last executing test programs: 2m24.407421178s ago: executing program 3 (id=163): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0xffffff7f, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x1, 0x0, 0x0, 0x0, 0x10, 0x14, 0x72}) 2m24.334067707s ago: executing program 3 (id=164): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x101202, 0x0) read$nci(r0, &(0x7f0000000100)=""/107, 0x6b) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="310300000000000000000800000008000300", @ANYRES32=r4, @ANYBLOB="08000600", @ANYRES64=r2], 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_inet_SIOCSIFNETMASK(r6, 0x891c, &(0x7f0000000200)={'nr0\x00', {0x2, 0x4e24, @local}}) write$nci(r0, &(0x7f00000024c0)=ANY=[], 0x4) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0) 2m24.330781006s ago: executing program 3 (id=165): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf3, 0xfffffffb, 0x39, 0x747d5e13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x0, 0x1ff, 0x2, 0xfffffffe, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0xa, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x8, 0x0, 0x25, 0x8, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c33, 0x3, 0x5, 0x10000, 0x9, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x8, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000081, 0x10, 0xfffffff9, 0xfffffffd, 0x9, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd3, 0x7, 0x20, 0x404, 0x4, 0x8, 0x7f, 0x7, 0x9, 0xe8b, 0x9, 0x80000001, 0x8, 0x3f92, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x1000, 0x80000001, 0x4, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x47, 0x0, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x8, 0x95e, 0x0, 0xe, 0x3, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x7, 0x0, 0x5, 0x1e2, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f413f9, 0xfffffff8, 0x20008, 0x8a8, 0x2, 0x40, 0x409, 0x7, 0x4, 0x4, 0x10, 0x4, 0x0, 0x7fff, 0x0, 0xfffffff8, 0x401, 0x1, 0x200, 0x4, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_PMU_CAPABILITY(r2, 0x4068aea3, &(0x7f0000000480)={0xc4, 0x0, 0x3}) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 2m24.122139979s ago: executing program 3 (id=172): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x80000) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) r4 = syz_usb_connect(0x2, 0x24, &(0x7f0000001140)=ANY=[@ANYBLOB="120100d100000000000000936a8d0102030101061200002ac5980000000e000000000000"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="001306000000ec19d02303f6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r5, 0xc040565e, &(0x7f0000000100)={0x9, 0x101}) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r6, r6, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000802, r6, &(0x7f0000000100)={0x5057, 0xfffffffffffff7f8, 0x3, 0x8a, 0x2, 0xf, 0x7, 0x3ff, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000480)={@fd, @flat=@binder={0x66646185, 0xa}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x2a}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 2m21.07878181s ago: executing program 3 (id=191): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000680)={0x0, 0xfc000000}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x3, @private0, 0xc}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)=ANY=[], 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x40851}, 0x4004891) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="21ae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dbfaf8eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158564e0ddb4673055de196535d706d142e1dc7d404583923cb1b286cfc5418884ac7e605d93652dc48", 0x2ab}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec1307b7411892a1beaef9ae54833107eb88b0411b1bc0ba9bc28d0eb6a73ad76be9facd1d9d82b6a3cc2040e84b398d279e50535b6557df8a633cfc7615fca9879b11834eb07eeb4278cab057f89b7464048cf573c21d", 0xb7}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) close(r1) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) setpgid(r3, 0x0) setpgid(0x0, r3) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0) 2m20.878108496s ago: executing program 3 (id=193): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, 0xee01, &(0x7f0000000000)='./file1\x00') pipe2$watch_queue(0x0, 0x80) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, 0x0, &(0x7f0000001240)) sendmsg$NFC_CMD_VENDOR(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000540)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x8800) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0x9362, 0x0) mount$9p_unix(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x401, 0x0) 2m5.802669908s ago: executing program 32 (id=193): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, 0xee01, &(0x7f0000000000)='./file1\x00') pipe2$watch_queue(0x0, 0x80) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, 0x0, &(0x7f0000001240)) sendmsg$NFC_CMD_VENDOR(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000540)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x8800) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0x9362, 0x0) mount$9p_unix(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x401, 0x0) 44.00220714s ago: executing program 2 (id=1286): syz_emit_vhci(0x0, 0x8b) 43.981301096s ago: executing program 2 (id=1288): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001", @ANYRES32], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x40200) ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f00000001c0)={0x2, 0x0, 0x1947, 0x0, 0x7, 0x6}) 40.882789136s ago: executing program 2 (id=1313): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000380)="9c74dfbf7757d9c4135f047788ca", 0xe}], 0x1) 37.812971419s ago: executing program 2 (id=1333): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000020605a3cfc8647108024e0000000007120003006269746d61703a69702c6d616300000005000400010000000900020073797a3000000000240007800c00028008000340000000020c0001800800014000000004080008400000005c05000500020000000500010006"], 0x70}}, 0x8000) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) capset(&(0x7f0000000dc0)={0x30049835}, &(0x7f0000000e00)={0x6, 0x66a2b16, 0xa, 0x3, 0xd7d, 0x4}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) 35.929217882s ago: executing program 1 (id=1355): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x31000000, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x15\x00'}]}, 0x1c}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000680)="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", 0xfdae}], 0x1) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x31000000, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x15\x00'}]}, 0x1c}}, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000680)="580000004b8004023655fdbaded39d65000b4824ca940417a3cd3639e431e8e2125f6c00940f6a0325010ebc0000000000000080001328baf0fffeffe809005300fff5dd02000000000000000c10003d5bcf6916b4114b32793792c395da89991a8be619c7ce1ecf8b6e3501aeb67cdb99f356f9518492cbf6d88e98f0df275f9f6dd0e185ac9b0b8902c883e0b63cf78a6f36b97cab227f62b6d35dcd058a8957d1bbf401e51d4302cbc17c3201e7b12fa4daac244b96d402183b429bbe400236cd1f8d50f2568ac466a6d40024f87588cbe7808c481b157f18acb07cee62b1d238ba704435ee1c055697eb1ee0e2cfa36d2efbf1ac9fa85fe4", 0xfdae}], 0x1) (async) 35.853392673s ago: executing program 1 (id=1357): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f0000000040)={0x0, 0xae, 0x3ff, 0x30315559}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r4 = dup(r2) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000002c0)=0x10000) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000000)={0x8000001, 0x0, 0x0, 0x0, 0x4000007}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fa8000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000080)="c4c28d474700670f30c4e1365fa04e0000000f07366665360f300f017d00b805000000b9d3fcfba60f01d90f011d403c8ceb0f08d9e0", 0x36}], 0x1, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r4) sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r6, 0x1, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x8894) 35.795841773s ago: executing program 0 (id=1358): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000100)=""/74, 0x328000, 0x1000, 0xfffffffa}, 0x20) 35.726463798s ago: executing program 1 (id=1359): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000140)="89e7ee2c78dad9b4b473fec988ca58e8001875d38e0d369bd7c50580", 0x1c}, {&(0x7f0000000380)="9c74dfbf7757d9c4135f04770d56", 0xe}], 0x2) 35.692807835s ago: executing program 1 (id=1360): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x1000, 0x4043c0cdd38f4873, 0x60, 0x258, 0x202, 0x1, 0x0, 0x0, {}, {}, {0xfffffffb, 0x7d}, {0x8000000}, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1, 0x0, 0x100}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x800, 0x1}, 0x20) syz_usb_control_io$hid(r2, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x8400, 0x0) ioctl$TIOCGPTLCK(r4, 0x80045439, &(0x7f00000000c0)) 35.644604534s ago: executing program 0 (id=1361): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00", @ANYRES32], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x40200) ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f00000001c0)={0x2, 0x0, 0x1947, 0x0, 0x7, 0x6}) 34.85427865s ago: executing program 1 (id=1365): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000002300)={{0x12, 0x1, 0x201, 0x7b, 0x4e, 0x64, 0x8, 0x2294, 0x425b, 0x1a35, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x10, 0x9, 0x50, 0xa, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x70, 0x7e, 0x8c, 0x1a, [], [{{0x9, 0x5, 0xe, 0x0, 0x10, 0x9, 0x2, 0xff}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x2, 0x9, 0x87}}]}}]}}]}}, &(0x7f0000002a40)={0x0, 0x0, 0x0, 0x0}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) sendfile(r1, r0, 0x0, 0x7fffefff) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 34.749375363s ago: executing program 2 (id=1366): r0 = syz_usb_connect(0x0, 0x801, &(0x7f0000001900)={{0x12, 0x1, 0x141, 0x76, 0xd3, 0x2a, 0x20, 0x763, 0x1002, 0xa2c5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7ef, 0x3, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xae, 0x1, 0x4, 0xff, 0xc4, 0x43, 0x4, [], [{{0x9, 0x5, 0x9, 0x1, 0x400, 0x7, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x81, 0x4}]}}, {{0x9, 0x5, 0xb, 0x3, 0x50, 0x3, 0x5, 0x4, [@generic={0x6c, 0x22, "fd7b7f04678e850eff8a4a08d75051d3db45bc9619a94372b9e00ca7d8874caeb5c2046e4604e066a778916a613605cbe0f017c9689656f48ae04b21b7b17e3cc79a32672284ea09ae9f22689a355ffd007e3aca22eec9082c2f3b8c875fe57965e0f5006c56a7fec439"}, @generic={0xce, 0x0, "d34f3b6a5949d660ce010a7fcbac7c028fca0b08ec8f271a6f95412d631ba2e3288237035640238a90616af0760f24565429cfbd54212e20b2e87ffe7450c7e813d34aa00f7cf6fe55b1f8dda9e9c8da6a2887785a8782aadbb195c2af07e1617d4c76682cc0ab9c91b94ae3fdebdebbdfca9768db8f7ae6478ec5c069d5b020be89789d788243f663dbae5dbad56964936efb24c954f6d8eda6671f229071b602c8b488020f3e08204c26aee22613ed9ac66074de379b8d28a9dc24558bf3d7a8baaeb12d55f27c7b205725"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x28, 0x8, 0x6a, [@generic={0x1f, 0xa, "e48fd115cc959c3d37c8813b3333855d3aec7329d7254d482eeefab526"}, @generic={0xef, 0xf, "f4d715a6151b989ab7116402fa1eb2262da0a341f3127d7bb8429776f8b5a63bd475c3f6a0295933aeb292eaa7722c98cf8b77d38e9c5f95a70dc8bfa3c1724f2a3e7707a66f402e2dc3c9949d022712b4280f51246c0a0243e5b730cf7f06c7c0247129201b0ab72173ff2e929e13347964de214ab8a5743c22aa04b61fc7e9f96b118c89db76a324dca22a8aed0439a74b5c27812f87116aac2ccdaf0da3622eb5fdccbe6642333ed1cd71f598c330bfd06bdb6779effbf4afd45136466f5e4aefeb39f1eef69d2a5eeb19a512f0793cd9e34f9c243fc6ccb904c5bacab375839ee9e2d31ed53069342de057"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x7, 0x4, 0x9}}]}}, {{0x9, 0x4, 0xea, 0x1, 0x10, 0x7a, 0xa8, 0x29, 0x0, [@generic={0x3, 0x9, "91"}], [{{0x9, 0x5, 0xa, 0x0, 0x7ff, 0xef, 0x3, 0x1}}, {{0x9, 0x5, 0x0, 0x3, 0x40, 0x3, 0x7, 0x1}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x1, 0x6, 0x5}}, {{0x9, 0x5, 0x80, 0x8, 0x20, 0x7, 0x6, 0xf7}}, {{0x9, 0x5, 0x1, 0x4, 0x3ff, 0xe, 0x24, 0x6}}, {{0x9, 0x5, 0x0, 0x1, 0x20, 0x12, 0x84, 0x1, [@generic={0x29, 0x10, "c943ceda17d92366c4fdcf6ee536a5476bc96d7ff28e47caf816608f39f3f1cfcf7cba1db442e0"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x7, 0x87, 0x48}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0x7f, 0x10, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x5, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x5}]}}, {{0x9, 0x5, 0xb, 0x2, 0x400, 0x5, 0xb, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x800}]}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x7, 0x81, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x9}]}}, {{0x9, 0x5, 0x4, 0x1e, 0x20, 0xfd, 0x9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x3, 0x8}]}}, {{0x9, 0x5, 0x7, 0x0, 0x0, 0x7f, 0x5, 0x5}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x7, 0x2, 0x7}}, {{0x9, 0x5, 0x6, 0x4, 0x40, 0xe, 0x3, 0xa, [@generic={0x84, 0xe, "548c695716b1bbd57c38247767fa33d4a4ed5f8e8f99c9484ed4439ea9bddf6863148f6d94c90b84b6d9474acc642abe1977cdbf808d4a36ca2c7ba314a2530a025c9d44f1c2d56a83aec164b189c6189b63b7c8fcba31a7710c5a327a106872a88e133fc83b434ee13e8a1c2615022b9cf73921cad9d9a29e4b274d30cad8e0d2db"}, @generic={0x1d, 0x24, "249ddaca28dc0e94414ba94cb7c8ddc5c745a42f02f335547c2cb4"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0xd, 0x3, 0x3}}, {{0x9, 0x5, 0x2, 0x2, 0x200, 0x55, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x3}]}}]}}, {{0x9, 0x4, 0xca, 0x7, 0xd, 0xb9, 0xe5, 0x4b, 0xff, [@hid_hid={0x9, 0x21, 0xfcc, 0x5, 0x1, {0x22, 0xd6}}, @cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "05cfa18693"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x7f, 0x6, 0x5}, {0x6, 0x24, 0x1a, 0x6d, 0x16}, [@obex={0x5, 0x24, 0x15, 0xcd1}, @country_functional={0x6, 0x24, 0x7, 0x2c, 0xfffb}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0xff, 0x81}, @mdlm={0x15, 0x24, 0x12, 0x2}]}], [{{0x9, 0x5, 0x4, 0xc, 0x200, 0x5, 0xd, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x9}]}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0x5, 0x57, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x56ca}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x4}]}}, {{0x9, 0x5, 0xf, 0x2, 0x3ff, 0x5, 0x9, 0x30, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0xf2f3}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x32, 0xfffc}]}}, {{0x9, 0x5, 0x9, 0x0, 0x0, 0x4, 0x0, 0x79, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x2}]}}, {{0x9, 0x5, 0x7, 0x0, 0x230, 0x3, 0x0, 0x8}}, {{0x9, 0x5, 0xc, 0x4, 0x20, 0x5, 0xc2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xf8, 0x400}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x5, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0xf110}, @generic={0xb0, 0x23, "8ae6be36c9e309c3206eda7cf7b8bc1d097492c0b2e902d9436e56d52d57943d2f7978f216796738e9e2568560b6879c242eb73fb11ca21e950c7cb5b549e5784704d4cf5f6d4c7db31f476cbfb0ae8e8886299b26114da0fdad3bb2642d1ebb567c24e307390fe1bcf3a7d8fac0ecfa8b4dcdea7f12b4434a1c1be88ad68077c6dbf9b61cda80342c81fbca41049b11e64addb2f68bad98b8ccf93834fe7cd4a625f1d9331580f4a9c48edacf5c"}]}}, {{0x9, 0x5, 0xe, 0x18, 0x400, 0x5, 0x4, 0x2, [@generic={0x27, 0x2, "e7909840f27208fde3684801a95cdca58b0684d21da303e80aa0d9b0d208e1d527a115ffd5"}, @generic={0x11, 0x6, "b66c78eb877ff9ec044c1f8b86a4fe"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x7, 0xff, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x1}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x4, 0x33, 0x10}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0x2, 0xa, 0x9}}, {{0x9, 0x5, 0xe, 0xc, 0x20, 0x5, 0xff, 0x9, [@generic={0x6a, 0x23, "3f1c950e175b3c004d20cb10c70994aa912fb3d0d8d946352c558ea3f76229b84c26b268d3cf7a038f7055303f5af442fc586fa85b921bedb7fab47d1211bf503e5f6e052019ccfd347ef8c45a7ae7d882beb73f5f04e6fa40da4a05bd4d6f05f8a12f65fd2a8701"}, @generic={0x46, 0x30, "7b4ade1139f58e4114946c053bdd282795aea4a056880614f750fdf2cd5581e03a760f1744c3cc9e23d6c56f25bb9b39215308c3fe8a707c1d99b882f3c1614665bbfa03"}]}}, {{0x9, 0x5, 0xb, 0x1, 0x3ff, 0x3c, 0x7d, 0x2, [@generic={0xe3, 0x21, "f90b3e2915288eb60eab6ba44bb5f3bb427d7f66d17350d896cfc641e29b7f54de5f429bc17591444756a4f0d44ee4d948e1b70a535762941041671422f5621eb72c0f1abd3e226f6800339cff5176cdd174f14126a5d2f5f2e41d40135e1526ecf93051b837b12a7175eef9cade5ad804db497658ca6d9120eafc234d816bd60e9264eee217901693e7622c6e7ce9dc49d00e7e6591bacf1fdfb132f3868f68a902f06c4bb8d9b2c5b8bfd6a016a9546b6f5df9f959ce73e088650c93b31b2cce6c77d4a8cd51fae33d4f2128c0980b64a4ba12ae6fef6bade9c65fa7fe4f600c"}, @generic={0x42, 0x9, "ba33b3130e60ae638f7934d18434a8ccd1aeaa13926bcbc840a02ea9d66cac51c2627356b12fd615fe39da5da1c1f1130584000b50d909b16b071f94c05f4f9f"}]}}]}}]}}]}}, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x4, 0x5, 0x8000000000000000, 0xc, 0x9, 0x7, 0x9, 0x8, 0x3, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x7, 0x7, 0x3, 0x6}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="2ba52ebd7000fddbdf251b00000006002100"], 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40c0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001800)={0x84, &(0x7f00000003c0)={0x20, 0x5, 0x4, "010063a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r5, 0x40086602, &(0x7f0000000000)) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000013c0)={0x44, &(0x7f00000011c0)=ANY=[@ANYBLOB="201405"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000c80)={0x20, 0x0, 0x4, "f670e000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, r7, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x12, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000801}, 0x448c0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001180)={0x24, &(0x7f0000001080)={0x0, 0x21, 0x4, {0x4, 0x3, "b589"}}, &(0x7f00000010c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x437}}, &(0x7f0000001100)={0x0, 0x22, 0x15, {[@main=@item_012={0x1, 0x0, 0xb, "15"}, @main=@item_4={0x3, 0x0, 0xa, '\\Pb\"'}, @global=@item_012={0x0, 0x1, 0x7}, @global=@item_012={0x2, 0x1, 0xb, "f1f9"}, @global=@item_4={0x3, 0x1, 0x4, "49fbf65a"}, @local=@item_4={0x3, 0x2, 0xa, "8dbd3ab6"}]}}, &(0x7f0000001140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x6, 0x1, {0x22, 0x64e}}}}, &(0x7f0000001680)={0x2c, &(0x7f00000012c0)={0x20, 0x5, 0xcf, "d5aba7030ab7a68d6726a04f5dbe24647061991aa3745c5b1ff5aa6d966cdeac05e5cacca165ed73cc47043a0bccb7fc98ba821e3edece24bb360d449d81f75c084fa264072a834d78cd3adcc669ae0fc3a3b8fc774f0296a622a34e63fc77274335eb5e640288dac20ddcd4c459da8b75a8f6920634b375387e4ba01aeaecbb5b272b00499ee0928d82988faa41df8ad00aeefdbe02d61f54d8d0f612bb3dee13dc71dd8425a5e1bfbf33efc9754536953d2bcf60a0440d4546614bbc100bffd8687e53acde974b136d3a32f7d4b9"}, &(0x7f0000001440)={0x0, 0xa, 0x1}, &(0x7f00000014c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000001500)={0x20, 0x1, 0xfc, "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"}, &(0x7f0000001640)={0x20, 0x3, 0x1, 0x9}}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006) syz_genetlink_get_family_id$nfc(&(0x7f00000016c0), r6) syz_usb_connect(0x0, 0x64, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002ffa9400819151300000102030109025200010000000009040000042513bf000a2401000000020102052404"], 0x0) recvfrom(r3, &(0x7f0000001700)=""/91, 0x5b, 0x0, &(0x7f0000001780)=@ieee802154={0x24, @none={0x0, 0xffff}}, 0x80) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, &(0x7f0000000f00)={0x0, 0x14, 0x4, "42467af9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 34.329531456s ago: executing program 1 (id=1367): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, 0x0, 0x48000) r1 = socket(0x28, 0x3, 0x1) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8808010}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c4b0000", @ANYRES16=r0, @ANYBLOB="000328bd7000fcdbdf25690000000600d40006000000"], 0x1c}, 0x1, 0x0, 0x0, 0x820}, 0x4010) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x20000001) r2 = syz_usb_connect(0x3, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) pidfd_getfd(r3, 0xffffffffffffffff, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x4000}, 0x10) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000300)=@req3={0xfff, 0x7ff, 0x3, 0x3, 0x80000001, 0xc2bfd78, 0x7fff}, 0x1c) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) recvfrom(r5, &(0x7f0000000140)=""/104, 0x68, 0x12020, 0x0, 0x0) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000040)={0x4, 0x0, 0x13, 0x8, 0x100, 0x0}) syz_open_dev$sg(0x0, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, &(0x7f0000000200)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_COPY(r7, 0x3b83, &(0x7f0000000500)={0x28, 0x0, 0x0, 0x0, 0x7, 0xffffffff, 0x5}) syz_open_dev$char_usb(0xc, 0xb4, 0x6) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000240), &(0x7f0000000280)=0x4) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r9, 0x3b94, &(0x7f0000000180)={0x48}) 34.254865433s ago: executing program 4 (id=1368): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000380)="9c74dfbf7757d9c4135f04770d5606", 0xf}], 0x1) 34.245092689s ago: executing program 4 (id=1369): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) prlimit64(0x0, 0x6, 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, 0x0, 0x64342, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) r2 = accept$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @private}, &(0x7f0000000140)=0x10) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = dup2(r1, r3) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r4) ioctl$BLKBSZSET(r4, 0x40081271, &(0x7f0000000000)=0x4e2) syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000100), &(0x7f0000000080)) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x22052, r0, 0xf884d000) 33.662485814s ago: executing program 4 (id=1370): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$dlm_monitor(0xffffff9c, &(0x7f00000001c0), 0x400043, 0x0) pipe(&(0x7f0000000080)) socket$netlink(0x10, 0x3, 0xc) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x0, 0x0, 0x300f}}) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r3], 0x3c}}, 0x10) timer_create(0x3, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) 33.561591308s ago: executing program 4 (id=1371): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000180)=ANY=[@ANYBLOB="201600000000e352700ce6f76d23e45c581fb86418403d85fb6e0d4ff2d2b31fb53cec8b3eb3b07d863c4225a604631e312345400257f801f6f0f6c070b71ee20d54ca73a8895a8ed66d0a15733bd8ecfd91517c3f7f35df33498e987bb46f197c3e30e53ca88202fe012ed0c3aaecb9a804fc9fe3c9a33676417942e967de5ef2dd841846edea86ee490ccc49294a2e3b9912b8f35dccb5e8699d9e9b554288be5c71f7932856c4919e99752e34c676e1a886e8141db959bd6ddb50f0187a225641c07304e109e9226db0f79fc4"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001540)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000040)={0x14, &(0x7f0000000500)={0x40, 0x7, 0xff, {0xff, 0x22, "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"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000440)={0x44, &(0x7f0000000080)={0x20, 0xc, 0x1a, "28907e7cac827a59c9bcf66af22ba6ac353f23e3483f29228d3d"}, &(0x7f0000000100)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0x1, 0x69a, 0x5, 0xdfc, 0x5, 0xf, 0xf, 0x6, 0x3, 0x3, 0x3, 0xa626}}, &(0x7f0000000300)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000000340)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000003c0)={0x20, 0x87, 0x2, 0x9}, &(0x7f0000000400)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000003880)={0x34, &(0x7f0000003640)={0x40, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000004300)={0x34, &(0x7f00000040c0)={0x40, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000002300)=""/74, &(0x7f0000002380)=0x4a) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000004c0)={0x0, 0x3, 0x6, @random="6e1cf8b4c253"}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={r4, 0x3, 0x6, @random="cea0300a1672"}, 0x10) socket$kcm(0x10, 0x2, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000140)=ANY=[@ANYBLOB="00108100000045"], 0x0, 0x0, 0x0, 0x0, 0x0}) 33.012497827s ago: executing program 4 (id=1372): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000f9b000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, 0x0}], 0x1, 0xf000, 0x0, 0x0) 32.970696918s ago: executing program 4 (id=1373): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ecm(0x5, 0x51, &(0x7f0000000300)=ANY=[@ANYBLOB="12011003020000402505a1a440000102030109023f0001011d0003090400050302060002052406ff"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r4, 0x29, 0x46, 0x0, &(0x7f00007d0000)) truncate(0x0, 0x8) listen(r3, 0xfffffffd) r5 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000001000), 0x581, 0x40000000, 0x0) r6 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r6, 0x0, 0x3, 0x0, 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x10, 0x2, 0xff, 0x5a, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x22, 0x20}, 0xe) listen(r2, 0x0) accept4$x25(r2, 0x0, 0x0, 0x80800) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'macsec0\x00', 0x20}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r7, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x6c}], 0x4) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 32.55173858s ago: executing program 0 (id=1374): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0xa0031718561a10d8, 0xfffc}}, 0x50) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x100) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=@known='system.posix_acl_default\x00') syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x78, 0x0, 0x3, {0x8000, 0xcd, 0x0, {0x2, 0x6366, 0x9ef1, 0x8, 0x5, 0x9b, 0x5, 0x2339fdf8, 0x5, 0x8000, 0x538, 0x0, 0xffffffffffffffff, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 32.511194348s ago: executing program 0 (id=1375): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syz_tun\x00'}) sendto$packet(r2, &(0x7f0000000180)="0b040700e0ff030002004788aa96a13bb100000000004305400f", 0x1a, 0x0, 0x0, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 32.442036432s ago: executing program 0 (id=1376): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x8b) 32.352842772s ago: executing program 0 (id=1377): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000140)='1{EW', 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB="cc0100001a0001000000000000000000ac1414aa0000000000000000000000000000000000000000000000000000000044030000000300030000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000000006c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000002040000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000500000000000000000000000a0001000000000000000000080023"], 0x1cc}}, 0x0) r1 = syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000840)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x1, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x7, 0x3, 0x2, 0x6, 0x0, 0xa, {{0x5}, {0x5, 0x24, 0x0, 0x30}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x2, 0x8, 0x4}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x1, 0x81, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x9, 0x9, 0xf}}}}}]}}]}}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) 31.688418252s ago: executing program 2 (id=1378): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001de21831a0e69ee517d34460bc06002d98ef750dfe9e8fd44d17a9a2e3a1fd0000a705251e6182949a36fa886ca9b032a4178017253b", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4048000) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000240)=""/216, 0xd8}, {&(0x7f0000000400)=""/253, 0xfd}, {&(0x7f00000010c0)=""/4069, 0xfe5}, {&(0x7f0000000640)=""/207, 0xcf}, {&(0x7f0000000b00)=""/94, 0x5e}, {&(0x7f0000000540)=""/225, 0xe1}, {&(0x7f00000000c0)=""/208, 0xd0}, {&(0x7f0000000340)=""/168, 0xa8}], 0x8}, 0x40002002) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000080)={r5, 0x8004}, 0xffc4) getsockopt$bt_hci(r2, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) shutdown(r1, 0x2) 0s ago: executing program 33 (id=1367): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, 0x0, 0x48000) r1 = socket(0x28, 0x3, 0x1) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8808010}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c4b0000", @ANYRES16=r0, @ANYBLOB="000328bd7000fcdbdf25690000000600d40006000000"], 0x1c}, 0x1, 0x0, 0x0, 0x820}, 0x4010) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x20000001) r2 = syz_usb_connect(0x3, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) pidfd_getfd(r3, 0xffffffffffffffff, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x4000}, 0x10) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000300)=@req3={0xfff, 0x7ff, 0x3, 0x3, 0x80000001, 0xc2bfd78, 0x7fff}, 0x1c) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) recvfrom(r5, &(0x7f0000000140)=""/104, 0x68, 0x12020, 0x0, 0x0) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000040)={0x4, 0x0, 0x13, 0x8, 0x100, 0x0}) syz_open_dev$sg(0x0, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, &(0x7f0000000200)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_COPY(r7, 0x3b83, &(0x7f0000000500)={0x28, 0x0, 0x0, 0x0, 0x7, 0xffffffff, 0x5}) syz_open_dev$char_usb(0xc, 0xb4, 0x6) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000240), &(0x7f0000000280)=0x4) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r9, 0x3b94, &(0x7f0000000180)={0x48}) kernel console output (not intermixed with test programs): maxpacket 512, setting to 64 [ 112.423521][ T24] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 112.433305][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.441389][ T24] usb 5-1: Product: syz [ 112.445606][ T24] usb 5-1: Manufacturer: syz [ 112.450206][ T24] usb 5-1: SerialNumber: syz [ 112.456929][ T24] usb 5-1: config 0 descriptor?? [ 112.462377][ T6887] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22 [ 112.470502][ T6887] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22 [ 112.478698][ T24] smsc95xx v2.0.0 [ 112.486201][ T5945] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 112.494579][ T5945] usb 3-1: config 0 has no interface number 0 [ 112.500704][ T5945] usb 3-1: config 0 interface 214 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 112.513119][ T5945] usb 3-1: config 0 interface 214 has no altsetting 0 [ 112.521592][ T5945] usb 3-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 112.531747][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.540841][ T5945] usb 3-1: Product: syz [ 112.545306][ T5945] usb 3-1: Manufacturer: syz [ 112.549925][ T5945] usb 3-1: SerialNumber: syz [ 112.556105][ T5945] usb 3-1: config 0 descriptor?? [ 112.561643][ T6890] raw-gadget.6 gadget.2: fail, usb_ep_enable returned -22 [ 112.681043][ T6887] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22 [ 112.688412][ T6887] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22 [ 112.770069][ T6890] raw-gadget.6 gadget.2: fail, usb_ep_enable returned -22 [ 113.007691][ T24] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 113.020278][ T24] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 113.138654][ T6901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.149295][ T6901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.173087][ T44] usb 1-1: USB disconnect, device number 16 [ 113.292393][ T6905] netlink: 128 bytes leftover after parsing attributes in process `syz.0.321'. [ 113.334320][ T5869] Bluetooth: hci3: command tx timeout [ 113.363485][ T6901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.380818][ T6901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.438791][ T6911] netlink: 16 bytes leftover after parsing attributes in process `syz.0.323'. [ 113.813117][ T6924] tipc: Enabling of bearer rejected, failed to enable media [ 113.876346][ T6926] FAULT_INJECTION: forcing a failure. [ 113.876346][ T6926] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 113.890527][ T6926] CPU: 0 UID: 0 PID: 6926 Comm: syz.0.327 Not tainted syzkaller #0 PREEMPT(full) [ 113.890561][ T6926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 113.890578][ T6926] Call Trace: [ 113.890586][ T6926] [ 113.890594][ T6926] dump_stack_lvl+0x189/0x250 [ 113.890629][ T6926] ? __pfx____ratelimit+0x10/0x10 [ 113.890654][ T6926] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.890684][ T6926] ? __pfx__printk+0x10/0x10 [ 113.890711][ T6926] ? __might_fault+0xb0/0x130 [ 113.890745][ T6926] ? rcu_is_watching+0x15/0xb0 [ 113.890768][ T6926] should_fail_ex+0x414/0x560 [ 113.890798][ T6926] _copy_from_iter+0x1de/0x1790 [ 113.890816][ T6926] ? __might_fault+0xb0/0x130 [ 113.890844][ T6926] ? __might_fault+0xcc/0x130 [ 113.890874][ T6926] ? _copy_from_iter+0x24f/0x1790 [ 113.890895][ T6926] ? __pfx__copy_from_iter+0x10/0x10 [ 113.890913][ T6926] ? sock_alloc_send_pskb+0x875/0x990 [ 113.890934][ T6926] ? __pfx__copy_from_iter+0x10/0x10 [ 113.890954][ T6926] ? page_copy_sane+0x16a/0x280 [ 113.890974][ T6926] copy_page_from_iter+0xdd/0x170 [ 113.890996][ T6926] skb_copy_datagram_from_iter+0x306/0x720 [ 113.891022][ T6926] tun_get_user+0x1691/0x3e20 [ 113.891051][ T6926] ? rcu_is_watching+0x15/0xb0 [ 113.891072][ T6926] ? lock_release+0x4b/0x3e0 [ 113.891093][ T6926] ? aa_file_perm+0x44d/0x1550 [ 113.891121][ T6926] ? __pfx_tun_get_user+0x10/0x10 [ 113.891145][ T6926] ? _parse_integer_limit+0x1ae/0x1f0 [ 113.891177][ T6926] ? kstrtoull+0x12f/0x1d0 [ 113.891208][ T6926] ? ref_tracker_alloc+0x318/0x460 [ 113.891237][ T6926] ? get_pid_task+0x20/0x1f0 [ 113.891264][ T6926] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 113.891294][ T6926] ? tun_get+0x1c/0x2f0 [ 113.891317][ T6926] ? tun_get+0x1c/0x2f0 [ 113.891340][ T6926] ? rcu_is_watching+0x15/0xb0 [ 113.891360][ T6926] ? tun_get+0x1c/0x2f0 [ 113.891382][ T6926] ? lock_release+0x4b/0x3e0 [ 113.891400][ T6926] ? common_file_perm+0x1b5/0x230 [ 113.891426][ T6926] ? tun_get+0x1c/0x2f0 [ 113.891451][ T6926] tun_chr_write_iter+0x113/0x200 [ 113.891476][ T6926] vfs_write+0x5c9/0xb30 [ 113.891498][ T6926] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 113.891522][ T6926] ? __pfx_vfs_write+0x10/0x10 [ 113.891552][ T6926] ? __fget_files+0x2a/0x420 [ 113.891580][ T6926] ksys_write+0x145/0x250 [ 113.891600][ T6926] ? __pfx_ksys_write+0x10/0x10 [ 113.891621][ T6926] ? rcu_is_watching+0x15/0xb0 [ 113.891644][ T6926] do_syscall_64+0xfa/0xfa0 [ 113.891671][ T6926] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.891691][ T6926] ? clear_bhb_loop+0x60/0xb0 [ 113.891712][ T6926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.891730][ T6926] RIP: 0033:0x7f62cf18ebe9 [ 113.891747][ T6926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.891763][ T6926] RSP: 002b:00007f62cffd9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 113.891783][ T6926] RAX: ffffffffffffffda RBX: 00007f62cf3b5fa0 RCX: 00007f62cf18ebe9 [ 113.891798][ T6926] RDX: 000000000000fdef RSI: 0000200000000040 RDI: 0000000000000003 [ 113.891810][ T6926] RBP: 00007f62cffd9090 R08: 0000000000000000 R09: 0000000000000000 [ 113.891822][ T6926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 113.891834][ T6926] R13: 00007f62cf3b6038 R14: 00007f62cf3b5fa0 R15: 00007ffd7e4bec08 [ 113.891852][ T6926] [ 114.215438][ C0] vkms_vblank_simulate: vblank timer overrun [ 114.314603][ T5945] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 114.328609][ T5945] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 114.339708][ T6928] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 114.339730][ T6928] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 114.370673][ T5945] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 114.392571][ T5945] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 114.404068][ T5945] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 114.415519][ T5945] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 114.426043][ T24] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 114.427708][ T5945] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 114.440055][ T24] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -61 [ 114.448998][ T5945] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 114.468613][ T5945] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 114.481428][ T5945] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 114.492885][ T5945] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 114.504380][ T5945] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 114.526831][ T5945] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 114.543934][ T5945] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 114.556488][ T5945] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 114.569517][ T5945] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 114.583352][ T5945] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 114.594881][ T5945] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 114.607043][ T5945] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 114.618539][ T5945] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 114.630212][ T5945] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 114.641653][ T5945] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 114.643646][ T5955] usb 5-1: USB disconnect, device number 2 [ 114.653033][ T5945] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 114.670649][ T5945] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 114.683586][ T5945] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 114.697711][ T5945] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 114.709490][ T5945] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 114.727078][ T5869] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 114.728072][ T5945] ax88179_178a 3-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.2-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, 52:35:77:d6:0e:97 [ 114.753187][ T5945] usb 3-1: USB disconnect, device number 13 [ 114.791512][ T5945] ax88179_178a 3-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.2-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 114.892982][ T6942] netlink: 76 bytes leftover after parsing attributes in process `syz.1.333'. [ 115.115835][ T6959] tipc: Enabling of bearer rejected, failed to enable media [ 115.424150][ T5869] Bluetooth: hci3: command tx timeout [ 115.477516][ T5900] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 115.485346][ T5945] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 115.494548][ T5955] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 115.643846][ T5900] usb 3-1: Using ep0 maxpacket: 16 [ 115.650339][ T5900] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 115.660839][ T5900] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 115.664720][ T5955] usb 5-1: Using ep0 maxpacket: 8 [ 115.671092][ T5900] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 115.679477][ T5955] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 115.689252][ T5900] usb 3-1: config 1 interface 0 has no altsetting 0 [ 115.702882][ T5955] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 115.708080][ T5945] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 115.724915][ T5955] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 115.725613][ T5945] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.737873][ T5945] usb 1-1: config 0 descriptor?? [ 115.744498][ T5955] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.764671][ T5955] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 115.765344][ T5900] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 115.774683][ T5955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.783519][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.799561][ T5900] usb 3-1: Product: syz [ 115.803812][ T5900] usb 3-1: Manufacturer: syz [ 115.833842][ T5900] usb 3-1: SerialNumber: syz [ 115.862096][ T6983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.870990][ T6983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.033404][ T5945] usb 1-1: Cannot read MAC address [ 116.043106][ T5945] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 116.058850][ T5900] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 116.072182][ T5945] usb 1-1: USB disconnect, device number 17 [ 116.165898][ T5955] usb 5-1: GET_CAPABILITIES returned 0 [ 116.171530][ T5955] usbtmc 5-1:16.0: can't read capabilities [ 116.261979][ T6962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.270834][ T6962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.389614][ T6967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.399348][ T6967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.409400][ T5900] usb 5-1: USB disconnect, device number 3 [ 116.482653][ T6987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.491642][ T6987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.578692][ T6990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.342'. [ 116.835232][ T24] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 116.973882][ T24] usb 1-1: device descriptor read/64, error -71 [ 117.048155][ T6995] tipc: Enabling of bearer rejected, failed to enable media [ 117.213875][ T24] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 117.365668][ T24] usb 1-1: device descriptor read/64, error -71 [ 117.367895][ T7013] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 117.475683][ T24] usb usb1-port1: attempt power cycle [ 117.493932][ T5869] Bluetooth: hci3: command tx timeout [ 117.814304][ T24] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 117.846018][ T24] usb 1-1: device descriptor read/8, error -71 [ 118.083869][ T24] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 118.104434][ T24] usb 1-1: device descriptor read/8, error -71 [ 118.187621][ T5955] usb 3-1: USB disconnect, device number 14 [ 118.203911][ T5955] usblp0: removed [ 118.217455][ T24] usb usb1-port1: unable to enumerate USB device [ 118.279791][ T7023] tipc: Enabling of bearer rejected, failed to enable media [ 118.487963][ T7032] tipc: Started in network mode [ 118.492972][ T7032] tipc: Node identity , cluster identity 4711 [ 118.499354][ T7032] tipc: Failed to set node id, please configure manually [ 118.508270][ T7032] tipc: Enabling of bearer rejected, failed to enable media [ 118.521568][ T7034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.530940][ T7034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.539941][ T5955] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 118.695341][ T5955] usb 3-1: Using ep0 maxpacket: 8 [ 118.701690][ T5955] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 118.711887][ T5955] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 118.721767][ T5955] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 118.731748][ T5955] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.744849][ T5955] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 118.753959][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.081479][ T5955] usb 3-1: GET_CAPABILITIES returned 0 [ 119.088020][ T5955] usbtmc 3-1:16.0: can't read capabilities [ 119.313262][ T7019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.327962][ T7046] netlink: 'syz.4.364': attribute type 21 has an invalid length. [ 119.333444][ T7019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.349436][ T5945] usb 3-1: USB disconnect, device number 15 [ 119.380906][ T7049] tipc: Enabling of bearer rejected, failed to enable media [ 119.423410][ T7051] netlink: 288 bytes leftover after parsing attributes in process `syz.1.365'. [ 119.484811][ T7055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.496038][ T7055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.809564][ T7067] tipc: Enabled bearer , priority 0 [ 119.820705][ T7066] tipc: Disabling bearer [ 119.910384][ T7055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.934668][ T7055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.985260][ T30] audit: type=1800 audit(1755847804.692:5): pid=7055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.367" name="file0" dev="overlay" ino=542 res=0 errno=0 [ 120.150380][ T7091] tipc: Enabled bearer , priority 0 [ 120.159673][ T7090] tipc: Disabling bearer [ 120.363847][ T5926] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 120.494176][ T5926] usb 1-1: device descriptor read/64, error -71 [ 120.694197][ T24] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 120.719950][ T7105] hpfs: Bad magic ... probably not HPFS [ 120.734049][ T5926] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 120.757402][ T7107] netlink: 'syz.1.389': attribute type 1 has an invalid length. [ 120.853994][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 120.861898][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 120.873117][ T5926] usb 1-1: device descriptor read/64, error -71 [ 120.882293][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 120.893155][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 120.905305][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.919938][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 120.930866][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.940901][ T7112] tipc: Enabled bearer , priority 0 [ 120.960990][ T7110] tipc: Disabling bearer [ 121.004271][ T5926] usb usb1-port1: attempt power cycle [ 121.239627][ T24] usb 3-1: GET_CAPABILITIES returned 0 [ 121.247114][ T24] usbtmc 3-1:16.0: can't read capabilities [ 121.363927][ T5926] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 121.384581][ T5926] usb 1-1: device descriptor read/8, error -71 [ 121.453057][ T5945] usb 3-1: USB disconnect, device number 16 [ 121.633867][ T5926] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 121.666516][ T5926] usb 1-1: device descriptor read/8, error -71 [ 121.774218][ T5926] usb usb1-port1: unable to enumerate USB device [ 121.811640][ T7139] tipc: Enabling of bearer rejected, failed to enable media [ 121.846595][ T30] audit: type=1800 audit(1755847806.562:6): pid=7141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.403" name="rnullb0" dev="tmpfs" ino=596 res=0 errno=0 [ 122.014078][ T7147] batadv_slave_1: entered promiscuous mode [ 122.021253][ T7146] batadv_slave_1: left promiscuous mode [ 122.060311][ T7149] binder: 7148:7149 ioctl c0306201 2000000003c0 returned -14 [ 122.073180][ T7149] binder: 7148:7149 ioctl c0306201 200000000100 returned -14 [ 122.225377][ T7152] block nbd2: shutting down sockets [ 122.298593][ T7160] tipc: Enabled bearer , priority 0 [ 122.308419][ T7159] tipc: Disabling bearer [ 122.421683][ T7168] XFS (rnullb0): Invalid superblock magic number [ 122.468096][ T7177] overlayfs: failed to clone upperpath [ 122.530391][ T7179] netlink: 16 bytes leftover after parsing attributes in process `syz.4.417'. [ 122.545866][ T7179] /dev/rnullb0: Can't lookup blockdev [ 122.786601][ T7197] vxfs: WRONG superblock magic 00000000 at 1 [ 122.793243][ T7197] vxfs: WRONG superblock magic 00000000 at 8 [ 122.797025][ T7198] tipc: Enabling of bearer rejected, failed to enable media [ 122.801437][ T7197] vxfs: can't find superblock. [ 122.913208][ T7206] mmap: syz.2.427 (7206): VmData 37457920 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 123.170230][ T7210] kvm: kvm [7209]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x5 [ 123.372954][ T7218] tipc: Enabling of bearer rejected, failed to enable media [ 123.384348][ T5945] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 123.416171][ T7220] overlayfs: failed to clone upperpath [ 123.533889][ T5945] usb 3-1: Using ep0 maxpacket: 8 [ 123.541610][ T5945] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 123.550835][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.560715][ T5945] usb 3-1: Product: syz [ 123.565120][ T5945] usb 3-1: Manufacturer: syz [ 123.569759][ T5945] usb 3-1: SerialNumber: syz [ 123.576766][ T5945] usb 3-1: config 0 descriptor?? [ 123.784984][ T5945] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 124.193200][ T7232] syzkaller1: entered promiscuous mode [ 124.199329][ T7232] syzkaller1: entered allmulticast mode [ 124.581108][ T7237] tipc: Enabling of bearer rejected, failed to enable media [ 124.812534][ T5945] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 124.825070][ T5945] usb 3-1: USB disconnect, device number 17 [ 124.886735][ T5186] Bluetooth: hci2: unexpected event for opcode 0x0c23 [ 125.164015][ T24] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 125.189967][ T5186] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 125.343844][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 125.378578][ T24] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 125.392419][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.408705][ T24] usb 1-1: Product: syz [ 125.413036][ T24] usb 1-1: Manufacturer: syz [ 125.430768][ T24] usb 1-1: SerialNumber: syz [ 125.442247][ T24] usb 1-1: config 0 descriptor?? [ 125.463533][ T7261] tipc: Enabling of bearer rejected, failed to enable media [ 125.655285][ T7247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.664875][ T7247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.684226][ T24] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 125.746989][ T7266] fuse: Bad value for 'fd' [ 125.833450][ T7270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.455'. [ 126.016377][ T7278] @: renamed from vlan0 (while UP) [ 126.113324][ T7292] FAULT_INJECTION: forcing a failure. [ 126.113324][ T7292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.131320][ T7292] CPU: 1 UID: 0 PID: 7292 Comm: syz.2.459 Not tainted syzkaller #0 PREEMPT(full) [ 126.131348][ T7292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 126.131365][ T7292] Call Trace: [ 126.131373][ T7292] [ 126.131380][ T7292] dump_stack_lvl+0x189/0x250 [ 126.131415][ T7292] ? __pfx____ratelimit+0x10/0x10 [ 126.131439][ T7292] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.131475][ T7292] ? __pfx__printk+0x10/0x10 [ 126.131501][ T7292] ? __might_fault+0xb0/0x130 [ 126.131533][ T7292] ? rcu_is_watching+0x15/0xb0 [ 126.131555][ T7292] should_fail_ex+0x414/0x560 [ 126.131584][ T7292] _copy_from_user+0x2d/0xb0 [ 126.131606][ T7292] kstrtouint_from_user+0xc4/0x170 [ 126.131635][ T7292] ? __might_fault+0xb0/0x130 [ 126.131663][ T7292] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 126.131697][ T7292] ? vfs_write+0x211/0xb30 [ 126.131714][ T7292] ? rcu_is_watching+0x15/0xb0 [ 126.131737][ T7292] proc_fail_nth_write+0x88/0x200 [ 126.131765][ T7292] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 126.131791][ T7292] ? security_file_permission+0x75/0x290 [ 126.131812][ T7292] ? preempt_count_add+0x91/0x1a0 [ 126.131831][ T7292] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 126.131858][ T7292] vfs_write+0x27b/0xb30 [ 126.131880][ T7292] ? __pfx_vfs_write+0x10/0x10 [ 126.131902][ T7292] ? __fget_files+0x3a0/0x420 [ 126.131924][ T7292] ? __fget_files+0x2a/0x420 [ 126.131950][ T7292] ksys_write+0x145/0x250 [ 126.131967][ T7292] ? __fget_files+0x2a/0x420 [ 126.131989][ T7292] ? __pfx_ksys_write+0x10/0x10 [ 126.132021][ T7292] ? rcu_is_watching+0x15/0xb0 [ 126.132042][ T7292] do_syscall_64+0xfa/0xfa0 [ 126.132066][ T7292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.132083][ T7292] ? clear_bhb_loop+0x60/0xb0 [ 126.132103][ T7292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.132120][ T7292] RIP: 0033:0x7ff54518d69f [ 126.132135][ T7292] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 126.132155][ T7292] RSP: 002b:00007ff545f45030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 126.132175][ T7292] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff54518d69f [ 126.132188][ T7292] RDX: 0000000000000001 RSI: 00007ff545f450a0 RDI: 0000000000000004 [ 126.132198][ T7292] RBP: 00007ff545f45090 R08: 0000000000000000 R09: 0000000000000000 [ 126.132209][ T7292] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 126.132220][ T7292] R13: 00007ff5453b6128 R14: 00007ff5453b6090 R15: 00007ffd3f23f988 [ 126.132240][ T7292] [ 126.437854][ T7298] can0: slcan on ttyS3. [ 126.494478][ T7297] can0 (unregistered): slcan off ttyS3. [ 126.794068][ T5945] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 127.029365][ T7247] netlink: 68 bytes leftover after parsing attributes in process `syz.0.446'. [ 127.043835][ T5945] usb 3-1: Using ep0 maxpacket: 16 [ 127.057621][ T5945] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 127.065887][ T5945] usb 3-1: config 0 has no interface number 0 [ 127.073532][ T5945] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 127.083451][ T5945] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 127.096174][ T5945] usb 3-1: config 0 interface 41 has no altsetting 0 [ 127.301101][ T5945] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 127.310357][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.318416][ T5945] usb 3-1: Product: syz [ 127.322606][ T5945] usb 3-1: Manufacturer: syz [ 127.327275][ T5945] usb 3-1: SerialNumber: syz [ 127.334315][ T5945] usb 3-1: config 0 descriptor?? [ 127.339890][ T7309] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 127.347186][ T7309] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 127.387110][ T24] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 127.412653][ T24] usb 1-1: USB disconnect, device number 26 [ 127.558391][ T7309] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 127.568003][ T7309] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 127.761751][ T7363] cgroup: Name too long [ 128.123681][ T5945] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -22 [ 128.496329][ T5945] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 128.588612][ T7381] overlayfs: failed to clone upperpath [ 128.653858][ T5945] usb 1-1: Using ep0 maxpacket: 16 [ 128.660898][ T5945] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.674329][ T5945] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 128.683451][ T5945] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.694193][ T5945] usb 1-1: config 0 descriptor?? [ 129.111157][ T7375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.120662][ T7375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.129859][ T7375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.139890][ T7375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.349976][ T5945] usbhid 1-1:0.0: can't add hid device: -71 [ 129.356083][ T5945] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 129.366542][ T5945] usb 1-1: USB disconnect, device number 27 [ 129.490304][ T7405] overlayfs: failed to clone upperpath [ 129.504403][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 129.512898][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 129.836915][ T7435] tipc: Enabling of bearer rejected, failed to enable media [ 130.300679][ T7459] tipc: Enabling of bearer rejected, failed to enable media [ 130.338421][ T7461] netlink: 36 bytes leftover after parsing attributes in process `syz.4.517'. [ 130.363931][ T5900] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 130.513915][ T5900] usb 1-1: Using ep0 maxpacket: 32 [ 130.521172][ T5900] usb 1-1: config 0 has an invalid interface number: 83 but max is 0 [ 130.529352][ T5900] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.539527][ T5900] usb 1-1: config 0 has no interface number 0 [ 130.548786][ T5900] usb 1-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 130.558579][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.566741][ T5900] usb 1-1: Product: syz [ 130.570931][ T5900] usb 1-1: Manufacturer: syz [ 130.575554][ T5900] usb 1-1: SerialNumber: syz [ 130.581327][ T5900] usb 1-1: config 0 descriptor?? [ 130.588031][ T5900] redrat3 1-1:0.83: Couldn't find all endpoints [ 130.785666][ T5926] usb 3-1: USB disconnect, device number 18 [ 130.800227][ T7451] netlink: 72 bytes leftover after parsing attributes in process `syz.0.513'. [ 130.864397][ T7451] block nbd0: NBD_DISCONNECT [ 130.874664][ T7451] block nbd0: Send disconnect failed -22 [ 130.887035][ T7451] block nbd0: Send disconnect failed -22 [ 130.896336][ T7450] block nbd0: Disconnected due to user request. [ 130.902730][ T7450] block nbd0: shutting down sockets [ 130.914996][ T5900] usb 1-1: USB disconnect, device number 28 [ 131.138381][ T7480] tipc: Enabling of bearer rejected, failed to enable media [ 131.638113][ T7497] overlayfs: failed to clone upperpath [ 131.803478][ T7501] tipc: Enabling of bearer rejected, failed to enable media [ 131.958918][ T7512] netlink: 44 bytes leftover after parsing attributes in process `syz.1.539'. [ 131.969844][ T7512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.539'. [ 131.979452][ T7512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.539'. [ 132.074477][ T1174] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 132.223887][ T1174] usb 1-1: Using ep0 maxpacket: 8 [ 132.231561][ T1174] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 132.241373][ T1174] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 132.251351][ T1174] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 132.261307][ T1174] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.274387][ T1174] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 132.283451][ T1174] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.353856][ T44] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 132.504335][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 132.524102][ T44] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.546870][ T44] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 132.561696][ T44] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 132.567619][ T7521] overlayfs: failed to clone upperpath [ 132.578224][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.586956][ T44] usb 3-1: Product: syz [ 132.591241][ T44] usb 3-1: Manufacturer: syz [ 132.596031][ T44] usb 3-1: SerialNumber: syz [ 132.645772][ T1174] usb 1-1: usb_control_msg returned -71 [ 132.653555][ T1174] usbtmc 1-1:16.0: can't read capabilities [ 132.678040][ T1174] usb 1-1: USB disconnect, device number 29 [ 132.808023][ T44] usb 3-1: 0:2 : does not exist [ 132.817104][ T44] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 132.834635][ T44] usb 3-1: USB disconnect, device number 19 [ 132.849604][ T6123] udevd[6123]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 132.858551][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.871776][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.483888][ T44] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 133.603851][ T5945] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 133.643904][ T44] usb 1-1: Using ep0 maxpacket: 16 [ 133.650641][ T44] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 133.665144][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 133.677812][ T44] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 133.687812][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.695888][ T44] usb 1-1: Product: syz [ 133.700060][ T44] usb 1-1: Manufacturer: syz [ 133.704711][ T44] usb 1-1: SerialNumber: syz [ 133.710634][ T44] usb 1-1: config 0 descriptor?? [ 133.717924][ T44] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 133.728198][ T44] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 133.766205][ T5945] usb 3-1: config 128 has an invalid interface number: 191 but max is 0 [ 133.774732][ T5945] usb 3-1: config 128 has no interface number 0 [ 133.781023][ T5945] usb 3-1: config 128 interface 191 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 133.792145][ T5945] usb 3-1: config 128 interface 191 altsetting 6 endpoint 0xF has invalid wMaxPacketSize 0 [ 133.802184][ T5945] usb 3-1: config 128 interface 191 altsetting 6 has an endpoint descriptor with address 0x29, changing to 0x9 [ 133.813962][ T5945] usb 3-1: config 128 interface 191 altsetting 6 endpoint 0x9 has invalid maxpacket 47719, setting to 64 [ 133.825265][ T5945] usb 3-1: config 128 interface 191 altsetting 6 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 133.839851][ T5945] usb 3-1: config 128 interface 191 has no altsetting 0 [ 133.848455][ T5945] usb 3-1: New USB device found, idVendor=110a, idProduct=1131, bcdDevice=53.3a [ 133.857563][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.865651][ T5945] usb 3-1: Product: syz [ 133.869825][ T5945] usb 3-1: Manufacturer: syz [ 133.875148][ T5945] usb 3-1: SerialNumber: syz [ 133.881848][ T7542] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 134.150199][ T5945] ti_usb_3410_5052 3-1:128.191: TI USB 3410 1 port adapter converter detected [ 134.159294][ T5945] ti_usb_3410_5052 3-1:128.191: missing endpoints [ 134.168227][ T5945] usb 3-1: USB disconnect, device number 20 [ 134.323530][ T44] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 134.331006][ T44] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 134.861733][ T7562] tipc: Enabling of bearer rejected, failed to enable media [ 134.963848][ T1174] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 134.974027][ T44] em28xx 1-1:0.0: AC97 command still being executed: not handled properly! [ 134.985690][ T44] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 135.113843][ T1174] usb 3-1: Using ep0 maxpacket: 16 [ 135.127808][ T1174] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 135.136256][ T1174] usb 3-1: config 0 has no interface number 0 [ 135.142380][ T1174] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.149615][ T7580] tipc: Enabling of bearer rejected, failed to enable media [ 135.154864][ T1174] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.167287][ T44] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 135.175430][ T1174] usb 3-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 135.191726][ T1174] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.206165][ T1174] usb 3-1: config 0 descriptor?? [ 135.394978][ T44] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 135.405084][ T44] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 135.433040][ T44] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 135.440226][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 135.455163][ T44] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 135.482087][ T44] usb 1-1: USB disconnect, device number 30 [ 135.537098][ T7601] tipc: Enabling of bearer rejected, failed to enable media [ 135.651873][ T1174] uclogic 0003:5543:0781.0009: unknown main item tag 0x0 [ 135.659206][ T1174] uclogic 0003:5543:0781.0009: unknown main item tag 0x0 [ 135.667299][ T1174] uclogic 0003:5543:0781.0009: item fetching failed at offset 2/5 [ 135.677113][ T1174] uclogic 0003:5543:0781.0009: parse failed [ 135.683081][ T1174] uclogic 0003:5543:0781.0009: probe with driver uclogic failed with error -22 [ 135.866402][ T1174] usb 3-1: USB disconnect, device number 21 [ 136.214051][ T5945] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 136.363897][ T5945] usb 1-1: Using ep0 maxpacket: 32 [ 136.369576][ T5945] usb 1-1: too many configurations: 101, using maximum allowed: 8 [ 136.378379][ T5945] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 69 [ 136.387032][ T5945] usb 1-1: can't read configurations, error -22 [ 136.535524][ T5945] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 136.614813][ T7631] FAULT_INJECTION: forcing a failure. [ 136.614813][ T7631] name failslab, interval 1, probability 0, space 0, times 0 [ 136.627773][ T7631] CPU: 0 UID: 0 PID: 7631 Comm: syz.2.596 Not tainted syzkaller #0 PREEMPT(full) [ 136.627799][ T7631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 136.627810][ T7631] Call Trace: [ 136.627817][ T7631] [ 136.627824][ T7631] dump_stack_lvl+0x189/0x250 [ 136.627856][ T7631] ? __pfx____ratelimit+0x10/0x10 [ 136.627879][ T7631] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.627905][ T7631] ? __pfx__printk+0x10/0x10 [ 136.627930][ T7631] ? read_seqbegin+0x1ac/0x250 [ 136.627958][ T7631] ? __pfx___might_resched+0x10/0x10 [ 136.627978][ T7631] ? lock_acquire+0x5f/0x360 [ 136.627997][ T7631] should_fail_ex+0x414/0x560 [ 136.628023][ T7631] should_failslab+0xa8/0x100 [ 136.628040][ T7631] __kmalloc_noprof+0xcb/0x4b0 [ 136.628066][ T7631] ? tomoyo_encode+0x28b/0x550 [ 136.628092][ T7631] tomoyo_encode+0x28b/0x550 [ 136.628118][ T7631] tomoyo_realpath_from_path+0x58d/0x5d0 [ 136.628147][ T7631] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 136.628167][ T7631] tomoyo_path_number_perm+0x1e8/0x5a0 [ 136.628186][ T7631] ? lock_release+0x4b/0x3e0 [ 136.628202][ T7631] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 136.628224][ T7631] ? rcu_is_watching+0x15/0xb0 [ 136.628244][ T7631] ? lock_release+0x4b/0x3e0 [ 136.628260][ T7631] ? vfs_write+0x956/0xb30 [ 136.628276][ T7631] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 136.628303][ T7631] ? __fget_files+0x3a0/0x420 [ 136.628317][ T7631] ? __fget_files+0x2a/0x420 [ 136.628333][ T7631] security_file_ioctl+0xcb/0x2d0 [ 136.628381][ T7631] __se_sys_ioctl+0x47/0x170 [ 136.628400][ T7631] do_syscall_64+0xfa/0xfa0 [ 136.628417][ T7631] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.628429][ T7631] ? clear_bhb_loop+0x60/0xb0 [ 136.628442][ T7631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.628454][ T7631] RIP: 0033:0x7ff54518ebe9 [ 136.628464][ T7631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.628475][ T7631] RSP: 002b:00007ff545f66038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 136.628488][ T7631] RAX: ffffffffffffffda RBX: 00007ff5453b5fa0 RCX: 00007ff54518ebe9 [ 136.628497][ T7631] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000005 [ 136.628505][ T7631] RBP: 00007ff545f66090 R08: 0000000000000000 R09: 0000000000000000 [ 136.628512][ T7631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.628519][ T7631] R13: 00007ff5453b6038 R14: 00007ff5453b5fa0 R15: 00007ffd3f23f988 [ 136.628533][ T7631] [ 136.628545][ T7631] ERROR: Out of memory at tomoyo_realpath_from_path. [ 136.884766][ T7631] block nbd2: server does not support multiple connections per device. [ 136.893445][ T7630] block nbd2: shutting down sockets [ 136.903834][ T5945] usb 1-1: Using ep0 maxpacket: 32 [ 136.914078][ T5945] usb 1-1: too many configurations: 101, using maximum allowed: 8 [ 136.923155][ T5945] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 69 [ 136.931988][ T5945] usb 1-1: can't read configurations, error -22 [ 136.940536][ T5945] usb usb1-port1: attempt power cycle [ 137.293964][ T5945] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 137.314728][ T5945] usb 1-1: Using ep0 maxpacket: 32 [ 137.320413][ T5945] usb 1-1: too many configurations: 101, using maximum allowed: 8 [ 137.330103][ T5945] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 69 [ 137.340075][ T5945] usb 1-1: can't read configurations, error -22 [ 137.424796][ T5926] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 137.473971][ T5945] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 137.494397][ T5945] usb 1-1: Using ep0 maxpacket: 32 [ 137.500053][ T5945] usb 1-1: too many configurations: 101, using maximum allowed: 8 [ 137.508803][ T5945] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 69 [ 137.518111][ T5945] usb 1-1: can't read configurations, error -22 [ 137.524605][ T5945] usb usb1-port1: unable to enumerate USB device [ 137.595281][ T5926] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 137.603564][ T5926] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 137.615330][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 137.627045][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 137.638369][ T5926] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 137.651344][ T5926] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 137.660535][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.669482][ T5926] usb 3-1: config 0 descriptor?? [ 137.675714][ T7646] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 137.745711][ T7660] tipc: Enabling of bearer rejected, failed to enable media [ 138.091272][ T5926] plantronics 0003:047F:FFFF.000A: reserved main item tag 0xd [ 138.103041][ T5926] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 138.248362][ T7678] sctp: [Deprecated]: syz.4.617 (pid 7678) Use of int in max_burst socket option. [ 138.248362][ T7678] Use struct sctp_assoc_value instead [ 138.297655][ T5926] usb 3-1: USB disconnect, device number 22 [ 138.328767][ T7682] tipc: Enabling of bearer rejected, failed to enable media [ 138.962973][ T7702] tipc: Enabled bearer , priority 0 [ 138.971854][ T7701] tipc: Disabling bearer [ 139.363862][ T5900] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 139.526990][ T5900] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 139.536771][ T5900] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 139.549268][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 139.561838][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 139.577002][ T5900] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 139.590152][ T5900] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 139.599403][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.608956][ T5900] usb 3-1: config 0 descriptor?? [ 139.618102][ T7715] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 139.687333][ T7725] tipc: Enabled bearer , priority 0 [ 139.696365][ T7724] tipc: Disabling bearer [ 139.957652][ T7734] overlay: Unknown parameter 'fowner<00000000000000000000' [ 140.042545][ T5900] plantronics 0003:047F:FFFF.000B: reserved main item tag 0xd [ 140.062520][ T5900] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 140.170403][ T7748] tipc: Enabling of bearer rejected, failed to enable media [ 140.243110][ T24] usb 3-1: USB disconnect, device number 23 [ 140.289946][ T7756] batadv_slave_0: entered promiscuous mode [ 140.299469][ T7755] batadv_slave_0: left promiscuous mode [ 140.778678][ T7768] tipc: Enabled bearer , priority 0 [ 140.787779][ T7767] tipc: Disabling bearer [ 140.834068][ T30] audit: type=1326 audit(1755847825.542:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7735 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62cf18ebe9 code=0x7fc00000 [ 140.946461][ T7778] netlink: 60 bytes leftover after parsing attributes in process `syz.2.662'. [ 140.976087][ T7778] netlink: 60 bytes leftover after parsing attributes in process `syz.2.662'. [ 141.210409][ T7792] tipc: Enabled bearer , priority 0 [ 141.219984][ T7791] tipc: Disabling bearer [ 141.459091][ T7808] PM: Enabling pm_trace changes system date and time during resume. [ 141.459091][ T7808] PM: Correct system time has to be restored manually after resume. [ 141.478043][ T7808] loop8: detected capacity change from 0 to 8 [ 141.486923][ T7808] Dev loop8: unable to read RDB block 8 [ 141.492543][ T7808] loop8: unable to read partition table [ 141.498572][ T7808] loop8: partition table beyond EOD, truncated [ 141.505193][ T7808] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 141.851510][ T7824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.860231][ T7824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.913877][ T5926] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 142.065046][ T24] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 142.073847][ T5926] usb 3-1: Using ep0 maxpacket: 8 [ 142.081605][ T5926] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 142.090775][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.098855][ T5926] usb 3-1: Product: syz [ 142.103034][ T5926] usb 3-1: Manufacturer: syz [ 142.107670][ T5926] usb 3-1: SerialNumber: syz [ 142.113455][ T5926] usb 3-1: config 0 descriptor?? [ 142.194029][ T24] usb 1-1: device descriptor read/64, error -71 [ 142.320219][ T5926] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 142.443842][ T24] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 142.573837][ T24] usb 1-1: device descriptor read/64, error -71 [ 142.684912][ T24] usb usb1-port1: attempt power cycle [ 143.043852][ T24] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 143.074217][ T24] usb 1-1: device descriptor read/8, error -71 [ 143.141405][ T5926] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 143.153698][ T5926] usb 3-1: USB disconnect, device number 24 [ 143.313891][ T24] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 143.334728][ T24] usb 1-1: device descriptor read/8, error -71 [ 143.445343][ T24] usb usb1-port1: unable to enumerate USB device [ 143.548514][ T7861] netlink: 'syz.4.698': attribute type 2 has an invalid length. [ 143.557168][ T7861] netlink: 'syz.4.698': attribute type 6 has an invalid length. [ 144.463697][ T5945] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 144.482637][ T7892] fuse: Unknown parameter 'grop_id' [ 144.489993][ T7892] /dev/rnullb0: Can't lookup blockdev [ 144.613892][ T5945] usb 3-1: Using ep0 maxpacket: 16 [ 144.622965][ T5945] usb 3-1: config 1 has an invalid descriptor of length 47, skipping remainder of the config [ 144.635206][ T5945] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 144.646562][ T5945] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 144.660792][ T5945] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 144.670099][ T5945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 144.678279][ T5945] usb 3-1: SerialNumber: syz [ 144.691975][ T5945] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 144.875497][ T7907] tipc: Enabling of bearer rejected, failed to enable media [ 144.891944][ T44] usb 3-1: USB disconnect, device number 25 [ 145.285117][ T24] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 145.309229][ T7925] tipc: Enabling of bearer rejected, failed to enable media [ 145.453975][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 145.474835][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.494468][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 145.517183][ T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 145.538146][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.548330][ T24] usb 1-1: Product: syz [ 145.552545][ T24] usb 1-1: Manufacturer: syz [ 145.560041][ T24] usb 1-1: SerialNumber: syz [ 145.650184][ T7947] tipc: Enabling of bearer rejected, failed to enable media [ 145.779368][ T24] usb 1-1: 0:2 : does not exist [ 145.787133][ T24] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 145.801388][ T24] usb 1-1: USB disconnect, device number 39 [ 145.820491][ T6123] udevd[6123]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 145.838091][ T5900] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 145.995398][ T5900] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 146.003644][ T5900] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 146.016091][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 146.027072][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 146.038269][ T5900] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 146.051206][ T5900] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 146.060366][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.070412][ T5900] usb 3-1: config 0 descriptor?? [ 146.076461][ T7942] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 146.355754][ T7961] netlink: 44 bytes leftover after parsing attributes in process `syz.0.741'. [ 146.493757][ T5900] plantronics 0003:047F:FFFF.000C: reserved main item tag 0xd [ 146.522786][ T5900] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 146.733915][ T24] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 146.756410][ T5900] usb 3-1: USB disconnect, device number 26 [ 146.885620][ T24] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 146.897511][ T24] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 146.906614][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.914666][ T24] usb 1-1: Product: syz [ 146.918855][ T24] usb 1-1: Manufacturer: syz [ 146.923455][ T24] usb 1-1: SerialNumber: syz [ 146.931336][ T24] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 147.246493][ T7987] tipc: Enabling of bearer rejected, failed to enable media [ 147.300664][ T44] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 147.324243][ T44] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 147.743878][ T24] usb 1-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 147.762142][ T24] usb 1-1: USB disconnect, device number 40 [ 148.113896][ T5900] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 148.274215][ T5900] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 148.282412][ T5900] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 148.314599][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 148.345333][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 148.373817][ T5900] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 148.396990][ T5900] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 148.413954][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.434603][ T5900] usb 3-1: config 0 descriptor?? [ 148.440166][ T8011] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 148.862675][ T5900] usbhid 3-1:0.0: can't add hid device: -71 [ 148.871343][ T5900] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 148.890670][ T5900] usb 3-1: USB disconnect, device number 27 [ 149.413383][ T8058] tmpfs: Bad value for 'mpol' [ 149.513928][ T5926] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 149.674815][ T5926] usb 1-1: Using ep0 maxpacket: 8 [ 149.681649][ T5926] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 149.692377][ T5926] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 149.712677][ T5926] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 149.733379][ T5926] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.766912][ T5926] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 149.776264][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.005599][ T5926] usb 1-1: GET_CAPABILITIES returned 0 [ 150.012397][ T5926] usbtmc 1-1:16.0: can't read capabilities [ 150.093417][ T8089] /dev/rnullb0: Can't open blockdev [ 150.208305][ T1174] usb 1-1: USB disconnect, device number 41 [ 150.403870][ T5926] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 150.564526][ T5926] usb 3-1: Using ep0 maxpacket: 16 [ 150.571733][ T5926] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.594000][ T5926] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 150.605960][ T5926] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 150.618694][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.627909][ T5926] usb 3-1: Product: syz [ 150.632143][ T5926] usb 3-1: Manufacturer: syz [ 150.638094][ T5926] usb 3-1: SerialNumber: syz [ 150.849301][ T5926] usb 3-1: 0:2 : does not exist [ 150.868689][ T5926] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 150.893296][ T5926] usb 3-1: USB disconnect, device number 28 [ 150.928679][ T6123] udevd[6123]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 151.184846][ T1174] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 151.334071][ T1174] usb 1-1: Using ep0 maxpacket: 8 [ 151.348173][ T1174] usb 1-1: config 0 interface 0 has no altsetting 0 [ 151.363847][ T1174] usb 1-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 151.373250][ T1174] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.385365][ T1174] usb 1-1: config 0 descriptor?? [ 151.414998][ T8127] loop7: detected capacity change from 0 to 7 [ 151.523487][ T30] audit: type=1326 audit(1755847836.232:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8105 comm="syz.1.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35f698ebe9 code=0x7fc00000 [ 151.619529][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 151.621594][ T6123] Dev loop7: unable to read RDB block 7 [ 151.629444][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 151.643960][ T6123] loop7: unable to read partition table [ 151.650476][ T6123] loop7: partition table beyond EOD, truncated [ 151.798733][ T1174] aquacomputer_d5next 0003:0C70:F003.000E: unknown main item tag 0x0 [ 151.816075][ T1174] aquacomputer_d5next 0003:0C70:F003.000E: hidraw0: USB HID v0.00 Device [HID 0c70:f003] on usb-dummy_hcd.0-1/input0 [ 151.845099][ T8127] Dev loop7: unable to read RDB block 7 [ 151.852699][ T8127] loop7: unable to read partition table [ 151.858950][ T8127] loop7: partition table beyond EOD, truncated [ 151.865490][ T8127] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 152.010162][ T44] usb 1-1: USB disconnect, device number 42 [ 152.058875][ T8143] fuse: Bad value for 'fd' [ 152.173954][ T5926] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 152.188010][ T8153] 9p: Bad value for 'rfdno' [ 152.308019][ T8171] netlink: 6955 bytes leftover after parsing attributes in process `syz.1.832'. [ 152.318047][ T8171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.832'. [ 152.327114][ T8171] netlink: 125920 bytes leftover after parsing attributes in process `syz.1.832'. [ 152.346411][ T5926] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 152.356196][ T5926] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 152.368504][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 152.382235][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 152.393398][ T5926] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 152.406310][ T5926] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 152.415375][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.430002][ T5926] usb 3-1: config 0 descriptor?? [ 152.440326][ T8138] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 152.547595][ T8182] loop7: detected capacity change from 0 to 7 [ 152.716829][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 152.717345][ T6123] Dev loop7: unable to read RDB block 7 [ 152.726749][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 152.740888][ T6123] loop7: unable to read partition table [ 152.746742][ T6123] loop7: partition table beyond EOD, truncated [ 152.872911][ T5926] plantronics 0003:047F:FFFF.000F: reserved main item tag 0xd [ 152.890867][ T5926] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 152.941191][ T8182] Dev loop7: unable to read RDB block 7 [ 152.949526][ T8182] loop7: unable to read partition table [ 152.961709][ T8182] loop7: partition table beyond EOD, truncated [ 152.984567][ T8182] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 153.136141][ T5926] usb 3-1: USB disconnect, device number 29 [ 153.142635][ T5235] Dev loop7: unable to read RDB block 7 [ 153.148691][ T5235] loop7: unable to read partition table [ 153.155598][ T5235] loop7: partition table beyond EOD, truncated [ 153.282457][ T8212] netlink: 228 bytes leftover after parsing attributes in process `syz.4.849'. [ 153.483863][ T5900] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 153.643947][ T5900] usb 1-1: Using ep0 maxpacket: 8 [ 153.665041][ T5900] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 153.682416][ T5900] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 153.705401][ T5900] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 153.716863][ T5900] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.730581][ T5900] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 153.743993][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.933876][ T5945] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 153.960306][ T5900] usb 1-1: GET_CAPABILITIES returned 0 [ 153.966846][ T5900] usbtmc 1-1:16.0: can't read capabilities [ 154.087971][ T5945] usb 3-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=cb.d7 [ 154.100440][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3 [ 154.111521][ T5945] usb 3-1: Product: syz [ 154.121774][ T5945] usb 3-1: Manufacturer: syz [ 154.129623][ T5945] usb 3-1: SerialNumber: syz [ 154.144844][ T5945] usb 3-1: config 0 descriptor?? [ 154.158570][ T5945] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 154.176575][ T5926] usb 1-1: USB disconnect, device number 43 [ 154.180266][ T5945] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 154.360775][ T5955] usb 3-1: USB disconnect, device number 30 [ 155.105139][ T8289] /dev/rnullb0: Can't lookup blockdev [ 155.143893][ T5955] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 155.304052][ T5955] usb 1-1: Using ep0 maxpacket: 8 [ 155.315046][ T5955] usb 1-1: unable to get BOS descriptor or descriptor too short [ 155.323698][ T5955] usb 1-1: config 59 has an invalid interface number: 141 but max is 0 [ 155.337002][ T5955] usb 1-1: config 59 has no interface number 0 [ 155.343215][ T5955] usb 1-1: config 59 interface 141 altsetting 6 endpoint 0xC has an invalid bInterval 160, changing to 11 [ 155.356354][ T5955] usb 1-1: config 59 interface 141 has no altsetting 0 [ 155.365507][ T5955] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.72 [ 155.376904][ T5955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.385087][ T5955] usb 1-1: Product: syz [ 155.389344][ T5955] usb 1-1: Manufacturer: syz [ 155.395658][ T5955] usb 1-1: SerialNumber: syz [ 155.647177][ T8318] /dev/rnullb0: Can't lookup blockdev [ 155.850153][ T8334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.903'. [ 155.866538][ T5955] usbtest 1-1:59.141: couldn't get endpoints, -71 [ 155.884567][ T5955] usbtest 1-1:59.141: probe with driver usbtest failed with error -71 [ 155.905244][ T5955] usb 1-1: USB disconnect, device number 44 [ 157.131953][ T8376] netlink: 277 bytes leftover after parsing attributes in process `syz.4.921'. [ 157.755031][ T5926] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 157.904191][ T5926] usb 1-1: Using ep0 maxpacket: 8 [ 157.911674][ T5926] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 157.923639][ T5926] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 157.933603][ T5926] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 157.945721][ T5926] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.958871][ T5926] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 157.971350][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.196062][ T5926] usb 1-1: GET_CAPABILITIES returned 0 [ 158.203398][ T5926] usbtmc 1-1:16.0: can't read capabilities [ 158.411414][ T5926] usb 1-1: USB disconnect, device number 45 [ 158.476055][ T30] audit: type=1804 audit(1755847843.192:9): pid=8432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.941" name="rnullb0" dev="tmpfs" ino=130 res=1 errno=0 [ 158.528401][ T8427] could not allocate digest TFM handle hmac(sha1-avx2) [ 158.984450][ T8451] FAULT_INJECTION: forcing a failure. [ 158.984450][ T8451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.997843][ T8451] CPU: 1 UID: 0 PID: 8451 Comm: syz.0.950 Not tainted syzkaller #0 PREEMPT(full) [ 158.997869][ T8451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 158.997882][ T8451] Call Trace: [ 158.997890][ T8451] [ 158.997897][ T8451] dump_stack_lvl+0x189/0x250 [ 158.997929][ T8451] ? __pfx____ratelimit+0x10/0x10 [ 158.997953][ T8451] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.997980][ T8451] ? __pfx__printk+0x10/0x10 [ 158.998009][ T8451] ? rcu_is_watching+0x15/0xb0 [ 158.998048][ T8451] should_fail_ex+0x414/0x560 [ 158.998077][ T8451] _copy_from_user+0x2d/0xb0 [ 158.998100][ T8451] vmemdup_user+0x5e/0xd0 [ 158.998125][ T8451] kvm_vcpu_ioctl_set_cpuid2+0x82/0x130 [ 158.998150][ T8451] kvm_arch_vcpu_ioctl+0x13c5/0x2a80 [ 158.998174][ T8451] ? unwind_next_frame+0xa5/0x2390 [ 158.998198][ T8451] ? rcu_is_watching+0x15/0xb0 [ 158.998219][ T8451] ? unwind_next_frame+0xa5/0x2390 [ 158.998244][ T8451] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 158.998269][ T8451] ? unwind_next_frame+0xa5/0x2390 [ 158.998291][ T8451] ? rcu_is_watching+0x15/0xb0 [ 158.998313][ T8451] ? unwind_next_frame+0xa5/0x2390 [ 158.998337][ T8451] ? unwind_next_frame+0xa5/0x2390 [ 158.998360][ T8451] ? rcu_is_watching+0x15/0xb0 [ 158.998382][ T8451] ? is_bpf_text_address+0x26/0x2b0 [ 158.998400][ T8451] ? rcu_is_watching+0x15/0xb0 [ 158.998422][ T8451] ? rcu_is_watching+0x15/0xb0 [ 158.998443][ T8451] ? lock_release+0x4b/0x3e0 [ 158.998459][ T8451] ? lock_release+0x4b/0x3e0 [ 158.998479][ T8451] ? is_bpf_text_address+0x292/0x2b0 [ 158.998497][ T8451] ? is_bpf_text_address+0x26/0x2b0 [ 158.998517][ T8451] ? kernel_text_address+0xa5/0xe0 [ 158.998563][ T8451] ? __kernel_text_address+0xd/0x40 [ 158.998591][ T8451] ? unwind_get_return_address+0x4d/0x90 [ 158.998618][ T8451] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 158.998645][ T8451] ? arch_stack_walk+0xfc/0x150 [ 158.998676][ T8451] ? stack_trace_save+0x9c/0xe0 [ 158.998701][ T8451] ? __pfx_stack_trace_save+0x10/0x10 [ 158.998726][ T8451] ? stack_depot_save_flags+0x40/0x860 [ 158.998756][ T8451] ? kasan_save_track+0x4f/0x80 [ 158.998781][ T8451] ? kasan_save_track+0x3e/0x80 [ 158.998806][ T8451] ? __kasan_save_free_info+0x46/0x50 [ 158.998828][ T8451] ? __kasan_slab_free+0x5b/0x80 [ 158.998854][ T8451] ? kfree+0x18e/0x440 [ 158.998878][ T8451] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 158.998898][ T8451] ? security_file_ioctl+0xcb/0x2d0 [ 158.998916][ T8451] ? __se_sys_ioctl+0x47/0x170 [ 158.998943][ T8451] ? do_syscall_64+0xfa/0xfa0 [ 158.998966][ T8451] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.998983][ T8451] ? __mutex_trylock_common+0x153/0x260 [ 158.999001][ T8451] ? __pfx___mutex_trylock_common+0x10/0x10 [ 158.999019][ T8451] ? rcu_is_watching+0x15/0xb0 [ 158.999034][ T8451] ? trace_contention_end+0x39/0x120 [ 158.999051][ T8451] ? __mutex_lock+0x335/0x1350 [ 158.999075][ T8451] ? kvm_vcpu_ioctl+0x22e/0xe90 [ 158.999089][ T8451] ? __pfx___mutex_lock+0x10/0x10 [ 158.999108][ T8451] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 158.999125][ T8451] ? do_vfs_ioctl+0xbe8/0x1430 [ 158.999136][ T8451] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 158.999152][ T8451] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 158.999174][ T8451] kvm_vcpu_ioctl+0x74d/0xe90 [ 158.999189][ T8451] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 158.999202][ T8451] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 158.999230][ T8451] ? __fget_files+0x3a0/0x420 [ 158.999246][ T8451] ? __fget_files+0x2a/0x420 [ 158.999263][ T8451] ? bpf_lsm_file_ioctl+0x9/0x20 [ 158.999282][ T8451] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 158.999294][ T8451] __se_sys_ioctl+0xf9/0x170 [ 158.999316][ T8451] do_syscall_64+0xfa/0xfa0 [ 158.999335][ T8451] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.999347][ T8451] ? clear_bhb_loop+0x60/0xb0 [ 158.999363][ T8451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.999376][ T8451] RIP: 0033:0x7f62cf18ebe9 [ 158.999388][ T8451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.999400][ T8451] RSP: 002b:00007f62cffd9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 158.999415][ T8451] RAX: ffffffffffffffda RBX: 00007f62cf3b5fa0 RCX: 00007f62cf18ebe9 [ 158.999425][ T8451] RDX: 0000200000000200 RSI: 000000004008ae90 RDI: 0000000000000005 [ 158.999434][ T8451] RBP: 00007f62cffd9090 R08: 0000000000000000 R09: 0000000000000000 [ 158.999442][ T8451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.999451][ T8451] R13: 00007f62cf3b6038 R14: 00007f62cf3b5fa0 R15: 00007ffd7e4bec08 [ 158.999466][ T8451] [ 159.535856][ T8455] overlay: ./file0 is not a directory [ 159.541797][ T8455] overlay: ./file0 is not a directory [ 159.628925][ T8459] tipc: Enabling of bearer rejected, failed to enable media [ 159.998511][ T30] audit: type=1804 audit(1755847844.712:10): pid=8479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.963" name="/newroot/177/bus/file0" dev="overlay" ino=957 res=1 errno=0 [ 160.083854][ T5926] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 160.204411][ T8487] tipc: Enabling of bearer rejected, failed to enable media [ 160.263843][ T5926] usb 1-1: Using ep0 maxpacket: 8 [ 160.272402][ T5926] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 160.294966][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.303638][ T5926] usb 1-1: Product: syz [ 160.310267][ T5926] usb 1-1: Manufacturer: syz [ 160.315243][ T5926] usb 1-1: SerialNumber: syz [ 160.345843][ T5926] usb 1-1: config 0 descriptor?? [ 160.367714][ T5926] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 160.420201][ T8499] tipc: Enabling of bearer rejected, failed to enable media [ 160.815187][ T8471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.828464][ T8471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.089843][ T5926] gspca_sonixj: reg_r err -110 [ 161.100541][ T5926] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 161.610858][ T8522] tipc: Enabling of bearer rejected, failed to enable media [ 161.833874][ T5926] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 161.963246][ T8545] tipc: Enabling of bearer rejected, failed to enable media [ 161.984606][ T5926] usb 3-1: Using ep0 maxpacket: 16 [ 161.992541][ T5926] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.004516][ T5926] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 162.017305][ T5926] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 162.027618][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.036474][ T5926] usb 3-1: Product: syz [ 162.040913][ T5926] usb 3-1: Manufacturer: syz [ 162.046810][ T5926] usb 3-1: SerialNumber: syz [ 162.259417][ T5926] usb 3-1: 0:2 : does not exist [ 162.272758][ T5926] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 162.301429][ T5926] usb 3-1: USB disconnect, device number 31 [ 162.330646][ T6123] udevd[6123]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 162.379623][ T8560] tipc: Enabling of bearer rejected, failed to enable media [ 162.416318][ T8562] fuse: Unknown parameter '&&y?jg6as' [ 162.561356][ T8570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1000'. [ 162.867074][ T5955] usb 1-1: USB disconnect, device number 46 [ 162.971534][ T8594] FAULT_INJECTION: forcing a failure. [ 162.971534][ T8594] name failslab, interval 1, probability 0, space 0, times 0 [ 162.984558][ T8594] CPU: 1 UID: 0 PID: 8594 Comm: syz.0.1010 Not tainted syzkaller #0 PREEMPT(full) [ 162.984586][ T8594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 162.984599][ T8594] Call Trace: [ 162.984606][ T8594] [ 162.984614][ T8594] dump_stack_lvl+0x189/0x250 [ 162.984650][ T8594] ? __pfx____ratelimit+0x10/0x10 [ 162.984675][ T8594] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.984717][ T8594] ? __pfx__printk+0x10/0x10 [ 162.984745][ T8594] ? __pfx___might_resched+0x10/0x10 [ 162.984766][ T8594] ? lock_acquire+0x5f/0x360 [ 162.984785][ T8594] should_fail_ex+0x414/0x560 [ 162.984814][ T8594] should_failslab+0xa8/0x100 [ 162.984833][ T8594] __kmalloc_noprof+0xcb/0x4b0 [ 162.984861][ T8594] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 162.984885][ T8594] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 162.984909][ T8594] genl_family_rcv_msg_doit+0xb8/0x300 [ 162.984932][ T8594] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 162.984955][ T8594] ? apparmor_capable+0x137/0x1b0 [ 162.984974][ T8594] ? bpf_lsm_capable+0x9/0x20 [ 162.984991][ T8594] ? security_capable+0x7e/0x2e0 [ 162.985028][ T8594] genl_rcv_msg+0x60e/0x790 [ 162.985047][ T8594] ? __pfx_genl_rcv_msg+0x10/0x10 [ 162.985062][ T8594] ? __kasan_slab_alloc+0x6c/0x80 [ 162.985088][ T8594] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 162.985109][ T8594] ? __pfx_nl802154_add_llsec_key+0x10/0x10 [ 162.985132][ T8594] ? __pfx_nl802154_post_doit+0x10/0x10 [ 162.985154][ T8594] ? __netlink_lookup+0xbd/0x810 [ 162.985178][ T8594] ? rcu_is_watching+0x15/0xb0 [ 162.985202][ T8594] netlink_rcv_skb+0x205/0x470 [ 162.985241][ T8594] ? __pfx_genl_rcv_msg+0x10/0x10 [ 162.985258][ T8594] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 162.985286][ T8594] ? lock_release+0x4b/0x3e0 [ 162.985304][ T8594] ? down_read+0x1ad/0x2e0 [ 162.985321][ T8594] genl_rcv+0x28/0x40 [ 162.985335][ T8594] netlink_unicast+0x82f/0x9e0 [ 162.985360][ T8594] ? __pfx_netlink_unicast+0x10/0x10 [ 162.985380][ T8594] ? netlink_sendmsg+0x642/0xb30 [ 162.985403][ T8594] ? skb_put+0x11b/0x210 [ 162.985428][ T8594] netlink_sendmsg+0x805/0xb30 [ 162.985456][ T8594] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.985481][ T8594] ? aa_sock_msg_perm+0xf1/0x1d0 [ 162.985505][ T8594] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 162.985528][ T8594] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.985551][ T8594] __sock_sendmsg+0x21c/0x270 [ 162.985573][ T8594] ____sys_sendmsg+0x505/0x830 [ 162.985602][ T8594] ? __pfx_____sys_sendmsg+0x10/0x10 [ 162.985632][ T8594] ? import_iovec+0x74/0xa0 [ 162.985655][ T8594] ___sys_sendmsg+0x21f/0x2a0 [ 162.985683][ T8594] ? __pfx____sys_sendmsg+0x10/0x10 [ 162.985725][ T8594] ? __fget_files+0x2a/0x420 [ 162.985746][ T8594] ? __fget_files+0x3a0/0x420 [ 162.985771][ T8594] __x64_sys_sendmsg+0x19b/0x260 [ 162.985798][ T8594] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 162.985829][ T8594] ? __pfx_ksys_write+0x10/0x10 [ 162.985849][ T8594] ? rcu_is_watching+0x15/0xb0 [ 162.985870][ T8594] do_syscall_64+0xfa/0xfa0 [ 162.985894][ T8594] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.985912][ T8594] ? clear_bhb_loop+0x60/0xb0 [ 162.985932][ T8594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.985950][ T8594] RIP: 0033:0x7f62cf18ebe9 [ 162.985965][ T8594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.985981][ T8594] RSP: 002b:00007f62cffd9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.986000][ T8594] RAX: ffffffffffffffda RBX: 00007f62cf3b5fa0 RCX: 00007f62cf18ebe9 [ 162.986013][ T8594] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 162.986023][ T8594] RBP: 00007f62cffd9090 R08: 0000000000000000 R09: 0000000000000000 [ 162.986034][ T8594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.986044][ T8594] R13: 00007f62cf3b6038 R14: 00007f62cf3b5fa0 R15: 00007ffd7e4bec08 [ 162.986065][ T8594] [ 163.598335][ T8607] tipc: Enabling of bearer rejected, failed to enable media [ 163.641566][ T8600] loop7: detected capacity change from 0 to 7 [ 163.749698][ T8617] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.839692][ T8617] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.855436][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 163.856784][ T6123] Dev loop7: unable to read RDB block 7 [ 163.865284][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 163.879752][ T6123] loop7: unable to read partition table [ 163.885929][ T6123] loop7: partition table beyond EOD, truncated [ 163.932561][ T8617] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.003055][ T8617] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.062820][ T8600] Dev loop7: unable to read RDB block 7 [ 164.068684][ T8600] loop7: unable to read partition table [ 164.080645][ T8600] loop7: partition table beyond EOD, truncated [ 164.087423][ T8600] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 164.116510][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.147203][ T3590] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.197026][ T3590] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.212932][ T3590] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.239236][ T8634] tipc: Enabling of bearer rejected, failed to enable media [ 164.263924][ T5955] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 164.434013][ T5955] usb 3-1: Using ep0 maxpacket: 8 [ 164.439175][ T5926] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 164.451001][ T5955] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 164.460193][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.468304][ T5955] usb 3-1: Product: syz [ 164.472516][ T5955] usb 3-1: Manufacturer: syz [ 164.477181][ T5955] usb 3-1: SerialNumber: syz [ 164.483536][ T5955] usb 3-1: config 0 descriptor?? [ 164.583869][ T5926] usb 1-1: device descriptor read/64, error -71 [ 164.690359][ T5955] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 164.835185][ T5926] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 164.973936][ T5926] usb 1-1: device descriptor read/64, error -71 [ 165.088675][ T5926] usb usb1-port1: attempt power cycle [ 165.176631][ T8655] tipc: Enabling of bearer rejected, failed to enable media [ 165.280160][ T8661] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1038'. [ 165.290623][ T8661] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1038'. [ 165.435619][ T5926] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 165.455570][ T5926] usb 1-1: device descriptor read/8, error -71 [ 165.703818][ T5926] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 165.713592][ T5955] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 165.727133][ T5955] usb 3-1: USB disconnect, device number 32 [ 165.734277][ T5926] usb 1-1: device descriptor read/8, error -71 [ 165.843962][ T5926] usb usb1-port1: unable to enumerate USB device [ 166.060583][ T8674] tipc: Enabling of bearer rejected, failed to enable media [ 166.613862][ T5955] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 166.630231][ T8684] /dev/rnullb0: Can't lookup blockdev [ 166.773976][ T5955] usb 3-1: Using ep0 maxpacket: 16 [ 166.780239][ T5955] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 166.788294][ T5955] usb 3-1: config 0 has no interface number 0 [ 166.794444][ T5955] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.806033][ T5955] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.815814][ T5955] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 166.828662][ T5955] usb 3-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 166.837784][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.846909][ T5955] usb 3-1: config 0 descriptor?? [ 167.158500][ T8695] tipc: Enabling of bearer rejected, failed to enable media [ 167.256635][ T5955] holtek_mouse 0003:04D9:A072.0010: item fetching failed at offset 0/4 [ 167.269588][ T5955] holtek_mouse 0003:04D9:A072.0010: hid parse failed: -22 [ 167.277534][ T5955] holtek_mouse 0003:04D9:A072.0010: probe with driver holtek_mouse failed with error -22 [ 167.456862][ T5900] usb 3-1: USB disconnect, device number 33 [ 167.623949][ T5955] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 167.794009][ T5955] usb 1-1: Using ep0 maxpacket: 16 [ 167.800609][ T5955] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 167.808920][ T5955] usb 1-1: config 0 has no interface number 0 [ 167.815100][ T5955] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 167.828892][ T5955] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 167.838042][ T5955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.846131][ T5955] usb 1-1: Product: syz [ 167.850336][ T5955] usb 1-1: Manufacturer: syz [ 167.854988][ T5955] usb 1-1: SerialNumber: syz [ 167.860843][ T5955] usb 1-1: config 0 descriptor?? [ 168.120162][ T8711] loop7: detected capacity change from 0 to 7 [ 168.271043][ T8711] Dev loop7: unable to read RDB block 7 [ 168.276851][ T8711] loop7: unable to read partition table [ 168.282783][ T8711] loop7: partition table beyond EOD, truncated [ 168.289115][ T8711] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 168.289216][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 168.312438][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 168.390094][ T8717] tipc: Enabling of bearer rejected, failed to enable media [ 168.484888][ T5955] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.214/input/input21 [ 168.507089][ T5235] Dev loop7: unable to read RDB block 7 [ 168.512720][ T5235] loop7: unable to read partition table [ 168.518986][ T5235] loop7: partition table beyond EOD, truncated [ 169.068732][ T8737] tipc: Enabling of bearer rejected, failed to enable media [ 169.443969][ T5926] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 169.593844][ T5926] usb 3-1: Using ep0 maxpacket: 16 [ 169.600261][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.611400][ T5926] usb 3-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 169.620533][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.630131][ T5926] usb 3-1: config 0 descriptor?? [ 170.057180][ T5926] sunplus 0003:04FC:05D8.0011: reserved main item tag 0xd [ 170.064642][ T5926] sunplus 0003:04FC:05D8.0011: unexpected long global item [ 170.072261][ T5926] sunplus 0003:04FC:05D8.0011: probe with driver sunplus failed with error -22 [ 170.213666][ T8758] tipc: Enabling of bearer rejected, failed to enable media [ 170.254135][ T5926] usb 3-1: USB disconnect, device number 34 [ 170.400662][ T5945] usb 1-1: USB disconnect, device number 51 [ 170.743844][ T5945] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 170.873897][ T5945] usb 1-1: device descriptor read/64, error -71 [ 171.033871][ T1174] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 171.143959][ T5945] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 171.173827][ T1174] usb 3-1: device descriptor read/64, error -71 [ 171.284596][ T5945] usb 1-1: device descriptor read/64, error -71 [ 171.394120][ T5945] usb usb1-port1: attempt power cycle [ 171.423904][ T1174] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 171.526769][ T8779] tipc: Enabling of bearer rejected, failed to enable media [ 171.553979][ T1174] usb 3-1: device descriptor read/64, error -71 [ 171.664849][ T1174] usb usb3-port1: attempt power cycle [ 171.735167][ T5945] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 171.756001][ T5945] usb 1-1: device descriptor read/8, error -71 [ 171.994137][ T5945] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 172.003993][ T1174] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 172.014581][ T5945] usb 1-1: device descriptor read/8, error -71 [ 172.025055][ T1174] usb 3-1: device descriptor read/8, error -71 [ 172.124791][ T5945] usb usb1-port1: unable to enumerate USB device [ 172.143218][ T8799] tipc: Enabling of bearer rejected, failed to enable media [ 172.265225][ T1174] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 172.286181][ T1174] usb 3-1: device descriptor read/8, error -71 [ 172.395869][ T1174] usb usb3-port1: unable to enumerate USB device [ 173.452408][ T8818] FAULT_INJECTION: forcing a failure. [ 173.452408][ T8818] name failslab, interval 1, probability 0, space 0, times 0 [ 173.466474][ T8818] CPU: 0 UID: 0 PID: 8818 Comm: syz.0.1109 Not tainted syzkaller #0 PREEMPT(full) [ 173.466496][ T8818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 173.466507][ T8818] Call Trace: [ 173.466513][ T8818] [ 173.466520][ T8818] dump_stack_lvl+0x189/0x250 [ 173.466550][ T8818] ? __pfx____ratelimit+0x10/0x10 [ 173.466572][ T8818] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.466597][ T8818] ? __pfx__printk+0x10/0x10 [ 173.466628][ T8818] ? __pfx___might_resched+0x10/0x10 [ 173.466647][ T8818] ? lock_acquire+0x5f/0x360 [ 173.466664][ T8818] should_fail_ex+0x414/0x560 [ 173.466689][ T8818] should_failslab+0xa8/0x100 [ 173.466705][ T8818] kmem_cache_alloc_node_noprof+0x76/0x390 [ 173.466731][ T8818] ? __alloc_skb+0x112/0x2d0 [ 173.466755][ T8818] __alloc_skb+0x112/0x2d0 [ 173.466778][ T8818] alloc_skb_with_frags+0xca/0x890 [ 173.466804][ T8818] ? rcu_is_watching+0x15/0xb0 [ 173.466823][ T8818] ? lock_release+0x4b/0x3e0 [ 173.466837][ T8818] ? __might_fault+0xb0/0x130 [ 173.466864][ T8818] sock_alloc_send_pskb+0x857/0x990 [ 173.466887][ T8818] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 173.466902][ T8818] ? rcu_is_watching+0x15/0xb0 [ 173.466920][ T8818] ? lock_release+0x4b/0x3e0 [ 173.466935][ T8818] ? lock_release+0x4b/0x3e0 [ 173.466950][ T8818] ? iov_iter_advance+0x8b/0x1c0 [ 173.466968][ T8818] tun_get_user+0xa43/0x3e20 [ 173.466992][ T8818] ? rcu_is_watching+0x15/0xb0 [ 173.467009][ T8818] ? lock_release+0x4b/0x3e0 [ 173.467027][ T8818] ? aa_file_perm+0x44d/0x1550 [ 173.467051][ T8818] ? __pfx_tun_get_user+0x10/0x10 [ 173.467070][ T8818] ? _parse_integer_limit+0x1ae/0x1f0 [ 173.467096][ T8818] ? kstrtoull+0x12f/0x1d0 [ 173.467122][ T8818] ? ref_tracker_alloc+0x318/0x460 [ 173.467146][ T8818] ? get_pid_task+0x20/0x1f0 [ 173.467168][ T8818] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 173.467194][ T8818] ? tun_get+0x1c/0x2f0 [ 173.467212][ T8818] ? tun_get+0x1c/0x2f0 [ 173.467247][ T8818] ? rcu_is_watching+0x15/0xb0 [ 173.467281][ T8818] ? tun_get+0x1c/0x2f0 [ 173.467300][ T8818] ? lock_release+0x4b/0x3e0 [ 173.467316][ T8818] ? common_file_perm+0x1b5/0x230 [ 173.467334][ T8818] ? tun_get+0x1c/0x2f0 [ 173.467350][ T8818] tun_chr_write_iter+0x113/0x200 [ 173.467367][ T8818] vfs_write+0x5c9/0xb30 [ 173.467381][ T8818] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 173.467397][ T8818] ? __pfx_vfs_write+0x10/0x10 [ 173.467412][ T8818] ? __fget_files+0x2a/0x420 [ 173.467430][ T8818] ksys_write+0x145/0x250 [ 173.467444][ T8818] ? __pfx_ksys_write+0x10/0x10 [ 173.467457][ T8818] ? rcu_is_watching+0x15/0xb0 [ 173.467473][ T8818] do_syscall_64+0xfa/0xfa0 [ 173.467491][ T8818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.467503][ T8818] ? clear_bhb_loop+0x60/0xb0 [ 173.467517][ T8818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.467529][ T8818] RIP: 0033:0x7f62cf18ebe9 [ 173.467540][ T8818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.467552][ T8818] RSP: 002b:00007f62cffd9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 173.467566][ T8818] RAX: ffffffffffffffda RBX: 00007f62cf3b5fa0 RCX: 00007f62cf18ebe9 [ 173.467576][ T8818] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 0000000000000005 [ 173.467584][ T8818] RBP: 00007f62cffd9090 R08: 0000000000000000 R09: 0000000000000000 [ 173.467592][ T8818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.467600][ T8818] R13: 00007f62cf3b6038 R14: 00007f62cf3b5fa0 R15: 00007ffd7e4bec08 [ 173.467614][ T8818] [ 173.815215][ C0] vkms_vblank_simulate: vblank timer overrun [ 173.892693][ T8823] tipc: Enabling of bearer rejected, failed to enable media [ 173.905215][ T8824] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 174.234202][ T8830] loop7: detected capacity change from 0 to 7 [ 174.253840][ T5945] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 174.373494][ T6123] Dev loop7: unable to read RDB block 7 [ 174.374161][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 174.388899][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 174.398176][ T6123] loop7: unable to read partition table [ 174.406015][ T6123] loop7: partition table beyond EOD, truncated [ 174.437013][ T5945] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 174.447624][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.458607][ T5945] usb 3-1: Product: syz [ 174.463059][ T5945] usb 3-1: Manufacturer: syz [ 174.483018][ T5945] usb 3-1: SerialNumber: syz [ 174.609103][ T8830] Dev loop7: unable to read RDB block 7 [ 174.615167][ T8830] loop7: unable to read partition table [ 174.621114][ T8830] loop7: partition table beyond EOD, truncated [ 174.627494][ T8830] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 174.825759][ T8844] tipc: Enabling of bearer rejected, failed to enable media [ 175.659596][ T5869] Bluetooth: hci0: unexpected event for opcode 0x0c23 [ 175.888601][ T8865] tipc: Enabled bearer , priority 0 [ 175.897521][ T8864] tipc: Resetting bearer [ 175.913927][ T5945] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 175.937415][ T5869] Bluetooth: hci0: unexpected Set CIG Parameters response data [ 175.947129][ T5869] Bluetooth: hci0: unexpected event for opcode 0x2062 [ 175.989797][ T8864] tipc: Disabling bearer [ 176.333866][ T44] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 176.493931][ T44] usb 1-1: Using ep0 maxpacket: 8 [ 176.506435][ T44] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 176.528519][ T44] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 176.565588][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.593017][ T8888] tipc: Enabling of bearer rejected, failed to enable media [ 177.140671][ T5945] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -EPROTO [ 177.154211][ T5945] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 177.166398][ T5945] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 177.176292][ T5945] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 177.188829][ T5945] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 177.203235][ T5945] usb 3-1: USB disconnect, device number 39 [ 177.684695][ T8912] FAULT_INJECTION: forcing a failure. [ 177.684695][ T8912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.697874][ T8912] CPU: 0 UID: 0 PID: 8912 Comm: syz.2.1152 Not tainted syzkaller #0 PREEMPT(full) [ 177.697899][ T8912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 177.697911][ T8912] Call Trace: [ 177.697919][ T8912] [ 177.697927][ T8912] dump_stack_lvl+0x189/0x250 [ 177.697961][ T8912] ? __pfx____ratelimit+0x10/0x10 [ 177.697985][ T8912] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.698015][ T8912] ? __pfx__printk+0x10/0x10 [ 177.698048][ T8912] ? __might_fault+0xb0/0x130 [ 177.698070][ T8912] ? is_bpf_text_address+0x26/0x2b0 [ 177.698085][ T8912] ? rcu_is_watching+0x15/0xb0 [ 177.698102][ T8912] should_fail_ex+0x414/0x560 [ 177.698122][ T8912] _copy_from_user+0x2d/0xb0 [ 177.698139][ T8912] lo_ioctl+0x53c/0x1b30 [ 177.698160][ T8912] ? rcu_is_watching+0x15/0xb0 [ 177.698175][ T8912] ? rcu_is_watching+0x15/0xb0 [ 177.698190][ T8912] ? __pfx_lo_ioctl+0x10/0x10 [ 177.698208][ T8912] ? stack_depot_save_flags+0x40/0x860 [ 177.698230][ T8912] ? ima_match_policy+0x20c3/0x2150 [ 177.698243][ T8912] ? kasan_save_track+0x4f/0x80 [ 177.698274][ T8912] ? kasan_save_track+0x3e/0x80 [ 177.698293][ T8912] ? __kasan_slab_free+0x5b/0x80 [ 177.698311][ T8912] ? do_dentry_open+0x384/0x13f0 [ 177.698331][ T8912] ? process_measurement+0x3d8/0x1a40 [ 177.698342][ T8912] ? rcu_is_watching+0x15/0xb0 [ 177.698356][ T8912] ? lock_acquire+0x5f/0x360 [ 177.698369][ T8912] ? ima_match_policy+0x10b/0x2150 [ 177.698381][ T8912] ? __pfx_ima_match_policy+0x10/0x10 [ 177.698395][ T8912] ? rcu_is_watching+0x15/0xb0 [ 177.698409][ T8912] ? lock_release+0x4b/0x3e0 [ 177.698420][ T8912] ? down_write+0x162/0x1f0 [ 177.698432][ T8912] ? unwind_next_frame+0xa5/0x2390 [ 177.698448][ T8912] ? rcu_is_watching+0x15/0xb0 [ 177.698461][ T8912] ? unwind_next_frame+0xa5/0x2390 [ 177.698478][ T8912] ? unwind_next_frame+0xa5/0x2390 [ 177.698493][ T8912] ? rcu_is_watching+0x15/0xb0 [ 177.698507][ T8912] ? unwind_next_frame+0xa5/0x2390 [ 177.698523][ T8912] ? unwind_next_frame+0xa5/0x2390 [ 177.698538][ T8912] ? rcu_is_watching+0x15/0xb0 [ 177.698552][ T8912] ? unwind_next_frame+0xa5/0x2390 [ 177.698568][ T8912] ? rcu_is_watching+0x15/0xb0 [ 177.698582][ T8912] ? unwind_next_frame+0xa5/0x2390 [ 177.698598][ T8912] ? unwind_next_frame+0xa5/0x2390 [ 177.698613][ T8912] ? rcu_is_watching+0x15/0xb0 [ 177.698627][ T8912] ? is_bpf_text_address+0x26/0x2b0 [ 177.698639][ T8912] ? rcu_is_watching+0x15/0xb0 [ 177.698653][ T8912] ? rcu_is_watching+0x15/0xb0 [ 177.698667][ T8912] ? lock_release+0x4b/0x3e0 [ 177.698678][ T8912] ? lock_release+0x4b/0x3e0 [ 177.698692][ T8912] ? is_bpf_text_address+0x292/0x2b0 [ 177.698704][ T8912] ? is_bpf_text_address+0x26/0x2b0 [ 177.698716][ T8912] ? kernel_text_address+0xa5/0xe0 [ 177.698736][ T8912] ? __kernel_text_address+0xd/0x40 [ 177.698755][ T8912] ? unwind_get_return_address+0x4d/0x90 [ 177.698771][ T8912] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 177.698789][ T8912] ? arch_stack_walk+0xfc/0x150 [ 177.698810][ T8912] ? stack_trace_save+0x9c/0xe0 [ 177.698826][ T8912] ? __pfx_stack_trace_save+0x10/0x10 [ 177.698843][ T8912] ? stack_depot_save_flags+0x40/0x860 [ 177.698864][ T8912] ? kasan_save_track+0x4f/0x80 [ 177.698881][ T8912] ? kasan_save_track+0x3e/0x80 [ 177.698897][ T8912] ? __kasan_save_free_info+0x46/0x50 [ 177.698911][ T8912] ? __kasan_slab_free+0x5b/0x80 [ 177.698929][ T8912] ? kfree+0x18e/0x440 [ 177.698945][ T8912] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 177.698959][ T8912] ? security_file_ioctl+0xcb/0x2d0 [ 177.698971][ T8912] ? __se_sys_ioctl+0x47/0x170 [ 177.698989][ T8912] ? do_syscall_64+0xfa/0xfa0 [ 177.699005][ T8912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.699029][ T8912] ? __asan_memset+0x22/0x50 [ 177.699046][ T8912] ? blk_get_meta_cap+0x140/0x710 [ 177.699065][ T8912] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 177.699089][ T8912] ? rcu_is_watching+0x15/0xb0 [ 177.699111][ T8912] ? blkdev_common_ioctl+0xff7/0x2550 [ 177.699129][ T8912] ? lock_release+0x4b/0x3e0 [ 177.699140][ T8912] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 177.699154][ T8912] ? kfree+0x18e/0x440 [ 177.699171][ T8912] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 177.699188][ T8912] ? do_vfs_ioctl+0xbe8/0x1430 [ 177.699199][ T8912] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 177.699224][ T8912] ? __pfx_lo_ioctl+0x10/0x10 [ 177.699243][ T8912] blkdev_ioctl+0x5a5/0x6d0 [ 177.699274][ T8912] ? __pfx_blkdev_ioctl+0x10/0x10 [ 177.699289][ T8912] ? __fget_files+0x3a0/0x420 [ 177.699303][ T8912] ? __fget_files+0x2a/0x420 [ 177.699318][ T8912] ? bpf_lsm_file_ioctl+0x9/0x20 [ 177.699335][ T8912] ? __pfx_blkdev_ioctl+0x10/0x10 [ 177.699350][ T8912] __se_sys_ioctl+0xf9/0x170 [ 177.699368][ T8912] do_syscall_64+0xfa/0xfa0 [ 177.699403][ T8912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.699415][ T8912] ? clear_bhb_loop+0x60/0xb0 [ 177.699429][ T8912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.699441][ T8912] RIP: 0033:0x7ff54518ebe9 [ 177.699452][ T8912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.699464][ T8912] RSP: 002b:00007ff545f66038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 177.699478][ T8912] RAX: ffffffffffffffda RBX: 00007ff5453b5fa0 RCX: 00007ff54518ebe9 [ 177.699488][ T8912] RDX: 0000200000000400 RSI: 0000000000004c0a RDI: 0000000000000003 [ 177.699496][ T8912] RBP: 00007ff545f66090 R08: 0000000000000000 R09: 0000000000000000 [ 177.699504][ T8912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.699512][ T8912] R13: 00007ff5453b6038 R14: 00007ff5453b5fa0 R15: 00007ffd3f23f988 [ 177.699527][ T8912] [ 178.241786][ C0] vkms_vblank_simulate: vblank timer overrun [ 178.673341][ T8923] tipc: Enabling of bearer rejected, failed to enable media [ 179.112605][ T44] usb 1-1: USB disconnect, device number 56 [ 179.159804][ T8931] 9p: Bad value for 'rfdno' [ 179.212930][ T8937] erofs (device rnullb0): cannot find valid erofs superblock [ 179.312384][ T8943] tipc: Enabled bearer , priority 0 [ 179.320086][ T8942] tipc: Resetting bearer [ 179.359880][ T8942] tipc: Disabling bearer [ 179.533944][ T44] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 179.688857][ T44] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 179.698158][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.707073][ T44] usb 1-1: Product: syz [ 179.711289][ T44] usb 1-1: Manufacturer: syz [ 179.715998][ T44] usb 1-1: SerialNumber: syz [ 180.517698][ T8969] tipc: Enabling of bearer rejected, failed to enable media [ 180.544033][ T5926] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 180.729620][ T5926] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 180.738913][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.747681][ T5926] usb 3-1: Product: syz [ 180.751868][ T5926] usb 3-1: Manufacturer: syz [ 180.756534][ T5926] usb 3-1: SerialNumber: syz [ 181.142072][ T44] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 181.803366][ T8991] tipc: Enabling of bearer rejected, failed to enable media [ 182.172106][ T5926] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 182.176062][ T8963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.193085][ T8963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.202683][ T5926] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 182.366897][ T44] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -EPROTO [ 182.379853][ T44] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 182.391895][ T44] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 182.401543][ T44] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 182.412377][ T44] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 182.423165][ T5926] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000118. ret = -EPROTO [ 182.440167][ T44] usb 1-1: USB disconnect, device number 57 [ 182.448235][ T5926] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 182.455862][ T8997] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1188'. [ 182.462905][ T5926] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 182.479798][ T5926] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 182.487599][ T8997] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1188'. [ 182.497973][ T5926] usb 3-1: USB disconnect, device number 40 [ 183.174261][ T5900] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 183.243943][ T1174] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 183.323821][ T5900] usb 1-1: Using ep0 maxpacket: 8 [ 183.330195][ T5900] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 183.340640][ T5900] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.353733][ T5900] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 183.362951][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.374045][ T5900] usbtmc 1-1:16.0: bulk endpoints not found [ 183.393952][ T1174] usb 3-1: Using ep0 maxpacket: 32 [ 183.400475][ T1174] usb 3-1: config 0 has an invalid interface number: 230 but max is 0 [ 183.408837][ T1174] usb 3-1: config 0 has no interface number 0 [ 183.415336][ T1174] usb 3-1: config 0 interface 230 has no altsetting 0 [ 183.424517][ T1174] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 183.433680][ T1174] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.441770][ T1174] usb 3-1: Product: syz [ 183.446049][ T1174] usb 3-1: Manufacturer: syz [ 183.450636][ T1174] usb 3-1: SerialNumber: syz [ 183.456430][ T1174] usb 3-1: config 0 descriptor?? [ 183.463029][ T1174] ums-usbat 3-1:0.230: USB Mass Storage device detected [ 183.471524][ T1174] ums-usbat 3-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 183.569525][ T9011] tipc: Enabling of bearer rejected, failed to enable media [ 184.227326][ T5869] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 184.282244][ T9026] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1199'. [ 184.388289][ T9034] tipc: Enabling of bearer rejected, failed to enable media [ 184.511517][ T9048] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1208'. [ 185.089554][ T30] audit: type=1326 audit(1755847869.802:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9056 comm="syz.4.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28e9b8ebe9 code=0x7ffc0000 [ 185.113337][ T30] audit: type=1326 audit(1755847869.802:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9056 comm="syz.4.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28e9b8ebe9 code=0x7ffc0000 [ 185.137269][ T30] audit: type=1326 audit(1755847869.802:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9056 comm="syz.4.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f28e9b8ebe9 code=0x7ffc0000 [ 185.160955][ T30] audit: type=1326 audit(1755847869.802:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9056 comm="syz.4.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28e9b8ebe9 code=0x7ffc0000 [ 185.187118][ T30] audit: type=1326 audit(1755847869.802:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9056 comm="syz.4.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f28e9b8ebe9 code=0x7ffc0000 [ 185.215309][ T9059] tipc: Enabling of bearer rejected, failed to enable media [ 185.224473][ T30] audit: type=1326 audit(1755847869.802:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9056 comm="syz.4.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28e9b8ebe9 code=0x7ffc0000 [ 185.247862][ T30] audit: type=1326 audit(1755847869.802:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9056 comm="syz.4.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f28e9b8ebe9 code=0x7ffc0000 [ 185.270380][ T30] audit: type=1326 audit(1755847869.802:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9056 comm="syz.4.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28e9b8ebe9 code=0x7ffc0000 [ 185.296717][ T30] audit: type=1326 audit(1755847869.802:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9056 comm="syz.4.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f28e9b8ebe9 code=0x7ffc0000 [ 185.322423][ T30] audit: type=1326 audit(1755847869.802:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9056 comm="syz.4.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28e9b8ebe9 code=0x7ffc0000 [ 185.327814][ T9064] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1214'. [ 185.944156][ T44] usb 1-1: USB disconnect, device number 58 [ 185.968642][ T5869] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 185.990786][ T1174] ums-usbat 3-1:0.230: probe with driver ums-usbat failed with error -5 [ 186.016861][ T1174] usb 3-1: USB disconnect, device number 41 [ 186.045438][ T5869] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 186.501243][ T9084] tipc: Enabled bearer , priority 0 [ 186.510653][ T9083] tipc: Resetting bearer [ 186.568841][ T9083] tipc: Disabling bearer [ 186.595497][ T9088] fuse: Bad value for 'fd' [ 186.625279][ T1174] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 186.669215][ T5869] Bluetooth: hci1: link tx timeout [ 186.674630][ T5869] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 186.793841][ T1174] usb 1-1: Using ep0 maxpacket: 8 [ 186.802281][ T1174] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 186.811715][ T1174] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.819963][ T1174] usb 1-1: Product: syz [ 186.824475][ T1174] usb 1-1: Manufacturer: syz [ 186.829089][ T1174] usb 1-1: SerialNumber: syz [ 186.835569][ T1174] usb 1-1: config 0 descriptor?? [ 187.045454][ T1174] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 187.291377][ T9109] fuse: Bad value for 'fd' [ 187.388221][ T9117] tipc: Enabling of bearer rejected, failed to enable media [ 187.423387][ T5186] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 187.943851][ T44] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 188.062653][ T1174] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 188.074075][ T44] usb 3-1: device descriptor read/64, error -71 [ 188.078385][ T1174] usb 1-1: USB disconnect, device number 59 [ 188.227750][ T9137] tipc: Enabling of bearer rejected, failed to enable media [ 188.325114][ T44] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 188.453857][ T44] usb 3-1: device descriptor read/64, error -71 [ 188.565548][ T44] usb usb3-port1: attempt power cycle [ 188.694123][ T5186] Bluetooth: hci1: command 0x0406 tx timeout [ 188.928502][ T44] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 188.989998][ T44] usb 3-1: device descriptor read/8, error -71 [ 189.021002][ T9160] tipc: Enabling of bearer rejected, failed to enable media [ 189.233913][ T44] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 189.264436][ T44] usb 3-1: device descriptor read/8, error -71 [ 189.374116][ T44] usb usb3-port1: unable to enumerate USB device [ 189.397516][ T9184] overlayfs: failed to resolve './file1': -2 [ 189.527601][ T9188] tipc: Enabling of bearer rejected, failed to enable media [ 189.875537][ T9200] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1271'. [ 190.048226][ T9208] tipc: Enabled bearer , priority 0 [ 190.057519][ T9207] tipc: Resetting bearer [ 190.094801][ T9207] tipc: Disabling bearer [ 190.191858][ T9214] qnx4: no qnx4 filesystem (no root dir). [ 190.270682][ T9216] overlayfs: failed to resolve './file0': -2 [ 190.493876][ T5900] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 190.650981][ T5900] usb 1-1: Using ep0 maxpacket: 16 [ 190.658768][ T5900] usb 1-1: config 0 has an invalid interface number: 238 but max is 0 [ 190.669307][ T5900] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.681218][ T5900] usb 1-1: config 0 has no interface number 0 [ 190.690599][ T5900] usb 1-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=b0.ea [ 190.704159][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.712271][ T5900] usb 1-1: Product: syz [ 190.718411][ T5900] usb 1-1: Manufacturer: syz [ 190.723449][ T5900] usb 1-1: SerialNumber: syz [ 190.731477][ T5900] usb 1-1: config 0 descriptor?? [ 190.739298][ T5900] gl620a 1-1:0.238: probe with driver gl620a failed with error -22 [ 190.749295][ T9232] tipc: Enabling of bearer rejected, failed to enable media [ 190.940929][ T44] usb 1-1: USB disconnect, device number 60 [ 191.123936][ T5955] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 191.283448][ T9247] netlink: 'syz.4.1292': attribute type 33 has an invalid length. [ 191.292255][ T9247] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1292'. [ 191.302762][ T5955] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 191.311010][ T5955] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 191.322016][ T5955] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 191.335329][ T5955] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 191.344722][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.357587][ T5955] usb 3-1: config 0 descriptor?? [ 191.366693][ T5955] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 191.704403][ T5955] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 191.828961][ T9253] tipc: Enabling of bearer rejected, failed to enable media [ 191.833863][ T5955] usb 1-1: device descriptor read/64, error -71 [ 192.085177][ T5955] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 192.144553][ T9265] /dev/rnullb0: Can't lookup blockdev [ 192.179175][ T9267] fuse: Bad value for 'fd' [ 192.226601][ T5955] usb 1-1: device descriptor read/64, error -71 [ 192.354992][ T5955] usb usb1-port1: attempt power cycle [ 192.809217][ T5955] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 192.903982][ T5955] usb 1-1: device descriptor read/8, error -71 [ 193.388055][ T5955] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 193.490645][ T5955] usb 1-1: device descriptor read/8, error -71 [ 193.497884][ T9301] overlayfs: failed to clone upperpath [ 193.657734][ T5955] usb usb1-port1: unable to enumerate USB device [ 193.826950][ T1174] usb 3-1: USB disconnect, device number 46 [ 193.913843][ T9306] tipc: Enabled bearer , priority 0 [ 193.930493][ T9305] tipc: Resetting bearer [ 194.301930][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.310275][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.903904][ T5900] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 194.925608][ T1174] tipc: Node number set to 4260596857 [ 195.092679][ T5900] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 195.112744][ T5900] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 195.137559][ T5900] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 195.181337][ T5900] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 195.221551][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.254103][ T5900] usb 1-1: config 0 descriptor?? [ 195.286884][ T5900] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 195.830672][ T9305] tipc: Disabling bearer [ 197.194787][ T5869] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 197.254085][ T5900] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 197.435435][ T5900] usb 3-1: Using ep0 maxpacket: 8 [ 197.443021][ T5900] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 197.453292][ T5900] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 197.465366][ T5900] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 197.475739][ T5900] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 197.488870][ T5900] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 197.502377][ T5900] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 197.513437][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.529304][ T5900] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22 [ 197.633770][ C1] sched: DL replenish lagged too much [ 197.671532][ T5900] usb 1-1: USB disconnect, device number 65 [ 197.832479][ T9372] tipc: Enabling of bearer rejected, failed to enable media [ 198.423839][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 198.423861][ T30] audit: type=1804 audit(1755847883.112:29): pid=9391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1349" name="rnullb0" dev="tmpfs" ino=130 res=1 errno=0 [ 198.509838][ T9395] tipc: Enabling of bearer rejected, failed to enable media [ 198.636446][ T9399] block nbd0: Attempted send on invalid socket [ 198.642978][ T9399] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 198.680270][ T9399] EXT4-fs (nbd0): unable to read superblock [ 198.712169][ T5869] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 199.022961][ T9416] tipc: Enabling of bearer rejected, failed to enable media [ 199.394094][ T5945] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 199.587428][ T5945] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 199.601250][ T5945] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 199.620576][ T5945] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 199.638076][ T5945] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 199.648014][ T5945] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.659593][ T5945] usb 1-1: config 0 descriptor?? [ 199.683370][ T5945] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 200.003677][ T5945] usb 3-1: USB disconnect, device number 47 [ 200.373843][ T5945] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 200.496136][ T9437] tipc: Enabling of bearer rejected, failed to enable media [ 200.544192][ T5945] usb 3-1: Using ep0 maxpacket: 32 [ 200.557021][ T5945] usb 3-1: config 0 has an invalid interface number: 174 but max is 2 [ 200.571543][ T5945] usb 3-1: config 0 has an invalid interface number: 234 but max is 2 [ 200.586542][ T5945] usb 3-1: config 0 has an invalid interface number: 202 but max is 2 [ 200.598786][ T5945] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 200.609477][ T5945] usb 3-1: config 0 has no interface number 0 [ 200.616234][ T5945] usb 3-1: config 0 has no interface number 1 [ 200.622964][ T5945] usb 3-1: config 0 has no interface number 2 [ 200.630556][ T5945] usb 3-1: config 0 interface 234 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 200.642037][ T5945] usb 3-1: config 0 interface 234 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 200.654637][ T5945] usb 3-1: config 0 interface 234 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 200.668794][ T5945] usb 3-1: config 0 interface 234 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 200.680833][ T5945] usb 3-1: config 0 interface 234 altsetting 1 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 200.693191][ T5945] usb 3-1: config 0 interface 234 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 200.710437][ T5945] usb 3-1: config 0 interface 234 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 200.723218][ T5945] usb 3-1: config 0 interface 234 altsetting 1 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 200.736196][ T5945] usb 3-1: config 0 interface 234 altsetting 1 has a duplicate endpoint with address 0xB, skipping [ 200.747428][ T5945] usb 3-1: config 0 interface 234 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 200.760310][ T5945] usb 3-1: config 0 interface 234 altsetting 1 bulk endpoint 0x4 has invalid maxpacket 32 [ 200.770696][ T5945] usb 3-1: config 0 interface 234 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 200.784765][ T5945] usb 3-1: config 0 interface 234 altsetting 1 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 200.797016][ T5945] usb 3-1: config 0 interface 234 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 200.811000][ T5945] usb 3-1: config 0 interface 202 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 200.825423][ T5945] usb 3-1: config 0 interface 202 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 200.837011][ T5945] usb 3-1: config 0 interface 202 altsetting 7 bulk endpoint 0xF has invalid maxpacket 1023 [ 200.849381][ T5945] usb 3-1: config 0 interface 202 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 200.861145][ T5945] usb 3-1: config 0 interface 202 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 200.873616][ T5945] usb 3-1: config 0 interface 202 altsetting 7 has a duplicate endpoint with address 0xC, skipping [ 200.889123][ T5945] usb 3-1: config 0 interface 202 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 200.901852][ T5945] usb 3-1: config 0 interface 202 altsetting 7 has a duplicate endpoint with address 0xE, skipping [ 200.914736][ T5945] usb 3-1: config 0 interface 202 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 200.928100][ T5945] usb 3-1: config 0 interface 202 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 200.941235][ T5945] usb 3-1: config 0 interface 202 altsetting 7 has a duplicate endpoint with address 0xE, skipping [ 200.953321][ T5945] usb 3-1: config 0 interface 202 altsetting 7 has a duplicate endpoint with address 0xE, skipping [ 200.966074][ T5945] usb 3-1: config 0 interface 202 altsetting 7 has a duplicate endpoint with address 0xB, skipping [ 200.977240][ T5945] usb 3-1: config 0 interface 174 has no altsetting 0 [ 200.986409][ T5945] usb 3-1: config 0 interface 234 has no altsetting 0 [ 200.993422][ T5945] usb 3-1: config 0 interface 202 has no altsetting 0 [ 201.007417][ T5945] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=a2.c5 [ 201.018456][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.027387][ T5945] usb 3-1: Product: syz [ 201.031734][ T5945] usb 3-1: Manufacturer: syz [ 201.039285][ T5945] usb 3-1: SerialNumber: syz [ 201.048436][ T5945] usb 3-1: config 0 descriptor?? [ 201.188224][ T9445] team_slave_0: entered promiscuous mode [ 201.194085][ T9445] team_slave_1: entered promiscuous mode [ 201.200816][ T9444] team_slave_0: left promiscuous mode [ 201.206293][ T9444] team_slave_1: left promiscuous mode [ 201.278318][ T5945] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 201.311235][ T5945] snd-usb-audio 3-1:0.174: probe with driver snd-usb-audio failed with error -2 [ 201.342836][ T9432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.356496][ T9432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.887024][ T9451] raw_sendmsg: syz.4.1373 forgot to set AF_INET. Fix it! [ 202.183163][ T5900] usb 1-1: USB disconnect, device number 66 [ 202.403926][ T9461] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1377'. [ 202.655676][ T1174] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 202.838470][ T1174] usb 1-1: unable to get BOS descriptor or descriptor too short [ 202.855336][ T1174] usb 1-1: not running at top speed; connect to a high speed hub [ 202.867091][ T1174] usb 1-1: config 1 interface 0 altsetting 7 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 202.879428][ T1174] usb 1-1: config 1 interface 0 altsetting 7 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 202.892676][ T1174] usb 1-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 202.908209][ T1174] usb 1-1: config 1 interface 0 has no altsetting 0 [ 202.919745][ T1174] usb 1-1: string descriptor 0 read error: -22 [ 202.928494][ T1174] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 202.939727][ T1174] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.955123][ T9461] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 202.973240][ T9461] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 203.096007][ T5945] usb 3-1: USB disconnect, device number 48 [ 203.184863][ T9461] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 203.366895][ T5957] udevd[5957]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.174/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 208.677809][ T1174] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -110 [ 211.084781][ T9461] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 229.669026][ T5869] Bluetooth: hci3: link tx timeout [ 229.688864][ T5869] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 232.855481][ T5186] Bluetooth: hci3: command 0x0406 tx timeout [ 256.187293][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.454196][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 287.659581][ T5867] Bluetooth: hci1: command 0x0406 tx timeout [ 319.919903][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.933396][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.803798][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.814443][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 437.874809][ T1174] usb 1-1: USB disconnect, device number 67 [ 440.979034][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.000105][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.447919][ T31] INFO: task kworker/0:4:5900 blocked for more than 151 seconds. [ 442.890220][ T31] Not tainted syzkaller #0 [ 443.043709][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 443.052446][ T31] task:kworker/0:4 state:D stack:21008 pid:5900 tgid:5900 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 443.535376][ T31] Workqueue: events_power_efficient reg_check_chans_work [ 443.542546][ T31] Call Trace: [ 443.843865][ T31] [ 443.846871][ T31] __schedule+0x1798/0x4cc0 [ 443.851405][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 444.243738][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 444.249201][ T31] ? __pfx___schedule+0x10/0x10 [ 444.513772][ T31] ? lock_release+0x4b/0x3e0 [ 444.518446][ T31] ? rcu_is_watching+0x15/0xb0 [ 444.523297][ T31] schedule+0x165/0x360 [ 444.934125][ T31] schedule_preempt_disabled+0x13/0x30 [ 444.939671][ T31] __mutex_lock+0x7e6/0x1350 [ 445.116250][ T31] ? __mutex_lock+0x5bb/0x1350 [ 445.121102][ T31] ? reg_check_chans_work+0x164/0xf30 [ 445.383784][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 445.388898][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 445.693694][ T31] ? rcu_is_watching+0x15/0xb0 [ 445.698534][ T31] reg_check_chans_work+0x164/0xf30 [ 445.960674][ T31] ? do_raw_spin_lock+0x121/0x290 [ 446.003720][ T31] ? rcu_is_watching+0x15/0xb0 [ 446.008584][ T31] ? __pfx_reg_check_chans_work+0x10/0x10 [ 446.251429][ T31] ? rcu_is_watching+0x15/0xb0 [ 446.359790][ T31] ? lock_acquire+0x5f/0x360 [ 446.456834][ T31] ? rcu_is_watching+0x15/0xb0 [ 446.461697][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 446.583735][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 446.589551][ T31] process_scheduled_works+0xae1/0x17b0 [ 446.735480][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 446.741578][ T31] worker_thread+0x8a0/0xda0 [ 446.846980][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 446.853489][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 446.963732][ T31] ? __kthread_parkme+0x7b/0x200 [ 447.033876][ T31] kthread+0x711/0x8a0 [ 447.038032][ T31] ? __pfx_worker_thread+0x10/0x10 [ 447.043222][ T31] ? __pfx_kthread+0x10/0x10 [ 447.174122][ T31] ? rcu_is_watching+0x15/0xb0 [ 447.178976][ T31] ? __pfx_kthread+0x10/0x10 [ 447.183617][ T31] ret_from_fork+0x47c/0x820 [ 447.238463][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 447.353768][ T31] ? __switch_to_asm+0x39/0x70 [ 447.358634][ T31] ? __switch_to_asm+0x33/0x70 [ 447.363416][ T31] ? __pfx_kthread+0x10/0x10 [ 447.555317][ T31] ret_from_fork_asm+0x1a/0x30 [ 447.560198][ T31] [ 447.689315][ T31] INFO: lockdep is turned off. [ 447.846929][ T31] NMI backtrace for cpu 1 [ 447.846959][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 447.846979][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 447.846990][ T31] Call Trace: [ 447.846997][ T31] [ 447.847004][ T31] dump_stack_lvl+0x189/0x250 [ 447.847036][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 447.847063][ T31] ? __pfx__printk+0x10/0x10 [ 447.847093][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 447.847112][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 447.847131][ T31] ? __pfx__printk+0x10/0x10 [ 447.847162][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 447.847182][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 447.847202][ T31] watchdog+0xf60/0xfa0 [ 447.847219][ T31] ? watchdog+0x1e2/0xfa0 [ 447.847236][ T31] kthread+0x711/0x8a0 [ 447.847261][ T31] ? __pfx_watchdog+0x10/0x10 [ 447.847286][ T31] ? __pfx_kthread+0x10/0x10 [ 447.847310][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 447.847332][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 447.847353][ T31] ? __pfx_kthread+0x10/0x10 [ 447.847376][ T31] ret_from_fork+0x47c/0x820 [ 447.847401][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 447.847421][ T31] ? __switch_to_asm+0x39/0x70 [ 447.847437][ T31] ? __switch_to_asm+0x33/0x70 [ 447.847473][ T31] ? __pfx_kthread+0x10/0x10 [ 447.847498][ T31] ret_from_fork_asm+0x1a/0x30 [ 447.847525][ T31] [ 447.847532][ T31] Sending NMI from CPU 1 to CPUs 0: [ 448.061424][ C0] NMI backtrace for cpu 0 [ 448.061443][ C0] CPU: 0 UID: 0 PID: 78 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 448.061460][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 448.061472][ C0] Workqueue: bat_events batadv_tt_purge [ 448.061500][ C0] RIP: 0010:lock_acquire+0x58/0x360 [ 448.061518][ C0] Code: 8b 05 cc 3c 47 11 48 89 44 24 58 0f 1f 44 00 00 65 8b 05 cf 3c 47 11 83 f8 08 0f 83 b8 01 00 00 89 c0 48 0f a3 05 b8 a9 46 0e <73> 16 e8 61 02 09 00 84 c0 75 0d f6 05 56 8c 30 0e 01 0f 84 d7 01 [ 448.061532][ C0] RSP: 0018:ffffc9000215f920 EFLAGS: 00000293 [ 448.061545][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 448.061554][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88805a46f098 [ 448.061565][ C0] RBP: ffffffff8b56938b R08: 0000000000000001 R09: 0000000000000000 [ 448.061575][ C0] R10: dffffc0000000000 R11: fffffbfff1fca5a7 R12: 0000000000000000 [ 448.061586][ C0] R13: ffff88805a46f098 R14: 0000000000000000 R15: 0000000000000001 [ 448.061596][ C0] FS: 0000000000000000(0000) GS:ffff8881257c4000(0000) knlGS:0000000000000000 [ 448.061609][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 448.061619][ C0] CR2: 00007f9d532e8740 CR3: 000000003336e000 CR4: 00000000003526f0 [ 448.061633][ C0] Call Trace: [ 448.061639][ C0] [ 448.061646][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 448.061664][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 448.061683][ C0] ? batadv_tt_purge+0x11b/0x9e0 [ 448.061701][ C0] _raw_spin_lock_bh+0x36/0x50 [ 448.061719][ C0] ? batadv_tt_purge+0x11b/0x9e0 [ 448.061737][ C0] batadv_tt_purge+0x11b/0x9e0 [ 448.061757][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 448.061775][ C0] process_scheduled_works+0xae1/0x17b0 [ 448.061802][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 448.061826][ C0] worker_thread+0x8a0/0xda0 [ 448.061852][ C0] kthread+0x711/0x8a0 [ 448.061874][ C0] ? __pfx_worker_thread+0x10/0x10 [ 448.061891][ C0] ? __pfx_kthread+0x10/0x10 [ 448.061912][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 448.061931][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 448.061950][ C0] ? __pfx_kthread+0x10/0x10 [ 448.061970][ C0] ret_from_fork+0x47c/0x820 [ 448.061989][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 448.062008][ C0] ? __switch_to_asm+0x39/0x70 [ 448.062024][ C0] ? __switch_to_asm+0x33/0x70 [ 448.062038][ C0] ? __pfx_kthread+0x10/0x10 [ 448.062059][ C0] ret_from_fork_asm+0x1a/0x30 [ 448.062081][ C0] [ 448.305798][ C0] vkms_vblank_simulate: vblank timer overrun [ 448.803803][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 448.810714][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 448.819830][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 448.829894][ T31] Call Trace: [ 448.833179][ T31] [ 448.836115][ T31] dump_stack_lvl+0x99/0x250 [ 448.840723][ T31] ? __asan_memcpy+0x40/0x70 [ 448.845327][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 448.850541][ T31] ? __pfx__printk+0x10/0x10 [ 448.855181][ T31] vpanic+0x281/0x750 [ 448.859176][ T31] ? __pfx_vpanic+0x10/0x10 [ 448.863713][ T31] ? preempt_schedule+0xae/0xc0 [ 448.868586][ T31] ? preempt_schedule_common+0x83/0xd0 [ 448.874062][ T31] panic+0xb9/0xc0 [ 448.877810][ T31] ? __pfx_panic+0x10/0x10 [ 448.882238][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 448.887623][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 448.893798][ T31] watchdog+0xf9f/0xfa0 [ 448.897969][ T31] ? watchdog+0x1e2/0xfa0 [ 448.902306][ T31] kthread+0x711/0x8a0 [ 448.906391][ T31] ? __pfx_watchdog+0x10/0x10 [ 448.911091][ T31] ? __pfx_kthread+0x10/0x10 [ 448.915708][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 448.920938][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 448.926161][ T31] ? __pfx_kthread+0x10/0x10 [ 448.930770][ T31] ret_from_fork+0x47c/0x820 [ 448.935370][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 448.940503][ T31] ? __switch_to_asm+0x39/0x70 [ 448.945287][ T31] ? __switch_to_asm+0x33/0x70 [ 448.950070][ T31] ? __pfx_kthread+0x10/0x10 [ 448.954677][ T31] ret_from_fork_asm+0x1a/0x30 [ 448.959467][ T31] [ 448.962917][ T31] Kernel Offset: disabled [ 448.967247][ T31] Rebooting in 86400 seconds..