last executing test programs: 19.028415202s ago: executing program 1 (id=2054): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x0, "1d00"}, @local=@item_012={0x0, 0x2, 0x9}, @global=@item_012={0x0, 0x1, 0x1}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f00000000c0)={0x20, 0xe, 0x2, '\nH'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18.083321802s ago: executing program 4 (id=2061): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x14, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0022240000002b1bde2188166048b361c310773b71be180567070004008300000000926bd1274cdc9522"], 0x0}, 0x0) 15.931678241s ago: executing program 1 (id=2066): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r4, 0x5609, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101402) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000980)={0x3, 0x0, 0x800008c9, 0x1, 0xfffffffd}) syz_open_dev$media(&(0x7f00000000c0), 0x1ff, 0x0) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000080)=@multiplanar_mmap={0x7c, 0x6, 0x4, 0x100000, 0xfffffffc, {}, {0x4, 0x2, 0x3, 0x5, 0xd9, 0x1, "de4ffbbd"}, 0x3, 0x1, {0x0}, 0x9a8f753}) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xbd, 0x60, 0x6, 0x1, 0x0, 0xffff, 0xb530}}}, 0x0) r8 = syz_io_uring_setup(0x1e1e, &(0x7f00000003c0)={0x0, 0x86f7, 0x800, 0x1}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r8, 0x48e9, 0x0, 0x2, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r12}, 0x10) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20002000) sendmsg$NFT_BATCH(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a04000000120a98000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000001140000001100010000000000000000000051a00ab581bf5872bd5c0d5f6e81b16055f17fd5d2c091b9b43830d4538ee8474973c563a94fbfa4b628f39ab6ca264ddcaafe5b765b56f092fb4584316f7aaca5c9345843a15e94fcc1386e0eea25e0994f03eb261f48f64fef6dc521b4d29a6999b38a6554890404117f73a374293c8b66fcb8697b1094"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r13, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="20000000150a0102b48a9bf90000000000000002090001"], 0x20}, 0x1, 0x0, 0x0, 0x8804}, 0x24040808) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x60) symlinkat(&(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00') 15.014985016s ago: executing program 4 (id=2071): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r2, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_io_uring_setup(0x1e1e, 0x0, &(0x7f0000002000), &(0x7f0000000000)) io_uring_enter(r3, 0x48e9, 0x0, 0x2, 0x0, 0x0) socket$inet(0x2, 0x0, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x1}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x2000, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 12.534269131s ago: executing program 1 (id=2074): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x22ea6, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000000)={0xda, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000300)=@arm64) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r3 = syz_usb_connect(0x7, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="120114009dea5a7527a00b3fd12daa997840b418fbff7bdc01020301090212000100000000090401288a89c6368e5ae5305f7d28e328a38bebff5a1aa64f1f2a6cd29273139aacc97422456638aa765de57e069d8c062d6640cbd7f85e97166a970764da97b96123db75473638e886f3d0091928b5026f16497f6430f5a3471bae732bbcce88551cfed87004d1517762dbf64d10f385e85efa1d99190a9b1b797f918f5471ab7c97b8d30593d6d40713137e696e621fecadb9be61a49cabb78f44f2aea026f3c66191310436983e2d87f8bdf62abd445de91d16933bf419ba15ed0e5eb3dd4d914ef841cfbc677a73354940b07c7223b369c9cbafff825a0e8c0bf213c643cf0c377226590e84be457e8725900384efa45b26894c673493d63e33c4c0ad4c432733e8d5b5d17036d8d1a76d23750acbb7ebca8d023a69c363d9e7cc8516178e9055705b4224e382ec52017dad1b1a32418b"], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r4, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x103000, 0x18f) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = socket(0x15, 0x5, 0x0) io_uring_setup(0x1bb1, &(0x7f0000000000)={0x0, 0xeec2, 0x1000, 0x800003, 0x10b}) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r7, &(0x7f0000000040)=[{&(0x7f0000000000)="e3", 0x1}], 0x1, 0x1) fcntl$setpipe(r6, 0x407, 0x176) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) vmsplice(r6, &(0x7f00000018c0)=[{&(0x7f0000000100)="91", 0x1}], 0x1, 0x5) setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 11.788004966s ago: executing program 4 (id=2076): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x0, "1d00"}, @local=@item_012={0x0, 0x2, 0x9}, @global=@item_012={0x0, 0x1, 0x1}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f00000000c0)={0x20, 0xe, 0x2, '\nH'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.07716399s ago: executing program 0 (id=2081): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) (async) writev(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000000400)='{', 0x1}], 0x1) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket(0x10, 0x3, 0x3b7) (async) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) shmctl$SHM_STAT(0x0, 0xd, 0x0) (async) r4 = memfd_create(&(0x7f00000008c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x0) (async) r5 = fsopen(&(0x7f0000000100)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r5, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000200"/203], 0x1fffc) (async) syz_emit_vhci(&(0x7f0000001e00)=ANY=[@ANYBLOB="2136077dfa7a74abaa"], 0xa) (async) ftruncate(r4, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r4, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendfile(r4, r4, 0x0, 0x200001) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x12c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x11}}, {0x8, 0x2, @remote}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0xa8, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0xffffffffffffffc2, 0x1, 0x4e20}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}]}, @CTA_SEQ_ADJ_REPLY={0x14, 0x4, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x0, 0x3, 0x1, 0x0, 0xffff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6b2}]}]}, 0x12c}}, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x29, 0xb5, 0xea, 0x20, 0xd81, 0x1900, 0xb9a0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2a, 0xd7, 0x74}}]}}]}}, 0x0) 10.617476092s ago: executing program 0 (id=2082): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={@private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', @mcast2, 0x8, 0x3c80, 0x85, 0x400, 0x3, 0x60}) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x9, 0x0, 0xfffffffffffffffd, 0x400009, 0x8, 0xa}, 0x0) syz_open_dev$media(0x0, 0x80000006, 0xd01840) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8810) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 10.510186276s ago: executing program 0 (id=2084): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xc, 0x0, &(0x7f0000000140)=[@dead_binder_done], 0x0, 0x0, 0x0}) r2 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="3703e6166979c1418cdad00404f232bee80ba28c8b5ea7ef5880099d1ea4c094f6a06af7cc990aa37b8360c9c762c9818c29ad81ba0193b987eccfe2c23c318d932d80528f3f40dfb1679da7bbd57e50d131e4c496adb83f0e80efb1a516870729eb348180c86d513ca5c82c30bbf7661b88ea81bb3e88e79328feb257237ba17160d93da1589799b1d0684f320ffd922e0ece14dcd90b65881a7e220d0d8b97606df0bc0faf20a99320670bdc4fbfe2e2c628ae360947bfaf44b1925d3ce692bc308ca34eab5170fad58c6fac7daf6449d9189c0a0719c1e78a1239009d81380c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000d80)={0x84, &(0x7f0000000900)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.356008031s ago: executing program 1 (id=2085): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r2, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_io_uring_setup(0x1e1e, 0x0, &(0x7f0000002000), &(0x7f0000000000)) io_uring_enter(r3, 0x48e9, 0x0, 0x2, 0x0, 0x0) socket$inet(0x2, 0x0, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x1}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x2000, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 8.454028652s ago: executing program 4 (id=2087): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x181d82, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="08000000000000006c02"]) 8.150874784s ago: executing program 4 (id=2090): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x309}) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000540)={{0x16, @rand_addr=0x64010102, 0x4e21, 0x1, 'lblcr\x00', 0x22, 0x0, 0x5e}, {@loopback, 0x4e21, 0x2000, 0x2d, 0xa, 0x5}}, 0x44) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000050a000/0x13000)=nil, 0x13000}, 0x1}) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/224, 0x20}], 0x1000000000000108) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) r1 = socket(0xa, 0x3, 0x3a) r2 = syz_usb_connect(0x3, 0x24, &(0x7f0000000f80)=ANY=[@ANYBLOB="120100038ee3710889076001fe8201020301090212000107d1102d0904cc50f109"], &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000002d00)={0x44, &(0x7f0000000000)={0x20, 0x16, 0x6, "99d9e9678b2c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000003140)={0x34, &(0x7f0000002ec0)={0x40, 0xe, 0x2, "68ae"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x3, 0x24, &(0x7f0000000580)={{0x12, 0x1, 0x310, 0x20, 0xad, 0x16, 0x20, 0x7c0, 0x158b, 0xd096, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x7f, 0x0, 0x4, [{{0x9, 0x4, 0xb3, 0x1, 0x0, 0x4f, 0x7e, 0xc2, 0x2}}]}}]}}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r1) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}}, 0x5c) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14, 0x80000) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000100)={r4}) openat$mixer(0xffffff9c, &(0x7f0000000140), 0x840, 0x0) 8.15028668s ago: executing program 3 (id=2091): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001680)) r2 = eventfd2(0x1, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) r3 = userfaultfd(0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x21}) munmap(&(0x7f0000d67000/0x2000)=nil, 0x2000) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000d67000/0x4000)=nil, 0x4000}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2400000076001f03000000000000000008000000ffffffff0c000d80080003"], 0x24}], 0x1}, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e05411, &(0x7f0000000340)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x18) 7.7834769s ago: executing program 2 (id=2092): preadv(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x7, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0x0, 0xa00}) syz_emit_vhci(&(0x7f0000000880)=ANY=[@ANYBLOB="043e0c0451dac37ceac7491429d782"], 0xf) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) syz_emit_ethernet(0x4a, &(0x7f0000000b40)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa06", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="85f10aaa127b3c62a50fbbaba2aefaa750c00000af7800002ec8665db05f3e3205a8fc8608271c57b4abedc2128ae99c1f6e2c3f38"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="30000000152201010000000000000000050000071c0008009606f38bc5549c4b43c4ead6"], 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x2000000000000239, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000220000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000700000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xcc0, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860186dd", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r0, &(0x7f0000000ac0)={&(0x7f0000000680)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000006c0)="1aae02a9a5926775319823a95e9ad569a1a4449e5e9e7952ead1675a19397736f78a413fd40eeb28064d84f04a54106da24abc1c82e9afcd88beae54d824af15224597afaf480f", 0x47}, {&(0x7f0000000740)="37ffe2e81913e7ec9f6b9313ff957d6197ec657923f0d6cdac743cacbd15c75817949fe4021c127ac747a6a7121ce1d64d679b884e9a8aa493e769d5f3d96635423afb999045bb6c66f1d89eff1338aa86150630f67de71b80646b8f71e78fdf0b0371cedcfb08287a2a2375ed5ca8616b9a0889197663dc33f43a7bd318014550b3185cca568fcbae103b797657764f479978c0a729c9a120c35b1ece59e8be0c7bad585ac742be8661948f58d385b2f1960577d56c0936b91e1a821175561b631900f4a50966fb681e4d615a8362707c092ac0b408bc", 0xd7}, {&(0x7f0000000840)="62f7ea5857627c3dcd91d689559ca3045da3addfc3afa07b76802f924eedb0d8e8013980f4695341ff58dd75a45eca2f75bcb12fcf6edb4b12fcb48f2ac3934d66eee58e3cfb3623ceef7020c14de0b09f8188b342bb81e012c80560394457c951dbd688d2625944b73beaa97a041d490d02e680fb83aa414edb34bce4446084c8259b92cf8cfeef1683b5ba7e1b1e4bbf9068f9e03cecde4eb7c55e781d39a21986c3e0995487fac7047aef6293c73eb6eeff6084a285aeb466a51b90e933c02576cd775a343618594cb6890daca850d79e61", 0xd3}, {&(0x7f0000000940)="096d85a9069331788b84b99ca90617", 0xf}, {&(0x7f0000000980)="443afb62fe106e76b2ef25d707019291f8bbfb1ded0e33b3c8e19d470791333e961b0784088dcfd8d7c0d57d009060391ce33d2688c4f1aef081b174e65eb1026862e5c5325b4061bdd86601a46ecb61fe8da0f723a6076fc2dd31e2c8f2173ae5e76655336f62f2ecdf40cf5fa3554f5d452668ab038db4bf8ba98e00c6abcc342335a8abf561dab201a95f4781b7326967510cee11b4cd921c81905833828d2a67ef1ca984aff398c8bb19f3667964683a738c872a905bf87da62f52f8d08cc350d3d7d83f64e04a2ba2a5b6e7bb2382169e0594f57b3013aac866", 0xdc}], 0x5}, 0x10) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r5 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x5, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r4, 0x3, {0x0, 0x1, 0x4}}, 0x18) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/netfilter\x00') pread64(r6, &(0x7f0000000400)=""/255, 0xff, 0x4) ioctl$TIOCOUTQ(r6, 0x5411, &(0x7f0000000b00)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) 7.548064324s ago: executing program 2 (id=2093): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x20000050) 7.176719563s ago: executing program 2 (id=2094): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = getpid() preadv(0xffffffffffffffff, &(0x7f0000001b00), 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = gettid() r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) r5 = syz_open_procfs(r2, &(0x7f00000000c0)='net/ip6_tables_matches\x00') ioctl$IOCTL_VMCI_SET_NOTIFY(r5, 0x7cb, &(0x7f0000000140)={0x9, 0xd921, 0xfffffff8}) r6 = inotify_init() inotify_add_watch(r6, &(0x7f0000000000)='.\x00', 0x400017e) r7 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) close(r7) write$rfkill(r4, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, 0x0, 0x0) write$rfkill(r4, 0x0, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, 0x0) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ioctl$DMA_BUF_IOCTL_SYNC(r10, 0x40086200, &(0x7f0000000180)=0x4) 6.913474979s ago: executing program 3 (id=2095): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={@private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', @mcast2, 0x8, 0x3c80, 0x85, 0x400, 0x3, 0x60}) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x9, 0x0, 0xfffffffffffffffd, 0x400009, 0x8, 0xa}, 0x0) syz_open_dev$media(0x0, 0x80000006, 0xd01840) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000000c0)={0x0, 'team0\x00', {0x2}, 0x401}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8810) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 6.748875971s ago: executing program 3 (id=2096): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = dup(0xffffffffffffffff) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x1c2e, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000080), &(0x7f00000001c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x30, r4, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSS_SELECT={0x8, 0xe3, 0x0, 0x1, {0x4}}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x40, r4, 0x0, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x36}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfff2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xc2e}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c045}, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x14d802, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x402c5839, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$evdev(0x0, 0xffff0000, 0x107002) socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC=0x0]) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xe0) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@updsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x5c}, {@in=@loopback, 0x0, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0x1900000000000000}, {}, 0x0, 0x0, 0xa, 0x4, 0x80}, [@algo_auth_trunc={0x4c, 0x14, {{'sm3\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) 6.409680292s ago: executing program 0 (id=2097): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) socket(0x4, 0x800, 0xfa) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x43f, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x114c3, 0x100}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @sit={{0x8}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_LINK={0x8, 0x1, r1}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x19}}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x8810) 6.247807881s ago: executing program 0 (id=2098): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r4, 0x5609, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x101402) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, 0x0) syz_open_dev$media(&(0x7f00000000c0), 0x1ff, 0x0) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000080)=@multiplanar_mmap={0x7c, 0x6, 0x4, 0x100000, 0xfffffffc, {}, {0x4, 0x2, 0x3, 0x5, 0xd9, 0x1, "de4ffbbd"}, 0x3, 0x1, {0x0}, 0x9a8f753}) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xbd, 0x60, 0x6, 0x1, 0x0, 0xffff, 0xb530}}}, 0x0) r8 = syz_io_uring_setup(0x1e1e, &(0x7f00000003c0)={0x0, 0x86f7, 0x800, 0x1}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r8, 0x48e9, 0x0, 0x2, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r12}, 0x10) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20002000) sendmsg$NFT_BATCH(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a04000000120a98000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000001140000001100010000000000000000000051a00ab581bf5872bd5c0d5f6e81b16055f17fd5d2c091b9b43830d4538ee8474973c563a94fbfa4b628f39ab6ca264ddcaafe5b765b56f092fb4584316f7aaca5c9345843a15e94fcc1386e0eea25e0994f03eb261f48f64fef6dc521b4d29a6999b38a6554890404117f73a374293c8b66fcb8697b1094"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r13, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="20000000150a0102b48a9bf90000000000000002090001"], 0x20}, 0x1, 0x0, 0x0, 0x8804}, 0x24040808) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x60) symlinkat(&(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00') 6.219822105s ago: executing program 2 (id=2099): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x0, "1d00"}, @local=@item_012={0x0, 0x2, 0x9}, @global=@item_012={0x0, 0x1, 0x1}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f00000000c0)={0x20, 0xe, 0x2, '\nH'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.853482006s ago: executing program 3 (id=2100): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x181d82, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="08000000000000006c02"]) 5.655836441s ago: executing program 3 (id=2101): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$media(0x0, 0x0, 0x101d01) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r2, 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)=0x10000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) close(0x3) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x3a, 0xd, 0x4, 0xd646, 0x7, 0x10000000000f, 0x100000000, 0x1fe, 0x0, 0x58, 0x8000000000000001, 0xc7, 0x7fff, 0x101, 0x392ad71a, 0x1], 0xdddd1000, 0x141a54}) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@x86={0x1, 0x0, 0x3, 0x0, 0xb85f, 0x3, 0x6, 0x1, 0x0, 0x9, 0x8, 0x0, 0x0, 0x80000001, 0x81e, 0x8, 0xe, 0xb6, 0x61, '\x00', 0xe, 0x4}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x13000000, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 3.148818948s ago: executing program 2 (id=2102): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000190c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = syz_open_procfs(0x0, 0x0) pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r3 = socket(0x1e, 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x10f, 0x4, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f00000001c0)={0x0, 'vlan1\x00', {0x1}, 0x7f}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x43, 0x40) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000041c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xfffffffffffffffd, {0x0, 0xe093689eb8ae1198}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x6c801, 0xc0) 3.147846813s ago: executing program 1 (id=2112): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x0, "1d00"}, @local=@item_012={0x0, 0x2, 0x9}, @global=@item_012={0x0, 0x1, 0x1}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f00000000c0)={0x20, 0xe, 0x2, '\nH'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 147.438073ms ago: executing program 2 (id=2103): preadv(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x7, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0x0, 0xa00}) syz_emit_vhci(&(0x7f0000000880)=ANY=[@ANYBLOB="043e0c0451dac37ceac7491429d782"], 0xf) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) syz_emit_ethernet(0x4a, &(0x7f0000000b40)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa06", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="85f10aaa127b3c62a50fbbaba2aefaa750c00000af7800002ec8665db05f3e3205a8fc8608271c57b4abedc2128ae99c1f6e2c3f38"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="30000000152201010000000000000000050000071c0008009606f38bc5549c4b43c4ead6"], 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x2000000000000239, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000220000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000700000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xcc0, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860186dd", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r0, &(0x7f0000000ac0)={&(0x7f0000000680)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000006c0)="1aae02a9a5926775319823a95e9ad569a1a4449e5e9e7952ead1675a19397736f78a413fd40eeb28064d84f04a54106da24abc1c82e9afcd88beae54d824af15224597afaf480f", 0x47}, {&(0x7f0000000740)="37ffe2e81913e7ec9f6b9313ff957d6197ec657923f0d6cdac743cacbd15c75817949fe4021c127ac747a6a7121ce1d64d679b884e9a8aa493e769d5f3d96635423afb999045bb6c66f1d89eff1338aa86150630f67de71b80646b8f71e78fdf0b0371cedcfb08287a2a2375ed5ca8616b9a0889197663dc33f43a7bd318014550b3185cca568fcbae103b797657764f479978c0a729c9a120c35b1ece59e8be0c7bad585ac742be8661948f58d385b2f1960577d56c0936b91e1a821175561b631900f4a50966fb681e4d615a8362707c092ac0b408bc", 0xd7}, {&(0x7f0000000840)="62f7ea5857627c3dcd91d689559ca3045da3addfc3afa07b76802f924eedb0d8e8013980f4695341ff58dd75a45eca2f75bcb12fcf6edb4b12fcb48f2ac3934d66eee58e3cfb3623ceef7020c14de0b09f8188b342bb81e012c80560394457c951dbd688d2625944b73beaa97a041d490d02e680fb83aa414edb34bce4446084c8259b92cf8cfeef1683b5ba7e1b1e4bbf9068f9e03cecde4eb7c55e781d39a21986c3e0995487fac7047aef6293c73eb6eeff6084a285aeb466a51b90e933c02576cd775a343618594cb6890daca850d79e61", 0xd3}, {&(0x7f0000000940)="096d85a9069331788b84b99ca90617", 0xf}, {&(0x7f0000000980)="443afb62fe106e76b2ef25d707019291f8bbfb1ded0e33b3c8e19d470791333e961b0784088dcfd8d7c0d57d009060391ce33d2688c4f1aef081b174e65eb1026862e5c5325b4061bdd86601a46ecb61fe8da0f723a6076fc2dd31e2c8f2173ae5e76655336f62f2ecdf40cf5fa3554f5d452668ab038db4bf8ba98e00c6abcc342335a8abf561dab201a95f4781b7326967510cee11b4cd921c81905833828d2a67ef1ca984aff398c8bb19f3667964683a738c872a905bf87da62f52f8d08cc350d3d7d83f64e04a2ba2a5b6e7bb2382169e0594f57b3013aac866", 0xdc}], 0x5}, 0x10) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r5 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x5, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r4, 0x3, {0x0, 0x1, 0x4}}, 0x18) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/netfilter\x00') pread64(r6, &(0x7f0000000400)=""/255, 0xff, 0x4) ioctl$TIOCOUTQ(r6, 0x5411, &(0x7f0000000b00)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) 127.478601ms ago: executing program 4 (id=2104): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000190c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = syz_open_procfs(0x0, 0x0) pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r3 = socket(0x1e, 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x10f, 0x4, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f00000001c0)={0x0, 'vlan1\x00', {0x1}, 0x7f}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x43, 0x40) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000041c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xfffffffffffffffd, {0x0, 0xe093689eb8ae1198}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x6c801, 0xc0) 125.315986ms ago: executing program 3 (id=2105): capset(&(0x7f0000000100)={0x19980330}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200), 0x106, 0x1}}, 0x20) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x39e) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x5, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) listen(r8, 0x0) listen(r7, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3e7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00121000a6400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 118.826769ms ago: executing program 0 (id=2106): write$tun(0xffffffffffffffff, &(0x7f0000000600)={@val={0x0, 0x800}, @val={0x1, 0x5, 0x7, 0x3, 0x80, 0x6}, @mpls={[], @ipv6=@udp={0x7, 0x6, "b21358", 0x8, 0x11, 0xff, @rand_addr=' \x01\x00', @empty, {[], {0x4e24, 0x4e21, 0x8}}}}}, 0x3e) r0 = socket$key(0xf, 0x3, 0x2) socket(0x1, 0x3, 0xfffffffc) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x6e6bbd, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@local, @in6=@mcast2}}]}, 0x50}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x20000000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r6, 0x4008941a, &(0x7f0000000000)) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000008902"]) 0s ago: executing program 1 (id=2107): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={@private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', @mcast2, 0x8, 0x3c80, 0x85, 0x400, 0x3, 0x60}) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x9, 0x0, 0xfffffffffffffffd, 0x400009, 0x8, 0xa}, 0x0) syz_open_dev$media(0x0, 0x80000006, 0xd01840) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000000c0)={0x0, 'team0\x00', {0x2}, 0x401}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8810) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) kernel console output (not intermixed with test programs): 107][ T5903] usb-storage 4-1:0.20: USB Mass Storage device detected [ 504.628181][ T5911] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.645555][ T5903] usb-storage 4-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 504.657872][ T5911] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 504.667641][ T5911] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 504.676613][ T5911] usb 2-1: Product: syz [ 504.681364][ T5911] usb 2-1: Manufacturer: syz [ 504.690996][ C0] usblp0: nonzero read bulk status received: -71 [ 504.728752][ T5903] usb 3-1: USB disconnect, device number 89 [ 504.740257][ T5911] hub 2-1:4.0: USB hub found [ 504.908565][ T5911] hub 2-1:4.0: config failed, hub has too many ports! (err -19) [ 504.928627][T12670] usblp0: removed [ 505.145548][ T5840] cgroup: fork rejected by pids controller in /syz4 [ 505.240318][ T5940] usb 2-1: USB disconnect, device number 91 [ 505.430666][ T1157] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.546070][ T1157] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.628899][ T1157] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.780411][ T1157] team0: Port device netdevsim0 removed [ 505.803117][ T1157] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.499492][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 506.517114][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 506.525450][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 506.557973][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 506.566050][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 506.581698][T11801] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 506.602747][ T5145] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 506.610037][ T10] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 506.685498][ T5145] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 506.693206][ T5145] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 506.711203][ T5145] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 506.728727][ T5145] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 506.779587][T11801] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 506.793136][T11801] usb 2-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 506.835989][ T10] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 10601, setting to 1024 [ 506.836021][ T10] usb 3-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 1024 [ 506.836042][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 506.864686][T11801] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.883098][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 506.894126][T11801] usb 2-1: config 0 descriptor?? [ 506.903186][T11801] rndis_host 2-1:0.0: probe with driver rndis_host failed with error -22 [ 507.022260][ T10] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 507.059411][ T10] usb 3-1: Product: syz [ 507.065776][ T10] usb 3-1: Manufacturer: syz [ 507.081338][ T1157] bridge_slave_1: left allmulticast mode [ 507.095533][ T10] usb 3-1: SerialNumber: syz [ 507.100953][ T1157] bridge_slave_1: left promiscuous mode [ 507.115801][ T10] usb 3-1: config 0 descriptor?? [ 507.124206][ T1157] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.138454][T12735] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 507.154479][ T10] usb 3-1: selecting invalid altsetting 0 [ 507.166502][ T1157] bridge_slave_0: left allmulticast mode [ 507.189470][ T1157] bridge_slave_0: left promiscuous mode [ 507.214764][ T5911] usb 4-1: USB disconnect, device number 97 [ 507.246131][ T1157] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.481370][T12749] sctp: [Deprecated]: syz.3.1738 (pid 12749) Use of int in max_burst socket option. [ 507.481370][T12749] Use struct sctp_assoc_value instead [ 507.563233][T12726] ALSA: mixer_oss: invalid OSS volume '' [ 507.777712][T12747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.787233][T12747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.047037][ T5930] vhci_hcd: vhci_device speed not set [ 508.656929][ T1157] bond0 (unregistering): Released all slaves [ 508.670163][T12754] tipc: Cannot configure node identity twice [ 508.760620][ T1157] : left promiscuous mode [ 508.843208][ T5827] usb 3-1: USB disconnect, device number 90 [ 508.929335][ T1157] tipc: Left network mode [ 508.961372][ T5145] Bluetooth: hci2: command tx timeout [ 509.130200][ T5911] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 509.302830][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.354650][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.385621][ T5911] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 509.407695][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.437913][ T5911] usb 4-1: config 0 descriptor?? [ 509.553835][ T5827] usb 2-1: USB disconnect, device number 92 [ 509.700038][T12788] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 509.708764][T12788] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 509.831897][T12741] chnl_net:caif_netlink_parms(): no params data found [ 509.855936][T12805] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1747'. [ 509.868512][ T5911] hid_parser_main: 1 callbacks suppressed [ 509.868533][ T5911] arvo 0003:1E7D:30D4.002F: unknown main item tag 0x0 [ 509.881320][T12805] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1747'. [ 509.927932][ T5911] arvo 0003:1E7D:30D4.002F: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 509.956912][ T1157] hsr_slave_0: left promiscuous mode [ 509.973819][ T1157] hsr_slave_1: left promiscuous mode [ 509.980833][ T1157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 510.008636][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 510.051427][ T1157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 510.068183][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 510.087104][ T1157] batman_adv: batadv0: Removing interface: ipvlan2 [ 510.126274][ T1157] veth1_macvtap: left promiscuous mode [ 510.145178][T12814] netlink: 'syz.1.1749': attribute type 23 has an invalid length. [ 510.146467][ T1157] veth0_macvtap: left promiscuous mode [ 510.159645][ T1157] veth1_vlan: left promiscuous mode [ 510.260934][ T1157] pim6reg (unregistering): left allmulticast mode [ 510.410057][ T5911] usb 1-1: new full-speed USB device number 88 using dummy_hcd [ 510.592111][ T5911] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 510.600734][ T5911] usb 1-1: config 0 has no interface number 0 [ 510.609602][ T5911] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 510.630848][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.639191][ T5911] usb 1-1: Product: syz [ 510.644241][ T5911] usb 1-1: Manufacturer: syz [ 510.648971][ T5911] usb 1-1: SerialNumber: syz [ 510.662805][ T5911] usb 1-1: config 0 descriptor?? [ 510.672189][ T5911] usb-storage 1-1:0.20: USB Mass Storage device detected [ 510.686113][ T5911] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 510.735419][ T1157] team0 (unregistering): Port device team_slave_1 removed [ 510.777842][ T1157] team0 (unregistering): Port device team_slave_0 removed [ 510.785250][ T5930] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 510.940090][ T5930] usb 3-1: device descriptor read/64, error -71 [ 511.192755][ T5930] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 511.340551][ T5930] usb 3-1: device descriptor read/64, error -71 [ 511.352823][T12741] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.362069][T12741] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.369260][T12741] bridge_slave_0: entered allmulticast mode [ 511.376957][T12741] bridge_slave_0: entered promiscuous mode [ 511.385321][T12741] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.392681][T12741] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.399844][T12741] bridge_slave_1: entered allmulticast mode [ 511.407188][T12741] bridge_slave_1: entered promiscuous mode [ 511.451541][ T5930] usb usb3-port1: attempt power cycle [ 511.536475][T12741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.581904][T12741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.653953][T12741] team0: Port device team_slave_0 added [ 511.665153][T12741] team0: Port device team_slave_1 added [ 511.722840][T12741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.730097][T12741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.761029][T12741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.777597][T12741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.786157][T12741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.812101][ C1] vkms_vblank_simulate: vblank timer overrun [ 511.818369][ T5930] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 511.830127][T12741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.863924][ T5930] usb 3-1: device descriptor read/8, error -71 [ 511.900854][T11801] usb 4-1: USB disconnect, device number 98 [ 512.015435][T12741] hsr_slave_0: entered promiscuous mode [ 512.031854][T12741] hsr_slave_1: entered promiscuous mode [ 512.140205][ T5930] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 512.182852][T12845] fuse: Bad value for 'group_id' [ 512.188669][ T5930] usb 3-1: device descriptor read/8, error -71 [ 512.198509][T12845] fuse: Bad value for 'group_id' [ 512.300545][ T5930] usb usb3-port1: unable to enumerate USB device [ 512.650053][ T5930] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 512.814585][ T5930] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 512.830009][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.843278][ T5930] usb 2-1: Product: syz [ 512.847480][ T5930] usb 2-1: Manufacturer: syz [ 512.859986][ T5930] usb 2-1: SerialNumber: syz [ 512.874046][ T5930] usb 2-1: config 0 descriptor?? [ 513.079135][ T5912] usb 1-1: USB disconnect, device number 88 [ 513.093842][ T5930] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 513.122792][T12741] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 513.153486][T12741] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 513.197842][T12741] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 513.228606][T12741] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 513.313595][T12861] syzkaller0: entered promiscuous mode [ 513.319108][T12861] syzkaller0: entered allmulticast mode [ 513.506054][T12741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.594421][T12741] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.684254][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.691451][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.721103][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.728375][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.890483][T12741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.978318][T12741] veth0_vlan: entered promiscuous mode [ 514.006357][T12741] veth1_vlan: entered promiscuous mode [ 514.021288][T12905] syzkaller0: entered promiscuous mode [ 514.027813][T12905] syzkaller0: entered allmulticast mode [ 514.075103][T12741] veth0_macvtap: entered promiscuous mode [ 514.107230][T12741] veth1_macvtap: entered promiscuous mode [ 514.156097][T12741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 514.191236][T12741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 514.217142][ T43] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.233423][ T43] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.263753][ T43] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.294430][ T43] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.411147][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.428642][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.482417][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.491628][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.610262][ T5912] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 514.720668][T12925] syzkaller0: entered promiscuous mode [ 514.740043][T12925] syzkaller0: entered allmulticast mode [ 514.748225][T12925] FAULT_INJECTION: forcing a failure. [ 514.748225][T12925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.790236][ T5912] usb 4-1: device descriptor read/64, error -71 [ 514.801202][T12925] CPU: 0 UID: 0 PID: 12925 Comm: syz.0.1764 Not tainted syzkaller #0 PREEMPT(full) [ 514.801224][T12925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 514.801234][T12925] Call Trace: [ 514.801242][T12925] [ 514.801249][T12925] dump_stack_lvl+0x189/0x250 [ 514.801273][T12925] ? __pfx____ratelimit+0x10/0x10 [ 514.801300][T12925] ? __pfx_dump_stack_lvl+0x10/0x10 [ 514.801317][T12925] ? __pfx__printk+0x10/0x10 [ 514.801336][T12925] ? __might_fault+0xb0/0x130 [ 514.801365][T12925] should_fail_ex+0x414/0x560 [ 514.801396][T12925] _copy_from_user+0x2d/0xb0 [ 514.801420][T12925] get_compat_msghdr+0xad/0x4a0 [ 514.801451][T12925] ? __pfx_get_compat_msghdr+0x10/0x10 [ 514.801489][T12925] ___sys_sendmsg+0x193/0x2a0 [ 514.801509][T12925] ? __pfx____sys_sendmsg+0x10/0x10 [ 514.801560][T12925] ? __fget_files+0x2a/0x420 [ 514.801580][T12925] ? __fget_files+0x3a0/0x420 [ 514.801609][T12925] __sys_sendmsg+0x164/0x220 [ 514.801629][T12925] ? __pfx___sys_sendmsg+0x10/0x10 [ 514.801654][T12925] ? __pfx_ksys_write+0x10/0x10 [ 514.801676][T12925] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 514.801696][T12925] ? lockdep_hardirqs_on+0x9c/0x150 [ 514.801718][T12925] __do_fast_syscall_32+0xb6/0x2b0 [ 514.801737][T12925] ? lockdep_hardirqs_on+0x9c/0x150 [ 514.801758][T12925] do_fast_syscall_32+0x34/0x80 [ 514.801776][T12925] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 514.801797][T12925] RIP: 0023:0xf70fd539 [ 514.801813][T12925] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 514.801828][T12925] RSP: 002b:00000000f54ed55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 514.801846][T12925] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000800000c0 [ 514.801859][T12925] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 514.801869][T12925] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 514.801879][T12925] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 514.801890][T12925] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 514.801924][T12925] [ 515.020811][ C0] vkms_vblank_simulate: vblank timer overrun [ 515.232005][ T5912] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 515.251263][ T5930] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 515.313059][ T5930] usb 2-1: USB disconnect, device number 93 [ 515.372198][ T5912] usb 4-1: device descriptor read/64, error -71 [ 515.460950][ T5911] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 515.503735][ T5912] usb usb4-port1: attempt power cycle [ 515.651076][ T5911] usb 3-1: Using ep0 maxpacket: 8 [ 515.662096][ T5911] usb 3-1: unable to get BOS descriptor or descriptor too short [ 515.676933][ T5911] usb 3-1: config 8 has an invalid interface number: 158 but max is 0 [ 515.686765][ T5911] usb 3-1: config 8 has an invalid interface number: 158 but max is 0 [ 515.710151][ T5911] usb 3-1: config 8 has no interface number 0 [ 515.726809][ T5911] usb 3-1: config 8 interface 158 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 515.740344][T11801] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 515.822847][ T5911] usb 3-1: New USB device found, idVendor=1199, idProduct=685a, bcdDevice=56.af [ 515.860544][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.876315][ T5911] usb 3-1: Product: syz [ 515.890441][ T5912] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 515.891348][ T5911] usb 3-1: Manufacturer: syz [ 515.906914][ T5911] usb 3-1: SerialNumber: syz [ 515.912646][ T5912] usb 4-1: device descriptor read/8, error -71 [ 515.919963][T11801] usb 1-1: Using ep0 maxpacket: 8 [ 515.942512][T11801] usb 1-1: unable to get BOS descriptor or descriptor too short [ 515.961053][T11801] usb 1-1: config 8 has an invalid interface number: 158 but max is 0 [ 515.969289][T11801] usb 1-1: config 8 has an invalid interface number: 158 but max is 0 [ 516.000035][T11801] usb 1-1: config 8 has no interface number 0 [ 516.006183][T11801] usb 1-1: config 8 interface 158 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 516.027086][T11801] usb 1-1: New USB device found, idVendor=1199, idProduct=685a, bcdDevice=56.af [ 516.043239][T11801] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.071648][T11801] usb 1-1: Product: syz [ 516.076269][T11801] usb 1-1: Manufacturer: syz [ 516.088042][T11801] usb 1-1: SerialNumber: syz [ 516.100024][ T5940] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 516.150309][ T5912] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 516.158265][ T5911] sierra 3-1:8.158: Sierra USB modem converter detected [ 516.180720][ T5912] usb 4-1: device descriptor read/8, error -71 [ 516.195731][ T5911] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 516.216541][ T5911] usb 3-1: USB disconnect, device number 95 [ 516.236881][ T5911] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 516.252147][ T5940] usb 5-1: config 0 has an invalid interface number: 20 but max is 0 [ 516.260954][ T5940] usb 5-1: config 0 has no interface number 0 [ 516.267144][ T5911] sierra 3-1:8.158: device disconnected [ 516.279387][ T5940] usb 5-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 516.293923][ T5912] usb usb4-port1: unable to enumerate USB device [ 516.300416][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.309318][ T5940] usb 5-1: Product: syz [ 516.314554][ T5940] usb 5-1: Manufacturer: syz [ 516.319378][ T5940] usb 5-1: SerialNumber: syz [ 516.344713][T11801] sierra 1-1:8.158: Sierra USB modem converter detected [ 516.348775][ T5940] usb 5-1: config 0 descriptor?? [ 516.362722][T11801] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 516.368983][ T5940] usb-storage 5-1:0.20: USB Mass Storage device detected [ 516.378494][T11801] usb 1-1: USB disconnect, device number 89 [ 516.394778][ T5940] usb-storage 5-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 516.402839][ T10] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 516.411210][T11801] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 516.428012][T11801] sierra 1-1:8.158: device disconnected [ 516.570017][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 516.589755][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 516.610160][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 516.648414][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 516.672389][ T10] usb 2-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 516.690363][ T10] usb 2-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 516.699062][ T10] usb 2-1: Product: syz [ 516.703996][ T10] usb 2-1: Manufacturer: syz [ 516.708625][ T10] usb 2-1: SerialNumber: syz [ 516.723184][ T10] usb 2-1: config 0 descriptor?? [ 516.742320][ T10] smsusb:smsusb_probe: board id=2, interface number 0 [ 516.753309][ T10] smsusb:smsusb_probe: Device initialized with return code -19 [ 517.063808][T12994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.073702][T12994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.190107][T11801] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 517.230070][ T10] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 517.449688][T11801] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 517.459130][T11801] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.485383][ T10] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 517.503156][ T10] usb 1-1: too many endpoints for config 0 interface 0 altsetting 147: 71, using maximum allowed: 30 [ 517.517198][T11801] usb 3-1: Product: syz [ 517.525032][T11801] usb 3-1: Manufacturer: syz [ 517.525634][ T10] usb 1-1: config 0 interface 0 altsetting 147 has 0 endpoint descriptors, different from the interface descriptor's value: 71 [ 517.546779][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 517.554458][T11801] usb 3-1: SerialNumber: syz [ 517.555970][ T10] usb 1-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 517.568957][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.585531][ T10] usb 1-1: config 0 descriptor?? [ 517.609301][T13002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1774'. [ 517.781609][T11801] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 517.799251][T11801] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 517.817278][T11801] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 517.849188][T11801] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 518.603841][T13009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.613059][T13009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.890843][ T5911] usb 5-1: USB disconnect, device number 86 [ 519.139677][ T10] usb 1-1: string descriptor 0 read error: -71 [ 519.201154][ T10] usb 1-1: USB disconnect, device number 90 [ 519.281376][ T938] usb 2-1: USB disconnect, device number 94 [ 519.463199][ T5911] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 519.630084][ T5911] usb 5-1: Using ep0 maxpacket: 32 [ 519.715629][T13033] tipc: Enabled bearer , priority 0 [ 519.724878][T13033] syzkaller0: entered promiscuous mode [ 519.730562][T13033] syzkaller0: entered allmulticast mode [ 519.869629][ T5911] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 519.906170][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.938038][ T5911] usb 5-1: config 0 descriptor?? [ 519.996698][ T5911] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 520.469997][ T5827] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 520.568295][ T5911] usb 5-1: USB disconnect, device number 87 [ 520.620010][ T5827] usb 4-1: Using ep0 maxpacket: 8 [ 520.635067][ T5827] usb 4-1: unable to get BOS descriptor or descriptor too short [ 520.645341][ T5827] usb 4-1: config 8 has an invalid interface number: 158 but max is 0 [ 520.654224][ T5827] usb 4-1: config 8 has an invalid interface number: 158 but max is 0 [ 520.662836][ T5827] usb 4-1: config 8 has no interface number 0 [ 520.671813][ T5827] usb 4-1: config 8 interface 158 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 520.698699][ T5827] usb 4-1: New USB device found, idVendor=1199, idProduct=685a, bcdDevice=56.af [ 520.708337][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.716980][ T5827] usb 4-1: Product: syz [ 520.721667][ T5827] usb 4-1: Manufacturer: syz [ 520.726554][ T5827] usb 4-1: SerialNumber: syz [ 520.841888][ T5911] tipc: Node number set to 4022001980 [ 520.849972][T11801] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 520.943615][ T5827] sierra 4-1:8.158: Sierra USB modem converter detected [ 520.959415][ T5827] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 520.972221][ T5827] usb 4-1: USB disconnect, device number 103 [ 520.984719][ T5827] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 520.996433][ T5827] sierra 4-1:8.158: device disconnected [ 521.015983][T11801] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 521.046347][T11801] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 521.068417][ T5930] usb 3-1: USB disconnect, device number 96 [ 521.082648][T11801] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 521.094576][T11801] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 521.114698][T11801] usb 2-1: SerialNumber: syz [ 521.367007][T11801] usb 2-1: USB disconnect, device number 95 [ 521.392558][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 521.450124][ T10] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 521.510244][ T5930] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 521.610759][T13055] FAULT_INJECTION: forcing a failure. [ 521.610759][T13055] name failslab, interval 1, probability 0, space 0, times 0 [ 521.611658][ T10] usb 5-1: config 2 has an invalid interface number: 174 but max is 0 [ 521.626189][T13055] CPU: 1 UID: 0 PID: 13055 Comm: syz.3.1788 Not tainted syzkaller #0 PREEMPT(full) [ 521.626214][T13055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 521.626226][T13055] Call Trace: [ 521.626234][T13055] [ 521.626242][T13055] dump_stack_lvl+0x189/0x250 [ 521.626267][T13055] ? __pfx____ratelimit+0x10/0x10 [ 521.626293][T13055] ? __pfx_dump_stack_lvl+0x10/0x10 [ 521.626311][T13055] ? __pfx__printk+0x10/0x10 [ 521.626326][T13055] ? trace_contention_end+0x39/0x120 [ 521.626351][T13055] ? __mutex_lock+0x335/0x1350 [ 521.626372][T13055] ? __netlink_lookup+0xbd/0x8a0 [ 521.626395][T13055] should_fail_ex+0x414/0x560 [ 521.626426][T13055] should_failslab+0xa8/0x100 [ 521.626450][T13055] __kmalloc_noprof+0xcb/0x7f0 [ 521.626469][T13055] ? nla_strdup+0x9d/0x140 [ 521.626493][T13055] nla_strdup+0x9d/0x140 [ 521.626516][T13055] nf_tables_dump_rules_start+0x68/0x140 [ 521.626541][T13055] __netlink_dump_start+0x469/0x7e0 [ 521.626570][T13055] ? nft_netlink_dump_start_rcu+0xb6/0x1a0 [ 521.626592][T13055] nft_netlink_dump_start_rcu+0xdb/0x1a0 [ 521.626616][T13055] nf_tables_getrule+0x18d/0x260 [ 521.626638][T13055] ? __pfx_nf_tables_getrule+0x10/0x10 [ 521.626655][T13055] ? __pfx_nf_tables_dump_rules_start+0x10/0x10 [ 521.626676][T13055] ? __pfx_nf_tables_dump_rules+0x10/0x10 [ 521.626696][T13055] ? __pfx_nf_tables_dump_rules_done+0x10/0x10 [ 521.626731][T13055] ? __nla_parse+0x40/0x60 [ 521.626751][T13055] ? __pfx_nf_tables_getrule+0x10/0x10 [ 521.626771][T13055] nfnetlink_rcv_msg+0x80e/0x1130 [ 521.626794][T13055] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 521.626832][T13055] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 521.626852][T13055] ? kasan_save_track+0x4f/0x80 [ 521.626916][T13055] netlink_rcv_skb+0x208/0x470 [ 521.626937][T13055] ? lockdep_hardirqs_on+0x9c/0x150 [ 521.626956][T13055] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 521.626980][T13055] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 521.627014][T13055] ? bpf_lsm_capable+0x9/0x20 [ 521.627030][T13055] ? security_capable+0x7e/0x2e0 [ 521.627056][T13055] nfnetlink_rcv+0x282/0x2590 [ 521.627079][T13055] ? __dev_queue_xmit+0x27b/0x3b50 [ 521.627099][T13055] ? __dev_queue_xmit+0x1d79/0x3b50 [ 521.627115][T13055] ? kasan_save_track+0x3e/0x80 [ 521.627132][T13055] ? __kasan_slab_alloc+0x6c/0x80 [ 521.627159][T13055] ? __dev_queue_xmit+0x27b/0x3b50 [ 521.627188][T13055] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 521.627209][T13055] ? __pfx___dev_queue_xmit+0x10/0x10 [ 521.627239][T13055] ? ref_tracker_free+0x63a/0x7d0 [ 521.627257][T13055] ? __asan_memcpy+0x40/0x70 [ 521.627274][T13055] ? __pfx_ref_tracker_free+0x10/0x10 [ 521.627306][T13055] ? skb_clone+0x246/0x3a0 [ 521.627326][T13055] ? __netlink_deliver_tap+0x807/0x850 [ 521.627348][T13055] ? netlink_deliver_tap+0x2e/0x1b0 [ 521.627377][T13055] ? netlink_deliver_tap+0x2e/0x1b0 [ 521.627407][T13055] netlink_unicast+0x82f/0x9e0 [ 521.627436][T13055] ? __pfx_netlink_unicast+0x10/0x10 [ 521.627459][T13055] ? netlink_sendmsg+0x642/0xb30 [ 521.627478][T13055] ? skb_put+0x11b/0x210 [ 521.627504][T13055] netlink_sendmsg+0x805/0xb30 [ 521.627536][T13055] ? __pfx_netlink_sendmsg+0x10/0x10 [ 521.627561][T13055] ? __import_iovec+0x5d4/0x7f0 [ 521.627581][T13055] ? aa_sock_msg_perm+0xf1/0x1d0 [ 521.627601][T13055] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 521.627621][T13055] ? __pfx_netlink_sendmsg+0x10/0x10 [ 521.627645][T13055] __sock_sendmsg+0x21c/0x270 [ 521.627668][T13055] ____sys_sendmsg+0x505/0x830 [ 521.627691][T13055] ? __pfx_____sys_sendmsg+0x10/0x10 [ 521.627727][T13055] ___sys_sendmsg+0x21f/0x2a0 [ 521.627746][T13055] ? __pfx____sys_sendmsg+0x10/0x10 [ 521.627797][T13055] ? __fget_files+0x2a/0x420 [ 521.627816][T13055] ? __fget_files+0x3a0/0x420 [ 521.627846][T13055] __sys_sendmsg+0x164/0x220 [ 521.627865][T13055] ? __pfx___sys_sendmsg+0x10/0x10 [ 521.627890][T13055] ? __pfx_ksys_write+0x10/0x10 [ 521.627911][T13055] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 521.627930][T13055] ? lockdep_hardirqs_on+0x9c/0x150 [ 521.627950][T13055] __do_fast_syscall_32+0xb6/0x2b0 [ 521.627970][T13055] ? lockdep_hardirqs_on+0x9c/0x150 [ 521.627991][T13055] do_fast_syscall_32+0x34/0x80 [ 521.628009][T13055] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 521.628027][T13055] RIP: 0023:0xf70bd539 [ 521.628043][T13055] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 521.628057][T13055] RSP: 002b:00000000f54ad55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 521.628076][T13055] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 521.628088][T13055] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 521.628098][T13055] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 521.628108][T13055] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 521.628118][T13055] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 521.628145][T13055] [ 521.650034][ T5930] usb 3-1: device descriptor read/64, error -71 [ 521.654533][ T10] usb 5-1: config 2 has no interface number 0 [ 521.920564][ T5930] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 522.154009][ T10] usb 5-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 522.155433][T13059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1790'. [ 522.165990][ T10] usb 5-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1023 [ 522.166024][ T10] usb 5-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 522.168370][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 522.211868][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.213422][T13059] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.220106][ T10] usb 5-1: Product: syz [ 522.228904][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.241830][ T10] usb 5-1: Manufacturer: syz [ 522.242607][T13059] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.246534][ T10] usb 5-1: SerialNumber: syz [ 522.264310][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.273380][ T5930] usb 3-1: device descriptor read/64, error -71 [ 522.279777][T11801] usb 4-1: new low-speed USB device number 104 using dummy_hcd [ 522.288725][T13046] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 522.296752][T13046] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 522.310177][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.323626][T13058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.332727][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.381340][ T5930] usb usb3-port1: attempt power cycle [ 522.461932][T11801] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 522.475431][T11801] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.490242][T11801] usb 4-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 522.499390][T11801] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.513535][T11801] usb 4-1: config 0 descriptor?? [ 522.624755][ T10] usb 5-1: probing VID:PID(0424:012C) [ 522.639077][T13031] tipc: Resetting bearer [ 522.644210][ T10] usb 5-1: vub300 testing BULK IN EndPoint(0) 8E [ 522.653332][ T10] usb 5-1: vub300 testing BULK IN EndPoint(1) 82 [ 522.659733][ T10] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 522.675676][ T10] vub300 5-1:2.174: probe with driver vub300 failed with error -22 [ 522.678825][T13031] tipc: Disabling bearer [ 522.697980][ T10] usb 5-1: USB disconnect, device number 88 [ 522.740116][T13057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.749007][T13057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.760024][ T5930] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 522.775832][T13057] netlink: 'syz.3.1789': attribute type 1 has an invalid length. [ 522.793512][T13057] tipc: Enabled bearer , priority 10 [ 522.802135][ T5930] usb 3-1: device descriptor read/8, error -71 [ 522.867713][T11801] usbhid 4-1:0.0: can't add hid device: -71 [ 522.873945][T11801] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 522.885529][T11801] usb 4-1: USB disconnect, device number 104 [ 523.070016][ T5930] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 523.101092][ T5930] usb 3-1: device descriptor read/8, error -71 [ 523.230226][ T5930] usb usb3-port1: unable to enumerate USB device [ 523.415239][T13075] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1795'. [ 523.460221][T13075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1795'. [ 523.482208][T13077] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 512 [ 523.613277][ T5930] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 523.800012][ T5930] usb 5-1: Using ep0 maxpacket: 16 [ 523.813088][ T5930] usb 5-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 523.823331][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.831520][ T5930] usb 5-1: Product: syz [ 523.850106][T11801] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 523.861746][ T5930] usb 5-1: Manufacturer: syz [ 523.866380][ T5930] usb 5-1: SerialNumber: syz [ 524.029963][T11801] usb 4-1: Using ep0 maxpacket: 8 [ 524.038006][T11801] usb 4-1: unable to get BOS descriptor or descriptor too short [ 524.050551][T11801] usb 4-1: config 8 has an invalid interface number: 158 but max is 0 [ 524.059117][T11801] usb 4-1: config 8 has an invalid interface number: 158 but max is 0 [ 524.067777][T11801] usb 4-1: config 8 has no interface number 0 [ 524.075004][T11801] usb 4-1: config 8 interface 158 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 524.099252][ T5930] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 524.107904][T11801] usb 4-1: New USB device found, idVendor=1199, idProduct=685a, bcdDevice=56.af [ 524.118710][T11801] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.129255][T11801] usb 4-1: Product: syz [ 524.133977][T11801] usb 4-1: Manufacturer: syz [ 524.141357][T11801] usb 4-1: SerialNumber: syz [ 524.179022][ T5930] snd-usb-audio 5-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 524.223046][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 524.435739][ T5930] usb 5-1: USB disconnect, device number 89 [ 524.468098][T13094] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1801'. [ 524.486154][T11801] sierra 4-1:8.158: Sierra USB modem converter detected [ 524.514165][T11801] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 524.530339][T11801] usb 4-1: USB disconnect, device number 105 [ 524.542738][T11801] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 524.553806][T11801] sierra 4-1:8.158: device disconnected [ 524.743061][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 524.743073][ T30] audit: type=1326 audit(1760942843.901:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13100 comm="syz.2.1803" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x0 [ 525.240203][ T10] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 525.429222][T13118] tipc: Enabled bearer , priority 10 [ 525.480570][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 525.497609][ T10] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 525.508802][ T10] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 525.613213][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 525.622588][ T10] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 525.697568][ T10] usb 3-1: Product: syz [ 525.710033][ T10] usb 3-1: Manufacturer: syz [ 525.726689][ T10] hub 3-1:4.0: USB hub found [ 525.820129][ T5890] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 525.839985][T11801] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 525.925106][ T10] hub 3-1:4.0: config failed, hub has too many ports! (err -19) [ 525.950013][ T5890] usb 4-1: device descriptor read/64, error -71 [ 526.003986][T11801] usb 5-1: Using ep0 maxpacket: 16 [ 526.039578][T11801] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 526.063665][T11801] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 526.098119][T11801] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.120776][T11801] usb 5-1: Product: syz [ 526.125047][T11801] usb 5-1: Manufacturer: syz [ 526.130812][T11801] usb 5-1: SerialNumber: syz [ 526.176564][T11801] usb 5-1: config 0 descriptor?? [ 526.190151][ T5890] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 526.201867][T11801] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 526.213795][T11801] usb 5-1: Detected FT232R [ 526.280348][ T5930] usb 3-1: USB disconnect, device number 101 [ 526.321492][ T5890] usb 4-1: device descriptor read/64, error -71 [ 526.539773][ T5890] usb usb4-port1: attempt power cycle [ 526.572060][T13129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.583308][T13129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.600136][T11801] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 526.815040][T11801] ftdi_sio 5-1:0.0: GPIO initialisation failed: -32 [ 526.824194][T11801] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 526.970017][ T5890] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 527.042009][ T5890] usb 4-1: device descriptor read/8, error -71 [ 527.191826][T13136] netlink: 292 bytes leftover after parsing attributes in process `syz.2.1810'. [ 527.201086][T13136] netlink: 292 bytes leftover after parsing attributes in process `syz.2.1810'. [ 527.457868][ T5890] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 527.520011][T11801] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 527.596820][ T5890] usb 4-1: device descriptor read/8, error -71 [ 527.702081][T11801] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 527.712274][T11801] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.724034][ T5890] usb usb4-port1: unable to enumerate USB device [ 527.725186][T11801] usb 1-1: Product: syz [ 527.777583][T11801] usb 1-1: Manufacturer: syz [ 527.856754][T11801] usb 1-1: SerialNumber: syz [ 527.882638][T11801] usb 1-1: config 0 descriptor?? [ 528.098901][T11801] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 528.290351][ T5890] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 528.452235][ T5890] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.463284][ T5940] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 528.471196][ T5890] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 528.484284][ T5890] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 528.493486][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.502087][ T5890] usb 2-1: Product: syz [ 528.506287][ T5890] usb 2-1: Manufacturer: syz [ 528.511090][ T5890] usb 2-1: SerialNumber: syz [ 528.522017][ T5890] cdc_mbim 2-1:1.0: skipping garbage [ 528.620072][ T5930] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 528.630186][ T5940] usb 3-1: Using ep0 maxpacket: 32 [ 528.643825][ T5940] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 528.653172][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.661305][ T5940] usb 3-1: Product: syz [ 528.665535][ T5940] usb 3-1: Manufacturer: syz [ 528.670285][ T5940] usb 3-1: SerialNumber: syz [ 528.678023][ T5940] usb 3-1: config 0 descriptor?? [ 528.688366][ T5940] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 528.724503][T13146] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 528.810753][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.821869][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.835515][ T5930] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 528.836860][ T10] usb 5-1: USB disconnect, device number 90 [ 528.846492][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.856624][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 528.881057][ T5930] usb 4-1: config 0 descriptor?? [ 528.882952][ T10] ftdi_sio 5-1:0.0: device disconnected [ 529.103023][T13148] netlink: 'syz.2.1816': attribute type 1 has an invalid length. [ 529.148261][T13148] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 529.176807][T13148] veth5: entered promiscuous mode [ 529.186186][T13148] bond0: (slave veth5): Enslaving as a backup interface with a down link [ 529.270039][ T10] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 529.313424][ T5930] arvo 0003:1E7D:30D4.0030: unknown main item tag 0x0 [ 529.324671][ T5930] arvo 0003:1E7D:30D4.0030: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 529.340638][T13146] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 529.349268][ T5890] cdc_mbim 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 529.357253][ T5890] cdc_mbim 2-1:1.0: setting rx_max = 2048 [ 529.423056][ T10] usb 5-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 529.433856][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.444852][ T10] usb 5-1: config 0 descriptor?? [ 529.558715][ T5890] cdc_mbim 2-1:1.0: setting tx_max = 184 [ 529.568471][ T5890] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 529.584506][ T5890] wwan wwan0: port wwan0mbim0 attached [ 529.599994][ T5890] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 02:27:e2:6f:03:98 [ 529.617712][ T5890] usb 2-1: USB disconnect, device number 96 [ 529.625392][ T5890] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 529.684066][ T5890] wwan wwan0: port wwan0mbim0 disconnected [ 529.729025][ T5930] usb 4-1: USB disconnect, device number 110 [ 529.869259][ T10] kye 0003:0458:0153.0031: unknown main item tag 0x0 [ 529.876225][ T10] kye 0003:0458:0153.0031: unknown main item tag 0x0 [ 529.884116][ T10] kye 0003:0458:0153.0031: unknown main item tag 0x0 [ 529.891295][ T10] kye 0003:0458:0153.0031: unknown main item tag 0x0 [ 529.898069][ T10] kye 0003:0458:0153.0031: unknown main item tag 0x0 [ 529.904870][ T10] kye 0003:0458:0153.0031: unknown main item tag 0x0 [ 529.912233][ T10] kye 0003:0458:0153.0031: unknown main item tag 0x0 [ 529.922828][ T10] kye 0003:0458:0153.0031: hidraw0: USB HID v0.00 Device [HID 0458:0153] on usb-dummy_hcd.4-1/input0 [ 530.131470][T11801] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 530.152280][T11801] usb 1-1: USB disconnect, device number 91 [ 530.400010][ T938] usb 2-1: new full-speed USB device number 97 using dummy_hcd [ 530.582250][ T938] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 530.590782][ T938] usb 2-1: config 0 has no interface number 0 [ 530.599476][ T938] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 530.610386][ T938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.618383][ T938] usb 2-1: Product: syz [ 530.650169][ T938] usb 2-1: Manufacturer: syz [ 530.736592][ T938] usb 2-1: SerialNumber: syz [ 530.749972][ T5940] gspca_stk1135: reg_w 0x200 err -71 [ 530.768435][ T938] usb 2-1: config 0 descriptor?? [ 530.775768][ T938] usb-storage 2-1:0.20: USB Mass Storage device detected [ 530.779076][ T5940] gspca_stk1135: serial bus timeout: status=0x00 [ 530.799812][ T938] usb-storage 2-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 530.827086][T13161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1820'. [ 530.848589][T11801] usb 5-1: USB disconnect, device number 91 [ 530.874062][ T5940] gspca_stk1135: Sensor write failed [ 530.882908][ T5940] gspca_stk1135: serial bus timeout: status=0x00 [ 530.909941][ T5940] gspca_stk1135: Sensor write failed [ 530.960030][ T5940] gspca_stk1135: serial bus timeout: status=0x00 [ 530.972670][ T5940] gspca_stk1135: Sensor read failed [ 530.977904][ T5940] gspca_stk1135: serial bus timeout: status=0x00 [ 531.004792][ T5940] gspca_stk1135: Sensor read failed [ 531.010264][ T5940] gspca_stk1135: Detected sensor type unknown (0x0) [ 531.023653][ T5940] gspca_stk1135: serial bus timeout: status=0x00 [ 531.044967][ T5940] gspca_stk1135: Sensor read failed [ 531.061104][ T5940] gspca_stk1135: serial bus timeout: status=0x00 [ 531.067474][ T5940] gspca_stk1135: Sensor read failed [ 531.079119][T13170] fuse: Bad value for 'fd' [ 531.088409][ T5940] gspca_stk1135: serial bus timeout: status=0x00 [ 531.095291][ T5940] gspca_stk1135: Sensor write failed [ 531.102491][ T5940] gspca_stk1135: serial bus timeout: status=0x00 [ 531.111964][ T5940] gspca_stk1135: Sensor write failed [ 531.117357][ T5940] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 531.143943][ T5940] usb 3-1: USB disconnect, device number 102 [ 531.433200][ T5930] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 531.650085][ T5930] usb 1-1: Using ep0 maxpacket: 32 [ 531.665601][ T5930] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 531.680029][ T5940] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 531.687915][ T5930] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 531.702592][ T5930] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 531.715178][ T5930] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 531.724554][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.733267][ T5930] usb 1-1: Product: syz [ 531.737687][ T5930] usb 1-1: Manufacturer: syz [ 531.742406][ T5930] usb 1-1: SerialNumber: syz [ 531.853192][ T5940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 42272, setting to 1024 [ 531.904159][ T5940] usb 3-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 531.917316][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.927856][ T5940] usb 3-1: Product: syz [ 531.940048][ T5940] usb 3-1: Manufacturer: syz [ 531.945904][ T5940] usb 3-1: SerialNumber: syz [ 531.972907][ T5940] usb 3-1: config 0 descriptor?? [ 531.990938][T13176] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 532.004186][ T5930] usb 1-1: 0:2 : does not exist [ 532.011009][ T5940] gm12u320 3-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -71 [ 532.026392][ T5940] gm12u320 3-1:0.0: probe with driver gm12u320 failed with error -5 [ 532.044850][ T5940] usb-storage 3-1:0.0: USB Mass Storage device detected [ 532.068392][ T5940] usb-storage 3-1:0.0: device ignored [ 532.079472][ T5930] usb 1-1: USB disconnect, device number 92 [ 532.156363][T13185] FAULT_INJECTION: forcing a failure. [ 532.156363][T13185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 532.227085][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 532.250091][T13185] CPU: 1 UID: 0 PID: 13185 Comm: syz.4.1825 Not tainted syzkaller #0 PREEMPT(full) [ 532.250108][T13185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 532.250115][T13185] Call Trace: [ 532.250120][T13185] [ 532.250126][T13185] dump_stack_lvl+0x189/0x250 [ 532.250141][T13185] ? __pfx____ratelimit+0x10/0x10 [ 532.250164][T13185] ? __pfx_dump_stack_lvl+0x10/0x10 [ 532.250174][T13185] ? __pfx__printk+0x10/0x10 [ 532.250190][T13185] should_fail_ex+0x414/0x560 [ 532.250208][T13185] _copy_to_user+0x31/0xb0 [ 532.250223][T13185] simple_read_from_buffer+0xe1/0x170 [ 532.250238][T13185] proc_fail_nth_read+0x1b3/0x220 [ 532.250255][T13185] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 532.250271][T13185] ? rw_verify_area+0x2a6/0x4d0 [ 532.250281][T13185] ? __lock_acquire+0xab9/0xd20 [ 532.250293][T13185] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 532.250307][T13185] vfs_read+0x200/0xa30 [ 532.250317][T13185] ? fdget_pos+0x247/0x320 [ 532.250330][T13185] ? __pfx___mutex_lock+0x10/0x10 [ 532.250342][T13185] ? __pfx_vfs_read+0x10/0x10 [ 532.250352][T13185] ? __fget_files+0x2a/0x420 [ 532.250367][T13185] ? __fget_files+0x3a0/0x420 [ 532.250377][T13185] ? __fget_files+0x2a/0x420 [ 532.250393][T13185] ksys_read+0x145/0x250 [ 532.250404][T13185] ? __pfx_ksys_read+0x10/0x10 [ 532.250416][T13185] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 532.250427][T13185] ? lockdep_hardirqs_on+0x9c/0x150 [ 532.250439][T13185] __do_fast_syscall_32+0xb6/0x2b0 [ 532.250451][T13185] ? lockdep_hardirqs_on+0x9c/0x150 [ 532.250463][T13185] do_fast_syscall_32+0x34/0x80 [ 532.250473][T13185] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 532.250485][T13185] RIP: 0023:0xf709d539 [ 532.250494][T13185] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 532.250503][T13185] RSP: 002b:00000000f548d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 532.250514][T13185] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f548d620 [ 532.250521][T13185] RDX: 000000000000000f RSI: 00000000f7435ff4 RDI: 0000000000000000 [ 532.250527][T13185] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 532.250532][T13185] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 532.250538][T13185] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 532.250563][T13185] [ 532.607087][ T5940] usb 3-1: USB disconnect, device number 103 [ 532.810907][T13189] FAULT_INJECTION: forcing a failure. [ 532.810907][T13189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 532.826248][T13189] CPU: 0 UID: 0 PID: 13189 Comm: syz.3.1826 Not tainted syzkaller #0 PREEMPT(full) [ 532.826273][T13189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 532.826284][T13189] Call Trace: [ 532.826292][T13189] [ 532.826300][T13189] dump_stack_lvl+0x189/0x250 [ 532.826324][T13189] ? __pfx____ratelimit+0x10/0x10 [ 532.826350][T13189] ? __pfx_dump_stack_lvl+0x10/0x10 [ 532.826368][T13189] ? __pfx__printk+0x10/0x10 [ 532.826387][T13189] ? __might_fault+0xb0/0x130 [ 532.826417][T13189] should_fail_ex+0x414/0x560 [ 532.826447][T13189] _copy_from_iter+0x1de/0x1790 [ 532.826523][T13189] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 532.826554][T13189] ? policy_nodemask+0x27c/0x720 [ 532.826574][T13189] ? __pfx__copy_from_iter+0x10/0x10 [ 532.826602][T13189] ? set_page_refcounted+0xa0/0x1e0 [ 532.826623][T13189] ? page_copy_sane+0x4e/0x280 [ 532.826645][T13189] copy_page_from_iter+0xdd/0x170 [ 532.826670][T13189] tun_get_user+0x1d7b/0x3e90 [ 532.826700][T13189] ? tun_get_user+0x6f6/0x3e90 [ 532.826728][T13189] ? aa_file_perm+0x44d/0x1550 [ 532.826749][T13189] ? __pfx_tun_get_user+0x10/0x10 [ 532.826776][T13189] ? _parse_integer_limit+0x1ae/0x1f0 [ 532.826804][T13189] ? __lock_acquire+0xab9/0xd20 [ 532.826831][T13189] ? ref_tracker_alloc+0x318/0x460 [ 532.826848][T13189] ? __lock_acquire+0xab9/0xd20 [ 532.826871][T13189] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 532.826896][T13189] ? tun_get+0x1c/0x2f0 [ 532.826922][T13189] ? tun_get+0x1c/0x2f0 [ 532.826941][T13189] ? tun_get+0x1c/0x2f0 [ 532.826966][T13189] tun_chr_write_iter+0x113/0x200 [ 532.826990][T13189] vfs_write+0x5c9/0xb30 [ 532.827012][T13189] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 532.827032][T13189] ? __pfx_vfs_write+0x10/0x10 [ 532.827058][T13189] ? __fget_files+0x2a/0x420 [ 532.827086][T13189] ksys_write+0x145/0x250 [ 532.827101][T13189] ? exc_page_fault+0x82/0x100 [ 532.827120][T13189] ? __pfx_ksys_write+0x10/0x10 [ 532.827141][T13189] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 532.827159][T13189] ? lockdep_hardirqs_on+0x9c/0x150 [ 532.827180][T13189] __do_fast_syscall_32+0xb6/0x2b0 [ 532.827200][T13189] ? lockdep_hardirqs_on+0x9c/0x150 [ 532.827225][T13189] do_fast_syscall_32+0x34/0x80 [ 532.827244][T13189] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 532.827265][T13189] RIP: 0023:0xf70bd539 [ 532.827280][T13189] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 532.827295][T13189] RSP: 002b:00000000f54ad520 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 532.827314][T13189] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000000 [ 532.827326][T13189] RDX: 0000000000000052 RSI: 00000000f7455ff4 RDI: 0000000000000000 [ 532.827337][T13189] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 532.827348][T13189] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 532.827358][T13189] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 532.827382][T13189] [ 533.124459][T12827] wlan1: Trigger new scan to find an IBSS to join [ 533.184139][T11801] usb 2-1: USB disconnect, device number 97 [ 533.289992][ T938] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 533.439995][ T5940] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 533.451412][ T938] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 533.462035][ T938] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 533.503979][ T938] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 533.530101][ T938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 533.572436][ T938] usb 5-1: SerialNumber: syz [ 533.600114][ T5940] usb 4-1: Using ep0 maxpacket: 8 [ 533.623361][ T5940] usb 4-1: unable to get BOS descriptor or descriptor too short [ 533.663074][ T5940] usb 4-1: config 8 has an invalid interface number: 158 but max is 0 [ 533.680478][ T5940] usb 4-1: config 8 has an invalid interface number: 158 but max is 0 [ 533.695799][ T5940] usb 4-1: config 8 has no interface number 0 [ 533.713095][ T5940] usb 4-1: config 8 interface 158 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 533.763194][ T5940] usb 4-1: New USB device found, idVendor=1199, idProduct=685a, bcdDevice=56.af [ 533.776062][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.784290][ T5940] usb 4-1: Product: syz [ 533.788469][ T5940] usb 4-1: Manufacturer: syz [ 533.793168][ T5940] usb 4-1: SerialNumber: syz [ 533.979597][ T938] usb 5-1: 0:2 : does not exist [ 534.061397][ T938] usb 5-1: USB disconnect, device number 92 [ 534.061415][ T5940] sierra 4-1:8.158: Sierra USB modem converter detected [ 534.135938][ T5940] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 534.209211][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 534.306253][ T5940] usb 4-1: USB disconnect, device number 111 [ 534.341808][ T5940] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 534.389043][ T5940] sierra 4-1:8.158: device disconnected [ 534.654089][T13229] binder: 13228:13229 ioctl c0306201 0 returned -14 [ 534.920021][ T5940] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 535.089982][ T5940] usb 5-1: Using ep0 maxpacket: 16 [ 535.152889][ T5940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 535.174614][ T5940] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 535.185448][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.186508][T13241] loop6: detected capacity change from 0 to 524287999 [ 535.201671][ T5940] usb 5-1: Product: syz [ 535.205851][ T5940] usb 5-1: Manufacturer: syz [ 535.232277][ T5940] usb 5-1: SerialNumber: syz [ 535.246566][ T5940] usb 5-1: config 0 descriptor?? [ 535.319616][ T5940] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 535.428786][ T5940] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 535.620731][T11801] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 536.047557][T11801] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.094345][ T5940] em28xx 5-1:0.0: chip ID is em2765 [ 536.108543][T11801] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 536.151875][T11801] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 536.184434][T11801] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 536.209060][T11801] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.255347][T11801] usb 1-1: config 0 descriptor?? [ 536.705901][T11801] plantronics 0003:047F:FFFF.0032: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 536.707414][ T5940] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 536.831880][ T5940] em28xx 5-1:0.0: board has no eeprom [ 537.016591][T13269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1849'. [ 537.027496][T13269] tipc: Resetting bearer [ 537.046245][T13269] tipc: Disabling bearer [ 537.120027][ T5940] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 537.128270][ T5940] em28xx 5-1:0.0: dvb set to bulk mode. [ 537.135398][ T10] em28xx 5-1:0.0: Binding DVB extension [ 537.152238][ T5940] usb 5-1: USB disconnect, device number 93 [ 537.163010][ T5940] em28xx 5-1:0.0: Disconnecting em28xx [ 537.242608][ T10] em28xx 5-1:0.0: Registering input extension [ 537.249288][ T5940] em28xx 5-1:0.0: Closing input extension [ 537.271442][ T5940] em28xx 5-1:0.0: Freeing device [ 537.617878][T13282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.626349][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.661238][T13282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.693852][T13282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.703977][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.722194][T13281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.730967][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.784488][T13281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.911430][ T43] wlan1: Trigger new scan to find an IBSS to join [ 538.029333][T13299] netlink: 'syz.3.1861': attribute type 4 has an invalid length. [ 538.044445][T13296] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 538.889136][ T5940] usb 1-1: USB disconnect, device number 93 [ 538.932057][T12827] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.425496][ T5940] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 539.592476][ T5940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.604462][ T5940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 539.620124][ T938] usb 2-1: new full-speed USB device number 98 using dummy_hcd [ 539.637944][ T5940] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 539.672324][ T5940] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 539.694728][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.748895][ T5940] usb 4-1: config 0 descriptor?? [ 539.823406][ T938] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 539.836743][ T938] usb 2-1: config 0 has no interface number 0 [ 539.873676][ T938] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 539.883628][ T938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.899331][ T938] usb 2-1: Product: syz [ 539.908856][ T938] usb 2-1: Manufacturer: syz [ 539.923979][ T938] usb 2-1: SerialNumber: syz [ 539.951838][ T938] usb 2-1: config 0 descriptor?? [ 539.969859][ T938] usb-storage 2-1:0.20: USB Mass Storage device detected [ 539.996245][ T938] usb-storage 2-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 540.202441][ T5940] plantronics 0003:047F:FFFF.0033: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 540.250333][T13384] kvm: user requested TSC rate below hardware speed [ 540.275472][T13384] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 540.649761][ T5940] usb 4-1: USB disconnect, device number 112 [ 541.314484][T13406] syzkaller1: entered promiscuous mode [ 541.320269][T13406] syzkaller1: entered allmulticast mode [ 541.970008][T11801] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 542.020029][ T938] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 542.154811][T11801] usb 4-1: Using ep0 maxpacket: 32 [ 542.165587][T11801] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 542.176979][T11801] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 542.188913][ T938] usb 5-1: Using ep0 maxpacket: 32 [ 542.194524][T11801] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 542.206535][T11801] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 542.221583][ T938] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.232977][ T938] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.245505][T11801] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 542.256666][ T938] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 542.265855][T11801] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.274360][ T938] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 542.282968][T11801] usb 4-1: Product: syz [ 542.287136][T11801] usb 4-1: Manufacturer: syz [ 542.292379][ T938] usb 5-1: Product: syz [ 542.296694][T11801] usb 4-1: SerialNumber: syz [ 542.301816][ T938] usb 5-1: Manufacturer: syz [ 542.322401][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 542.333195][ T938] hub 5-1:4.0: USB hub found [ 542.353677][T11801] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input48 [ 542.376862][ T10] usb 2-1: USB disconnect, device number 98 [ 542.524691][ T938] hub 5-1:4.0: config failed, hub has too many ports! (err -19) [ 542.532700][T11801] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 542.543842][T11801] (id 0x00) [ 542.603559][T11801] rc_core: IR keymap rc-imon-pad not found [ 542.609424][T11801] Registered IR keymap rc-empty [ 542.614430][T11801] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 542.624715][T11801] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 542.731143][T11801] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 542.745797][T11801] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input49 [ 542.765703][T11801] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:113> initialized [ 542.770059][ T10] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 542.870581][ T5940] usb 5-1: USB disconnect, device number 94 [ 542.929992][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 542.936906][ T10] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 542.945346][ T10] usb 2-1: config 0 has no interface number 0 [ 542.951860][ T10] usb 2-1: config 0 interface 12 has no altsetting 0 [ 542.961240][ T10] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 542.970561][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.978535][ T10] usb 2-1: Product: syz [ 542.982926][ T10] usb 2-1: Manufacturer: syz [ 542.987546][ T10] usb 2-1: SerialNumber: syz [ 542.994978][ T10] usb 2-1: config 0 descriptor?? [ 543.480126][ T5940] usb 3-1: new low-speed USB device number 104 using dummy_hcd [ 543.651563][ T5940] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 543.659736][ T5940] usb 3-1: config 0 has no interface number 0 [ 543.878011][ T5940] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 543.902647][ T5940] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 543.927260][ T5940] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 543.952591][ T5940] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 543.978032][ T5940] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 544.001665][ T5940] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 544.017417][ T5940] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 544.026824][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.040778][ T5940] usb 3-1: config 0 descriptor?? [ 544.054419][T13444] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 544.062227][T13444] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 544.080714][ T5940] ldusb 3-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 544.295414][T13451] imon:send_packet: packet tx failed (-71) [ 544.295623][ T5940] usb 4-1: USB disconnect, device number 113 [ 544.340243][T13451] imon:vfd_write: send packet #4 failed [ 544.341972][ T5827] usb 3-1: USB disconnect, device number 104 [ 544.354582][T13444] imon:display_open: display port is already open [ 544.374759][ T5827] ldusb 3-1:0.55: LD USB Device #1 now disconnected [ 545.315535][T13463] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 545.374550][T13459] Set syz1 is full, maxelem 6117 reached [ 546.781961][ T10] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 546.789622][ T10] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 546.807354][ T10] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 546.837166][ T10] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 546.901812][ T10] usb 2-1: USB disconnect, device number 99 [ 547.309985][ T938] usb 3-1: new full-speed USB device number 105 using dummy_hcd [ 547.465580][T13509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.473988][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.487347][ T938] usb 3-1: unable to get BOS descriptor or descriptor too short [ 547.496519][T13509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.505503][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.523694][T13508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.534773][T13508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.560827][ T938] usb 3-1: not running at top speed; connect to a high speed hub [ 547.591744][ T938] usb 3-1: config 5 has an invalid interface number: 215 but max is 0 [ 547.603136][ T938] usb 3-1: config 5 has no interface number 0 [ 547.621795][ T938] usb 3-1: config 5 interface 215 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 547.655511][ T938] usb 3-1: config 5 interface 215 has no altsetting 0 [ 547.714333][ T938] usb 3-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=dc.ba [ 547.752265][ T938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.899286][ T938] usb 3-1: Product: syz [ 547.905026][ T938] usb 3-1: Manufacturer: syz [ 547.909631][ T938] usb 3-1: SerialNumber: syz [ 548.006059][T13496] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 548.369397][ T938] cypress_m8 3-1:5.215: DeLorme Earthmate USB converter detected [ 548.427773][ T938] usb 3-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 548.477946][ T938] usb 3-1: USB disconnect, device number 105 [ 548.506615][ T938] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 548.539056][ T938] cypress_m8 3-1:5.215: device disconnected [ 548.679967][ T24] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 548.710700][ T5940] usb 1-1: new full-speed USB device number 94 using dummy_hcd [ 548.859960][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 548.867504][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 548.877774][ T24] usb 2-1: config 8 has an invalid interface number: 158 but max is 0 [ 548.878991][ T5940] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 549.052087][ T5940] usb 1-1: config 0 has no interface number 0 [ 549.060677][ T5940] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 549.069838][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.192607][ T5940] usb 1-1: Product: syz [ 549.207808][ T5940] usb 1-1: Manufacturer: syz [ 549.213751][ T5940] usb 1-1: SerialNumber: syz [ 549.229106][ T5940] usb 1-1: config 0 descriptor?? [ 549.238303][ T24] usb 2-1: config 8 has an invalid interface number: 158 but max is 0 [ 549.253684][ T24] usb 2-1: config 8 has no interface number 0 [ 549.255451][ T5940] usb-storage 1-1:0.20: USB Mass Storage device detected [ 549.273410][ T24] usb 2-1: config 8 interface 158 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 549.304432][ T5940] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 549.404583][ T24] usb 2-1: New USB device found, idVendor=1199, idProduct=685a, bcdDevice=56.af [ 549.419479][T13539] veth0_vlan: left promiscuous mode [ 549.424931][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.439086][T13539] veth0_vlan: entered promiscuous mode [ 549.444845][ T24] usb 2-1: Product: syz [ 549.488298][ T24] usb 2-1: Manufacturer: syz [ 549.502559][ T24] usb 2-1: SerialNumber: syz [ 549.721847][ T24] sierra 2-1:8.158: Sierra USB modem converter detected [ 549.732304][ T24] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 549.740056][ T5940] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 549.743451][ T24] usb 2-1: USB disconnect, device number 100 [ 549.761160][ T24] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 549.770546][ T24] sierra 2-1:8.158: device disconnected [ 549.901407][ T5940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.912539][ T5940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.922399][ T5940] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 549.935456][ T5940] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 549.944768][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.955070][ T5940] usb 3-1: config 0 descriptor?? [ 550.457622][ T5940] plantronics 0003:047F:FFFF.0034: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 550.493930][T13554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.503431][T13554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.512392][T13554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.525098][T13552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.537141][T13552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.689979][ T24] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 550.807520][ T938] usb 3-1: USB disconnect, device number 106 [ 550.864390][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 550.872439][ T24] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.891456][ T24] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.903515][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 550.912996][ T24] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 550.921592][ T24] usb 4-1: Product: syz [ 550.925942][ T24] usb 4-1: Manufacturer: syz [ 550.941785][ T24] hub 4-1:4.0: USB hub found [ 551.146303][ T24] hub 4-1:4.0: config failed, hub has too many ports! (err -19) [ 551.459519][ T10] usb 1-1: USB disconnect, device number 94 [ 551.530221][ T5930] usb 4-1: USB disconnect, device number 114 [ 552.027270][T13570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.035808][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.400145][ T5940] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 552.700011][ T5940] usb 5-1: Using ep0 maxpacket: 32 [ 552.718669][ T5940] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.780301][ T5940] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 552.814740][ T5930] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 552.826940][ T5940] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 552.874415][ T5940] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 552.910177][ T5940] usb 5-1: Product: syz [ 552.920511][ T5940] usb 5-1: Manufacturer: syz [ 552.954610][ T5940] hub 5-1:4.0: USB hub found [ 552.972989][ T5930] usb 3-1: Using ep0 maxpacket: 16 [ 552.980510][ T5930] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 552.991767][ T5930] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 553.013005][ T5930] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 553.036624][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.072988][ T5930] usb 3-1: config 0 descriptor?? [ 553.120016][ T24] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 553.144194][ T5940] hub 5-1:4.0: config failed, hub has too many ports! (err -19) [ 553.290858][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 553.306996][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 553.318568][ T24] usb 2-1: config 8 has an invalid interface number: 158 but max is 0 [ 553.330024][ T24] usb 2-1: config 8 has an invalid interface number: 158 but max is 0 [ 553.338415][ T24] usb 2-1: config 8 has no interface number 0 [ 553.349450][ T24] usb 2-1: config 8 interface 158 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 553.375259][ T24] usb 2-1: New USB device found, idVendor=1199, idProduct=685a, bcdDevice=56.af [ 553.395255][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.403808][ T24] usb 2-1: Product: syz [ 553.408241][ T24] usb 2-1: Manufacturer: syz [ 553.424483][ T24] usb 2-1: SerialNumber: syz [ 553.520897][ T10] usb 5-1: USB disconnect, device number 95 [ 553.657868][ T24] sierra 2-1:8.158: Sierra USB modem converter detected [ 553.670906][ T24] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 553.683478][ T24] usb 2-1: USB disconnect, device number 101 [ 553.695346][ T24] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 553.710780][ T24] sierra 2-1:8.158: device disconnected [ 554.072815][T13614] fuse: Bad value for 'group_id' [ 554.077844][T13614] fuse: Bad value for 'group_id' [ 555.427604][T13626] netlink: 'syz.3.1951': attribute type 13 has an invalid length. [ 555.600423][ T938] usb 3-1: USB disconnect, device number 107 [ 556.362157][T13650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1957'. [ 556.620019][ T10] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 556.855493][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 556.878690][ T10] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.899791][ T10] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.938433][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 556.957890][ T10] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 556.988163][ T10] usb 1-1: Product: syz [ 557.000662][ T10] usb 1-1: Manufacturer: syz [ 557.122512][ T10] hub 1-1:4.0: USB hub found [ 557.331629][ T10] hub 1-1:4.0: config failed, hub has too many ports! (err -19) [ 557.353669][T13675] fuse: Bad value for 'group_id' [ 557.358653][T13675] fuse: Bad value for 'group_id' [ 557.812063][T11801] usb 1-1: USB disconnect, device number 95 [ 557.890094][ T938] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 558.041821][ T938] usb 3-1: Using ep0 maxpacket: 16 [ 558.144510][ T938] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 558.293236][ T938] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 558.526738][ T938] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 558.556780][ T938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.569972][ T10] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 558.604705][ T938] usb 3-1: config 0 descriptor?? [ 558.666179][ T938] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 558.721739][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 558.737526][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 558.749690][ T10] usb 1-1: config 8 has an invalid interface number: 158 but max is 0 [ 558.775160][ T10] usb 1-1: config 8 has an invalid interface number: 158 but max is 0 [ 558.804767][ T10] usb 1-1: config 8 has no interface number 0 [ 558.845636][ T10] usb 1-1: config 8 interface 158 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 558.890350][ T43] wlan1: Trigger new scan to find an IBSS to join [ 558.917830][ T10] usb 1-1: New USB device found, idVendor=1199, idProduct=685a, bcdDevice=56.af [ 558.936928][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.962425][ T10] usb 1-1: Product: syz [ 558.962650][T13699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.966636][ T10] usb 1-1: Manufacturer: syz [ 558.966654][ T10] usb 1-1: SerialNumber: syz [ 558.987229][T13699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.995933][T13699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.050652][T13699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.060388][T13699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.069479][T13699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.077907][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.088861][T13700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.098085][T13700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.111302][T13700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.217317][ T10] sierra 1-1:8.158: Sierra USB modem converter detected [ 559.249198][ T10] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 559.299071][ T10] usb 1-1: USB disconnect, device number 96 [ 559.347869][ T10] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 559.381107][ T10] sierra 1-1:8.158: device disconnected [ 560.019992][ T24] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 560.029983][ T5930] usb 2-1: new full-speed USB device number 102 using dummy_hcd [ 560.143650][T13721] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1977'. [ 560.200622][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 560.208620][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 560.217558][ T5930] usb 2-1: unable to get BOS descriptor or descriptor too short [ 560.226336][ T24] usb 1-1: config 8 has an invalid interface number: 158 but max is 0 [ 560.234963][ T5930] usb 2-1: not running at top speed; connect to a high speed hub [ 560.242751][ T24] usb 1-1: config 8 has an invalid interface number: 158 but max is 0 [ 560.254593][ T5930] usb 2-1: config 5 has an invalid interface number: 215 but max is 0 [ 560.263597][ T24] usb 1-1: config 8 has no interface number 0 [ 560.269681][ T5930] usb 2-1: config 5 has no interface number 0 [ 560.277236][ T24] usb 1-1: config 8 interface 158 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 560.290357][ T5930] usb 2-1: config 5 interface 215 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 560.301408][ T5930] usb 2-1: config 5 interface 215 has no altsetting 0 [ 560.311767][ T24] usb 1-1: New USB device found, idVendor=1199, idProduct=685a, bcdDevice=56.af [ 560.320985][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.329144][ T5930] usb 2-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=dc.ba [ 560.338272][ T24] usb 1-1: Product: syz [ 560.342524][ T938] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 560.350199][ T24] usb 1-1: Manufacturer: syz [ 560.354798][ T24] usb 1-1: SerialNumber: syz [ 560.359497][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.369452][ T5930] usb 2-1: Product: syz [ 560.374982][ T5930] usb 2-1: Manufacturer: syz [ 560.379638][ T5930] usb 2-1: SerialNumber: syz [ 560.388077][T13714] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 560.529984][ T938] usb 5-1: Using ep0 maxpacket: 32 [ 560.537430][ T938] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 560.546457][ T938] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 560.556897][ T938] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 560.569162][ T938] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 560.578626][ T938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.595556][ T24] sierra 1-1:8.158: Sierra USB modem converter detected [ 560.602690][ T938] usb 5-1: Product: syz [ 560.618293][ T938] usb 5-1: Manufacturer: syz [ 560.627399][ T24] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 560.635571][ T5930] cypress_m8 2-1:5.215: DeLorme Earthmate USB converter detected [ 560.646683][ T938] usb 5-1: SerialNumber: syz [ 560.663746][ T24] usb 1-1: USB disconnect, device number 97 [ 560.668252][ T10] usb 3-1: USB disconnect, device number 108 [ 560.670236][ T5930] usb 2-1: DeLorme Earthmate USB converter now attached to ttyUSB1 [ 560.691702][ T24] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 560.705135][ T5930] usb 2-1: USB disconnect, device number 102 [ 560.729592][ T24] sierra 1-1:8.158: device disconnected [ 560.761866][ T5930] earthmate ttyUSB1: DeLorme Earthmate USB converter now disconnected from ttyUSB1 [ 560.786298][ T5930] cypress_m8 2-1:5.215: device disconnected [ 560.911923][ T938] usb 5-1: 0:2 : does not exist [ 560.933673][ T938] usb 5-1: USB disconnect, device number 96 [ 561.287021][T13734] netlink: 'syz.0.1983': attribute type 13 has an invalid length. [ 561.340010][ T10] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 561.491375][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 561.498696][ T10] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.511784][ T10] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.645584][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 561.657428][ T10] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 561.673701][ T10] usb 4-1: Product: syz [ 561.684016][ T10] usb 4-1: Manufacturer: syz [ 561.771424][ T10] hub 4-1:4.0: USB hub found [ 562.252062][ T10] hub 4-1:4.0: config failed, hub has too many ports! (err -19) [ 562.263545][T12827] wlan1: Trigger new scan to find an IBSS to join [ 562.711107][ T5940] usb 4-1: USB disconnect, device number 115 [ 562.719499][ T10] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 562.901648][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 562.917370][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.956967][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.963639][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 562.963642][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.963685][ T10] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 563.269283][T13775] tipc: Started in network mode [ 563.274299][T13775] tipc: Node identity , cluster identity 4711 [ 563.280563][T13775] tipc: Failed to obtain node identity [ 563.286101][T13775] tipc: Enabling of bearer rejected, failed to enable media [ 563.591925][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.670000][ T938] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 563.705471][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.800410][ T938] usb 5-1: device descriptor read/64, error -71 [ 563.853679][ T10] usb 1-1: config 0 descriptor?? [ 563.865372][ T10] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 564.051161][ T938] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 564.200103][ T938] usb 5-1: device descriptor read/64, error -71 [ 564.312188][ T938] usb usb5-port1: attempt power cycle [ 564.650054][ T938] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 564.670812][ T938] usb 5-1: device descriptor read/8, error -71 [ 564.920020][ T938] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 564.941433][ T938] usb 5-1: device descriptor read/8, error -71 [ 565.050524][ T938] usb usb5-port1: unable to enumerate USB device [ 565.485991][ T5911] usb 1-1: USB disconnect, device number 98 [ 565.564284][T13790] netlink: 'syz.0.1996': attribute type 13 has an invalid length. [ 565.606974][T13792] FAULT_INJECTION: forcing a failure. [ 565.606974][T13792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 565.621181][T13792] CPU: 0 UID: 0 PID: 13792 Comm: syz.0.1997 Not tainted syzkaller #0 PREEMPT(full) [ 565.621207][T13792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 565.621220][T13792] Call Trace: [ 565.621227][T13792] [ 565.621238][T13792] dump_stack_lvl+0x189/0x250 [ 565.621266][T13792] ? __pfx____ratelimit+0x10/0x10 [ 565.621291][T13792] ? __pfx_dump_stack_lvl+0x10/0x10 [ 565.621307][T13792] ? __pfx__printk+0x10/0x10 [ 565.621323][T13792] ? __might_fault+0xb0/0x130 [ 565.621349][T13792] should_fail_ex+0x414/0x560 [ 565.621377][T13792] _copy_from_iter+0x1de/0x1790 [ 565.621405][T13792] ? rcu_is_watching+0x15/0xb0 [ 565.621430][T13792] ? kmalloc_reserve+0xbd/0x290 [ 565.621452][T13792] ? __pfx__copy_from_iter+0x10/0x10 [ 565.621480][T13792] ? __build_skb_around+0x262/0x3f0 [ 565.621502][T13792] ? netlink_sendmsg+0x642/0xb30 [ 565.621521][T13792] ? skb_put+0x11b/0x210 [ 565.621544][T13792] netlink_sendmsg+0x6b2/0xb30 [ 565.621575][T13792] ? __pfx_netlink_sendmsg+0x10/0x10 [ 565.621599][T13792] ? __import_iovec+0x5d4/0x7f0 [ 565.621617][T13792] ? aa_sock_msg_perm+0xf1/0x1d0 [ 565.621633][T13792] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 565.621653][T13792] ? __pfx_netlink_sendmsg+0x10/0x10 [ 565.621674][T13792] __sock_sendmsg+0x21c/0x270 [ 565.621695][T13792] ____sys_sendmsg+0x505/0x830 [ 565.621715][T13792] ? __pfx_____sys_sendmsg+0x10/0x10 [ 565.621743][T13792] ___sys_sendmsg+0x21f/0x2a0 [ 565.621761][T13792] ? __pfx____sys_sendmsg+0x10/0x10 [ 565.621815][T13792] ? __fget_files+0x2a/0x420 [ 565.621834][T13792] ? __fget_files+0x3a0/0x420 [ 565.621861][T13792] __sys_sendmsg+0x164/0x220 [ 565.621876][T13792] ? __pfx___sys_sendmsg+0x10/0x10 [ 565.621890][T13792] ? __pfx_ksys_write+0x10/0x10 [ 565.621903][T13792] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 565.621915][T13792] ? lockdep_hardirqs_on+0x9c/0x150 [ 565.621927][T13792] __do_fast_syscall_32+0xb6/0x2b0 [ 565.621938][T13792] ? lockdep_hardirqs_on+0x9c/0x150 [ 565.621949][T13792] do_fast_syscall_32+0x34/0x80 [ 565.621960][T13792] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 565.621972][T13792] RIP: 0023:0xf70fd539 [ 565.621982][T13792] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 565.621990][T13792] RSP: 002b:00000000f54ed55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 565.622002][T13792] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800002c0 [ 565.622008][T13792] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 565.622014][T13792] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 565.622022][T13792] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 565.622029][T13792] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 565.622043][T13792] [ 565.790062][ T938] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 565.882868][T13793] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1995'. [ 566.054090][T13797] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 566.140044][ T938] usb 2-1: Using ep0 maxpacket: 8 [ 566.149260][ T938] usb 2-1: unable to get BOS descriptor or descriptor too short [ 566.159080][ T938] usb 2-1: config 8 has an invalid interface number: 158 but max is 0 [ 566.167674][ T938] usb 2-1: config 8 has an invalid interface number: 158 but max is 0 [ 566.177030][ T938] usb 2-1: config 8 has no interface number 0 [ 566.183375][ T938] usb 2-1: config 8 interface 158 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 566.199018][ T938] usb 2-1: New USB device found, idVendor=1199, idProduct=685a, bcdDevice=56.af [ 566.208615][ T938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.217568][ T938] usb 2-1: Product: syz [ 566.221948][ T938] usb 2-1: Manufacturer: syz [ 566.226711][ T938] usb 2-1: SerialNumber: syz [ 566.454697][ T938] sierra 2-1:8.158: Sierra USB modem converter detected [ 566.473274][ T938] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 566.496911][ T938] usb 2-1: USB disconnect, device number 103 [ 566.510302][ T5827] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 566.518279][ T938] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 566.538544][ T938] sierra 2-1:8.158: device disconnected [ 566.686285][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.705726][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 566.727901][ T5827] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 566.747687][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.801289][ T5827] usb 1-1: config 0 descriptor?? [ 567.271665][ T5827] arvo 0003:1E7D:30D4.0035: unknown main item tag 0x0 [ 567.283475][ T5827] arvo 0003:1E7D:30D4.0035: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0 [ 567.445622][ T5890] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 567.570140][ T5940] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 567.630677][ T5890] usb 5-1: Using ep0 maxpacket: 16 [ 567.640517][ T5890] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 567.660521][ T5890] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 567.674905][ T5890] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 567.730065][ T5940] usb 2-1: Using ep0 maxpacket: 8 [ 567.732353][ T5911] usb 1-1: USB disconnect, device number 99 [ 567.738858][ T5940] usb 2-1: unable to get BOS descriptor or descriptor too short [ 567.775508][ T5940] usb 2-1: config 7 has an invalid interface number: 204 but max is 0 [ 567.793448][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.819570][ T5940] usb 2-1: config 7 has no interface number 0 [ 567.858470][ T5890] usb 5-1: config 0 descriptor?? [ 567.864507][ T5940] usb 2-1: too many endpoints for config 7 interface 204 altsetting 80: 241, using maximum allowed: 30 [ 567.911572][ T5890] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 567.922347][ T5940] usb 2-1: config 7 interface 204 altsetting 80 has 0 endpoint descriptors, different from the interface descriptor's value: 241 [ 568.002435][ T5940] usb 2-1: config 7 interface 204 has no altsetting 0 [ 568.050267][ T5940] usb 2-1: string descriptor 0 read error: -22 [ 568.058251][ T5940] usb 2-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=82.fe [ 568.067833][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.107912][ T5940] hub 2-1:7.204: bad descriptor, ignoring hub [ 568.122346][ T5940] hub 2-1:7.204: probe with driver hub failed with error -5 [ 568.318049][ T5940] asix 2-1:7.204 (unnamed net_device) (uninitialized): invalid hw address, using random [ 568.432525][T13847] netlink: 'syz.0.2009': attribute type 13 has an invalid length. [ 568.720241][ T5940] asix 2-1:7.204 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 568.733066][T13853] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2010'. [ 568.777912][ T5940] asix 2-1:7.204 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 568.980804][ T5940] asix 2-1:7.204 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 569.047700][ T5940] asix 2-1:7.204 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 569.257618][ T5940] asix 2-1:7.204 eth1: register 'asix' at usb-dummy_hcd.1-1, ASIX AX88178 USB 2.0 Ethernet, 76:8b:5e:8e:4e:28 [ 569.473626][ T5940] usb 2-1: reset high-speed USB device number 104 using dummy_hcd [ 569.644681][ T5940] usb 2-1: unable to get BOS descriptor or descriptor too short [ 569.812736][T13870] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 570.121012][ T5911] usb 5-1: USB disconnect, device number 101 [ 570.256219][T13877] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 570.710414][ T5911] usb 1-1: new full-speed USB device number 100 using dummy_hcd [ 570.872190][ T5911] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 570.880817][ T5911] usb 1-1: config 0 has no interface number 0 [ 570.890317][ T5911] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 570.899718][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.907988][ T5911] usb 1-1: Product: syz [ 570.912424][ T5911] usb 1-1: Manufacturer: syz [ 570.917067][ T5911] usb 1-1: SerialNumber: syz [ 570.925175][ T5911] usb 1-1: config 0 descriptor?? [ 570.932379][ T5911] usb-storage 1-1:0.20: USB Mass Storage device detected [ 570.942562][ T5911] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 571.270584][ T43] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 571.720013][ T5940] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 571.871095][ T5940] usb 5-1: Using ep0 maxpacket: 32 [ 571.878306][ T5940] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 571.889689][ T5940] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 571.901913][ T5940] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 571.911602][ T5940] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 571.920026][ T5940] usb 5-1: Product: syz [ 571.924210][ T5940] usb 5-1: Manufacturer: syz [ 571.935402][ T5940] hub 5-1:4.0: USB hub found [ 571.999989][ T5890] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 572.137551][ T5940] hub 5-1:4.0: config failed, hub has too many ports! (err -19) [ 572.160017][ T5890] usb 4-1: Using ep0 maxpacket: 16 [ 572.168055][ T5890] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 572.178567][ T5890] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 572.191809][ T5890] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 572.201321][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.212222][ T5890] usb 4-1: config 0 descriptor?? [ 572.221381][ T5890] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 573.458230][ T5930] usb 1-1: USB disconnect, device number 100 [ 574.770403][ T938] usb 4-1: USB disconnect, device number 116 [ 574.925711][T13924] FAULT_INJECTION: forcing a failure. [ 574.925711][T13924] name failslab, interval 1, probability 0, space 0, times 0 [ 574.938688][T13924] CPU: 1 UID: 0 PID: 13924 Comm: syz.0.2027 Not tainted syzkaller #0 PREEMPT(full) [ 574.938704][T13924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 574.938711][T13924] Call Trace: [ 574.938715][T13924] [ 574.938721][T13924] dump_stack_lvl+0x189/0x250 [ 574.938744][T13924] ? __pfx____ratelimit+0x10/0x10 [ 574.938771][T13924] ? __pfx_dump_stack_lvl+0x10/0x10 [ 574.938789][T13924] ? __pfx__printk+0x10/0x10 [ 574.938814][T13924] ? rcu_is_watching+0x15/0xb0 [ 574.938831][T13924] should_fail_ex+0x414/0x560 [ 574.938849][T13924] should_failslab+0xa8/0x100 [ 574.938863][T13924] kmem_cache_alloc_noprof+0x74/0x6e0 [ 574.938878][T13924] ? _sctp_make_chunk+0x14e/0x430 [ 574.938895][T13924] ? skb_put+0x11b/0x210 [ 574.938923][T13924] _sctp_make_chunk+0x14e/0x430 [ 574.938947][T13924] sctp_make_init+0x58b/0xd30 [ 574.938962][T13924] ? is_bpf_text_address+0x292/0x2b0 [ 574.938981][T13924] ? __pfx_sctp_make_init+0x10/0x10 [ 574.938998][T13924] ? stack_trace_save+0x9c/0xe0 [ 574.939008][T13924] ? __pfx_stack_trace_save+0x10/0x10 [ 574.939019][T13924] sctp_sf_do_prm_asoc+0xd2/0x3f0 [ 574.939045][T13924] sctp_do_sm+0x1e7/0x5a20 [ 574.939068][T13924] ? __pfx_sctp_pname+0x10/0x10 [ 574.939090][T13924] ? kasan_save_track+0x4f/0x80 [ 574.939107][T13924] ? kasan_save_track+0x3e/0x80 [ 574.939124][T13924] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 574.939134][T13924] ? sctp_sendmsg_to_asoc+0x12f8/0x1810 [ 574.939146][T13924] ? ____sys_sendmsg+0x52d/0x830 [ 574.939154][T13924] ? ___sys_sendmsg+0x21f/0x2a0 [ 574.939162][T13924] ? __sys_sendmmsg+0x28e/0x430 [ 574.939171][T13924] ? __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 574.939196][T13924] ? __do_fast_syscall_32+0xb6/0x2b0 [ 574.939215][T13924] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 574.939239][T13924] ? __pfx_sctp_do_sm+0x10/0x10 [ 574.939280][T13924] ? __sk_mem_raise_allocated+0x7ef/0x11a0 [ 574.939297][T13924] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 574.939311][T13924] sctp_sendmsg_to_asoc+0x1028/0x1810 [ 574.939327][T13924] ? __asan_memcpy+0x40/0x70 [ 574.939351][T13924] ? sctp_assoc_add_peer+0xcfa/0x13b0 [ 574.939387][T13924] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 574.939408][T13924] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 574.939419][T13924] ? __local_bh_enable_ip+0x12d/0x1c0 [ 574.939436][T13924] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 574.939448][T13924] ? security_sctp_bind_connect+0x7e/0x2e0 [ 574.939464][T13924] sctp_sendmsg+0x1941/0x2810 [ 574.939495][T13924] ? __pfx_sctp_sendmsg+0x10/0x10 [ 574.939520][T13924] ? aa_sk_perm+0x81e/0x950 [ 574.939544][T13924] ? __pfx_aa_sk_perm+0x10/0x10 [ 574.939561][T13924] ? sock_rps_record_flow+0x19/0x410 [ 574.939576][T13924] ? inet_sendmsg+0x2f4/0x370 [ 574.939591][T13924] __sock_sendmsg+0x19c/0x270 [ 574.939605][T13924] ____sys_sendmsg+0x52d/0x830 [ 574.939619][T13924] ? __pfx_____sys_sendmsg+0x10/0x10 [ 574.939654][T13924] ___sys_sendmsg+0x21f/0x2a0 [ 574.939674][T13924] ? __pfx____sys_sendmsg+0x10/0x10 [ 574.939692][T13924] ? __lock_acquire+0xab9/0xd20 [ 574.939726][T13924] ? __fget_files+0x2a/0x420 [ 574.939738][T13924] ? __fget_files+0x3a0/0x420 [ 574.939754][T13924] __sys_sendmmsg+0x28e/0x430 [ 574.939770][T13924] ? __pfx___sys_sendmmsg+0x10/0x10 [ 574.939785][T13924] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 574.939832][T13924] ? ksys_write+0x22a/0x250 [ 574.939851][T13924] ? __pfx_ksys_write+0x10/0x10 [ 574.939873][T13924] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 574.939897][T13924] __do_fast_syscall_32+0xb6/0x2b0 [ 574.939915][T13924] ? lockdep_hardirqs_on+0x9c/0x150 [ 574.939935][T13924] do_fast_syscall_32+0x34/0x80 [ 574.939951][T13924] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 574.939969][T13924] RIP: 0023:0xf70fd539 [ 574.939984][T13924] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 574.939999][T13924] RSP: 002b:00000000f54ed55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 574.940018][T13924] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080003880 [ 574.940031][T13924] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000000000 [ 574.940042][T13924] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 574.940053][T13924] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 574.940064][T13924] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 574.940090][T13924] [ 575.369130][ T5490] asix 2-1:7.204 eth1: Failed to read reg index 0x0000: -110 [ 575.421751][ T5911] usb 2-1: USB disconnect, device number 104 [ 575.429792][ T5911] asix 2-1:7.204 eth1: unregister 'asix' usb-dummy_hcd.1-1, ASIX AX88178 USB 2.0 Ethernet [ 575.641560][ T5890] usb 5-1: USB disconnect, device number 102 [ 575.684953][T13930] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 575.700052][ T938] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 575.792093][ T5911] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 575.849947][ T938] usb 4-1: Using ep0 maxpacket: 32 [ 575.930001][ T5911] usb 2-1: device descriptor read/64, error -71 [ 576.065412][ T938] usb 4-1: unable to get BOS descriptor or descriptor too short [ 576.077167][ T938] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 576.089850][ T938] usb 4-1: can't read configurations, error -71 [ 576.201600][ T5911] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 576.210274][ T24] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 576.220078][ T5890] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 576.350165][ T5911] usb 2-1: device descriptor read/64, error -71 [ 576.370029][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 576.370069][ T5890] usb 3-1: Using ep0 maxpacket: 8 [ 576.377529][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 576.383150][ T5890] usb 3-1: unable to get BOS descriptor or descriptor too short [ 576.390933][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 576.390981][ T24] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 576.391002][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.394098][ T24] usb 1-1: config 0 descriptor?? [ 576.412815][ T5890] usb 3-1: config 8 has an invalid interface number: 158 but max is 0 [ 576.424995][ T24] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 576.430073][ T5890] usb 3-1: config 8 has an invalid interface number: 158 but max is 0 [ 576.458838][ T5890] usb 3-1: config 8 has no interface number 0 [ 576.465103][ T5890] usb 3-1: config 8 interface 158 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 576.470279][ T5911] usb usb2-port1: attempt power cycle [ 576.485373][ T5890] usb 3-1: New USB device found, idVendor=1199, idProduct=685a, bcdDevice=56.af [ 576.494652][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.502746][ T5890] usb 3-1: Product: syz [ 576.506909][ T5890] usb 3-1: Manufacturer: syz [ 576.511742][ T5890] usb 3-1: SerialNumber: syz [ 576.729052][ T5890] sierra 3-1:8.158: Sierra USB modem converter detected [ 576.739753][ T5890] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 576.751374][ T5890] usb 3-1: USB disconnect, device number 109 [ 576.761873][ T5890] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 576.772577][ T5890] sierra 3-1:8.158: device disconnected [ 576.820136][ T5911] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 576.861132][ T5911] usb 2-1: device descriptor read/8, error -71 [ 576.931242][ T938] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 577.167600][ T938] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 577.181473][ T938] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 577.222552][ T938] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 577.231760][ T5911] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 577.240175][ T938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 577.248328][ T938] usb 4-1: SerialNumber: syz [ 577.272562][ T5911] usb 2-1: device descriptor read/8, error -71 [ 577.380657][ T5911] usb usb2-port1: unable to enumerate USB device [ 577.565821][ T938] usb 4-1: 0:2 : does not exist [ 577.588762][ T938] usb 4-1: USB disconnect, device number 118 [ 578.330328][ T5890] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 578.401088][ T5940] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 578.492032][ T5890] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 578.502360][ T5890] usb 5-1: config 0 has no interfaces? [ 578.507866][ T5890] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 578.517107][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.531151][ T5890] usb 5-1: config 0 descriptor?? [ 578.560086][ T5940] usb 3-1: Using ep0 maxpacket: 32 [ 578.568695][ T5940] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 578.573934][T13987] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 578.580041][ T5940] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 578.607098][ T5940] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 578.616334][ T5940] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 578.626501][ T5940] usb 3-1: Product: syz [ 578.630742][ T24] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 578.638725][ T5940] usb 3-1: Manufacturer: syz [ 578.651041][ T5940] hub 3-1:4.0: USB hub found [ 578.759273][ T5827] usb 5-1: USB disconnect, device number 103 [ 578.790004][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 578.799031][ T24] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 578.809589][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.817997][ T24] usb 4-1: Product: syz [ 578.822309][ T24] usb 4-1: Manufacturer: syz [ 578.827745][ T24] usb 4-1: SerialNumber: syz [ 578.834949][ T24] usb 4-1: config 0 descriptor?? [ 578.843988][ T24] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 578.851772][ T5940] hub 3-1:4.0: config failed, hub has too many ports! (err -19) [ 578.970402][ T5827] usb 1-1: USB disconnect, device number 101 [ 579.180523][ T5940] usb 3-1: USB disconnect, device number 110 [ 579.259185][T13985] netlink: 'syz.3.2047': attribute type 1 has an invalid length. [ 579.580678][T14008] bond1: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 579.625948][T14010] veth3: entered promiscuous mode [ 579.656165][T14010] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 579.793836][T14021] netlink: 'syz.2.2055': attribute type 13 has an invalid length. [ 579.982225][ T5911] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 580.144973][ T5911] usb 2-1: device descriptor read/64, error -71 [ 580.159580][T14031] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 580.440357][ T5911] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 580.570052][ T5911] usb 2-1: device descriptor read/64, error -71 [ 580.692207][ T5911] usb usb2-port1: attempt power cycle [ 580.870049][ T5940] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 580.969616][ T5827] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 581.001610][ T24] gspca_stk1135: reg_w 0x200 err -71 [ 581.008843][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 581.017208][ T24] gspca_stk1135: Sensor write failed [ 581.023155][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 581.029671][ T24] gspca_stk1135: Sensor write failed [ 581.039846][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 581.040362][ T5940] usb 5-1: Using ep0 maxpacket: 16 [ 581.042055][ T5940] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 581.047950][ T24] gspca_stk1135: Sensor read failed [ 581.068963][ T5911] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 581.083338][ T5940] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 581.083453][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 581.106541][ T24] gspca_stk1135: Sensor read failed [ 581.110336][ T5940] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 581.112591][ T5911] usb 2-1: device descriptor read/8, error -71 [ 581.130144][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.137178][ T24] gspca_stk1135: Detected sensor type unknown (0x0) [ 581.141835][ T5827] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 581.147803][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 581.162283][ T24] gspca_stk1135: Sensor read failed [ 581.163263][ T5940] usb 5-1: config 0 descriptor?? [ 581.167536][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 581.167550][ T24] gspca_stk1135: Sensor read failed [ 581.167572][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 581.193018][ T24] gspca_stk1135: Sensor write failed [ 581.200056][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 581.203167][ T5827] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 581.206658][ T24] gspca_stk1135: Sensor write failed [ 581.220986][ T24] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 581.223907][ T5940] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 581.236457][ T24] usb 4-1: USB disconnect, device number 119 [ 581.264496][ T5827] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 581.281962][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 581.290699][ T5827] usb 1-1: SerialNumber: syz [ 581.403164][ T5911] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 581.442529][ T5911] usb 2-1: device descriptor read/8, error -71 [ 581.557584][ T5911] usb usb2-port1: unable to enumerate USB device [ 581.585259][ T5827] usb 1-1: 0:2 : does not exist [ 581.679026][ T5827] usb 1-1: USB disconnect, device number 102 [ 581.715881][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 582.645661][T14062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2065'. [ 582.743733][T14062] bond1: option ad_user_port_key: invalid value (4095) [ 582.792193][T14062] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 582.900821][T14062] bond1 (unregistering): Released all slaves [ 583.309996][ T24] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 583.480128][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 583.494394][ T24] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.529296][ T24] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 583.564169][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 583.574839][ T24] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 583.607152][ T24] usb 2-1: Product: syz [ 583.616153][ T24] usb 2-1: Manufacturer: syz [ 583.656575][ T24] hub 2-1:4.0: USB hub found [ 583.663217][T11801] usb 5-1: USB disconnect, device number 104 [ 583.856731][ T24] hub 2-1:4.0: config failed, hub has too many ports! (err -19) [ 583.969978][ T5911] usb 3-1: new full-speed USB device number 111 using dummy_hcd [ 584.156367][ T5911] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 584.165453][ T5911] usb 3-1: config 0 has no interface number 0 [ 584.186889][ T5911] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 584.196702][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.214279][ T5911] usb 3-1: Product: syz [ 584.224329][ T5911] usb 3-1: Manufacturer: syz [ 584.470030][ T24] usb 2-1: USB disconnect, device number 113 [ 584.518992][ T5911] usb 3-1: SerialNumber: syz [ 584.572256][ T5911] usb 3-1: config 0 descriptor?? [ 584.588800][ T5911] usb-storage 3-1:0.20: USB Mass Storage device detected [ 584.638033][ T5911] usb-storage 3-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 584.925127][T14110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2072'. [ 585.250032][ T5911] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 585.412114][ T5911] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 585.422371][ T5911] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 585.431302][ T5911] usb 4-1: config 1 has no interface number 0 [ 585.437588][ T5911] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.448593][ T5911] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 585.460492][ T5911] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 585.470419][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.478491][ T5911] usb 4-1: Product: syz [ 585.482733][ T5911] usb 4-1: Manufacturer: syz [ 585.488156][ T5911] usb 4-1: SerialNumber: syz [ 586.360163][ T5911] cdc_ncm 4-1:1.1: failed GET_NTB_PARAMETERS [ 586.491536][ T5911] cdc_ncm 4-1:1.1: bind() failure [ 586.536927][ T5911] usb 4-1: USB disconnect, device number 120 [ 586.649248][ T5827] usb 3-1: USB disconnect, device number 111 [ 587.239971][T11801] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 587.419981][T11801] usb 5-1: device descriptor read/64, error -71 [ 587.663684][T11801] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 587.869987][T11801] usb 5-1: device descriptor read/64, error -71 [ 588.054758][T11801] usb usb5-port1: attempt power cycle [ 588.404748][T11801] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 588.430101][ T5911] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 588.438607][T11801] usb 5-1: device descriptor read/8, error -71 [ 588.460046][ T5827] usb 1-1: new full-speed USB device number 103 using dummy_hcd [ 588.600027][ T5911] usb 3-1: Using ep0 maxpacket: 32 [ 588.607503][ T5911] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.613869][ T5827] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 588.618758][ T5911] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.623997][ T5911] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 588.629483][ T5827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.657746][ T5827] usb 1-1: Product: syz [ 588.658976][ T5911] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 588.662160][ T5827] usb 1-1: Manufacturer: syz [ 588.670632][ T5911] usb 3-1: Product: syz [ 588.675756][ T5827] usb 1-1: SerialNumber: syz [ 588.679624][ T5911] usb 3-1: Manufacturer: syz [ 588.692240][ T5827] usb 1-1: config 0 descriptor?? [ 588.699603][ T5911] hub 3-1:4.0: USB hub found [ 588.720126][T11801] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 588.740707][T11801] usb 5-1: device descriptor read/8, error -71 [ 588.850329][T11801] usb usb5-port1: unable to enumerate USB device [ 588.900006][ T5911] hub 3-1:4.0: config failed, hub has too many ports! (err -19) [ 588.907862][ T5827] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 589.240205][ T5911] usb 3-1: USB disconnect, device number 112 [ 590.974610][ T5940] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 591.130040][ T5940] usb 5-1: Using ep0 maxpacket: 8 [ 591.137359][ T5940] usb 5-1: unable to get BOS descriptor or descriptor too short [ 591.148125][ T5940] usb 5-1: config 7 has an invalid interface number: 204 but max is 0 [ 591.187291][ T5940] usb 5-1: config 7 has no interface number 0 [ 591.224070][ T5940] usb 5-1: too many endpoints for config 7 interface 204 altsetting 80: 241, using maximum allowed: 30 [ 591.237756][ T5827] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 591.253247][ T5827] usb 1-1: USB disconnect, device number 103 [ 591.320729][ T5940] usb 5-1: config 7 interface 204 altsetting 80 has 0 endpoint descriptors, different from the interface descriptor's value: 241 [ 591.460434][ T5940] usb 5-1: config 7 interface 204 has no altsetting 0 [ 591.573102][ T5940] usb 5-1: string descriptor 0 read error: -22 [ 591.579644][ T5940] usb 5-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=82.fe [ 591.688799][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.741069][ T5940] hub 5-1:7.204: bad descriptor, ignoring hub [ 591.766979][ T5940] hub 5-1:7.204: probe with driver hub failed with error -5 [ 591.941889][ T5940] asix 5-1:7.204 (unnamed net_device) (uninitialized): invalid hw address, using random [ 592.346079][ T5940] asix 5-1:7.204 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 592.357607][ T5940] asix 5-1:7.204 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 592.520729][ T5940] asix 5-1:7.204 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 592.532303][ T5940] asix 5-1:7.204 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 592.707441][ T5940] asix 5-1:7.204 eth1: register 'asix' at usb-dummy_hcd.4-1, ASIX AX88178 USB 2.0 Ethernet, 2a:cc:15:73:9c:5a [ 592.741060][ T5827] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 592.782214][ T5911] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 592.900393][ T5940] usb 5-1: reset high-speed USB device number 109 using dummy_hcd [ 592.911264][ T5827] usb 1-1: Using ep0 maxpacket: 32 [ 592.919966][ T5911] usb 3-1: device descriptor read/64, error -71 [ 592.928087][ T5827] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.940461][ T5827] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 592.953056][ T5827] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 592.965390][ T5827] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 592.974155][ T5827] usb 1-1: Product: syz [ 592.978513][ T5827] usb 1-1: Manufacturer: syz [ 593.005146][ T5827] hub 1-1:4.0: USB hub found [ 593.093665][ T5940] usb 5-1: unable to get BOS descriptor or descriptor too short [ 593.180278][ T5911] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 593.244155][ T5827] hub 1-1:4.0: config failed, hub has too many ports! (err -19) [ 593.370048][ T5911] usb 3-1: device descriptor read/64, error -71 [ 593.510702][ T5911] usb usb3-port1: attempt power cycle [ 593.860028][ T5911] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 593.890665][ T5911] usb 3-1: device descriptor read/8, error -71 [ 594.140070][ T5911] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 594.160692][ T5911] usb 3-1: device descriptor read/8, error -71 [ 594.270202][ T5911] usb usb3-port1: unable to enumerate USB device [ 595.830024][ T5890] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 595.969985][ T5890] usb 2-1: device descriptor read/64, error -71 [ 596.230260][T12827] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 596.240598][ T5890] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 596.370113][ T5890] usb 2-1: device descriptor read/64, error -71 [ 596.483955][ T5890] usb usb2-port1: attempt power cycle [ 596.831279][ T5890] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 596.850576][ T5890] usb 2-1: device descriptor read/8, error -71 [ 597.090060][ T5890] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 597.120830][ T5890] usb 2-1: device descriptor read/8, error -71 [ 597.230405][ T5890] usb usb2-port1: unable to enumerate USB device [ 598.480210][ T5490] asix 5-1:7.204 eth1: Failed to read reg index 0x0000: -110 [ 598.669157][ T5890] usb 5-1: USB disconnect, device number 109 [ 598.684038][ T5890] asix 5-1:7.204 eth1: unregister 'asix' usb-dummy_hcd.4-1, ASIX AX88178 USB 2.0 Ethernet [ 598.728980][T11801] usb 1-1: USB disconnect, device number 104 [ 598.733812][ T5890] ------------[ cut here ]------------ [ 598.741495][ T5890] WARNING: CPU: 0 PID: 5890 at net/sched/sch_generic.c:1500 dev_shutdown+0x3e1/0x440 [ 598.751112][ T5890] Modules linked in: [ 598.755827][ T5890] CPU: 0 UID: 0 PID: 5890 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) [ 598.765560][ T5890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 598.775778][ T5890] Workqueue: usb_hub_wq hub_event [ 598.781153][ T5890] RIP: 0010:dev_shutdown+0x3e1/0x440 [ 598.786849][ T5890] Code: d5 ab d5 f8 49 83 7d 00 00 75 19 e8 b9 f6 6f f8 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 a0 f6 6f f8 90 <0f> 0b 90 eb e1 e8 95 f6 6f f8 4c 89 e7 be 03 00 00 00 e8 d8 cc 40 [ 598.807779][ T5890] RSP: 0018:ffffc9000443f160 EFLAGS: 00010287 [ 598.814114][ T5890] RAX: ffffffff89504d30 RBX: ffff888053ba04c8 RCX: 0000000000100000 [ 598.822140][ T5890] RDX: ffffc90018532000 RSI: 00000000000064bf RDI: 00000000000064c0 [ 598.830409][ T5890] RBP: 0000000000000001 R08: ffffc9000443ef47 R09: 1ffff92000887de8 [ 598.838450][ T5890] R10: dffffc0000000000 R11: fffff52000887de9 R12: ffffffff8f525a50 [ 598.846474][ T5890] R13: ffff888053ba05a8 R14: 1ffff1100a774099 R15: ffffffff8f525a40 [ 598.854563][ T5890] FS: 0000000000000000(0000) GS:ffff888125d0d000(0000) knlGS:0000000000000000 [ 598.863650][ T5890] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 598.870347][ T5890] CR2: 00000000f7456288 CR3: 00000000321e4000 CR4: 00000000003526f0 [ 598.878431][ T5890] Call Trace: [ 598.881762][ T5890] [ 598.884757][ T5890] unregister_netdevice_many_notify+0x118c/0x2390 [ 598.891252][ T5890] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 598.898008][ T5890] ? __lock_acquire+0xab9/0xd20 [ 598.902972][ T5890] ? rtnl_net_dev_lock+0x257/0x2f0 [ 598.908117][ T5890] ? __pfx___mutex_lock+0x10/0x10 [ 598.913260][ T5890] unregister_netdevice_queue+0x33c/0x380 [ 598.918983][ T5890] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 598.925281][ T5890] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 598.930460][ T5890] unregister_netdev+0x1f/0x60 [ 598.935212][ T5890] usbnet_disconnect+0xcd/0x380 [ 598.940217][ T5890] usb_unbind_interface+0x26e/0x910 [ 598.945412][ T5890] ? __pfx_usb_unbind_interface+0x10/0x10 [ 598.951206][ T5890] device_release_driver_internal+0x4d9/0x800 [ 598.957272][ T5890] bus_remove_device+0x34d/0x410 [ 598.962448][ T5890] device_del+0x511/0x8e0 [ 598.966805][ T5890] ? __pm_runtime_barrier+0x212/0x460 [ 598.972329][ T5890] ? __pfx_device_del+0x10/0x10 [ 598.977203][ T5890] ? __pfx___mutex_lock+0x10/0x10 [ 598.982480][ T5890] usb_disable_device+0x3e9/0x8a0 [ 598.987535][ T5890] usb_disconnect+0x330/0x950 [ 598.992396][ T5890] hub_event+0x1cf5/0x4a20 [ 598.996859][ T5890] ? do_raw_spin_lock+0x121/0x290 [ 599.002025][ T5890] ? register_lock_class+0x51/0x320 [ 599.007344][ T5890] ? __pfx_hub_event+0x10/0x10 [ 599.012192][ T5890] ? process_scheduled_works+0x9ef/0x17b0 [ 599.018019][ T5890] ? _raw_spin_unlock_irq+0x23/0x50 [ 599.023322][ T5890] ? process_scheduled_works+0x9ef/0x17b0 [ 599.029065][ T5890] ? process_scheduled_works+0x9ef/0x17b0 [ 599.035112][ T5890] process_scheduled_works+0xae1/0x17b0 [ 599.040957][ T5890] ? __pfx_process_scheduled_works+0x10/0x10 [ 599.047165][ T5890] worker_thread+0x8a0/0xda0 [ 599.051919][ T5890] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 599.058385][ T5890] ? __kthread_parkme+0x7b/0x200 [ 599.063563][ T5890] kthread+0x711/0x8a0 [ 599.067695][ T5890] ? __pfx_worker_thread+0x10/0x10 [ 599.073058][ T5890] ? __pfx_kthread+0x10/0x10 [ 599.077680][ T5890] ? _raw_spin_unlock_irq+0x23/0x50 [ 599.083261][ T5890] ? lockdep_hardirqs_on+0x9c/0x150 [ 599.088474][ T5890] ? __pfx_kthread+0x10/0x10 [ 599.093141][ T5890] ret_from_fork+0x4bc/0x870 [ 599.097782][ T5890] ? __pfx_ret_from_fork+0x10/0x10 [ 599.102997][ T5890] ? __switch_to_asm+0x39/0x70 [ 599.107780][ T5890] ? __switch_to_asm+0x33/0x70 [ 599.112653][ T5890] ? __pfx_kthread+0x10/0x10 [ 599.117255][ T5890] ret_from_fork_asm+0x1a/0x30 [ 599.122101][ T5890] [ 599.125130][ T5890] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 599.132399][ T5890] CPU: 0 UID: 0 PID: 5890 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) [ 599.141768][ T5890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 599.151825][ T5890] Workqueue: usb_hub_wq hub_event [ 599.156865][ T5890] Call Trace: [ 599.160140][ T5890] [ 599.163061][ T5890] dump_stack_lvl+0x99/0x250 [ 599.167659][ T5890] ? __asan_memcpy+0x40/0x70 [ 599.172267][ T5890] ? __pfx_dump_stack_lvl+0x10/0x10 [ 599.177455][ T5890] ? __pfx__printk+0x10/0x10 [ 599.182044][ T5890] vpanic+0x237/0x6d0 [ 599.186021][ T5890] ? __pfx_vpanic+0x10/0x10 [ 599.190533][ T5890] panic+0xb9/0xc0 [ 599.194268][ T5890] ? __pfx_panic+0x10/0x10 [ 599.198684][ T5890] __warn+0x31b/0x4b0 [ 599.202658][ T5890] ? dev_shutdown+0x3e1/0x440 [ 599.207333][ T5890] ? dev_shutdown+0x3e1/0x440 [ 599.212008][ T5890] report_bug+0x2be/0x4f0 [ 599.216346][ T5890] ? dev_shutdown+0x3e1/0x440 [ 599.221018][ T5890] ? dev_shutdown+0x3e1/0x440 [ 599.225690][ T5890] ? dev_shutdown+0x3e3/0x440 [ 599.230356][ T5890] handle_bug+0x84/0x160 [ 599.234592][ T5890] exc_invalid_op+0x1a/0x50 [ 599.239091][ T5890] asm_exc_invalid_op+0x1a/0x20 [ 599.243949][ T5890] RIP: 0010:dev_shutdown+0x3e1/0x440 [ 599.249242][ T5890] Code: d5 ab d5 f8 49 83 7d 00 00 75 19 e8 b9 f6 6f f8 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 a0 f6 6f f8 90 <0f> 0b 90 eb e1 e8 95 f6 6f f8 4c 89 e7 be 03 00 00 00 e8 d8 cc 40 [ 599.268849][ T5890] RSP: 0018:ffffc9000443f160 EFLAGS: 00010287 [ 599.274921][ T5890] RAX: ffffffff89504d30 RBX: ffff888053ba04c8 RCX: 0000000000100000 [ 599.282888][ T5890] RDX: ffffc90018532000 RSI: 00000000000064bf RDI: 00000000000064c0 [ 599.290859][ T5890] RBP: 0000000000000001 R08: ffffc9000443ef47 R09: 1ffff92000887de8 [ 599.298831][ T5890] R10: dffffc0000000000 R11: fffff52000887de9 R12: ffffffff8f525a50 [ 599.306809][ T5890] R13: ffff888053ba05a8 R14: 1ffff1100a774099 R15: ffffffff8f525a40 [ 599.314788][ T5890] ? dev_shutdown+0x3e0/0x440 [ 599.319485][ T5890] unregister_netdevice_many_notify+0x118c/0x2390 [ 599.325912][ T5890] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 599.332684][ T5890] ? __lock_acquire+0xab9/0xd20 [ 599.337539][ T5890] ? rtnl_net_dev_lock+0x257/0x2f0 [ 599.342662][ T5890] ? __pfx___mutex_lock+0x10/0x10 [ 599.347686][ T5890] unregister_netdevice_queue+0x33c/0x380 [ 599.353416][ T5890] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 599.359663][ T5890] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 599.364778][ T5890] unregister_netdev+0x1f/0x60 [ 599.369663][ T5890] usbnet_disconnect+0xcd/0x380 [ 599.374519][ T5890] usb_unbind_interface+0x26e/0x910 [ 599.379719][ T5890] ? __pfx_usb_unbind_interface+0x10/0x10 [ 599.385436][ T5890] device_release_driver_internal+0x4d9/0x800 [ 599.391523][ T5890] bus_remove_device+0x34d/0x410 [ 599.396485][ T5890] device_del+0x511/0x8e0 [ 599.400831][ T5890] ? __pm_runtime_barrier+0x212/0x460 [ 599.406205][ T5890] ? __pfx_device_del+0x10/0x10 [ 599.411043][ T5890] ? __pfx___mutex_lock+0x10/0x10 [ 599.416059][ T5890] usb_disable_device+0x3e9/0x8a0 [ 599.421077][ T5890] usb_disconnect+0x330/0x950 [ 599.425753][ T5890] hub_event+0x1cf5/0x4a20 [ 599.430259][ T5890] ? do_raw_spin_lock+0x121/0x290 [ 599.435276][ T5890] ? register_lock_class+0x51/0x320 [ 599.440470][ T5890] ? __pfx_hub_event+0x10/0x10 [ 599.445217][ T5890] ? process_scheduled_works+0x9ef/0x17b0 [ 599.450925][ T5890] ? _raw_spin_unlock_irq+0x23/0x50 [ 599.456110][ T5890] ? process_scheduled_works+0x9ef/0x17b0 [ 599.461825][ T5890] ? process_scheduled_works+0x9ef/0x17b0 [ 599.467555][ T5890] process_scheduled_works+0xae1/0x17b0 [ 599.473116][ T5890] ? __pfx_process_scheduled_works+0x10/0x10 [ 599.479118][ T5890] worker_thread+0x8a0/0xda0 [ 599.483715][ T5890] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 599.490052][ T5890] ? __kthread_parkme+0x7b/0x200 [ 599.494990][ T5890] kthread+0x711/0x8a0 [ 599.499048][ T5890] ? __pfx_worker_thread+0x10/0x10 [ 599.504151][ T5890] ? __pfx_kthread+0x10/0x10 [ 599.508732][ T5890] ? _raw_spin_unlock_irq+0x23/0x50 [ 599.514039][ T5890] ? lockdep_hardirqs_on+0x9c/0x150 [ 599.519231][ T5890] ? __pfx_kthread+0x10/0x10 [ 599.523834][ T5890] ret_from_fork+0x4bc/0x870 [ 599.528438][ T5890] ? __pfx_ret_from_fork+0x10/0x10 [ 599.533558][ T5890] ? __switch_to_asm+0x39/0x70 [ 599.538313][ T5890] ? __switch_to_asm+0x33/0x70 [ 599.543153][ T5890] ? __pfx_kthread+0x10/0x10 [ 599.547740][ T5890] ret_from_fork_asm+0x1a/0x30 [ 599.552510][ T5890] [ 599.555842][ T5890] Kernel Offset: disabled [ 599.560157][ T5890] Rebooting in 86400 seconds..