 2 USB webcam detected. [ 86.555413][ T5695] usb 2-1: Using ep0 maxpacket: 32 [ 86.556170][ T5695] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 86.557203][ T5695] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 86.557217][ T5695] usb 2-1: config 0 has no interface number 0 [ 86.557254][ T5695] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 86.559458][ T5695] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.559471][ T5695] usb 2-1: Product: syz [ 86.559479][ T5695] usb 2-1: Manufacturer: syz [ 86.559486][ T5695] usb 2-1: SerialNumber: syz [ 86.563650][ T5695] usb 2-1: config 0 descriptor?? [ 86.565167][ T5903] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 86.648625][ C0] usb 1-1: async_complete: urb error -71 [ 86.648719][ C0] usb 1-1: async_complete: urb error -71 [ 86.648807][ C0] usb 1-1: async_complete: urb error -71 [ 86.651594][ T5761] get_1284_register: usb error -71 [ 86.687114][ T5762] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 86.687402][ T5762] asix 4-1:0.188: probe with driver asix failed with error -32 [ 86.688887][ T5761] usb 1-1: USB disconnect, device number 5 [ 86.698778][ T25] cfg80211: failed to load regulatory.db [ 86.772618][ T5903] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 86.838838][ T5688] pwc: recv_control_msg error -32 req 02 val 2b00 [ 86.839373][ T5688] pwc: recv_control_msg error -32 req 02 val 2700 [ 86.839894][ T5688] pwc: recv_control_msg error -32 req 02 val 2c00 [ 86.840390][ T5688] pwc: recv_control_msg error -32 req 04 val 1000 [ 86.840949][ T5688] pwc: recv_control_msg error -32 req 04 val 1300 [ 86.841531][ T5688] pwc: recv_control_msg error -32 req 04 val 1400 [ 86.842089][ T5688] pwc: recv_control_msg error -32 req 02 val 2000 [ 86.842653][ T5688] pwc: recv_control_msg error -32 req 02 val 2100 [ 86.843104][ T5688] pwc: recv_control_msg error -32 req 04 val 1500 [ 86.843663][ T5688] pwc: recv_control_msg error -32 req 02 val 2500 [ 87.052821][ T5688] pwc: recv_control_msg error -32 req 02 val 2600 [ 87.053318][ T5688] pwc: recv_control_msg error -32 req 02 val 2900 [ 87.053861][ T5688] pwc: recv_control_msg error -32 req 02 val 2800 [ 87.258548][ T5688] pwc: recv_control_msg error -71 req 04 val 1200 [ 87.264053][ T5688] pwc: Registered as video103. [ 87.270357][ T5688] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input9 [ 87.306646][ T5688] usb 3-1: USB disconnect, device number 5 [ 87.544922][ T5761] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 87.578104][ T5695] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 87.578134][ T5695] asix 2-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 87.578351][ T5695] asix 2-1:0.188: probe with driver asix failed with error -61 [ 87.704713][ T5761] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 87.705647][ T5761] usb 1-1: config 0 interface 0 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 87.705672][ T5761] usb 1-1: config 0 interface 0 has no altsetting 0 [ 87.707539][ T5761] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 87.707562][ T5761] usb 1-1: Product: syz [ 87.707575][ T5761] usb 1-1: Manufacturer: syz [ 87.707588][ T5761] usb 1-1: SerialNumber: syz [ 87.709907][ T5761] usb 1-1: config 0 descriptor?? [ 87.834547][ T5761] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 87.857147][ T5628] udevd[5628]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 87.917876][ T5761] usb 1-1: USB disconnect, device number 6 [ 88.476561][ T42] usb 4-1: USB disconnect, device number 4 [ 88.695671][ T5761] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 88.846474][ T5761] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 88.852016][ T5761] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.852069][ T5761] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 88.852090][ T5761] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 88.852112][ T5761] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 88.852151][ T5761] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.184278][ T5709] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 89.288249][ T25] usb 2-1: USB disconnect, device number 6 [ 89.334212][ T5709] usb 3-1: Using ep0 maxpacket: 8 [ 89.336483][ T5709] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= a.10 [ 89.336519][ T5709] usb 3-1: too many configurations: 246, using maximum allowed: 8 [ 89.340520][ T5709] usb 3-1: config 0 has an invalid interface number: 131 but max is 0 [ 89.340544][ T5709] usb 3-1: config 0 has no interface number 0 [ 89.340594][ T5709] usb 3-1: config 0 interface 131 has no altsetting 0 [ 89.348463][ T5921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.363353][ T5921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.397967][ T5709] usb 3-1: config 0 has an invalid interface number: 131 but max is 0 [ 89.397993][ T5709] usb 3-1: config 0 has no interface number 0 [ 89.398022][ T5709] usb 3-1: config 0 interface 131 has no altsetting 0 [ 89.415722][ T5709] usb 3-1: config 0 has an invalid interface number: 131 but max is 0 [ 89.415745][ T5709] usb 3-1: config 0 has no interface number 0 [ 89.415771][ T5709] usb 3-1: config 0 interface 131 has no altsetting 0 [ 89.438885][ T5761] gud 1-1:1.0: Unexpected status OK for failed transfer [ 89.438926][ T5761] gud 1-1:1.0: probe with driver gud failed with error -32 [ 89.467514][ T5709] usb 3-1: config 0 has an invalid interface number: 131 but max is 0 [ 89.467539][ T5709] usb 3-1: config 0 has no interface number 0 [ 89.467568][ T5709] usb 3-1: config 0 interface 131 has no altsetting 0 [ 89.468547][ T5709] usb 3-1: config 0 has an invalid interface number: 131 but max is 0 [ 89.468569][ T5709] usb 3-1: config 0 has no interface number 0 [ 89.468594][ T5709] usb 3-1: config 0 interface 131 has no altsetting 0 [ 89.472294][ T5709] usb 3-1: config 0 has an invalid interface number: 131 but max is 0 [ 89.472318][ T5709] usb 3-1: config 0 has no interface number 0 [ 89.472346][ T5709] usb 3-1: config 0 interface 131 has no altsetting 0 [ 89.510433][ T5709] usb 3-1: config 0 has an invalid interface number: 131 but max is 0 [ 89.510458][ T5709] usb 3-1: config 0 has no interface number 0 [ 89.510486][ T5709] usb 3-1: config 0 interface 131 has no altsetting 0 [ 89.563237][ T5709] usb 3-1: config 0 has an invalid interface number: 131 but max is 0 [ 89.563263][ T5709] usb 3-1: config 0 has no interface number 0 [ 89.563290][ T5709] usb 3-1: config 0 interface 131 has no altsetting 0 [ 89.587115][ T5709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.587140][ T5709] usb 3-1: Product: syz [ 89.587154][ T5709] usb 3-1: Manufacturer: syz [ 89.587167][ T5709] usb 3-1: SerialNumber: syz [ 89.591390][ T5709] usb 3-1: config 0 descriptor?? [ 89.753950][ T5937] capability: warning: `syz.3.55' uses deprecated v2 capabilities in a way that may be insecure [ 89.796309][ T5929] netlink: 20 bytes leftover after parsing attributes in process `syz.2.51'. [ 89.796415][ T5929] netlink: 20 bytes leftover after parsing attributes in process `syz.2.51'. [ 89.837497][ T5709] usb 3-1: USB disconnect, device number 6 [ 89.944259][ T5761] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 90.054276][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 90.094227][ T5761] usb 2-1: Using ep0 maxpacket: 16 [ 90.094746][ T5761] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 90.095685][ T5761] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 90.095706][ T5761] usb 2-1: config 0 has no interface number 0 [ 90.095743][ T5761] usb 2-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.095758][ T5761] usb 2-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.095769][ T5761] usb 2-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 90.095782][ T5761] usb 2-1: config 0 interface 1 has no altsetting 0 [ 90.095800][ T5761] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.098788][ T5761] usb 2-1: config 0 descriptor?? [ 90.105049][ T5761] usbhid 2-1:0.1: fixing wrong optional hid class descriptors count [ 90.205116][ T9] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 90.205942][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.205987][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.207988][ T9] usb 4-1: config 0 descriptor?? [ 90.212306][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 90.512202][ T5761] elan 0003:04F3:074D.0003: failed to start in urb: -90 [ 90.604301][ T5709] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 90.611789][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 90.612329][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 90.613549][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 90.628606][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 90.650350][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 90.650873][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 90.651363][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 90.651876][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 90.652355][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 90.652892][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 90.764849][ T5709] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 90.765808][ T5709] usb 3-1: config 0 interface 0 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 90.765823][ T5709] usb 3-1: config 0 interface 0 has no altsetting 0 [ 90.767791][ T5709] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 90.767837][ T5709] usb 3-1: Product: syz [ 90.767872][ T5709] usb 3-1: Manufacturer: syz [ 90.767883][ T5709] usb 3-1: SerialNumber: syz [ 90.771306][ T5709] usb 3-1: config 0 descriptor?? [ 90.855225][ T9] pwc: recv_control_msg error -32 req 02 val 2600 [ 90.856274][ T9] pwc: recv_control_msg error -32 req 02 val 2900 [ 90.856973][ T9] pwc: recv_control_msg error -32 req 02 val 2800 [ 90.863735][ T5709] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 90.913268][ T5628] udevd[5628]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 90.978831][ T5688] usb 3-1: USB disconnect, device number 7 [ 91.060655][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 91.063447][ T9] pwc: Registered as video103. [ 91.077998][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input11 [ 91.095097][ T9] usb 4-1: USB disconnect, device number 5 [ 91.113210][ T5761] elan 0003:04F3:074D.0003: Set report error for parm 7: -71 [ 91.129326][ T5761] elan 0003:04F3:074D.0003: hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.1-1/input1 [ 91.129356][ T5761] elan 0003:04F3:074D.0003: Input device is not registered [ 91.158392][ T5761] elan 0003:04F3:074D.0003: probe with driver elan failed with error -119 [ 91.179468][ T5761] usb 2-1: USB disconnect, device number 7 [ 91.236890][ T5943] fido_id[5943]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 91.463186][ T5688] usb 1-1: USB disconnect, device number 7 [ 92.024236][ T5688] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 92.024513][ T5695] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 92.174241][ T5695] usb 4-1: Using ep0 maxpacket: 32 [ 92.174578][ T5688] usb 1-1: Using ep0 maxpacket: 32 [ 92.175342][ T5695] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 92.176468][ T5688] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 92.177345][ T5695] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 92.177378][ T5695] usb 4-1: config 0 has no interface number 0 [ 92.177419][ T5695] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 92.178381][ T5688] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 92.178404][ T5688] usb 1-1: config 0 has no interface number 0 [ 92.178443][ T5688] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 92.182215][ T5688] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.182486][ T5688] usb 1-1: Product: syz [ 92.182502][ T5688] usb 1-1: Manufacturer: syz [ 92.182516][ T5688] usb 1-1: SerialNumber: syz [ 92.186438][ T5695] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.186459][ T5695] usb 4-1: Product: syz [ 92.186472][ T5695] usb 4-1: Manufacturer: syz [ 92.186485][ T5695] usb 4-1: SerialNumber: syz [ 92.201143][ T5688] usb 1-1: config 0 descriptor?? [ 92.218852][ T5695] usb 4-1: config 0 descriptor?? [ 92.221474][ T5947] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 92.222111][ T5951] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 92.504365][ T5951] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 92.506026][ T5947] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 92.878095][ T5964] netlink: 'syz.2.65': attribute type 9 has an invalid length. [ 92.878115][ T5964] netlink: 'syz.2.65': attribute type 2 has an invalid length. [ 93.111400][ T5688] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 93.111554][ T5688] asix 1-1:0.188: probe with driver asix failed with error -32 [ 93.184298][ T5761] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 93.319254][ T5695] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 93.319273][ T5695] asix 4-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 93.319458][ T5695] asix 4-1:0.188: probe with driver asix failed with error -61 [ 93.344242][ T5687] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 93.345681][ T5761] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 93.346666][ T5761] usb 3-1: config 0 interface 0 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 93.346689][ T5761] usb 3-1: config 0 interface 0 has no altsetting 0 [ 93.348550][ T5761] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 93.348572][ T5761] usb 3-1: Product: syz [ 93.348585][ T5761] usb 3-1: Manufacturer: syz [ 93.348598][ T5761] usb 3-1: SerialNumber: syz [ 93.354370][ T5761] usb 3-1: config 0 descriptor?? [ 93.424198][ T5761] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 93.438669][ T5628] udevd[5628]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 93.496428][ T5687] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 93.497374][ T5687] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.497429][ T5687] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.499455][ T5687] usb 2-1: config 0 descriptor?? [ 93.503921][ T5687] pwc: Askey VC010 type 2 USB webcam detected. [ 93.558802][ T5688] usb 3-1: USB disconnect, device number 8 [ 93.905814][ T5687] pwc: recv_control_msg error -32 req 02 val 2b00 [ 93.906313][ T5687] pwc: recv_control_msg error -32 req 02 val 2700 [ 93.906833][ T5687] pwc: recv_control_msg error -32 req 02 val 2c00 [ 93.907293][ T5687] pwc: recv_control_msg error -32 req 04 val 1000 [ 93.907813][ T5687] pwc: recv_control_msg error -32 req 04 val 1300 [ 93.908355][ T5687] pwc: recv_control_msg error -32 req 04 val 1400 [ 93.908905][ T5687] pwc: recv_control_msg error -32 req 02 val 2000 [ 93.909515][ T5687] pwc: recv_control_msg error -32 req 02 val 2100 [ 93.910055][ T5687] pwc: recv_control_msg error -32 req 04 val 1500 [ 93.910594][ T5687] pwc: recv_control_msg error -32 req 02 val 2500 [ 94.111902][ T5687] pwc: recv_control_msg error -32 req 02 val 2600 [ 94.112562][ T5687] pwc: recv_control_msg error -32 req 02 val 2900 [ 94.113200][ T5687] pwc: recv_control_msg error -32 req 02 val 2800 [ 94.317056][ T5687] pwc: recv_control_msg error -71 req 04 val 1200 [ 94.321884][ T5687] pwc: Registered as video103. [ 94.331854][ T5687] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input12 [ 94.355153][ T5687] usb 2-1: USB disconnect, device number 8 [ 94.600918][ T5687] usb 1-1: USB disconnect, device number 8 [ 94.724930][ T5688] usb 4-1: USB disconnect, device number 6 [ 95.024294][ T5687] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 95.052042][ T5998] FAULT_INJECTION: forcing a failure. [ 95.052042][ T5998] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 95.052070][ T5998] CPU: 1 UID: 0 PID: 5998 Comm: syz.2.76 Not tainted syzkaller #0 PREEMPT(full) [ 95.052091][ T5998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.052102][ T5998] Call Trace: [ 95.052109][ T5998] [ 95.052117][ T5998] dump_stack_lvl+0xe8/0x150 [ 95.052146][ T5998] should_fail_ex+0x3eb/0x540 [ 95.052172][ T5998] _copy_to_user+0x31/0xb0 [ 95.052199][ T5998] simple_read_from_buffer+0xe1/0x170 [ 95.052229][ T5998] proc_fail_nth_read+0x1bb/0x230 [ 95.052260][ T5998] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 95.052291][ T5998] ? rw_verify_area+0x24a/0x4c0 [ 95.052318][ T5998] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 95.052345][ T5998] vfs_read+0x213/0xa80 [ 95.052376][ T5998] ? __pfx___mutex_lock+0x10/0x10 [ 95.052395][ T5998] ? __pfx_vfs_read+0x10/0x10 [ 95.052420][ T5998] ? __fget_files+0x2a/0x420 [ 95.052446][ T5998] ? __fget_files+0x3a2/0x420 [ 95.052471][ T5998] ? __fget_files+0x2a/0x420 [ 95.052500][ T5998] ksys_read+0x150/0x270 [ 95.052526][ T5998] ? __pfx_ksys_read+0x10/0x10 [ 95.052563][ T5998] do_syscall_64+0x166/0x520 [ 95.052581][ T5998] ? trace_irq_disable+0x3b/0x140 [ 95.052606][ T5998] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.052626][ T5998] ? clear_bhb_loop+0x70/0xc0 [ 95.052656][ T5998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.052676][ T5998] RIP: 0033:0x7ff075b5e98e [ 95.052693][ T5998] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 95.052710][ T5998] RSP: 002b:00007ff076a4cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 95.052730][ T5998] RAX: ffffffffffffffda RBX: 00007ff076a4d6c0 RCX: 00007ff075b5e98e [ 95.052745][ T5998] RDX: 000000000000000f RSI: 00007ff076a4d0a0 RDI: 0000000000000004 [ 95.052757][ T5998] RBP: 00007ff076a4d090 R08: 0000000000000000 R09: 0000000000000000 [ 95.052769][ T5998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.052780][ T5998] R13: 00007ff075e26038 R14: 00007ff075e25fa0 R15: 00007fff67b44718 [ 95.052810][ T5998] [ 95.174320][ T5687] usb 1-1: Using ep0 maxpacket: 16 [ 95.174980][ T5687] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 95.179372][ T5687] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 95.179394][ T5687] usb 1-1: config 0 has no interface number 0 [ 95.179430][ T5687] usb 1-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.179454][ T5687] usb 1-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.179474][ T5687] usb 1-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 95.179497][ T5687] usb 1-1: config 0 interface 1 has no altsetting 0 [ 95.179526][ T5687] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.185804][ T5687] usb 1-1: config 0 descriptor?? [ 95.208966][ T5687] usbhid 1-1:0.1: fixing wrong optional hid class descriptors count [ 95.267005][ T6003] syz.2.77 uses obsolete (PF_INET,SOCK_PACKET) [ 95.682233][ T5687] elan 0003:04F3:074D.0004: failed to start in urb: -90 [ 95.714295][ T5761] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 95.844249][ T5761] usb 2-1: device descriptor read/64, error -71 [ 96.084244][ T5761] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 96.214294][ T5761] usb 2-1: device descriptor read/64, error -71 [ 96.277858][ T5687] elan 0003:04F3:074D.0004: Set report error for parm 7: -71 [ 96.286466][ T5687] elan 0003:04F3:074D.0004: hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.0-1/input1 [ 96.286496][ T5687] elan 0003:04F3:074D.0004: Input device is not registered [ 96.292031][ T5687] elan 0003:04F3:074D.0004: probe with driver elan failed with error -119 [ 96.301336][ T5687] usb 1-1: USB disconnect, device number 9 [ 96.310497][ T5709] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 96.319311][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 96.342021][ T5761] usb usb2-port1: attempt power cycle [ 96.360055][ T6018] fido_id[6018]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 96.494318][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 96.494928][ T5709] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 96.495121][ T9] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 96.496020][ T5709] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.496066][ T5709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.497079][ T9] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 96.497100][ T9] usb 3-1: config 0 has no interface number 0 [ 96.497135][ T9] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 96.499458][ T5709] usb 4-1: config 0 descriptor?? [ 96.500608][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.500628][ T9] usb 3-1: Product: syz [ 96.500642][ T9] usb 3-1: Manufacturer: syz [ 96.500656][ T9] usb 3-1: SerialNumber: syz [ 96.538832][ T9] usb 3-1: config 0 descriptor?? [ 96.550178][ T6017] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 96.591211][ T5709] pwc: Askey VC010 type 2 USB webcam detected. [ 96.684247][ T5761] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 96.705141][ T5761] usb 2-1: device descriptor read/8, error -71 [ 96.759788][ T6017] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 96.905472][ T5709] pwc: recv_control_msg error -32 req 02 val 2b00 [ 96.906087][ T5709] pwc: recv_control_msg error -32 req 02 val 2700 [ 96.906685][ T5709] pwc: recv_control_msg error -32 req 02 val 2c00 [ 96.907268][ T5709] pwc: recv_control_msg error -32 req 04 val 1000 [ 96.907820][ T5709] pwc: recv_control_msg error -32 req 04 val 1300 [ 96.908413][ T5709] pwc: recv_control_msg error -32 req 04 val 1400 [ 96.909000][ T5709] pwc: recv_control_msg error -32 req 02 val 2000 [ 96.909585][ T5709] pwc: recv_control_msg error -32 req 02 val 2100 [ 96.910204][ T5709] pwc: recv_control_msg error -32 req 04 val 1500 [ 96.912076][ T5709] pwc: recv_control_msg error -32 req 02 val 2500 [ 96.948789][ T5761] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 96.982247][ T5761] usb 2-1: device descriptor read/8, error -71 [ 97.084463][ T5761] usb usb2-port1: unable to enumerate USB device [ 97.113578][ T5709] pwc: recv_control_msg error -32 req 02 val 2600 [ 97.114250][ T5709] pwc: recv_control_msg error -32 req 02 val 2900 [ 97.127564][ T5709] pwc: recv_control_msg error -32 req 02 val 2800 [ 97.330593][ T5709] pwc: recv_control_msg error -71 req 04 val 1200 [ 97.345596][ T5709] pwc: Registered as video103. [ 97.352347][ T5709] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input14 [ 97.378927][ T5709] usb 4-1: USB disconnect, device number 7 [ 97.570035][ T9] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 97.570053][ T9] asix 3-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 97.570180][ T9] asix 3-1:0.188: probe with driver asix failed with error -61 [ 97.954295][ T5709] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 98.104220][ T5709] usb 1-1: Using ep0 maxpacket: 32 [ 98.105140][ T5709] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 98.106059][ T5709] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 98.106082][ T5709] usb 1-1: config 0 has no interface number 0 [ 98.106120][ T5709] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 98.107791][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.107805][ T5709] usb 1-1: Product: syz [ 98.107812][ T5709] usb 1-1: Manufacturer: syz [ 98.107819][ T5709] usb 1-1: SerialNumber: syz [ 98.109722][ T5709] usb 1-1: config 0 descriptor?? [ 98.110565][ T6027] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 98.114594][ T5687] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 98.264776][ T5687] usb 4-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 98.266187][ T5687] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.266217][ T5687] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.266242][ T5687] usb 4-1: config 0 interface 0 has no altsetting 0 [ 98.266273][ T5687] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.269884][ T5687] usb 4-1: config 0 descriptor?? [ 98.320944][ T6027] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 98.477051][ T6029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.477578][ T6029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.601741][ T6035] tc_dump_action: action bad kind [ 98.685821][ T5687] smartjoyplus 0003:0B43:0003.0005: implement() called with too large value 1 (n: 0)! (kworker/1:4) [ 98.689669][ T5687] input: HID 0b43:0003 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0B43:0003.0005/input/input15 [ 98.735195][ T5687] smartjoyplus 0003:0B43:0003.0005: input,hidraw0: USB HID v0.00 Joystick [HID 0b43:0003] on usb-dummy_hcd.3-1/input0 [ 98.888217][ T5695] usb 4-1: USB disconnect, device number 8 [ 99.098487][ T10] usb 3-1: USB disconnect, device number 9 [ 99.151977][ T5709] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 99.152005][ T5709] asix 1-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 99.152215][ T5709] asix 1-1:0.188: probe with driver asix failed with error -32 [ 99.795478][ T5761] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 99.954251][ T5761] usb 4-1: Using ep0 maxpacket: 16 [ 99.960076][ T5761] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 99.961631][ T5761] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 99.961655][ T5761] usb 4-1: config 0 has no interface number 0 [ 99.961693][ T5761] usb 4-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.961718][ T5761] usb 4-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.961738][ T5761] usb 4-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.961762][ T5761] usb 4-1: config 0 interface 1 has no altsetting 0 [ 99.961792][ T5761] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.043845][ T5761] usb 4-1: config 0 descriptor?? [ 100.059794][ T5761] usbhid 4-1:0.1: fixing wrong optional hid class descriptors count [ 100.468699][ T5761] elan 0003:04F3:074D.0006: failed to start in urb: -90 [ 100.544246][ T5695] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 100.624245][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 100.674247][ T5695] usb 2-1: device descriptor read/64, error -71 [ 100.725444][ T5688] usb 1-1: USB disconnect, device number 10 [ 100.775231][ T10] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 100.778989][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.779036][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.788572][ T10] usb 3-1: config 0 descriptor?? [ 100.800294][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 100.954218][ T5695] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 101.067362][ T5761] elan 0003:04F3:074D.0006: Set report error for parm 7: -71 [ 101.071141][ T5761] elan 0003:04F3:074D.0006: hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.3-1/input1 [ 101.071172][ T5761] elan 0003:04F3:074D.0006: Input device is not registered [ 101.076741][ T5761] elan 0003:04F3:074D.0006: probe with driver elan failed with error -119 [ 101.080235][ T5761] usb 4-1: USB disconnect, device number 9 [ 101.110181][ T5695] usb 2-1: device descriptor read/64, error -71 [ 101.155073][ T6079] fido_id[6079]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 101.197339][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 101.197863][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 101.198324][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 101.198802][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 101.199350][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 101.199832][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 101.200366][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 101.200887][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 101.201415][ T10] pwc: recv_control_msg error -32 req 04 val 1500 [ 101.201979][ T10] pwc: recv_control_msg error -32 req 02 val 2500 [ 101.226139][ T5688] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 101.229555][ T5695] usb usb2-port1: attempt power cycle [ 101.374203][ T5688] usb 1-1: Using ep0 maxpacket: 32 [ 101.374814][ T5688] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 101.375872][ T5688] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 101.375886][ T5688] usb 1-1: config 0 has no interface number 0 [ 101.375907][ T5688] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 101.377991][ T5688] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.378011][ T5688] usb 1-1: Product: syz [ 101.378019][ T5688] usb 1-1: Manufacturer: syz [ 101.378027][ T5688] usb 1-1: SerialNumber: syz [ 101.380296][ T5688] usb 1-1: config 0 descriptor?? [ 101.381097][ T6078] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 101.448574][ T10] pwc: recv_control_msg error -32 req 02 val 2600 [ 101.449188][ T10] pwc: recv_control_msg error -32 req 02 val 2900 [ 101.449875][ T10] pwc: recv_control_msg error -32 req 02 val 2800 [ 101.574430][ T5695] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 101.590880][ T6078] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 101.601800][ T5695] usb 2-1: device descriptor read/8, error -71 [ 101.651474][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 101.658538][ T10] pwc: Registered as video103. [ 101.661340][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input17 [ 101.678071][ T10] usb 3-1: USB disconnect, device number 10 [ 101.844317][ T5695] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 101.865492][ T5695] usb 2-1: device descriptor read/8, error -71 [ 101.975493][ T5695] usb usb2-port1: unable to enumerate USB device [ 102.527229][ T5688] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 102.527260][ T5688] asix 1-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 102.527474][ T5688] asix 1-1:0.188: probe with driver asix failed with error -61 [ 102.800536][ T6092] Bluetooth: (null): Invalid header checksum [ 103.224253][ T5761] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 103.370887][ T6105] netlink: 758 bytes leftover after parsing attributes in process `syz.2.111'. [ 103.371127][ T6105] Bluetooth: (null): Invalid header checksum [ 103.391420][ T5761] usb 4-1: Using ep0 maxpacket: 32 [ 103.397248][ T5761] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 103.398398][ T5761] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 103.398422][ T5761] usb 4-1: config 0 has no interface number 0 [ 103.398462][ T5761] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 103.400374][ T5761] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.400397][ T5761] usb 4-1: Product: syz [ 103.400411][ T5761] usb 4-1: Manufacturer: syz [ 103.400424][ T5761] usb 4-1: SerialNumber: syz [ 103.403308][ T5761] usb 4-1: config 0 descriptor?? [ 103.404256][ T6096] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 103.490455][ T6108] FAULT_INJECTION: forcing a failure. [ 103.490455][ T6108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.490490][ T6108] CPU: 0 UID: 0 PID: 6108 Comm: syz.2.112 Tainted: G L syzkaller #0 PREEMPT(full) [ 103.490514][ T6108] Tainted: [L]=SOFTLOCKUP [ 103.490519][ T6108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 103.490526][ T6108] Call Trace: [ 103.490532][ T6108] [ 103.490538][ T6108] dump_stack_lvl+0xe8/0x150 [ 103.490560][ T6108] should_fail_ex+0x3eb/0x540 [ 103.490580][ T6108] _copy_from_user+0x2d/0xb0 [ 103.490598][ T6108] ipv6_flowlabel_opt+0x153/0x2ae0 [ 103.490615][ T6108] ? __lock_acquire+0x747/0x2de0 [ 103.490635][ T6108] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 103.490653][ T6108] ? irqentry_exit+0x218/0x910 [ 103.490671][ T6108] ? lockdep_hardirqs_on+0x7b/0x110 [ 103.490691][ T6108] ? do_raw_spin_lock+0x12b/0x2f0 [ 103.490706][ T6108] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 103.490722][ T6108] ? do_ipv6_setsockopt+0x8e0/0x3180 [ 103.490737][ T6108] ? __local_bh_enable_ip+0xd6/0x140 [ 103.490754][ T6108] do_ipv6_setsockopt+0xdff/0x3180 [ 103.490771][ T6108] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 103.490782][ T6108] ? aa_inet_opt_perm+0x94d/0xcd0 [ 103.490801][ T6108] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 103.490820][ T6108] ? __pfx_vfs_writev+0x10/0x10 [ 103.490837][ T6108] ? do_futex+0x3e7/0x4e0 [ 103.490852][ T6108] ? lock_acquire+0x115/0x350 [ 103.490873][ T6108] ? aa_sock_opt_perm+0xe1/0x1e0 [ 103.490889][ T6108] ipv6_setsockopt+0x59/0x170 [ 103.490902][ T6108] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 103.490920][ T6108] do_sock_setsockopt+0x17c/0x1b0 [ 103.490935][ T6108] __x64_sys_setsockopt+0x13d/0x1b0 [ 103.490950][ T6108] do_syscall_64+0x166/0x520 [ 103.490961][ T6108] ? trace_irq_disable+0x3b/0x140 [ 103.490977][ T6108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.490989][ T6108] ? clear_bhb_loop+0x70/0xc0 [ 103.491007][ T6108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.491020][ T6108] RIP: 0033:0x7ff075b9e159 [ 103.491031][ T6108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.491041][ T6108] RSP: 002b:00007ff076a4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 103.491056][ T6108] RAX: ffffffffffffffda RBX: 00007ff075e25fa0 RCX: 00007ff075b9e159 [ 103.491065][ T6108] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000004 [ 103.491073][ T6108] RBP: 00007ff075c3503b R08: 0000000000000020 R09: 0000000000000000 [ 103.491081][ T6108] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 103.491089][ T6108] R13: 00007ff075e26038 R14: 00007ff075e25fa0 R15: 00007fff67b44718 [ 103.491107][ T6108] [ 103.655364][ T6096] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 103.834254][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 104.261520][ T42] usb 1-1: USB disconnect, device number 11 [ 104.315757][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 104.316820][ T10] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 104.317896][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 104.317918][ T10] usb 2-1: config 0 has no interface number 0 [ 104.317972][ T10] usb 2-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.317986][ T10] usb 2-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.317997][ T10] usb 2-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 104.318010][ T10] usb 2-1: config 0 interface 1 has no altsetting 0 [ 104.318027][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.320810][ T10] usb 2-1: config 0 descriptor?? [ 104.413569][ T10] usbhid 2-1:0.1: fixing wrong optional hid class descriptors count [ 104.613345][ T5761] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 104.613364][ T5761] asix 4-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 104.613522][ T5761] asix 4-1:0.188: probe with driver asix failed with error -32 [ 104.694250][ T42] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 104.741257][ T10] elan 0003:04F3:074D.0007: failed to start in urb: -90 [ 104.844258][ T42] usb 1-1: Using ep0 maxpacket: 32 [ 104.845883][ T42] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 104.846881][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.846910][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.846970][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.850091][ T42] usb 1-1: config 0 descriptor?? [ 104.856120][ T42] hub 1-1:0.0: USB hub found [ 105.122757][ T6124] tmpfs: Unknown parameter 'ipol' [ 105.141706][ T6124] capability: warning: `syz.0.114' uses 32-bit capabilities (legacy support in use) [ 105.142617][ T42] hub 1-1:0.0: 29 ports detected [ 105.142934][ T42] hub 1-1:0.0: insufficient power available to use all downstream ports [ 105.331722][ T10] elan 0003:04F3:074D.0007: Set report error for parm 7: -71 [ 105.336663][ T10] elan 0003:04F3:074D.0007: hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.1-1/input1 [ 105.336693][ T10] elan 0003:04F3:074D.0007: Input device is not registered [ 105.368066][ T10] elan 0003:04F3:074D.0007: probe with driver elan failed with error -119 [ 105.378916][ T10] usb 2-1: USB disconnect, device number 17 [ 105.455737][ T6127] fido_id[6127]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 105.804597][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 105.894917][ T6134] FAULT_INJECTION: forcing a failure. [ 105.894917][ T6134] name failslab, interval 1, probability 0, space 0, times 0 [ 105.894947][ T6134] CPU: 0 UID: 0 PID: 6134 Comm: syz.1.119 Tainted: G L syzkaller #0 PREEMPT(full) [ 105.894963][ T6134] Tainted: [L]=SOFTLOCKUP [ 105.894967][ T6134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 105.894973][ T6134] Call Trace: [ 105.894978][ T6134] [ 105.894983][ T6134] dump_stack_lvl+0xe8/0x150 [ 105.895002][ T6134] should_fail_ex+0x3eb/0x540 [ 105.895017][ T6134] ? __alloc_skb+0x1db/0x7a0 [ 105.895029][ T6134] should_failslab+0xa8/0x100 [ 105.895042][ T6134] ? __alloc_skb+0x1db/0x7a0 [ 105.895051][ T6134] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 105.895065][ T6134] ? __alloc_skb+0x18d/0x7a0 [ 105.895075][ T6134] ? __alloc_skb+0x1db/0x7a0 [ 105.895087][ T6134] __alloc_skb+0x1db/0x7a0 [ 105.895099][ T6134] netlink_sendmsg+0x577/0xae0 [ 105.895116][ T6134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.895133][ T6134] ? apparmor_socket_sendmsg+0x18b/0x360 [ 105.895146][ T6134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.895158][ T6134] sock_sendmsg_nosec+0x13a/0x180 [ 105.895174][ T6134] ____sys_sendmsg+0x54e/0x850 [ 105.895188][ T6134] ? __pfx_____sys_sendmsg+0x10/0x10 [ 105.895204][ T6134] ? import_iovec+0x73/0xa0 [ 105.895218][ T6134] ___sys_sendmsg+0x2a5/0x360 [ 105.895229][ T6134] ? __lock_acquire+0x747/0x2de0 [ 105.895246][ T6134] ? __pfx____sys_sendmsg+0x10/0x10 [ 105.895274][ T6134] ? __fget_files+0x2a/0x420 [ 105.895287][ T6134] ? __fget_files+0x3a2/0x420 [ 105.895304][ T6134] __x64_sys_sendmsg+0x1b1/0x290 [ 105.895323][ T6134] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 105.895344][ T6134] do_syscall_64+0x166/0x520 [ 105.895354][ T6134] ? trace_irq_disable+0x3b/0x140 [ 105.895369][ T6134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.895379][ T6134] ? clear_bhb_loop+0x70/0xc0 [ 105.895392][ T6134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.895403][ T6134] RIP: 0033:0x7fd72eb9e159 [ 105.895413][ T6134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.895422][ T6134] RSP: 002b:00007fd72fb53028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.895434][ T6134] RAX: ffffffffffffffda RBX: 00007fd72ee25fa0 RCX: 00007fd72eb9e159 [ 105.895441][ T6134] RDX: 0000000020040000 RSI: 0000200000001880 RDI: 0000000000000003 [ 105.895448][ T6134] RBP: 00007fd72fb53090 R08: 0000000000000000 R09: 0000000000000000 [ 105.895454][ T6134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.895460][ T6134] R13: 00007fd72ee26038 R14: 00007fd72ee25fa0 R15: 00007ffd744d49e8 [ 105.895476][ T6134] [ 105.936549][ T10] usb 3-1: device descriptor read/64, error -71 [ 106.029155][ T5761] usb 4-1: USB disconnect, device number 10 [ 106.174288][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 106.204344][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 106.304215][ T10] usb 3-1: device descriptor read/64, error -71 [ 106.354401][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 106.355144][ T9] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 106.356078][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 106.356098][ T9] usb 2-1: config 0 has no interface number 0 [ 106.356119][ T9] usb 2-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.356133][ T9] usb 2-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.356144][ T9] usb 2-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.356174][ T9] usb 2-1: config 0 interface 1 has no altsetting 0 [ 106.356193][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.358950][ T9] usb 2-1: config 0 descriptor?? [ 106.370350][ T9] usbhid 2-1:0.1: fixing wrong optional hid class descriptors count [ 106.414718][ T10] usb usb3-port1: attempt power cycle [ 106.764953][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 106.780422][ T9] elan 0003:04F3:074D.0008: failed to start in urb: -90 [ 106.796127][ T10] usb 3-1: device descriptor read/8, error -71 [ 107.014280][ T42] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 107.034735][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 107.054734][ T10] usb 3-1: device descriptor read/8, error -71 [ 107.164258][ T42] usb 4-1: Using ep0 maxpacket: 32 [ 107.164680][ T10] usb usb3-port1: unable to enumerate USB device [ 107.165076][ T42] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 107.165452][ T9] elan 0003:04F3:074D.0008: Get report error for parm 6: -32 [ 107.167938][ T42] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 107.167984][ T42] usb 4-1: config 0 has no interface number 0 [ 107.168024][ T42] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 107.171363][ T9] elan 0003:04F3:074D.0008: hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.1-1/input1 [ 107.171383][ T9] elan 0003:04F3:074D.0008: Input device is not registered [ 107.173503][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.173526][ T42] usb 4-1: Product: syz [ 107.173539][ T42] usb 4-1: Manufacturer: syz [ 107.173553][ T42] usb 4-1: SerialNumber: syz [ 107.178058][ T9] elan 0003:04F3:074D.0008: probe with driver elan failed with error -119 [ 107.198056][ T42] usb 4-1: config 0 descriptor?? [ 107.227972][ T6141] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 107.436269][ T6141] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 107.476568][ T5687] usb 1-1: USB disconnect, device number 12 [ 108.420999][ T42] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 108.421030][ T42] asix 4-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 108.421247][ T42] asix 4-1:0.188: probe with driver asix failed with error -61 [ 108.944410][ T5613] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 109.096123][ T5613] usb 3-1: Using ep0 maxpacket: 16 [ 109.098657][ T5613] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 109.104081][ T5613] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 109.104106][ T5613] usb 3-1: config 0 has no interface number 0 [ 109.104222][ T5613] usb 3-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.104248][ T5613] usb 3-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.104269][ T5613] usb 3-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.104293][ T5613] usb 3-1: config 0 interface 1 has no altsetting 0 [ 109.104324][ T5613] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.187717][ T9] usb 2-1: USB disconnect, device number 18 [ 109.187818][ T5613] usb 3-1: config 0 descriptor?? [ 109.216311][ T5613] usbhid 3-1:0.1: fixing wrong optional hid class descriptors count [ 109.421317][ T6173] nbd: must specify a size in bytes for the device [ 109.584244][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 109.620163][ T5613] elan 0003:04F3:074D.0009: failed to start in urb: -90 [ 109.734421][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 109.735120][ T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 109.736097][ T9] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 109.736120][ T9] usb 2-1: config 0 has no interface number 0 [ 109.736160][ T9] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 109.738099][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.738122][ T9] usb 2-1: Product: syz [ 109.738136][ T9] usb 2-1: Manufacturer: syz [ 109.738150][ T9] usb 2-1: SerialNumber: syz [ 109.742695][ T9] usb 2-1: config 0 descriptor?? [ 109.743545][ T6170] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 109.834462][ T10] usb 4-1: USB disconnect, device number 11 [ 109.924120][ T6183] FAULT_INJECTION: forcing a failure. [ 109.924120][ T6183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.924302][ T6183] CPU: 1 UID: 0 PID: 6183 Comm: syz.3.133 Tainted: G L syzkaller #0 PREEMPT(full) [ 109.924329][ T6183] Tainted: [L]=SOFTLOCKUP [ 109.924341][ T6183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.924355][ T6183] Call Trace: [ 109.924363][ T6183] [ 109.924371][ T6183] dump_stack_lvl+0xe8/0x150 [ 109.924401][ T6183] should_fail_ex+0x3eb/0x540 [ 109.924430][ T6183] _copy_from_iter+0x1d3/0x1660 [ 109.924463][ T6183] ? __pfx__copy_from_iter+0x10/0x10 [ 109.924483][ T6183] ? trace_kmalloc+0x2a/0xf0 [ 109.924511][ T6183] ? __kmalloc_noprof+0x387/0x710 [ 109.924535][ T6183] ? __kmalloc_noprof+0x1a6/0x710 [ 109.924560][ T6183] ? kernfs_fop_write_iter+0x157/0x540 [ 109.924588][ T6183] kernfs_fop_write_iter+0x19a/0x540 [ 109.924614][ T6183] vfs_write+0x612/0xba0 [ 109.924647][ T6183] ? __pfx_vfs_write+0x10/0x10 [ 109.924682][ T6183] ? __fget_files+0x2a/0x420 [ 109.924713][ T6183] ksys_write+0x150/0x270 [ 109.924741][ T6183] ? __pfx_ksys_write+0x10/0x10 [ 109.924775][ T6183] do_syscall_64+0x166/0x520 [ 109.924792][ T6183] ? trace_irq_disable+0x3b/0x140 [ 109.924818][ T6183] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.924837][ T6183] ? clear_bhb_loop+0x70/0xc0 [ 109.924861][ T6183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.924879][ T6183] RIP: 0033:0x7f8fd299e159 [ 109.924896][ T6183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.924911][ T6183] RSP: 002b:00007f8fd3801028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 109.924932][ T6183] RAX: ffffffffffffffda RBX: 00007f8fd2c25fa0 RCX: 00007f8fd299e159 [ 109.924946][ T6183] RDX: 0000000000000080 RSI: 0000200000001540 RDI: 0000000000000003 [ 109.924958][ T6183] RBP: 00007f8fd3801090 R08: 0000000000000000 R09: 0000000000000000 [ 109.924970][ T6183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.924981][ T6183] R13: 00007f8fd2c26038 R14: 00007f8fd2c25fa0 R15: 00007ffc724ba298 [ 109.925012][ T6183] [ 109.952636][ T6170] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 110.262220][ T5613] elan 0003:04F3:074D.0009: Set report error for parm 7: -71 [ 110.273859][ T5613] elan 0003:04F3:074D.0009: hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.2-1/input1 [ 110.273892][ T5613] elan 0003:04F3:074D.0009: Input device is not registered [ 110.297276][ T5613] elan 0003:04F3:074D.0009: probe with driver elan failed with error -119 [ 110.300328][ T5613] usb 3-1: USB disconnect, device number 15 [ 110.366927][ T6187] svc: failed to register lockdv1 RPC service (errno 111). [ 110.368330][ T6187] lockd_up: makesock failed, error=-111 [ 110.368431][ T6188] fido_id[6188]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 110.708981][ T6187] svc: failed to register nfsdv3 RPC service (errno 111). [ 110.710419][ T6187] svc: failed to register nfsaclv3 RPC service (errno 111). [ 110.710465][ T6187] failed to unregister tcp with rpcbind [ 110.725535][ T6187] svc: failed to register nfsdv3 RPC service (errno 97). [ 110.725579][ T6187] svc: failed to register nfsaclv3 RPC service (errno 97). [ 110.725595][ T6187] failed to unregister tcp with rpcbind [ 110.763328][ T9] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 110.763356][ T9] asix 2-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 110.763578][ T9] asix 2-1:0.188: probe with driver asix failed with error -32 [ 110.937829][ T6195] svc: failed to register lockdv1 RPC service (errno 111). [ 110.953624][ T5688] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 111.080049][ T6195] svc: failed to register nfsdv3 RPC service (errno 111). [ 111.081456][ T6195] svc: failed to register nfsaclv3 RPC service (errno 111). [ 111.081475][ T6195] failed to unregister tcp with rpcbind [ 111.081639][ T6195] svc: failed to register nfsdv3 RPC service (errno 97). [ 111.081654][ T6195] svc: failed to register nfsaclv3 RPC service (errno 97). [ 111.081666][ T6195] failed to unregister tcp with rpcbind [ 111.098943][ T5688] usb 1-1: device descriptor read/64, error -71 [ 111.239403][ T6204] FAULT_INJECTION: forcing a failure. [ 111.239403][ T6204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.239435][ T6204] CPU: 0 UID: 0 PID: 6204 Comm: syz.2.139 Tainted: G L syzkaller #0 PREEMPT(full) [ 111.239461][ T6204] Tainted: [L]=SOFTLOCKUP [ 111.239468][ T6204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 111.239482][ T6204] Call Trace: [ 111.239490][ T6204] [ 111.239498][ T6204] dump_stack_lvl+0xe8/0x150 [ 111.239528][ T6204] should_fail_ex+0x3eb/0x540 [ 111.239554][ T6204] _copy_from_user+0x2d/0xb0 [ 111.239580][ T6204] ___sys_recvmsg+0x173/0x5a0 [ 111.239608][ T6204] ? __pfx____sys_recvmsg+0x10/0x10 [ 111.239635][ T6204] ? lock_acquire+0x115/0x350 [ 111.239688][ T6204] do_recvmmsg+0x31a/0x7f0 [ 111.239718][ T6204] ? __pfx_do_recvmmsg+0x10/0x10 [ 111.239751][ T6204] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 111.239772][ T6204] ? __fget_files+0x3a2/0x420 [ 111.239805][ T6204] __x64_sys_recvmmsg+0x198/0x250 [ 111.239831][ T6204] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 111.239864][ T6204] do_syscall_64+0x166/0x520 [ 111.239882][ T6204] ? trace_irq_disable+0x3b/0x140 [ 111.239908][ T6204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.239935][ T6204] ? clear_bhb_loop+0x70/0xc0 [ 111.239959][ T6204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.239978][ T6204] RIP: 0033:0x7ff075b9e159 [ 111.239996][ T6204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.240012][ T6204] RSP: 002b:00007ff076a2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 111.240033][ T6204] RAX: ffffffffffffffda RBX: 00007ff075e26090 RCX: 00007ff075b9e159 [ 111.240047][ T6204] RDX: 00000000000003d5 RSI: 0000200000000340 RDI: 0000000000000003 [ 111.240059][ T6204] RBP: 00007ff076a2c090 R08: 0000000000000000 R09: 0000000000000000 [ 111.240072][ T6204] R10: 45833af92e4b38ff R11: 0000000000000246 R12: 0000000000000001 [ 111.240084][ T6204] R13: 00007ff075e26128 R14: 00007ff075e26090 R15: 00007fff67b44718 [ 111.240113][ T6204] [ 111.403462][ T5688] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 111.564313][ T5688] usb 1-1: device descriptor read/64, error -71 [ 111.684586][ T5688] usb usb1-port1: attempt power cycle [ 111.884700][ T5687] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 112.044347][ T5687] usb 3-1: Using ep0 maxpacket: 32 [ 112.044509][ T5688] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 112.045157][ T5687] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 112.046379][ T5687] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 112.046401][ T5687] usb 3-1: config 0 has no interface number 0 [ 112.046448][ T5687] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 112.048510][ T5687] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.048532][ T5687] usb 3-1: Product: syz [ 112.048545][ T5687] usb 3-1: Manufacturer: syz [ 112.048556][ T5687] usb 3-1: SerialNumber: syz [ 112.050675][ T5687] usb 3-1: config 0 descriptor?? [ 112.051657][ T6209] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 112.077192][ T5688] usb 1-1: device descriptor read/8, error -71 [ 112.140290][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 112.260050][ T6209] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 112.280870][ T10] usb 2-1: USB disconnect, device number 19 [ 112.293463][ T9] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 112.305150][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.305198][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.313219][ T9] usb 4-1: config 0 descriptor?? [ 112.326509][ T5688] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 112.346890][ T5688] usb 1-1: device descriptor read/8, error -71 [ 112.365557][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 112.454545][ T5688] usb usb1-port1: unable to enumerate USB device [ 112.774453][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 112.776431][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 112.777205][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 112.777772][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 112.778774][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 112.779357][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 112.780298][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 112.781217][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 112.782018][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 112.782752][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 112.984981][ T9] pwc: recv_control_msg error -32 req 02 val 2600 [ 112.985845][ T9] pwc: recv_control_msg error -32 req 02 val 2900 [ 112.986903][ T9] pwc: recv_control_msg error -32 req 02 val 2800 [ 113.188871][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 113.199673][ T9] pwc: Registered as video103. [ 113.205495][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input22 [ 113.230433][ T9] usb 4-1: USB disconnect, device number 12 [ 113.270664][ T5687] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 113.270893][ T5687] asix 3-1:0.188: probe with driver asix failed with error -32 [ 113.369109][ T6223] FAULT_INJECTION: forcing a failure. [ 113.369109][ T6223] name failslab, interval 1, probability 0, space 0, times 0 [ 113.369143][ T6223] CPU: 1 UID: 0 PID: 6223 Comm: syz.1.145 Tainted: G L syzkaller #0 PREEMPT(full) [ 113.369174][ T6223] Tainted: [L]=SOFTLOCKUP [ 113.369182][ T6223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 113.369195][ T6223] Call Trace: [ 113.369203][ T6223] [ 113.369213][ T6223] dump_stack_lvl+0xe8/0x150 [ 113.369247][ T6223] should_fail_ex+0x3eb/0x540 [ 113.369277][ T6223] should_failslab+0xa8/0x100 [ 113.369301][ T6223] ? skb_clone+0x212/0x3a0 [ 113.369326][ T6223] kmem_cache_alloc_noprof+0x9c/0x600 [ 113.369355][ T6223] ? lockdep_hardirqs_on+0x7b/0x110 [ 113.369388][ T6223] ? skb_clone+0x212/0x3a0 [ 113.369412][ T6223] ? pfkey_broadcast+0x3c1/0x3e0 [ 113.369439][ T6223] skb_clone+0x212/0x3a0 [ 113.369462][ T6223] ? pfkey_promisc+0x27f/0x390 [ 113.369491][ T6223] pfkey_promisc+0x9b/0x390 [ 113.369520][ T6223] pfkey_sendmsg+0xceb/0x11d0 [ 113.369547][ T6223] ? __lock_acquire+0x747/0x2de0 [ 113.369583][ T6223] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 113.369627][ T6223] ? aa_sock_msg_perm+0x144/0x210 [ 113.369657][ T6223] ? apparmor_socket_sendmsg+0x98/0x360 [ 113.369680][ T6223] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 113.369703][ T6223] sock_sendmsg_nosec+0x13a/0x180 [ 113.369734][ T6223] ____sys_sendmsg+0x54e/0x850 [ 113.369764][ T6223] ? __pfx_____sys_sendmsg+0x10/0x10 [ 113.369797][ T6223] ? import_iovec+0x73/0xa0 [ 113.369826][ T6223] ___sys_sendmsg+0x2a5/0x360 [ 113.369871][ T6223] ? __lock_acquire+0x747/0x2de0 [ 113.369909][ T6223] ? __pfx____sys_sendmsg+0x10/0x10 [ 113.369937][ T6223] ? futex_wait+0x2a2/0x390 [ 113.369995][ T6223] ? __fget_files+0x2a/0x420 [ 113.370020][ T6223] ? __fget_files+0x3a2/0x420 [ 113.370055][ T6223] __x64_sys_sendmsg+0x1b1/0x290 [ 113.370082][ T6223] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 113.370127][ T6223] do_syscall_64+0x166/0x520 [ 113.370148][ T6223] ? trace_irq_disable+0x3b/0x140 [ 113.370178][ T6223] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.370200][ T6223] ? clear_bhb_loop+0x70/0xc0 [ 113.370227][ T6223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.370248][ T6223] RIP: 0033:0x7fd72eb9e159 [ 113.370269][ T6223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.370286][ T6223] RSP: 002b:00007fd72fb53028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.370310][ T6223] RAX: ffffffffffffffda RBX: 00007fd72ee25fa0 RCX: 00007fd72eb9e159 [ 113.370326][ T6223] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 113.370339][ T6223] RBP: 00007fd72ec3503b R08: 0000000000000000 R09: 0000000000000000 [ 113.370353][ T6223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.370366][ T6223] R13: 00007fd72ee26038 R14: 00007fd72ee25fa0 R15: 00007ffd744d49e8 [ 113.370397][ T6223] [ 113.719264][ T30] audit: type=1807 audit(1789425781.549:2): action=measure res=1 [ 113.719610][ T6232] ima: policy update completed [ 113.720181][ T30] audit: type=1802 audit(1789425781.549:3): pid=6232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.1.149" res=1 errno=0 [ 113.763870][ T30] audit: type=1800 audit(1789425781.589:4): pid=4980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31228 res=0 errno=0 [ 113.785334][ T30] audit: type=1800 audit(1789425781.619:5): pid=4980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31251 res=0 errno=0 [ 113.786347][ T30] audit: type=1800 audit(1789425781.619:6): pid=4980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15090 res=0 errno=0 [ 113.841115][ T30] audit: type=1800 audit(1789425781.669:7): pid=4980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15090 res=0 errno=0 [ 113.847050][ T30] audit: type=1800 audit(1789425781.669:8): pid=4980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14967 res=0 errno=0 [ 113.889131][ T6237] FAULT_INJECTION: forcing a failure. [ 113.889131][ T6237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.889160][ T6237] CPU: 0 UID: 0 PID: 6237 Comm: syz.0.151 Tainted: G L syzkaller #0 PREEMPT(full) [ 113.889186][ T6237] Tainted: [L]=SOFTLOCKUP [ 113.889193][ T6237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 113.889204][ T6237] Call Trace: [ 113.889211][ T6237] [ 113.889219][ T6237] dump_stack_lvl+0xe8/0x150 [ 113.889249][ T6237] should_fail_ex+0x3eb/0x540 [ 113.889275][ T6237] _copy_from_user+0x2d/0xb0 [ 113.889301][ T6237] input_event_from_user+0xb1/0x290 [ 113.889329][ T6237] ? __pfx_input_event_from_user+0x10/0x10 [ 113.889367][ T6237] evdev_write+0x2c7/0x4c0 [ 113.889392][ T6237] ? __lock_acquire+0x747/0x2de0 [ 113.889424][ T6237] ? __pfx_evdev_write+0x10/0x10 [ 113.889451][ T6237] ? bpf_lsm_file_permission+0x9/0x20 [ 113.889473][ T6237] ? security_file_permission+0x75/0x260 [ 113.889501][ T6237] ? rw_verify_area+0x203/0x4c0 [ 113.889527][ T6237] ? __pfx_evdev_write+0x10/0x10 [ 113.889552][ T6237] vfs_write+0x296/0xba0 [ 113.889586][ T6237] ? __pfx_vfs_write+0x10/0x10 [ 113.889612][ T6237] ? __fget_files+0x2a/0x420 [ 113.889637][ T6237] ? __fget_files+0x2a/0x420 [ 113.889658][ T6237] ? __fget_files+0x3a2/0x420 [ 113.889678][ T6237] ? __fget_files+0x2a/0x420 [ 113.889709][ T6237] ksys_write+0x150/0x270 [ 113.889742][ T6237] ? __pfx_ksys_write+0x10/0x10 [ 113.889777][ T6237] do_syscall_64+0x166/0x520 [ 113.889795][ T6237] ? trace_irq_disable+0x3b/0x140 [ 113.889821][ T6237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.889840][ T6237] ? clear_bhb_loop+0x70/0xc0 [ 113.889864][ T6237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.889883][ T6237] RIP: 0033:0x7ff5fe19e159 [ 113.889901][ T6237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.889916][ T6237] RSP: 002b:00007ff5feff5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 113.889937][ T6237] RAX: ffffffffffffffda RBX: 00007ff5fe425fa0 RCX: 00007ff5fe19e159 [ 113.889951][ T6237] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000005 [ 113.889964][ T6237] RBP: 00007ff5feff5090 R08: 0000000000000000 R09: 0000000000000000 [ 113.889975][ T6237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 113.889987][ T6237] R13: 00007ff5fe426038 R14: 00007ff5fe425fa0 R15: 00007ffd96001118 [ 113.890016][ T6237] [ 113.891171][ T30] audit: type=1800 audit(1789425781.719:9): pid=4980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14967 res=0 errno=0 [ 114.002332][ T30] audit: type=1800 audit(1789425781.829:10): pid=6243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.150" name="new_device" dev="sysfs" ino=43723 res=0 errno=0 [ 114.014761][ T30] audit: type=1800 audit(1789425781.839:11): pid=4980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15336 res=0 errno=0 [ 114.294257][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 114.465974][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 114.467380][ T10] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 114.468489][ T10] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 114.468511][ T10] usb 4-1: config 0 has no interface number 0 [ 114.468550][ T10] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 114.471818][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.471840][ T10] usb 4-1: Product: syz [ 114.471854][ T10] usb 4-1: Manufacturer: syz [ 114.471867][ T10] usb 4-1: SerialNumber: syz [ 114.483178][ T10] usb 4-1: config 0 descriptor?? [ 114.484711][ T6244] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 114.683331][ T9] usb 3-1: USB disconnect, device number 16 [ 114.722684][ T6244] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 114.970747][ T6252] FAULT_INJECTION: forcing a failure. [ 114.970747][ T6252] name failslab, interval 1, probability 0, space 0, times 0 [ 114.970778][ T6252] CPU: 1 UID: 0 PID: 6252 Comm: syz.2.156 Tainted: G L syzkaller #0 PREEMPT(full) [ 114.970805][ T6252] Tainted: [L]=SOFTLOCKUP [ 114.970812][ T6252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 114.970823][ T6252] Call Trace: [ 114.970831][ T6252] [ 114.970840][ T6252] dump_stack_lvl+0xe8/0x150 [ 114.970873][ T6252] should_fail_ex+0x3eb/0x540 [ 114.970901][ T6252] should_failslab+0xa8/0x100 [ 114.970923][ T6252] ? __kernfs_new_node+0xe6/0x980 [ 114.970952][ T6252] kmem_cache_alloc_noprof+0x9c/0x600 [ 114.970980][ T6252] ? __kernfs_new_node+0xe6/0x980 [ 114.971015][ T6252] __kernfs_new_node+0xe6/0x980 [ 114.971052][ T6252] ? __pfx___kernfs_new_node+0x10/0x10 [ 114.971081][ T6252] ? kernfs_root+0x1c/0x230 [ 114.971113][ T6252] ? kernfs_root+0x1c/0x230 [ 114.971139][ T6252] ? kernfs_root+0x1c/0x230 [ 114.971164][ T6252] ? kernfs_root+0x1c/0x230 [ 114.971195][ T6252] kernfs_new_node+0xea/0x140 [ 114.971229][ T6252] __kernfs_create_file+0x4b/0x2e0 [ 114.971253][ T6252] sysfs_add_file_mode_ns+0x237/0x300 [ 114.971282][ T6252] sysfs_merge_group+0x183/0x320 [ 114.971305][ T6252] ? __pfx_sysfs_merge_group+0x10/0x10 [ 114.971328][ T6252] ? __pfx_device_add_attrs+0x10/0x10 [ 114.971351][ T6252] dpm_sysfs_add+0xd2/0x270 [ 114.971375][ T6252] device_add+0x4ca/0xb80 [ 114.971394][ T6252] iommu_mock_device_add+0x83/0x1e0 [ 114.971416][ T6252] iommufd_test+0x38d2/0x6360 [ 114.971450][ T6252] ? __lock_acquire+0x747/0x2de0 [ 114.971476][ T6252] ? __pfx_iommufd_test+0x10/0x10 [ 114.971510][ T6252] ? tomoyo_path_number_perm+0x219/0x5f0 [ 114.971527][ T6252] ? tomoyo_path_number_perm+0x219/0x5f0 [ 114.971546][ T6252] ? lock_acquire+0x115/0x350 [ 114.971581][ T6252] ? __might_fault+0xaf/0x130 [ 114.971608][ T6252] iommufd_fops_ioctl+0x465/0x600 [ 114.971644][ T6252] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 114.971669][ T6252] ? __fget_files+0x2a/0x420 [ 114.971697][ T6252] ? __fget_files+0x2a/0x420 [ 114.971719][ T6252] ? bpf_lsm_file_ioctl+0x9/0x20 [ 114.971740][ T6252] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 114.971760][ T6252] __se_sys_ioctl+0xfc/0x170 [ 114.971791][ T6252] do_syscall_64+0x166/0x520 [ 114.971808][ T6252] ? trace_irq_disable+0x3b/0x140 [ 114.971833][ T6252] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.971849][ T6252] ? clear_bhb_loop+0x70/0xc0 [ 114.971867][ T6252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.971881][ T6252] RIP: 0033:0x7ff075b9e159 [ 114.971896][ T6252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.971908][ T6252] RSP: 002b:00007ff076a4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 114.971925][ T6252] RAX: ffffffffffffffda RBX: 00007ff075e25fa0 RCX: 00007ff075b9e159 [ 114.971935][ T6252] RDX: 0000200000000140 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 114.971946][ T6252] RBP: 00007ff076a4d090 R08: 0000000000000000 R09: 0000000000000000 [ 114.971956][ T6252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 114.971965][ T6252] R13: 00007ff075e26038 R14: 00007ff075e25fa0 R15: 00007fff67b44718 [ 114.971989][ T6252] [ 115.331357][ T6255] mmap: syz.1.157 (6255) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 115.545851][ T10] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 115.545881][ T10] asix 4-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 115.546096][ T10] asix 4-1:0.188: probe with driver asix failed with error -32 [ 115.683925][ T6262] faux_driver vgem: [drm] Unknown color mode 135167; guessing buffer size. [ 115.904690][ T5687] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 116.056197][ T5687] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 116.067097][ T5687] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.067149][ T5687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.070165][ T5687] usb 3-1: config 0 descriptor?? [ 116.101483][ T5687] pwc: Askey VC010 type 2 USB webcam detected. [ 116.134353][ T5613] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 116.284228][ T5613] usb 1-1: Using ep0 maxpacket: 32 [ 116.285179][ T5613] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 116.286765][ T5613] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 116.286788][ T5613] usb 1-1: config 0 has no interface number 0 [ 116.286827][ T5613] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 116.289935][ T5613] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.289958][ T5613] usb 1-1: Product: syz [ 116.289971][ T5613] usb 1-1: Manufacturer: syz [ 116.289985][ T5613] usb 1-1: SerialNumber: syz [ 116.292999][ T5613] usb 1-1: config 0 descriptor?? [ 116.293909][ T6268] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 116.476517][ T5687] pwc: recv_control_msg error -32 req 02 val 2b00 [ 116.477547][ T5687] pwc: recv_control_msg error -32 req 02 val 2700 [ 116.478474][ T5687] pwc: recv_control_msg error -32 req 02 val 2c00 [ 116.479095][ T5687] pwc: recv_control_msg error -32 req 04 val 1000 [ 116.479956][ T5687] pwc: recv_control_msg error -32 req 04 val 1300 [ 116.481019][ T5687] pwc: recv_control_msg error -32 req 04 val 1400 [ 116.481936][ T5687] pwc: recv_control_msg error -32 req 02 val 2000 [ 116.483031][ T5687] pwc: recv_control_msg error -32 req 02 val 2100 [ 116.483909][ T5687] pwc: recv_control_msg error -32 req 04 val 1500 [ 116.523894][ T5687] pwc: recv_control_msg error -32 req 02 val 2500 [ 116.559635][ T6268] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 116.752966][ T5687] pwc: recv_control_msg error -32 req 02 val 2600 [ 116.753517][ T5687] pwc: recv_control_msg error -32 req 02 val 2900 [ 116.754121][ T5687] pwc: recv_control_msg error -32 req 02 val 2800 [ 116.768957][ T5687] pwc: recv_control_msg error -71 req 04 val 1100 [ 116.776054][ T5687] pwc: recv_control_msg error -71 req 04 val 1200 [ 116.782895][ T5687] pwc: Registered as video103. [ 116.785554][ T5687] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input23 [ 116.792945][ T5687] usb 3-1: USB disconnect, device number 17 [ 116.916104][ T25] usb 4-1: USB disconnect, device number 13 [ 116.974998][ T6277] rnbd_client L610: Mapping device /dev/ram: on session s+, (access_mode: rw, nr_poll_queues: 0) [ 116.983030][ T6277] rtrs_client L2100: : Failed to resolve address, err: -ENODEV [ 116.983452][ T6277] rtrs_client L2643: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 117.271475][ T6287] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd12 [ 117.620678][ T5613] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 117.620934][ T5613] asix 1-1:0.188: probe with driver asix failed with error -32 [ 117.674268][ T42] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 117.754238][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 117.835475][ T42] usb 2-1: Using ep0 maxpacket: 32 [ 117.835969][ T42] usb 2-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 117.837009][ T42] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 117.837030][ T42] usb 2-1: config 6 has 2 interfaces, different from the descriptor's value: 3 [ 117.837082][ T42] usb 2-1: config 6 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 117.838963][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.838985][ T42] usb 2-1: Product: syz [ 117.838999][ T42] usb 2-1: Manufacturer: syz [ 117.839012][ T42] usb 2-1: SerialNumber: syz [ 117.848079][ T42] usb 2-1: Fast Track Pro config OK [ 117.925452][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 117.926134][ T9] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 117.927100][ T9] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 117.927122][ T9] usb 3-1: config 0 has no interface number 0 [ 117.927151][ T9] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 117.929226][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.929239][ T9] usb 3-1: Product: syz [ 117.929247][ T9] usb 3-1: Manufacturer: syz [ 117.929255][ T9] usb 3-1: SerialNumber: syz [ 117.936848][ T9] usb 3-1: config 0 descriptor?? [ 117.973741][ T6293] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 118.047277][ T42] usb 2-1: 1:1 : no or invalid class specific endpoint descriptor [ 118.047310][ T42] usb 2-1: 1:1 : format type 0 is detected, processed as PCM [ 118.047326][ T42] usb 2-1: 1:1 : sample bitwidth 177 in over sample bytes 4 [ 118.057591][ T42] usb 2-1: 0:2 : does not exist [ 118.058092][ T42] usb 2-1: unit 5 not found! [ 118.058113][ T42] usb 2-1: unit 6 not found! [ 118.154355][ T42] usb 2-1: USB disconnect, device number 20 [ 118.217593][ T5905] udevd[5905]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:6.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 118.224418][ T6293] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 118.301780][ T6298] FAULT_INJECTION: forcing a failure. [ 118.301780][ T6298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.301823][ T6298] CPU: 1 UID: 0 PID: 6298 Comm: syz.3.173 Tainted: G L syzkaller #0 PREEMPT(full) [ 118.301850][ T6298] Tainted: [L]=SOFTLOCKUP [ 118.301857][ T6298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 118.301867][ T6298] Call Trace: [ 118.301874][ T6298] [ 118.301882][ T6298] dump_stack_lvl+0xe8/0x150 [ 118.301926][ T6298] should_fail_ex+0x3eb/0x540 [ 118.301952][ T6298] _copy_from_user+0x2d/0xb0 [ 118.301977][ T6298] sctp_setsockopt+0x1c4/0x12c0 [ 118.302004][ T6298] ? sock_common_setsockopt+0x36/0xc0 [ 118.302031][ T6298] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 118.302060][ T6298] do_sock_setsockopt+0x17c/0x1b0 [ 118.302084][ T6298] __x64_sys_setsockopt+0x13d/0x1b0 [ 118.302107][ T6298] do_syscall_64+0x166/0x520 [ 118.302124][ T6298] ? trace_irq_disable+0x3b/0x140 [ 118.302149][ T6298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.302169][ T6298] ? clear_bhb_loop+0x70/0xc0 [ 118.302192][ T6298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.302210][ T6298] RIP: 0033:0x7f8fd299e159 [ 118.302233][ T6298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.302248][ T6298] RSP: 002b:00007f8fd3801028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 118.302272][ T6298] RAX: ffffffffffffffda RBX: 00007f8fd2c25fa0 RCX: 00007f8fd299e159 [ 118.302286][ T6298] RDX: 0000000000000017 RSI: 0000000000000084 RDI: 0000000000000003 [ 118.302297][ T6298] RBP: 00007f8fd3801090 R08: 0000000000000009 R09: 0000000000000000 [ 118.302309][ T6298] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 118.302322][ T6298] R13: 00007f8fd2c26038 R14: 00007f8fd2c25fa0 R15: 00007ffc724ba298 [ 118.302349][ T6298] [ 118.423545][ T6301] kAFS: Can only specify source 'none' with -o dyn [ 118.438060][ T6304] netlink: zone id is out of range [ 118.438074][ T6304] netlink: zone id is out of range [ 118.438081][ T6304] netlink: zone id is out of range [ 118.438088][ T6304] netlink: zone id is out of range [ 118.438095][ T6304] netlink: zone id is out of range [ 118.442076][ T6304] netlink: zone id is out of range [ 118.442087][ T6304] netlink: zone id is out of range [ 118.442094][ T6304] netlink: zone id is out of range [ 118.442124][ T6304] netlink: set zone limit has 4 unknown bytes [ 118.674317][ T42] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 118.745235][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 118.745293][ T30] audit: type=1800 audit(1789425786.579:90): pid=6309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.175" name="new_device" dev="sysfs" ino=43723 res=0 errno=0 [ 118.825755][ T42] usb 4-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 118.827759][ T42] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 240, using maximum allowed: 30 [ 118.827785][ T42] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 240 [ 118.830062][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.830084][ T42] usb 4-1: Product: syz [ 118.830093][ T42] usb 4-1: Manufacturer: syz [ 118.830101][ T42] usb 4-1: SerialNumber: syz [ 118.834847][ T30] audit: type=1800 audit(1789425786.669:91): pid=5628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=117536 res=0 errno=0 [ 118.839760][ T42] ums_eneub6250 4-1:1.0: USB Mass Storage device detected [ 118.850801][ T30] audit: type=1800 audit(1789425786.679:92): pid=5628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=117568 res=0 errno=0 [ 118.850842][ T30] audit: type=1800 audit(1789425786.679:93): pid=5628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=117543 res=0 errno=0 [ 118.853124][ T30] audit: type=1800 audit(1789425786.679:94): pid=5628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=117544 res=0 errno=0 [ 118.868140][ T42] scsi host1: usb-storage 4-1:1.0 [ 118.910286][ T30] audit: type=1800 audit(1789425786.739:95): pid=4980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=117604 res=0 errno=0 [ 119.008576][ T10] usb 1-1: USB disconnect, device number 17 [ 119.052267][ T30] audit: type=1800 audit(1789425786.879:96): pid=4980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14967 res=0 errno=0 [ 119.061407][ T9] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 119.061455][ T9] asix 3-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 119.061684][ T9] asix 3-1:0.188: probe with driver asix failed with error -32 [ 119.096119][ T30] audit: type=1800 audit(1789425786.929:97): pid=5785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=117315 res=0 errno=0 [ 119.096183][ T30] audit: type=1800 audit(1789425786.929:98): pid=5785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=117316 res=0 errno=0 [ 119.099834][ T30] audit: type=1800 audit(1789425786.929:99): pid=5785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=117295 res=0 errno=0 [ 119.484260][ T5687] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 119.614256][ T5687] usb 1-1: device descriptor read/64, error -71 [ 119.794309][ T5613] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 119.854241][ T5687] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 119.924281][ T5613] usb 2-1: device descriptor read/64, error -71 [ 119.994213][ T5687] usb 1-1: device descriptor read/64, error -71 [ 120.104655][ T5687] usb usb1-port1: attempt power cycle [ 120.164229][ T5613] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 120.294221][ T5613] usb 2-1: device descriptor read/64, error -71 [ 120.405899][ T5613] usb usb2-port1: attempt power cycle [ 120.444221][ T5687] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 120.464702][ T5687] usb 1-1: device descriptor read/8, error -71 [ 120.534904][ T5688] usb 3-1: USB disconnect, device number 18 [ 120.597080][ T6323] netlink: 24 bytes leftover after parsing attributes in process `syz.2.178'. [ 120.704427][ T5687] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 120.724680][ T5687] usb 1-1: device descriptor read/8, error -71 [ 120.744288][ T5613] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 120.764723][ T5613] usb 2-1: device descriptor read/8, error -71 [ 120.836303][ T5687] usb usb1-port1: unable to enumerate USB device [ 120.932523][ T6327] lo speed is unknown, defaulting to 1000 [ 120.943050][ T6327] lo speed is unknown, defaulting to 1000 [ 120.951122][ T6327] lo speed is unknown, defaulting to 1000 [ 121.004463][ T5613] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 121.027037][ T5613] usb 2-1: device descriptor read/8, error -71 [ 121.119472][ T6327] infiniband syz0: set active [ 121.120326][ T5687] lo speed is unknown, defaulting to 1000 [ 121.120961][ T6327] infiniband syz0: added lo [ 121.134447][ T5613] usb usb2-port1: unable to enumerate USB device [ 121.145209][ T6327] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 121.145242][ T6327] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 121.145280][ T6327] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 121.194281][ T6327] RDS/IB: syz0: added [ 121.194702][ T6327] smc: adding ib device syz0 with port count 1 [ 121.194809][ T6327] smc: ib device syz0 port 1 has no pnetid [ 121.198489][ T5613] lo speed is unknown, defaulting to 1000 [ 121.208257][ T6327] lo speed is unknown, defaulting to 1000 [ 121.394632][ T6327] lo speed is unknown, defaulting to 1000 [ 121.434277][ T5613] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 121.514109][ T43] IPVS: starting estimator thread 0... [ 121.585129][ T5613] usb 3-1: Using ep0 maxpacket: 32 [ 121.587185][ T5613] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 121.591864][ T5613] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.591888][ T5613] usb 3-1: Product: syz [ 121.591902][ T5613] usb 3-1: Manufacturer: syz [ 121.591916][ T5613] usb 3-1: SerialNumber: syz [ 121.605179][ T6333] IPVS: using max 30 ests per chain, 72000 per kthread [ 121.688592][ T6327] lo speed is unknown, defaulting to 1000 [ 121.898244][ T6327] lo speed is unknown, defaulting to 1000 [ 122.238722][ T5613] usb 3-1: 1:1: cannot get freq (v2/v3): err -32 [ 122.464446][ T6312] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 122.472283][ T6312] #PF: supervisor instruction fetch in kernel mode [ 122.478780][ T6312] #PF: error_code(0x0010) - not-present page [ 122.484749][ T6312] PGD 800000007f878067 P4D 800000007f878067 PUD 0 [ 122.491254][ T6312] Oops: Oops: 0010 [#1] SMP KASAN PTI [ 122.496617][ T6312] CPU: 1 UID: 0 PID: 6312 Comm: usb-storage Tainted: G L syzkaller #0 PREEMPT(full) [ 122.507550][ T6312] Tainted: [L]=SOFTLOCKUP [ 122.511860][ T6312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.521899][ T6312] RIP: 0010:0x0 [ 122.525353][ T6312] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 122.532702][ T6312] RSP: 0018:ffffc90004ddfad8 EFLAGS: 00010246 [ 122.538757][ T6312] RAX: 1ffff1100eea99ef RBX: ffff888075ae1110 RCX: ffffffff9ac59501 [ 122.546717][ T6312] RDX: 0000000000000001 RSI: ffffffff8e59e74c RDI: ffff88807754ce88 [ 122.554687][ T6312] RBP: ffffc90004ddfcd0 R08: ffffffff909bb37f R09: 1ffffffff213766f [ 122.562661][ T6312] R10: dffffc0000000000 R11: 0000000000000000 R12: ffff88807754ce88 [ 122.570641][ T6312] R13: dffffc0000000000 R14: 1ffff920009bbf74 R15: ffff88807754c030 [ 122.578602][ T6312] FS: 0000000000000000(0000) GS:ffff88812495b000(0000) knlGS:0000000000000000 [ 122.587518][ T6312] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 122.594111][ T6312] CR2: ffffffffffffffd6 CR3: 0000000069b32000 CR4: 00000000003526f0 [ 122.602076][ T6312] Call Trace: [ 122.605344][ T6312] [ 122.608263][ T6312] usb_stor_invoke_transport+0x4d1/0x1970 [ 122.613988][ T6312] ? __lock_acquire+0x1511/0x2de0 [ 122.619027][ T6312] ? __pfx_usb_stor_invoke_transport+0x10/0x10 [ 122.625186][ T6312] ? do_raw_spin_lock+0x12b/0x2f0 [ 122.630213][ T6312] ? _raw_spin_unlock_irq+0x23/0x50 [ 122.635410][ T6312] usb_stor_control_thread+0x409/0x870 [ 122.640869][ T6312] ? __pfx_usb_stor_control_thread+0x10/0x10 [ 122.646851][ T6312] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 122.652650][ T6312] ? __kthread_parkme+0x71/0x1f0 [ 122.657692][ T6312] ? __kthread_parkme+0x199/0x1f0 [ 122.662711][ T6312] kthread+0x38b/0x480 [ 122.666773][ T6312] ? __pfx_usb_stor_control_thread+0x10/0x10 [ 122.672747][ T6312] ? __pfx_kthread+0x10/0x10 [ 122.677333][ T6312] ret_from_fork+0x514/0xb70 [ 122.681919][ T6312] ? __pfx_ret_from_fork+0x10/0x10 [ 122.687024][ T6312] ? __switch_to+0xc89/0x1420 [ 122.691688][ T6312] ? __pfx_kthread+0x10/0x10 [ 122.696269][ T6312] ret_from_fork_asm+0x1a/0x30 [ 122.701029][ T6312] [ 122.704033][ T6312] Modules linked in: [ 122.707933][ T6312] CR2: 0000000000000000 [ 122.712076][ T6312] ---[ end trace 0000000000000000 ]--- [ 122.717524][ T6312] RIP: 0010:0x0 [ 122.717546][ T6312] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 122.717554][ T6312] RSP: 0018:ffffc90004ddfad8 EFLAGS: 00010246 [ 122.717569][ T6312] RAX: 1ffff1100eea99ef RBX: ffff888075ae1110 RCX: ffffffff9ac59501 [ 122.717587][ T6312] RDX: 0000000000000001 RSI: ffffffff8e59e74c RDI: ffff88807754ce88 [ 122.717598][ T6312] RBP: ffffc90004ddfcd0 R08: ffffffff909bb37f R09: 1ffffffff213766f [ 122.717610][ T6312] R10: dffffc0000000000 R11: 0000000000000000 R12: ffff88807754ce88 [ 122.717621][ T6312] R13: dffffc0000000000 R14: 1ffff920009bbf74 R15: ffff88807754c030 [ 122.717633][ T6312] FS: 0000000000000000(0000) GS:ffff88812495b000(0000) knlGS:0000000000000000 [ 122.717646][ T6312] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 122.717657][ T6312] CR2: ffffffffffffffd6 CR3: 0000000069b32000 CR4: 00000000003526f0 [ 122.717675][ T6312] Kernel panic - not syncing: Fatal exception [ 122.803959][ T6312] Kernel Offset: disabled [ 122.808279][ T6312] Rebooting in 86400 seconds..