last executing test programs: 9.417050358s ago: executing program 1 (id=3827): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) r1 = gettid() r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) read(r2, &(0x7f0000000300)=""/239, 0xef) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000280)=0x3, 0x200000, 0x4) r3 = getpid() rt_tgsigqueueinfo(r3, r1, 0x5, &(0x7f0000000140)={0x5, 0xffffffff, 0x3}) rt_tgsigqueueinfo(r3, r1, 0x1b, &(0x7f0000000280)={0xc, 0x0, 0x4}) rt_sigprocmask(0x2, &(0x7f00000001c0)={[0x7]}, 0x0, 0x8) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f041}) close(r0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e28, @empty}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x4, r5, 0x3, &(0x7f00000001c0)) ioctl$AUTOFS_IOC_READY(r4, 0x541b, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r6, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0xc34, r7, 0x800, 0x6, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000000, 0x31}}}}, [@NL80211_ATTR_NAN_FUNC={0x3c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xf1}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x3}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x5}]}, @NL80211_ATTR_NAN_FUNC={0x750, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x4a0, 0xd, 0x0, 0x1, [{0x9e, 0x0, "67bd261b9ed6f1424d8f78888397aa23bb33e1f77bb4073201c48da7bb2d977043bf5d49e78ebfad69452f46df0a35af07a296f9167b943c1a9a02ac789bdfcdbdaca18772169f9194319a6013eef993821f6584e7962d030f52fea2cca7dd9e56a7428887a0f3d91a100403217df35a4fe69fdcd317808240ab8760ef8bcaaf3cb6d3981d31f9d0c037aabf02c9f52839e9f47fa22df7c68164"}, {0xd7, 0x0, "85612f7ffc0c0adf168a97435d2f39bb12aa790514f502f1913414b21d61803aa4ae4b3c3cdf0f9e9169570bc2601d60f36f588b4e888ffa62d17b0b2df235b000167672aa78bfe87370ccd9c17d224da8249ba10f3365a250b93f15f3d61d4ec92c01e83ceb827da24f35f35138a8d438a239a18697a6c8303baa9b02bf465f6845f29eb826b8c831ca1d87919ad0c28539b08c174733abfee9f1ed51f4c5fba8194e076fc97de7342dc39ff1725e3415c951fea982a342a81da8de65dfedc4d478677a1fd1334697c04d378c141e868b1a38"}, {0x4}, {0x3c, 0x0, "af96cf88243df3ea7c73d2fd11f54e22476b5c6f64d2431e90279ec03611a5a574597e28b068b3051dc597204d96c5d09130821834cb3514"}, {0x7a, 0x0, "8c37f6db72e8b4c7b04f3d9a3fcf6d0129d59cfa1e039142342f0ce90824a2481a651a9359ea2fb5ba2c66643de7a9f99f13df86d5581294d0ba5caf7406297154860fb6f1cf50e8a60e61d24b37835bbe93e1d42d3cef64e238ae7240cec7efb7c95ac898f7bbcb1cd95f57add572aa985b55487e6a"}, {0x39, 0x0, "c0d8e4962277eb069f949590b00290a4b7de829bac51d7e27b9abd2d658854b14fccf047f6a316fd12e8f99bd3f06d9d8074e69038"}, {0x8d, 0x0, "107f07595ef5d4d966485b4df5f3b9ab8ec94a7881b37f7e03945698003842e546d72aba36096610afec9714a1c6bd2738191b065ab6352fb833f2d072b9946eec014816ed9b9c4bc8a6734c3992776ecfd9c07753bcb462a534a37a8f5874cecd389a678d22541ac20f188889c528c5ce3f4716cd4c3ee3d8e5daf2da68e488822319a93acf935b03"}, {0x9f, 0x0, "b7595bb94213cdc6668f8a91c1b5b2b648710479caedba0463c3dc6c980edbf5620fd1ea3ba11f17bd11d1371efb7a2a78298b6614566a61ee520fa7eeb6c64d8bf87f81f7806d63f5a94c5563fb386929ed3cb92c5112c40a5a2e3cdac145ad00c963e92f4dc54033cd6f3f7deaf44fa6e7209cd57477044348a5213ad398f0a85bf15571a51184ad9c0b3065e3df8fc37b31c77ad78fc9e62b7d"}, {0xf9, 0x0, "fd3e8d5f26322a00874d45dcb037051324f13d026b19afdd5a77d8d6dbd03551a658436468c236bfcee3e289f4aad84db0fef9e9118b671212df730feefcb23eef4356f1758d5109962718d30467abd130853432128a345d74dda30ef77f984fc162b1328cccaf57942a7c51ffd3c4f9cc3971908577273c928022011df8ab8d293125cb2a192b55433331de956daad51366a0141f6aae0920e2b3195283150d836259402141bcce9ed6fb094602954c23e30a1352b1dc1dd7fbd2bea9e90bef5af83e245f3bb3e40f41dd8afa6ea31adb3db9c8cc67fb388101945ef74745bde79da2ecb8aed3ceb219bb4fba9629e06e13ddff19"}]}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x274, 0xd, 0x0, 0x1, [{0xed, 0x0, "7e23580ce1c90b7c46a769c6293e5e27668fba6cf2e87be37acd77953c7fc73518fc1e8c10f3d8b72f514007106c0c3232dab7d74bbec7b70a99342b3ed6e99d91f93fc74461933fe7911574caa8ef34f523351b81abab97b71a4514b0e7a62d68f8699e4f386c40698c2c1096df69392cbdae64f94979684ba25cd1ef9d38653c679b123107d834db9f38b4c67bac51205bf669c032b73c806f064349671f33d39ae1a6e72aecb7ececf9c88e0c2debf995058673ea5b104f2aa23e08fdae9d4ca57f9c4c261f7842ad628c94735ba054605e720812193f17a8ecad7598d5630629ad27f46aeb7fb9"}, {0x5e, 0x0, "7171bde67304b7422310c220c1c0aa0680e3b4d8ed94d47f87c0d07baae69629e0ba126c5f113933dbcf86a0d6a5a1ea830b272ff3a49b40adbc16473cb713277416dbff1dba62856addfa78f66241e404fcdb8ecc0d48f1cf4b"}, {0x94, 0x0, "21b679610d2a06421cf15d26120e01fb0f93e43233b19541b3d5ac1e056022c5e7edba5259356c0a69e84a9be16502ec6615bae0850013cdbc7f39362f85e5c69a7686163a618524bd6eeb46bb1347a3c22eeb4063b2e7de4e84c0d3a788d948b012f16458ce14b9725f4a2bca9007bf0ea57cad5c4638123f9ab3a47aa7f43edbc2a86a86170f21c44d5c0ac3cf63a9"}, {0x89, 0x0, "86299c223e6e834ad9ca42e343ab776cc9c1475e18f49f9cfd6b8b366f7ef52040b425f8fff1af981cca06ac9bcc0798e300e7855ba497cc4e68908035cf140baa847174e6c0dfc87e619f108e9de764e8bc70023ce53d18dc9bae5a6c31fe78a209731158398f1434461cd70de56bee6bcb26a5cca1a9f7d9d20ce20a359cb91a0cd04d98"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xd}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0xc}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0xc9}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0xe8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x5}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x64, 0xd, 0x0, 0x1, [{0x51, 0x0, "25b3c9d657db26e72847d2395bc140828ca7e556014b96927641fe1005994916faf829fb427896df56dd3f44bfef475c535ebede898d2332621617465913b1ec341605e098648b78b8226914fb"}, {0xc, 0x0, "4f1c51d724c8b54a"}]}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SRF={0x8, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}]}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x9}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x64, 0xe, 0x0, 0x1, [{0x5f, 0x0, "82f52f8f518ff520cb2a18727d594c96211b5a50d4de4c9dbbc2bd58833f4aad659d1c53de70fcec9c1da1fccb533fac1c1fd9db357a22c3655e2967913be32b79ad97b54eaec316a2f805d32a49cbcbbf1b90923d2a5973f575d6"}]}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x3}]}, @NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x14, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x7b}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_INCLUDE={0x4}]}]}, @NL80211_ATTR_NAN_FUNC={0xd8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0xd4, 0xd, 0x0, 0x1, [{0x4}, {0x5, 0x0, "c5"}, {0x16, 0x0, "3008fd5739718bbe0784e63ee40e8a1b580d"}, {0xaa, 0x0, "cd95e11431666663d5d445537a6f156ecc244c7e41cf70a023991e35cfc65b34b9f33934adc9c34615008a5db46e899556f475630862215e026efad4e90fb79c1ad4d5f938474396b8d73d21eb019055d43c3f5022922cfbddc5649fc14a5926a2514b88d0b4761bdb8ae86ac35ba1596bc5a652fd696abc6ef031bcb1294b813cc8266dfce7573cd58bb1614cc31223013d2011b6c67350fd082f47a171a7dc9e5a24044e2f"}]}]}, @NL80211_ATTR_NAN_FUNC={0x1c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}]}, @NL80211_ATTR_NAN_FUNC={0x268, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x260, 0xd, 0x0, 0x1, [{0x80, 0x0, "ea16f764897d7db9b09bddd7dd0d3db55fa0bb669ae4a74d0b2a93b1c9c0264578beb3854022708c984a6f9fa3c268107cad3b17727604db639a14ec7aae4f30509421293a587b1def4a239f25c4b2c03d486733bbf2d8155599ab96884ce1f06f2b879cb6459b1e8bae155ad88c42886dba08d3ab50ed9e5e4bdab7"}, {0x1c, 0x0, "a9fefef96e3394d8c2d567c81aed54674514424208524530"}, {0x9a, 0x0, "e8ceb4bcf10cc5245a9aa4228b9be391d4d1dc498fd28072c345a4f8c24c975a11bbec24a7fe18c77d23d6c75d4b364aff4528e04fef4a5cc01640451702451dd4596013ee0128347b3f5e9f04a326f7be2a16b8e8817778b0a75edcaf7b46ca6a0d49c31d83f6d9af7ae9f6e8bce660e982a551a73247b5f62b5065e98b9af3b035bb32cb043265a4c2de9e67bd0a3db59b1bda6359"}, {0x4}, {0x1a, 0x0, "eb0125270980d94a8c2743eff73edafd257888119fe2"}, {0x63, 0x0, "2b85a4bfd46de2945d8369baf16126c091f47223852f0847a99a1598b80b7a336695278be08999c1df45c6da30372c836dd6f5104b9a6add0f50cc94da8365fb3f26ab3b0d6e68c47cb3e0668e869315a15b1b5192cbb8940ff0aa00ff5907"}, {0xa0, 0x0, "6dee893f66dfe6c7f6d5cca7c557c4bb922ffbcaa3c0c1d2eec1b66b1a5d1522746beb47b936242b89ace2a86d41f5c8aabd95a4b93a915374bc4cf3d5bbdf2d0f618185b81253471dcbae11c9981e6c78861b3695445a4b1d46ab624033bd4797c23545b775a86f68c6adf1c4b6e694ca3b52a7630f695e566af3f2a378c1bf729616ff5d062ea4cc228b1bc85af72873beb15455de3612345ba7db"}]}]}, @NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5}]}]}, 0xc34}, 0x1, 0x0, 0x0, 0x800}, 0x20008060) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/58, 0x3a}, {&(0x7f0000000040)=""/89, 0x59}, {&(0x7f00000000c0)=""/54, 0x36}, {&(0x7f0000000300)=""/210, 0xd2}], 0x4) 8.44581274s ago: executing program 1 (id=3835): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x18557f, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000ac58000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="cc64187d2dd2ad78d8dc2fa1c162378b52515ce56ef50f4326749c9110448de4b7db6955ccaed1274834a98ec614414cb073a02b266aeecb7cff8b2a8f3bc8278584243ba31caecae13d1eb2", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x75, 0xc080) ioctl$USBDEVFS_CLAIM_PORT(r3, 0x80045518, &(0x7f0000000000)=0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) mkdirat$cgroup(r4, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r4, r5, 0x0, 0x7) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0x5, &(0x7f0000000740)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x29, &(0x7f0000000200)=""/41, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) 6.234985821s ago: executing program 2 (id=3840): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)=ANY=[@ANYRES16=r1, @ANYBLOB="01002cbd7000eedbdf25010000000000000002"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) 6.234347086s ago: executing program 4 (id=3841): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) unshare(0x8040680) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4004) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b03, 0x0) 6.116362621s ago: executing program 2 (id=3842): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, 0x0, 0x20000) r4 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0x20, r4, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) r7 = socket(0x10, 0x803, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) faccessat2(0xffffffffffffffff, 0x0, 0x2, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012800b000100697036746e6c0000180002801400030000000000000000000001"], 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x18, r6, 0x1, 0x0, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x2000c050) syz_usb_connect(0x0, 0x3e, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x143940, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r10, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r11) 5.944953427s ago: executing program 1 (id=3844): syz_open_dev$video(0x0, 0xa, 0xa9937b1269ec408a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r5 = dup(r4) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)=@x86={0x30, 0xe, 0x5, 0x0, 0x3, 0xa, 0xa, 0x8, 0x80, 0x9, 0x2, 0xe, 0x0, 0xd, 0xff, 0x2, 0x5, 0x1, 0x5, '\x00', 0x6, 0x1}) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.829077143s ago: executing program 0 (id=3847): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x10, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x1, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x0, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4c014}, 0x20000090) syz_emit_ethernet(0x1de, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x1a8, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8fffff", 0x0, 0x11, 0x0, @local, @empty, [@fragment={0xff}, @hopopts={0x0, 0x2c, '\x00', [@calipso={0x7, 0x40, {0x3, 0xe, 0x6, 0x0, [0xfffffffffffffffe, 0x2, 0x5, 0x9, 0x18a7, 0x73, 0x2]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x0, 0x9d, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62089716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a571c5b4211c6fa371"}, @ra, @generic={0x0, 0x72, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cb"}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x20, 0x0, 0x0) 4.802738804s ago: executing program 3 (id=3848): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000000200)={0xa4ff, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) 4.74678674s ago: executing program 3 (id=3849): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500, 0x1882}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000180)=""/150, 0x96}], 0x1, &(0x7f00000006c0)=[@cswp={0x58, 0x114, 0x7, {{0x7, 0x100}, &(0x7f0000000240)=0x10, &(0x7f0000000300)=0x1, 0x4, 0x2, 0x1, 0x3, 0xa, 0x6}}, @rdma_args={0x48, 0x114, 0x1, {{0x2, 0x59}, {&(0x7f0000000400)=""/75, 0x4b}, &(0x7f0000000340)=[{&(0x7f0000000500)=""/166, 0xa6}, {&(0x7f00000005c0)=""/218, 0xda}], 0x2, 0x10, 0xda64}}], 0xa0, 0x20000000}, 0x24004085) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 4.617200657s ago: executing program 0 (id=3850): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='cdg', 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, 0x0, 0x0, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 4.569189823s ago: executing program 1 (id=3851): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x60, 0x400c000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x8, r0}, 0x18) socket$inet_smc(0x2b, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e20, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c) shutdown(0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) recvmmsg(r3, &(0x7f0000002f00)=[{{0x0, 0x0, 0x0}, 0x400005}], 0x1, 0x42, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c007b50a0fcbb40da", @ANYRES16=r4, @ANYBLOB="010028bd7000ffdbdf250800000008000b0004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @private1, 0x1}]}, 0x0) sendfile(r0, r3, 0x0, 0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x24}, 0x1, 0x5502000000000000}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e24, 0x800, @empty, 0x9}}, 0x7, 0xfe00, 0x2, 0x3, 0x54, 0x6, 0xf5}, &(0x7f0000000480)=0x9c) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='ed:cb2e') 3.858617166s ago: executing program 3 (id=3852): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)=ANY=[@ANYRES16=r1, @ANYBLOB="01002cbd7000eedbdf25010000000000000002"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) 3.783646135s ago: executing program 3 (id=3853): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x2, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000000c0)=0x57dc, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x40000, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback, 0x80}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 3.669052849s ago: executing program 0 (id=3854): signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpgid(0x0) sched_setattr(r2, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0d, 0x7fff}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "f4ffffff"}, 0x20000000, 0x1, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r5, 0x0, 0x40) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000340)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x10, 0x5, {}, {0x1, 0xc, 0xd7, 0x7, 0x1, 0x3, "621a65f4"}, 0x1ff, 0x2, {0x0}, 0x6, 0x0, r4}) r6 = socket(0x40000000015, 0x5, 0x2) close(r6) sendto$inet6(r6, &(0x7f00000000c0)="c0b926743ee1", 0x6, 0x4, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x10}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0), &(0x7f0000000100)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x442, 0x0) 3.639952168s ago: executing program 3 (id=3855): pselect6(0x40, &(0x7f0000000040)={0x0, 0x3000000000000}, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x80, 0x0) mq_timedsend(r1, &(0x7f0000000600)="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", 0xfc2, 0x6, 0x0) mq_timedreceive(r1, &(0x7f000001d600)=""/102389, 0x18ff5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001700)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x20004884}, 0x4054) epoll_create(0x3) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) socket$inet6(0xa, 0x3, 0x88) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000183b9220b113420016580102030109021b00010000000009040000012e459e00090504", @ANYRES8], 0x0) signalfd(r0, &(0x7f0000001280)={[0x8]}, 0x8) write(r2, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r2, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@xdp, 0x80, &(0x7f00000011c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/236, 0xec}], 0x2, &(0x7f0000001200)=""/97, 0x61}}, {{&(0x7f00000015c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001300)=""/68, 0x44}, {&(0x7f0000001380)=""/197, 0xc5}], 0x2e3, &(0x7f00000014c0)=""/45, 0x38}}], 0x3, 0x0, 0x0) 3.601545467s ago: executing program 4 (id=3856): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000003100)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000d00)={0x2, 0x4e21, @empty}, 0x10, 0x0}}], 0x2, 0x927c408517621174) 3.160828972s ago: executing program 4 (id=3857): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000640)={&(0x7f00000001c0), 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x14, r1, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20008001) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r3) close_range(r2, 0xffffffffffffffff, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x3c, r6, 0x1, 0x70bd2f, 0xfffffffc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4a}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000008) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x38, r6, 0x300, 0x70bd2a, 0xf4, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20044000}, 0x6040801) r8 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="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", 0x5c1, 0xfffffffffffffffb) keyctl$update(0x2, r8, &(0x7f0000000000)="11868a0fceae284c0000000100000010", 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff6f, 0x0, 0x0, 0x0, 0x20}, [@jmp={0x7, 0x0, 0x4, 0x0, 0x0, 0xffffffffffffffe0, 0x20000}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000000000009e000040"]) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 2.944833648s ago: executing program 2 (id=3858): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) rt_sigaction(0x8, &(0x7f0000000080)={&(0x7f0000000200)="2437460f1c2bc4a2f99c9022000000c4a2f1002746c44179700d32233333a738e7c44240f29a3b470000a5c4c4a14d590c9736fe0d094e486ff5f5bb559a00000f75bed5370b1c2665d2950e000000db37", 0x88000007, 0x0}, 0x0, 0x8, &(0x7f0000000300)) lseek(0xffffffffffffffff, 0x9, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000100003800c0000800800034000000002cbfe7025dfe24f0486bea5ac6b2c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x840) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = inotify_init1(0x180000) inotify_add_watch(r6, 0x0, 0x64000ba6) inotify_add_watch(r6, &(0x7f0000000180)='./control\x00', 0xa4000960) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) 2.887881583s ago: executing program 4 (id=3859): syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x6, 0x0, 0x10, 0x7fff7ff9}, {0x9, 0x4, 0xa, 0x2}]}) fsopen(&(0x7f0000000000)='nfs\x00', 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[]) syz_open_dev$char_usb(0xc, 0xb4, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x28a}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x10, 0xfff1}, {0xe, 0xffff}}}, 0x24}}, 0xc044) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r0 = socket$inet_sctp(0x2, 0x1, 0x84) write$P9_RAUTH(0xffffffffffffffff, &(0x7f00000011c0)={0x14, 0x67, 0x1, {0x20, 0x4, 0x2}}, 0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="440000001000094600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="86feae88000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r7, @ANYBLOB], 0x44}}, 0x0) r8 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003601008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r9], 0x5c}}, 0x40) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 2.483018405s ago: executing program 1 (id=3860): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$media(&(0x7f0000000780), 0x0, 0x20004) ioctl$MEDIA_IOC_ENUM_ENTITIES(r1, 0xc1007c01, &(0x7f0000000f40)) getsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x8}]}}, 0x0}, 0x0) syz_usb_ep_write(r4, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 1.892376699s ago: executing program 0 (id=3861): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) (async) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffed3) close(r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 32) read$FUSE(r0, &(0x7f000000c400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (rerun: 32) write$FUSE_INIT(r1, &(0x7f0000000200)={0x50, 0x0, r2, {0x7, 0x1f, 0x1, 0x21a028b, 0x1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000a3c0)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0x0, 0x0, {0x410000003, 0x10, 0x0, {0x0, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8001, 0x0, r3, r4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x400017e) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x101200, 0x4) io_uring_enter(r0, 0x30c8, 0xe119, 0x32, &(0x7f00000000c0)={[0x72]}, 0x8) (async) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1) openat$cgroup_ro(r6, &(0x7f0000000900)='net_prio.prioidx\x00', 0x275a, 0xb) read$FUSE(r5, &(0x7f0000001fc0)={0x2020}, 0x2020) (async) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) syz_fuse_handle_req(r1, &(0x7f0000006100)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x7, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x1}, &(0x7f0000000100), &(0x7f0000000000)=0x0) (async) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f00000003c0)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r10, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) (async) io_uring_enter(r8, 0x3af, 0x0, 0x4, 0x0, 0x0) 1.648683784s ago: executing program 0 (id=3862): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500, 0x1882}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000180)=""/150, 0x96}], 0x1, &(0x7f00000006c0)=[@cswp={0x58, 0x114, 0x7, {{0x7, 0x100}, &(0x7f0000000240)=0x10, &(0x7f0000000300)=0x1, 0x4, 0x2, 0x1, 0x3, 0xa, 0x6}}, @rdma_args={0x48, 0x114, 0x1, {{0x2, 0x59}, {&(0x7f0000000400)=""/75, 0x4b}, &(0x7f0000000340)=[{&(0x7f0000000500)=""/166, 0xa6}, {&(0x7f00000005c0)=""/218, 0xda}], 0x2, 0x10, 0xda64}}], 0xa0, 0x20000000}, 0x24004085) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1.251099698s ago: executing program 2 (id=3863): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)=ANY=[@ANYRES16=r1, @ANYBLOB="01002cbd7000eedbdf25010000000000000002"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) 1.010690257s ago: executing program 4 (id=3864): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x101d0}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x20000090) 990.267359ms ago: executing program 2 (id=3865): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x2, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000000c0)=0x57dc, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x40000, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback, 0x80}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 897.61429ms ago: executing program 4 (id=3866): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000020940)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r8, 0x5452, &(0x7f0000000080)=0x207fff) recvmmsg(r8, &(0x7f0000007900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x30102, 0x0) sendmsg$inet(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000002000)="f3", 0x1}], 0x1}, 0x8801) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f4401020301090212"], 0x0) syz_open_dev$sndctrl(0x0, 0xdc3, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000300)=0xc6c5, 0x4) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r10, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x140c, 0x24, 0x70bd29, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x854}, 0x20000000) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) r11 = socket$kcm(0xa, 0x922000000003, 0x11) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a3a0000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000054000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005080007006e6174"], 0xf0}}, 0x0) unshare(0x400) setsockopt$sock_attach_bpf(r11, 0x29, 0x24, &(0x7f0000000080), 0x4) 897.178567ms ago: executing program 2 (id=3867): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000180)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10) r3 = syz_open_procfs(0x0, 0x0) getdents(r3, &(0x7f0000000240)=""/167, 0xa7) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000180)={0x8, &(0x7f0000000340)=[{0x6, 0x1}, {0x1, 0x2, 0x33, 0x4}, {0xde, 0x6, 0xc}, {0x10, 0x40, 0xfb, 0x4}, {0x9, 0x7, 0x2, 0xde06}, {0x5, 0x3, 0x1, 0x3}, {0x1, 0x1, 0x40, 0x9}, {0x4a, 0x0, 0x4, 0xa2}]}) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x0, 0x0}) getresgid(&(0x7f0000002800), &(0x7f0000002840), &(0x7f0000002880)) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r7}]}, 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a000000000000000400040030"], 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 680.750266ms ago: executing program 0 (id=3868): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20041, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r6 = epoll_create1(0x0) fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000240)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @multicast, @val={@void, {0x8100, 0x3, 0x0, 0x1}}, {@x25={0x805, {0x0, 0x8, 0xfb, "a2f1ff80114502115efa2edffe20909cab2da7c0ba8cc356fcdb59c3048b9ae94577115ca453482522b4556c46525a96e82073a9b6b5f9dba7f68e1ecd9b71d2615886c26b036bef2c5ce88ea55818abc98ace892033dfe821fa6263b648e2bd1fcc2e0f5a7088bd59ef54b91786f90f4626ddac800b260e2f6292f759b1c6d9"}}}}, &(0x7f0000000180)={0x1, 0x1, [0xf74, 0x8bf, 0xe4b, 0xa20]}) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r7) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r9, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r5, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r5, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) 1.303112ms ago: executing program 1 (id=3869): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r2, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f0000000140)={0xc, r2}) ioctl$IOMMU_VFIO_SET_IOMMU(r1, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="1800007f00000000001000000000000000010021"]) r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.pending_reads\x00', 0xc4440, 0x20) ioctl$PPPIOCGDEBUG(r3, 0x80047441, &(0x7f0000000080)) open_by_handle_at(r0, &(0x7f0000000000)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0xf1, {0x3, 0x40000000, 0x105, 0xfffffff8, 0x3a}}, 0x670e41) 0s ago: executing program 3 (id=3870): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000580)='1\x00', 0x2) r2 = syz_open_procfs$userns(0x0, &(0x7f0000000040)) mount_setattr(r0, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000000100)={0x100087, 0x0, 0x40000, {r2}}, 0x20) kernel console output (not intermixed with test programs): lNumber=0 [ 1197.316298][ T43] usb 3-1: config 0 descriptor?? [ 1197.556068][ T43] usb 3-1: USB disconnect, device number 122 [ 1198.071678][ T5972] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1198.172662][ T5972] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 1198.192084][ T56] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1198.204868][ T5972] usb 2-1: USB disconnect, device number 35 [ 1198.262216][ T7848] udevd[7848]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1198.308632][T20358] netlink: 'syz.1.3562': attribute type 8 has an invalid length. [ 1198.381317][ T56] usb 1-1: Using ep0 maxpacket: 32 [ 1198.397358][ T56] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 1198.407234][ T56] usb 1-1: config 0 has no interface number 0 [ 1198.413551][ T56] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1198.425149][ T56] usb 1-1: config 0 interface 85 has no altsetting 0 [ 1198.439722][ T56] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1198.465133][ T56] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.473500][ T56] usb 1-1: Product: syz [ 1198.477756][ T56] usb 1-1: Manufacturer: syz [ 1198.619544][ T56] usb 1-1: SerialNumber: syz [ 1198.636128][ T56] usb 1-1: config 0 descriptor?? [ 1198.766420][T20366] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1198.858399][ T56] appletouch 1-1:0.85: Failed to read mode from device. [ 1198.865912][ T56] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 1199.357476][ T6004] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1199.392619][ T56] usb 1-1: USB disconnect, device number 51 [ 1199.517147][ T6004] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1199.532158][ T6004] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1199.562058][ T6004] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1199.586464][ T6004] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.624964][T20369] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1199.663739][ T6004] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1199.882991][ T5943] usb 4-1: USB disconnect, device number 34 [ 1200.101035][ T6004] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1200.543138][ T6004] usb 5-1: Using ep0 maxpacket: 16 [ 1200.557760][ T6004] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1200.570574][ T6004] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.589466][ T6004] usb 5-1: Product: syz [ 1200.607879][ T6004] usb 5-1: Manufacturer: syz [ 1200.621453][ T6004] usb 5-1: SerialNumber: syz [ 1200.649266][ T6004] usb 5-1: config 0 descriptor?? [ 1200.688581][ T6004] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1200.714901][ T6004] usb 5-1: Detected FT-X [ 1200.760693][ T43] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1200.902285][ T6004] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1200.920764][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1201.040850][ T6004] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1201.068701][ T43] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1201.079165][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.124219][ T6004] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 1201.135643][ T6004] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1201.168867][ T6004] usb 5-1: USB disconnect, device number 16 [ 1201.192678][ T43] usb 2-1: config 0 descriptor?? [ 1201.205378][ T6004] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1201.331686][T20392] FAULT_INJECTION: forcing a failure. [ 1201.331686][T20392] name failslab, interval 1, probability 0, space 0, times 0 [ 1201.336099][ T6004] ftdi_sio 5-1:0.0: device disconnected [ 1201.356451][T20392] CPU: 1 UID: 0 PID: 20392 Comm: syz.2.3571 Not tainted syzkaller #0 PREEMPT(full) [ 1201.356476][T20392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1201.356487][T20392] Call Trace: [ 1201.356495][T20392] [ 1201.356503][T20392] dump_stack_lvl+0x189/0x250 [ 1201.356533][T20392] ? __pfx____ratelimit+0x10/0x10 [ 1201.356551][T20392] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1201.356571][T20392] ? __pfx__printk+0x10/0x10 [ 1201.356591][T20392] ? __pfx___might_resched+0x10/0x10 [ 1201.356608][T20392] ? fs_reclaim_acquire+0x7d/0x100 [ 1201.356637][T20392] should_fail_ex+0x414/0x560 [ 1201.356668][T20392] should_failslab+0xa8/0x100 [ 1201.356693][T20392] __kmalloc_noprof+0xcb/0x4f0 [ 1201.356713][T20392] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1201.356743][T20392] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1201.356774][T20392] genl_family_rcv_msg_doit+0xb8/0x300 [ 1201.356804][T20392] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1201.356835][T20392] ? apparmor_capable+0x137/0x1b0 [ 1201.356857][T20392] ? bpf_lsm_capable+0x9/0x20 [ 1201.356877][T20392] ? security_capable+0x7e/0x2e0 [ 1201.356905][T20392] genl_rcv_msg+0x60e/0x790 [ 1201.356934][T20392] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1201.356955][T20392] ? __pfx_l2tp_nl_cmd_session_delete+0x10/0x10 [ 1201.356984][T20392] ? __asan_memcpy+0x40/0x70 [ 1201.357002][T20392] ? __pfx_ref_tracker_free+0x10/0x10 [ 1201.357035][T20392] netlink_rcv_skb+0x205/0x470 [ 1201.357051][T20392] ? __lock_acquire+0xab9/0xd20 [ 1201.357070][T20392] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1201.357093][T20392] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1201.357132][T20392] ? down_read+0x1ad/0x2e0 [ 1201.357153][T20392] genl_rcv+0x28/0x40 [ 1201.357173][T20392] netlink_unicast+0x82f/0x9e0 [ 1201.357208][T20392] ? __pfx_netlink_unicast+0x10/0x10 [ 1201.357234][T20392] ? netlink_sendmsg+0x642/0xb30 [ 1201.357250][T20392] ? skb_put+0x11b/0x210 [ 1201.357272][T20392] netlink_sendmsg+0x805/0xb30 [ 1201.357301][T20392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1201.357323][T20392] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1201.357349][T20392] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1201.357366][T20392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1201.357385][T20392] __sock_sendmsg+0x219/0x270 [ 1201.357419][T20392] ____sys_sendmsg+0x505/0x830 [ 1201.357447][T20392] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1201.357478][T20392] ? import_iovec+0x74/0xa0 [ 1201.357502][T20392] ___sys_sendmsg+0x21f/0x2a0 [ 1201.357525][T20392] ? __pfx____sys_sendmsg+0x10/0x10 [ 1201.357584][T20392] ? __fget_files+0x2a/0x420 [ 1201.357605][T20392] ? __fget_files+0x3a0/0x420 [ 1201.357639][T20392] __x64_sys_sendmsg+0x19b/0x260 [ 1201.357663][T20392] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1201.357695][T20392] ? __pfx_ksys_write+0x10/0x10 [ 1201.357713][T20392] ? rcu_is_watching+0x15/0xb0 [ 1201.357739][T20392] ? do_syscall_64+0xbe/0x3b0 [ 1201.357762][T20392] do_syscall_64+0xfa/0x3b0 [ 1201.357779][T20392] ? lockdep_hardirqs_on+0x9c/0x150 [ 1201.357796][T20392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.357813][T20392] ? clear_bhb_loop+0x60/0xb0 [ 1201.357834][T20392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.357850][T20392] RIP: 0033:0x7f0bced8eec9 [ 1201.357866][T20392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1201.357881][T20392] RSP: 002b:00007f0bcfb7a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1201.357900][T20392] RAX: ffffffffffffffda RBX: 00007f0bcefe5fa0 RCX: 00007f0bced8eec9 [ 1201.357912][T20392] RDX: 0000000000008000 RSI: 0000200000000040 RDI: 0000000000000006 [ 1201.357924][T20392] RBP: 00007f0bcfb7a090 R08: 0000000000000000 R09: 0000000000000000 [ 1201.357935][T20392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1201.357945][T20392] R13: 00007f0bcefe6038 R14: 00007f0bcefe5fa0 R15: 00007f0bcf10fa28 [ 1201.357976][T20392] [ 1201.992093][ T43] keytouch 0003:0926:3333.0046: fixing up Keytouch IEC report descriptor [ 1202.004753][ T43] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0046/input/input84 [ 1202.164501][ T43] keytouch 0003:0926:3333.0046: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1203.262724][ T5943] usb 2-1: USB disconnect, device number 36 [ 1203.311136][ T56] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1203.473774][ T56] usb 3-1: Using ep0 maxpacket: 8 [ 1203.485414][ T56] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1203.526369][ T56] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1203.605610][ T56] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1203.644054][ T56] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1203.687650][ T56] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1203.710696][ T56] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.150711][T20434] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1204.181364][T20428] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1204.201138][ T56] usb 3-1: GET_CAPABILITIES returned 0 [ 1204.206673][ T56] usbtmc 3-1:16.0: can't read capabilities [ 1204.465651][T20419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1204.484001][T20419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1205.282826][ T43] usb 3-1: USB disconnect, device number 123 [ 1205.357928][T20444] FAULT_INJECTION: forcing a failure. [ 1205.357928][T20444] name failslab, interval 1, probability 0, space 0, times 0 [ 1205.381053][T20444] CPU: 1 UID: 0 PID: 20444 Comm: syz.3.3584 Not tainted syzkaller #0 PREEMPT(full) [ 1205.381079][T20444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1205.381089][T20444] Call Trace: [ 1205.381096][T20444] [ 1205.381103][T20444] dump_stack_lvl+0x189/0x250 [ 1205.381128][T20444] ? __pfx____ratelimit+0x10/0x10 [ 1205.381140][T20444] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1205.381152][T20444] ? __pfx__printk+0x10/0x10 [ 1205.381164][T20444] ? __pfx___might_resched+0x10/0x10 [ 1205.381175][T20444] ? fs_reclaim_acquire+0x7d/0x100 [ 1205.381194][T20444] should_fail_ex+0x414/0x560 [ 1205.381211][T20444] should_failslab+0xa8/0x100 [ 1205.381225][T20444] __kmalloc_noprof+0xcb/0x4f0 [ 1205.381236][T20444] ? __se_sys_futex_waitv+0x17d/0x280 [ 1205.381253][T20444] __se_sys_futex_waitv+0x17d/0x280 [ 1205.381268][T20444] ? __pfx___se_sys_futex_waitv+0x10/0x10 [ 1205.381285][T20444] ? __pfx_ksys_write+0x10/0x10 [ 1205.381296][T20444] ? rcu_is_watching+0x15/0xb0 [ 1205.381310][T20444] ? do_syscall_64+0xbe/0x3b0 [ 1205.381318][T20444] ? __x64_sys_futex_waitv+0x20/0xc0 [ 1205.381333][T20444] do_syscall_64+0xfa/0x3b0 [ 1205.381342][T20444] ? lockdep_hardirqs_on+0x9c/0x150 [ 1205.381351][T20444] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1205.381361][T20444] ? clear_bhb_loop+0x60/0xb0 [ 1205.381372][T20444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1205.381381][T20444] RIP: 0033:0x7fb01d78eec9 [ 1205.381390][T20444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1205.381399][T20444] RSP: 002b:00007fb01b9f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 1205.381411][T20444] RAX: ffffffffffffffda RBX: 00007fb01d9e6090 RCX: 00007fb01d78eec9 [ 1205.381418][T20444] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000001080 [ 1205.381424][T20444] RBP: 00007fb01b9f6090 R08: 0000000000000001 R09: 0000000000000000 [ 1205.381430][T20444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1205.381436][T20444] R13: 00007fb01d9e6128 R14: 00007fb01d9e6090 R15: 00007fb01db0fa28 [ 1205.381451][T20444] [ 1206.181554][T20457] FAULT_INJECTION: forcing a failure. [ 1206.181554][T20457] name failslab, interval 1, probability 0, space 0, times 0 [ 1206.205501][T20457] CPU: 0 UID: 0 PID: 20457 Comm: syz.4.3586 Not tainted syzkaller #0 PREEMPT(full) [ 1206.205526][T20457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1206.205537][T20457] Call Trace: [ 1206.205545][T20457] [ 1206.205554][T20457] dump_stack_lvl+0x189/0x250 [ 1206.205581][T20457] ? __pfx____ratelimit+0x10/0x10 [ 1206.205600][T20457] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1206.205621][T20457] ? __pfx__printk+0x10/0x10 [ 1206.205640][T20457] ? fs_reclaim_acquire+0x7d/0x100 [ 1206.205673][T20457] should_fail_ex+0x414/0x560 [ 1206.205710][T20457] should_failslab+0xa8/0x100 [ 1206.205735][T20457] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1206.205756][T20457] ? security_file_alloc+0x34/0x330 [ 1206.205781][T20457] security_file_alloc+0x34/0x330 [ 1206.205804][T20457] init_file+0x93/0x2f0 [ 1206.205824][T20457] alloc_empty_file+0x6e/0x1d0 [ 1206.205855][T20457] alloc_file_pseudo+0x13d/0x210 [ 1206.205876][T20457] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1206.205892][T20457] ? evm_inode_alloc_security+0x40/0xb0 [ 1206.205912][T20457] ? security_inode_alloc+0xd5/0x330 [ 1206.205948][T20457] sock_alloc_file+0xb8/0x2e0 [ 1206.205975][T20457] do_accept+0x34b/0x680 [ 1206.205999][T20457] ? __pfx_do_accept+0x10/0x10 [ 1206.206014][T20457] ? preempt_schedule_thunk+0x16/0x30 [ 1206.206056][T20457] io_accept+0x307/0x790 [ 1206.206091][T20457] ? __pfx_io_accept+0x10/0x10 [ 1206.206111][T20457] ? __fget_files+0x2a/0x420 [ 1206.206134][T20457] ? __fget_files+0x3a0/0x420 [ 1206.206159][T20457] __io_issue_sqe+0x181/0x4b0 [ 1206.206181][T20457] ? io_file_get_normal+0x101/0x2f0 [ 1206.206205][T20457] io_issue_sqe+0x165/0xfd0 [ 1206.206236][T20457] io_submit_sqes+0xa34/0x1d30 [ 1206.206290][T20457] __se_sys_io_uring_enter+0x2df/0x2b20 [ 1206.206326][T20457] ? __pfx___schedule+0x10/0x10 [ 1206.206355][T20457] ? ksys_write+0x1cb/0x250 [ 1206.206379][T20457] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1206.206408][T20457] ? rcu_is_watching+0x15/0xb0 [ 1206.206429][T20457] ? trace_irq_disable+0x37/0x110 [ 1206.206446][T20457] ? preempt_schedule_irq+0xde/0x150 [ 1206.206463][T20457] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1206.206487][T20457] ? irqentry_exit+0x74/0x90 [ 1206.206505][T20457] ? lockdep_hardirqs_on+0x9c/0x150 [ 1206.206534][T20457] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1206.206561][T20457] do_syscall_64+0xfa/0x3b0 [ 1206.206580][T20457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.206597][T20457] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1206.206613][T20457] ? clear_bhb_loop+0x60/0xb0 [ 1206.206634][T20457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.206651][T20457] RIP: 0033:0x7f8c11f8eec9 [ 1206.206667][T20457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1206.206682][T20457] RSP: 002b:00007f8c12e9f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1206.206700][T20457] RAX: ffffffffffffffda RBX: 00007f8c121e6180 RCX: 00007f8c11f8eec9 [ 1206.206719][T20457] RDX: 000000000000c2de RSI: 0000000000003517 RDI: 0000000000000007 [ 1206.206742][T20457] RBP: 00007f8c12e9f090 R08: 0000000000000000 R09: 0000000000000000 [ 1206.206753][T20457] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 1206.206764][T20457] R13: 00007f8c121e6218 R14: 00007f8c121e6180 R15: 00007f8c1230fa28 [ 1206.206793][T20457] [ 1207.970732][ T56] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1208.050701][ T43] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1208.138701][ T56] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1208.150107][ T56] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1208.242385][ T56] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.286341][ T56] usb 3-1: config 0 descriptor?? [ 1208.325091][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1208.336670][ T43] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1208.358946][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.372367][ T30] audit: type=1326 audit(1759306366.346:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20462 comm="syz.3.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01d78eec9 code=0x7ffc0000 [ 1208.418947][ T43] usb 1-1: config 0 descriptor?? [ 1208.436867][ T30] audit: type=1326 audit(1759306366.346:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20462 comm="syz.3.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fb01d78eec9 code=0x7ffc0000 [ 1208.480480][ T30] audit: type=1326 audit(1759306366.346:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20462 comm="syz.3.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01d78eec9 code=0x7ffc0000 [ 1208.551477][ T30] audit: type=1326 audit(1759306366.346:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20462 comm="syz.3.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb01d78eec9 code=0x7ffc0000 [ 1208.576361][ T30] audit: type=1326 audit(1759306366.346:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20462 comm="syz.3.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01d78eec9 code=0x7ffc0000 [ 1208.619293][ T30] audit: type=1326 audit(1759306366.346:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20462 comm="syz.3.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb01d78eec9 code=0x7ffc0000 [ 1208.657842][ T43] usbhid 1-1:0.0: can't add hid device: -71 [ 1208.700899][ T43] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1208.741386][ T43] usb 1-1: USB disconnect, device number 52 [ 1208.753616][ T30] audit: type=1326 audit(1759306366.346:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20462 comm="syz.3.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01d78eec9 code=0x7ffc0000 [ 1208.762879][ T56] keytouch 0003:0926:3333.0047: fixing up Keytouch IEC report descriptor [ 1208.823659][ T30] audit: type=1326 audit(1759306366.346:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20462 comm="syz.3.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fb01d78eec9 code=0x7ffc0000 [ 1208.879342][ T30] audit: type=1326 audit(1759306366.346:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20462 comm="syz.3.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01d78eec9 code=0x7ffc0000 [ 1209.068575][ T30] audit: type=1326 audit(1759306366.346:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20462 comm="syz.3.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fb01d78eec9 code=0x7ffc0000 [ 1209.099782][ T56] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0047/input/input85 [ 1209.335559][ T43] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1209.500737][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 1209.526221][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1209.558446][ T43] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1209.634071][ T56] keytouch 0003:0926:3333.0047: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 1209.643548][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.697869][T20479] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3591'. [ 1209.708785][T20479] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3591'. [ 1209.719564][T20479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3591'. [ 1209.775035][ T6006] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1209.818972][ T43] usb 1-1: config 0 descriptor?? [ 1210.040271][ T43] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1210.097240][ T56] usb 3-1: USB disconnect, device number 124 [ 1210.140399][ T43] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1210.182535][ T6006] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1210.196667][T20482] fido_id[20482]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1210.233641][T20471] Bluetooth: hci3: command 0x0406 tx timeout [ 1210.330800][ T6006] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1210.360279][ T6006] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1210.379728][ T6006] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.403863][T20481] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1210.428679][ T6006] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1210.635900][ T6006] usb 5-1: USB disconnect, device number 17 [ 1210.841305][ T6004] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 1210.885902][T20230] usb 1-1: USB disconnect, device number 53 [ 1210.895898][T20230] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 1211.056340][ T6004] usb 2-1: config 0 has an invalid interface number: 234 but max is 0 [ 1211.064682][ T6004] usb 2-1: config 0 has no interface number 0 [ 1211.073120][ T6004] usb 2-1: config 0 interface 234 has no altsetting 0 [ 1211.082102][ T6004] usb 2-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=b0.31 [ 1211.091544][ T56] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1211.104496][ T6004] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.118566][ T6004] usb 2-1: Product: syz [ 1211.123503][ T6004] usb 2-1: Manufacturer: syz [ 1211.128130][ T6004] usb 2-1: SerialNumber: syz [ 1211.137801][ T6004] usb 2-1: config 0 descriptor?? [ 1211.250724][ T56] usb 3-1: Using ep0 maxpacket: 32 [ 1211.269130][ T56] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 1211.634690][ T56] usb 3-1: config 0 has no interface number 0 [ 1211.681447][ T56] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1211.717516][ T56] usb 3-1: config 0 interface 85 has no altsetting 0 [ 1211.729784][ T56] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1211.747534][ T56] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.757280][ T56] usb 3-1: Product: syz [ 1211.765193][ T56] usb 3-1: Manufacturer: syz [ 1211.770035][ T56] usb 3-1: SerialNumber: syz [ 1211.927036][ T6004] pegasus 2-1:0.234: probe with driver pegasus failed with error -71 [ 1211.935352][ T56] usb 3-1: config 0 descriptor?? [ 1212.091899][ T6004] usb 2-1: USB disconnect, device number 37 [ 1212.120699][ T5978] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1212.224697][ T56] appletouch 3-1:0.85: Failed to read mode from device. [ 1212.240870][ T56] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 1212.281033][ T5978] usb 5-1: Using ep0 maxpacket: 8 [ 1212.299623][ T5978] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1212.311349][ T5978] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1212.332876][ T5978] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1212.343093][T20501] netlink: 'syz.3.3598': attribute type 1 has an invalid length. [ 1212.351002][T20501] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3598'. [ 1212.362346][ T5978] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1212.394084][ T5978] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1212.420679][ T5978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.628097][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 1212.648009][ T56] usb 3-1: USB disconnect, device number 125 [ 1212.683858][T20499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1212.708034][T20499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1212.740327][ T5978] usb 5-1: GET_CAPABILITIES returned 0 [ 1212.746081][ T5978] usbtmc 5-1:16.0: can't read capabilities [ 1212.760882][ T6006] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1212.920695][ T5978] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1212.939381][ T6006] usb 4-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 1212.949008][ T6006] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.958889][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1212.960671][ T6006] usb 4-1: Product: syz [ 1212.988803][ T24] usb 5-1: USB disconnect, device number 18 [ 1212.990493][ T6006] usb 4-1: Manufacturer: syz [ 1213.009496][ T6006] usb 4-1: SerialNumber: syz [ 1213.032614][ T6006] usb 4-1: config 0 descriptor?? [ 1213.043981][ T6006] hub 4-1:0.0: bad descriptor, ignoring hub [ 1213.054460][ T6006] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1213.063253][ T6006] usbsevseg 4-1:0.0: USB 7 Segment device now attached [ 1213.070768][ T5978] usb 1-1: Using ep0 maxpacket: 32 [ 1213.090506][ T5978] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 9 [ 1213.110713][ T5978] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 8241, setting to 1024 [ 1213.132783][ T5978] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1213.142524][ T5978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.150533][ T5978] usb 1-1: Product: syz [ 1213.155188][ T5978] usb 1-1: Manufacturer: syz [ 1213.159792][ T5978] usb 1-1: SerialNumber: syz [ 1213.169167][ T5978] usb 1-1: config 0 descriptor?? [ 1213.213062][ T5978] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1213.258243][T20519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1213.275092][T20519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1213.352396][T20525] FAULT_INJECTION: forcing a failure. [ 1213.352396][T20525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1213.365762][T20525] CPU: 0 UID: 0 PID: 20525 Comm: syz.3.3605 Not tainted syzkaller #0 PREEMPT(full) [ 1213.365785][T20525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1213.365796][T20525] Call Trace: [ 1213.365804][T20525] [ 1213.365812][T20525] dump_stack_lvl+0x189/0x250 [ 1213.365840][T20525] ? __pfx____ratelimit+0x10/0x10 [ 1213.365859][T20525] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1213.365881][T20525] ? __pfx__printk+0x10/0x10 [ 1213.365910][T20525] should_fail_ex+0x414/0x560 [ 1213.365928][T20525] _copy_to_user+0x31/0xb0 [ 1213.365941][T20525] simple_read_from_buffer+0xe1/0x170 [ 1213.365956][T20525] proc_fail_nth_read+0x1b3/0x220 [ 1213.365969][T20525] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1213.365988][T20525] ? rw_verify_area+0x2a6/0x4d0 [ 1213.366009][T20525] ? __lock_acquire+0xab9/0xd20 [ 1213.366025][T20525] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1213.366046][T20525] vfs_read+0x1fd/0xa30 [ 1213.366064][T20525] ? fdget_pos+0x247/0x320 [ 1213.366081][T20525] ? __pfx___mutex_lock+0x10/0x10 [ 1213.366092][T20525] ? __pfx_vfs_read+0x10/0x10 [ 1213.366104][T20525] ? __fget_files+0x2a/0x420 [ 1213.366119][T20525] ? __fget_files+0x3a0/0x420 [ 1213.366135][T20525] ? __fget_files+0x2a/0x420 [ 1213.366167][T20525] ksys_read+0x145/0x250 [ 1213.366190][T20525] ? __pfx_ksys_read+0x10/0x10 [ 1213.366208][T20525] ? rcu_is_watching+0x15/0xb0 [ 1213.366226][T20525] ? do_syscall_64+0xbe/0x3b0 [ 1213.366239][T20525] do_syscall_64+0xfa/0x3b0 [ 1213.366248][T20525] ? lockdep_hardirqs_on+0x9c/0x150 [ 1213.366258][T20525] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1213.366268][T20525] ? clear_bhb_loop+0x60/0xb0 [ 1213.366281][T20525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1213.366298][T20525] RIP: 0033:0x7fb01d78d8dc [ 1213.366314][T20525] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1213.366330][T20525] RSP: 002b:00007fb01e547030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1213.366349][T20525] RAX: ffffffffffffffda RBX: 00007fb01d9e5fa0 RCX: 00007fb01d78d8dc [ 1213.366361][T20525] RDX: 000000000000000f RSI: 00007fb01e5470a0 RDI: 0000000000000004 [ 1213.366369][T20525] RBP: 00007fb01e547090 R08: 0000000000000000 R09: 0000000000000000 [ 1213.366375][T20525] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001 [ 1213.366381][T20525] R13: 00007fb01d9e6038 R14: 00007fb01d9e5fa0 R15: 00007fb01db0fa28 [ 1213.366408][T20525] [ 1213.411171][ T5978] usb 4-1: USB disconnect, device number 35 [ 1213.684447][ T5978] usbsevseg 4-1:0.0: USB 7 Segment now disconnected [ 1213.791143][ T43] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1214.244344][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 1214.249676][ T80] usb 1-1: Failed to submit usb control message: -110 [ 1214.257414][ T80] usb 1-1: unable to send the bmi data to the device: -110 [ 1214.269480][ T43] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1214.280474][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.289730][ T43] usb 3-1: Product: syz [ 1214.293074][ T80] usb 1-1: unable to get target info from device [ 1214.440680][ T43] usb 3-1: Manufacturer: syz [ 1214.452790][ T43] usb 3-1: SerialNumber: syz [ 1214.462945][ T43] usb 3-1: config 0 descriptor?? [ 1214.480711][ T80] usb 1-1: could not get target info (-110) [ 1214.540759][ T80] usb 1-1: could not probe fw (-110) [ 1214.904433][ T43] airspy 3-1:0.0: Board ID: 00 [ 1214.910122][ T43] airspy 3-1:0.0: Firmware version: [ 1215.572811][ T43] airspy 3-1:0.0: usb_control_msg() failed -71 request 12 [ 1215.598851][ T43] airspy 3-1:0.0: Registered as swradio24 [ 1215.620967][ T43] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1215.647904][ T43] usb 3-1: USB disconnect, device number 126 [ 1215.684685][ T6006] usb 1-1: USB disconnect, device number 54 [ 1216.299936][T20559] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 1216.340733][ T43] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1216.540826][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 1216.547452][ T43] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1216.560720][ T43] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1216.573243][ T6006] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1216.613860][ T43] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1216.624392][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.635067][ T43] usb 4-1: Product: syz [ 1216.639333][ T43] usb 4-1: Manufacturer: syz [ 1216.649772][ T43] usb 4-1: SerialNumber: syz [ 1216.750231][ T6006] usb 3-1: Using ep0 maxpacket: 16 [ 1216.774447][ T6006] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1216.788894][ T6006] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1216.811024][ T6006] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1216.841013][ T6006] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1216.850201][ T6006] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.891966][ T6006] usb 3-1: config 0 descriptor?? [ 1216.912916][ T43] usb 4-1: 0:2 : does not exist [ 1216.927692][ T43] usb 4-1: USB disconnect, device number 36 [ 1217.549790][ C0] vcan0: j1939_tp_rxtimer: 0xffff888054d0cc00: rx timeout, send abort [ 1217.567619][ T6006] usbhid 3-1:0.0: can't add hid device: -71 [ 1217.573996][ T6006] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1217.590774][ T56] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1217.617136][ T6006] usb 3-1: USB disconnect, device number 127 [ 1217.760856][ T56] usb 2-1: Using ep0 maxpacket: 8 [ 1217.770725][ T56] usb 2-1: config 0 has an invalid interface number: 250 but max is 0 [ 1217.778930][ T56] usb 2-1: config 0 has no interface number 0 [ 1217.790704][ T56] usb 2-1: New USB device found, idVendor=a168, idProduct=0614, bcdDevice=1b.10 [ 1217.799771][ T56] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.808349][ T56] usb 2-1: Product: syz [ 1217.813171][ T56] usb 2-1: Manufacturer: syz [ 1217.817839][ T56] usb 2-1: SerialNumber: syz [ 1217.827121][ T56] usb 2-1: config 0 descriptor?? [ 1217.838229][ T56] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0614 [ 1217.970795][ T6004] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1218.058109][ C0] vcan0: j1939_tp_rxtimer: 0xffff888054d0cc00: abort rx timeout. Force session deactivation [ 1218.140858][ T6004] usb 1-1: Using ep0 maxpacket: 32 [ 1218.156851][ T6004] usb 1-1: config 1 has an invalid interface number: 236 but max is 0 [ 1218.166637][ T6004] usb 1-1: config 1 has no interface number 0 [ 1218.173647][ T6004] usb 1-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1218.184904][ T6004] usb 1-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 1218.200059][ T6004] usb 1-1: config 1 interface 236 has no altsetting 0 [ 1218.212341][ T6004] usb 1-1: config 1 has an invalid interface number: 236 but max is 0 [ 1218.227250][ T6004] usb 1-1: config 1 has no interface number 0 [ 1218.250734][ T6004] usb 1-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1218.275088][ T6004] usb 1-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 1218.331477][ T6004] usb 1-1: config 1 interface 236 has no altsetting 0 [ 1218.351521][ T6004] usb 1-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 1218.360869][ T6004] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.369062][ T56] gspca_sn9c20x: Write register 1000 failed -110 [ 1218.375587][ T56] gspca_sn9c20x: Device initialization failed [ 1218.382960][ T6004] usb 1-1: Product: syz [ 1218.394842][ T56] gspca_sn9c20x 2-1:0.250: probe with driver gspca_sn9c20x failed with error -110 [ 1218.405234][ T6004] usb 1-1: Manufacturer: syz [ 1218.420896][ T6004] usb 1-1: SerialNumber: syz [ 1218.434865][ T6004] ti_usb_3410_5052 1-1:1.236: TI USB 5052 2 port adapter converter detected [ 1218.742954][ T6006] usb 1-1: USB disconnect, device number 55 [ 1218.840945][ T6004] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1218.858434][T20583] FAULT_INJECTION: forcing a failure. [ 1218.858434][T20583] name failslab, interval 1, probability 0, space 0, times 0 [ 1218.910776][T20583] CPU: 0 UID: 0 PID: 20583 Comm: syz.0.3620 Not tainted syzkaller #0 PREEMPT(full) [ 1218.910802][T20583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1218.910814][T20583] Call Trace: [ 1218.910822][T20583] [ 1218.910830][T20583] dump_stack_lvl+0x189/0x250 [ 1218.910858][T20583] ? __pfx____ratelimit+0x10/0x10 [ 1218.910883][T20583] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1218.910905][T20583] ? __pfx__printk+0x10/0x10 [ 1218.910928][T20583] ? __pfx___might_resched+0x10/0x10 [ 1218.910946][T20583] ? fs_reclaim_acquire+0x7d/0x100 [ 1218.910976][T20583] should_fail_ex+0x414/0x560 [ 1218.911005][T20583] should_failslab+0xa8/0x100 [ 1218.911031][T20583] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1218.911051][T20583] ? __kernfs_new_node+0xd7/0x7e0 [ 1218.911076][T20583] __kernfs_new_node+0xd7/0x7e0 [ 1218.911096][T20583] ? __lock_acquire+0xab9/0xd20 [ 1218.911121][T20583] ? __pfx___kernfs_new_node+0x10/0x10 [ 1218.911142][T20583] ? kernfs_root+0x1c/0x230 [ 1218.911167][T20583] ? kernfs_root+0x1c/0x230 [ 1218.911184][T20583] ? kernfs_root+0x1c/0x230 [ 1218.911203][T20583] ? kernfs_root+0x1c/0x230 [ 1218.911226][T20583] kernfs_new_node+0x102/0x210 [ 1218.911251][T20583] kernfs_create_dir_ns+0x44/0x130 [ 1218.911275][T20583] internal_create_group+0x419/0x1110 [ 1218.911313][T20583] ? __pfx_internal_create_group+0x10/0x10 [ 1218.911337][T20583] ? loop_update_dio+0x256/0x3a0 [ 1218.911363][T20583] loop_configure+0x99e/0xe50 [ 1218.911400][T20583] ? __pfx_loop_configure+0x10/0x10 [ 1218.911452][T20583] lo_ioctl+0x810/0x1c10 [ 1218.911483][T20583] ? __pfx_lo_ioctl+0x10/0x10 [ 1218.911502][T20583] ? ima_match_policy+0x10b/0x2150 [ 1218.911522][T20583] ? look_up_lock_class+0x74/0x170 [ 1218.911542][T20583] ? register_lock_class+0x51/0x320 [ 1218.911564][T20583] ? __lock_acquire+0xab9/0xd20 [ 1218.911592][T20583] ? process_measurement+0x3d8/0x1a40 [ 1218.911616][T20583] ? __lock_acquire+0xab9/0xd20 [ 1218.911638][T20583] ? __lock_acquire+0xab9/0xd20 [ 1218.911669][T20583] ? __lock_acquire+0xab9/0xd20 [ 1218.911698][T20583] ? __lock_acquire+0xab9/0xd20 [ 1218.911737][T20583] ? is_bpf_text_address+0x26/0x2b0 [ 1218.911760][T20583] ? is_bpf_text_address+0x292/0x2b0 [ 1218.911778][T20583] ? is_bpf_text_address+0x26/0x2b0 [ 1218.911799][T20583] ? kernel_text_address+0xa5/0xe0 [ 1218.911824][T20583] ? __kernel_text_address+0xd/0x40 [ 1218.911847][T20583] ? unwind_get_return_address+0x4d/0x90 [ 1218.911868][T20583] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1218.911897][T20583] ? arch_stack_walk+0xfc/0x150 [ 1218.911931][T20583] ? stack_trace_save+0x9c/0xe0 [ 1218.911953][T20583] ? __pfx_stack_trace_save+0x10/0x10 [ 1218.911976][T20583] ? stack_depot_save_flags+0x40/0x860 [ 1218.912008][T20583] ? kasan_save_track+0x4f/0x80 [ 1218.912026][T20583] ? kasan_save_track+0x3e/0x80 [ 1218.912043][T20583] ? kasan_save_free_info+0x46/0x50 [ 1218.912058][T20583] ? __kasan_slab_free+0x5b/0x80 [ 1218.912076][T20583] ? kfree+0x18e/0x440 [ 1218.912092][T20583] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 1218.912112][T20583] ? security_file_ioctl+0xcb/0x2d0 [ 1218.912129][T20583] ? __se_sys_ioctl+0x47/0x170 [ 1218.912146][T20583] ? do_syscall_64+0xfa/0x3b0 [ 1218.912162][T20583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1218.912205][T20583] ? __asan_memset+0x22/0x50 [ 1218.912223][T20583] ? blk_get_meta_cap+0x18c/0x750 [ 1218.912253][T20583] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 1218.912277][T20583] ? kasan_quarantine_put+0xdd/0x220 [ 1218.912303][T20583] ? blkdev_common_ioctl+0xff7/0x2550 [ 1218.912320][T20583] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1218.912345][T20583] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 1218.912363][T20583] ? do_vfs_ioctl+0xbe8/0x1430 [ 1218.912423][T20583] ? __pfx_lo_ioctl+0x10/0x10 [ 1218.912446][T20583] blkdev_ioctl+0x5a8/0x6d0 [ 1218.912465][T20583] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1218.912479][T20583] ? __fget_files+0x2a/0x420 [ 1218.912505][T20583] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1218.912525][T20583] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1218.912542][T20583] __se_sys_ioctl+0xf9/0x170 [ 1218.912563][T20583] do_syscall_64+0xfa/0x3b0 [ 1218.912580][T20583] ? lockdep_hardirqs_on+0x9c/0x150 [ 1218.912596][T20583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1218.912613][T20583] ? clear_bhb_loop+0x60/0xb0 [ 1218.912632][T20583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1218.912647][T20583] RIP: 0033:0x7f17d9f8eec9 [ 1218.912662][T20583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1218.912677][T20583] RSP: 002b:00007f17dae43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1218.912694][T20583] RAX: ffffffffffffffda RBX: 00007f17da1e5fa0 RCX: 00007f17d9f8eec9 [ 1218.912707][T20583] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 1218.912719][T20583] RBP: 00007f17dae43090 R08: 0000000000000000 R09: 0000000000000000 [ 1218.912728][T20583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1218.912738][T20583] R13: 00007f17da1e6038 R14: 00007f17da1e5fa0 R15: 00007f17da30fa28 [ 1218.912766][T20583] [ 1218.916278][T20583] loop5: detected capacity change from 0 to 7 [ 1219.421630][ T56] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1219.462217][T20583] Dev loop5: unable to read RDB block 7 [ 1219.491810][T20583] loop5: unable to read partition table [ 1219.506597][T20583] loop5: partition table beyond EOD, truncated [ 1219.513643][ T6004] usb 4-1: Using ep0 maxpacket: 16 [ 1219.530469][ T6004] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1219.545521][T20583] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1219.578986][ T6004] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1219.612543][ T56] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1219.636783][ T6004] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1219.670798][ T6004] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.683316][ T56] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1219.709131][ T6004] usb 4-1: Product: syz [ 1219.724241][ T56] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1219.742601][ T6004] usb 4-1: Manufacturer: syz [ 1219.756470][ T6004] usb 4-1: SerialNumber: syz [ 1219.767464][ T56] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1219.808440][ T56] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.832065][ T56] usb 3-1: config 0 descriptor?? [ 1220.035324][ T6004] usb 4-1: 0:2 : does not exist [ 1220.133925][ T56] usbhid 3-1:0.0: can't add hid device: -71 [ 1220.255771][ T56] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1220.274014][ T6004] usb 4-1: USB disconnect, device number 37 [ 1220.301909][ T56] usb 3-1: USB disconnect, device number 2 [ 1220.366395][ T5936] udevd[5936]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1220.396073][ T43] usb 2-1: USB disconnect, device number 38 [ 1220.645898][T20596] netlink: 'syz.4.3624': attribute type 10 has an invalid length. [ 1220.798778][T20600] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1220.805753][T20598] ipvlan2: entered promiscuous mode [ 1220.830293][T20598] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1221.012300][T20603] ipvlan2: entered promiscuous mode [ 1221.320703][ T6004] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1221.486056][ T6004] usb 2-1: Using ep0 maxpacket: 32 [ 1221.517408][ T6004] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 1221.530095][ T6004] usb 2-1: config 0 has no interface number 0 [ 1221.536864][ T6004] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1221.548472][ T6004] usb 2-1: config 0 interface 85 has no altsetting 0 [ 1221.559215][ T6004] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1221.568958][ T6004] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.578821][ T6004] usb 2-1: Product: syz [ 1221.583505][ T6004] usb 2-1: Manufacturer: syz [ 1221.588216][ T6004] usb 2-1: SerialNumber: syz [ 1221.608588][ T6004] usb 2-1: config 0 descriptor?? [ 1221.731053][ T43] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1221.920510][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1221.947871][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1221.964694][ T43] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 1221.987629][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.066742][ T43] usb 5-1: Product: syz [ 1222.094091][ T43] usb 5-1: Manufacturer: syz [ 1222.103180][ T43] usb 5-1: SerialNumber: syz [ 1222.151933][ T43] usb 5-1: config 0 descriptor?? [ 1222.168011][ T43] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1222.197095][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1222.247810][ T6004] appletouch 2-1:0.85: Geyser mode initialized. [ 1222.261760][ T43] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1222.266715][ T6004] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input87 [ 1222.282147][ T43] usb 5-1: media controller created [ 1222.366128][T20613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1222.377934][T20613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1222.422618][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1222.431466][T20613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1222.452684][T20608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3628'. [ 1222.463633][T20613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1222.489427][T20608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3628'. [ 1222.559491][T20608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3628'. [ 1222.760435][T20608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3628'. [ 1222.775578][T20608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3628'. [ 1222.786309][T20608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3628'. [ 1222.799297][T20608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3628'. [ 1222.838225][T20608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3628'. [ 1222.869778][T20608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3628'. [ 1222.881685][ T43] DVB: Unable to find symbol tda10046_attach() [ 1222.901212][ T43] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1222.921296][T20608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3628'. [ 1222.930478][ T43] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1223.029991][ T24] usb 2-1: USB disconnect, device number 39 [ 1223.073074][ T24] appletouch 2-1:0.85: input: appletouch disconnected [ 1223.361795][ T43] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1223.401295][ T43] usb 5-1: USB disconnect, device number 19 [ 1223.930718][ T56] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1224.078769][ T6004] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1224.152617][T20639] ipvlan0: entered promiscuous mode [ 1224.161355][T20639] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 1224.173689][ T56] usb 4-1: too many endpoints for config 0 interface 0 altsetting 56: 146, using maximum allowed: 30 [ 1224.185452][ T56] usb 4-1: config 0 interface 0 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 146 [ 1224.206162][ T56] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1224.223813][ T56] usb 4-1: New USB device found, idVendor=0570, idProduct=cb01, bcdDevice=26.65 [ 1224.233092][ T56] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.242295][ T56] usb 4-1: Product: syz [ 1224.246549][ T56] usb 4-1: Manufacturer: syz [ 1224.251349][ T56] usb 4-1: SerialNumber: syz [ 1224.330664][ T6004] usb 3-1: Using ep0 maxpacket: 32 [ 1224.342854][ T6004] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1224.352091][ T6004] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.370457][ T6004] usb 3-1: Product: syz [ 1224.379347][ T56] usb 4-1: config 0 descriptor?? [ 1224.384512][ T6004] usb 3-1: Manufacturer: syz [ 1224.390835][ T6004] usb 3-1: SerialNumber: syz [ 1224.411548][ T6004] usb 3-1: config 0 descriptor?? [ 1224.935543][T20643] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 1224.946238][ T6004] airspy 3-1:0.0: Board ID: 00 [ 1224.955744][ T6004] airspy 3-1:0.0: Firmware version: [ 1225.118276][ T43] usb 4-1: USB disconnect, device number 38 [ 1225.164870][ T6004] airspy 3-1:0.0: usb_control_msg() failed -32 request 11 [ 1225.177396][ T6004] airspy 3-1:0.0: Registered as swradio24 [ 1225.199904][ T6004] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1225.600402][ T24] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1225.871868][ T24] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1225.885572][ T24] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1225.906227][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1225.926738][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1225.972329][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1226.012772][ T24] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1226.022136][ T24] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1226.030133][ T24] usb 2-1: Product: syz [ 1226.059056][ T24] usb 2-1: Manufacturer: syz [ 1226.107952][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 1226.113538][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 1226.132686][ T24] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1226.147185][ T24] cdc_wdm 2-1:1.0: Unknown control protocol [ 1226.600689][T20230] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 1226.677139][ T24] usb 3-1: USB disconnect, device number 3 [ 1226.749780][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -EPIPE [ 1226.783730][T20230] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1226.820673][T20230] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1226.844105][T20230] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1226.871118][T20230] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1226.915879][T20230] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1226.953646][ T24] usb 2-1: USB disconnect, device number 40 [ 1226.955110][T20230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1226.969790][T20230] usb 4-1: SerialNumber: syz [ 1227.080410][T20674] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1227.550731][T20230] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1227.710815][T20230] usb 1-1: Using ep0 maxpacket: 32 [ 1227.729840][T20230] usb 1-1: config 0 has an invalid interface number: 151 but max is 0 [ 1227.748344][T20230] usb 1-1: config 0 has no interface number 0 [ 1227.762149][T20230] usb 1-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1227.790773][ T56] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 1227.828061][T20230] usb 1-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1227.842629][T20230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.857503][T20230] usb 1-1: Product: syz [ 1227.864163][T20230] usb 1-1: Manufacturer: syz [ 1227.868861][T20230] usb 1-1: SerialNumber: syz [ 1227.882905][T20230] usb 1-1: config 0 descriptor?? [ 1227.898631][T20680] ipvlan2: entered promiscuous mode [ 1227.907197][T20680] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1227.992430][ T56] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1228.011608][ T56] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1228.033755][ T56] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1228.053226][ T56] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.082713][ T56] usb 3-1: config 0 descriptor?? [ 1228.160271][T20230] usb 1-1: USB disconnect, device number 56 [ 1228.194866][ T5936] udevd[5936]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1228.373318][T20684] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1228.930693][ T24] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1229.100830][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 1229.108450][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1229.134996][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1229.188472][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 1229.250376][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 1229.279154][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1229.298059][ T24] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1229.313926][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.329743][ T24] usb 1-1: Product: syz [ 1229.342736][ T24] usb 1-1: Manufacturer: syz [ 1229.352468][ T24] usb 1-1: SerialNumber: syz [ 1229.370828][ T24] usb 1-1: config 0 descriptor?? [ 1229.434048][ T56] usb 4-1: USB disconnect, device number 39 [ 1229.670862][ T43] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1229.910891][ T6004] usb 3-1: USB disconnect, device number 4 [ 1229.927760][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1229.954763][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1229.955812][T20230] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1229.981203][ T56] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1229.999070][ T43] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1230.054401][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.087213][ T43] usb 2-1: config 0 descriptor?? [ 1230.191001][ T56] usb 4-1: Using ep0 maxpacket: 8 [ 1230.198376][ T56] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1230.210907][T20230] usb 5-1: Using ep0 maxpacket: 32 [ 1230.220554][ T56] usb 4-1: config 8 has an invalid interface number: 137 but max is 0 [ 1230.229608][T20230] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 1230.239293][ T56] usb 4-1: config 8 has no interface number 0 [ 1230.255705][T20230] usb 5-1: config 0 has no interface number 0 [ 1230.265331][ T56] usb 4-1: config 8 interface 137 altsetting 5 bulk endpoint 0xF has invalid maxpacket 84 [ 1230.300650][T20230] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1230.320675][ T56] usb 4-1: config 8 interface 137 has no altsetting 0 [ 1230.327712][T20230] usb 5-1: config 0 interface 85 has no altsetting 0 [ 1230.342872][ T56] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=e5.0d [ 1230.352278][ T56] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.361169][T20230] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1230.373929][T20230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.387570][ T56] usb 4-1: Product: syz [ 1230.392102][ T56] usb 4-1: Manufacturer: syz [ 1230.399076][T20230] usb 5-1: Product: syz [ 1230.411554][ T56] usb 4-1: SerialNumber: syz [ 1230.420359][T20230] usb 5-1: Manufacturer: syz [ 1230.437354][T20230] usb 5-1: SerialNumber: syz [ 1230.442782][T20701] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1230.694749][T20230] usb 5-1: config 0 descriptor?? [ 1230.703375][ T43] kovaplus 0003:1E7D:2D50.0048: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0 [ 1230.776496][T20701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1230.789757][T20701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1230.808615][ T56] cyberjack 4-1:8.137: Reiner SCT Cyberjack USB card reader converter detected [ 1230.850177][ T43] kovaplus 0003:1E7D:2D50.0048: couldn't init struct kovaplus_device [ 1230.876287][ T43] kovaplus 0003:1E7D:2D50.0048: couldn't install mouse [ 1230.879310][ T56] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 1230.909451][ T43] kovaplus 0003:1E7D:2D50.0048: probe with driver kovaplus failed with error -71 [ 1230.924266][T20230] appletouch 5-1:0.85: Failed to read mode from device. [ 1230.937188][ T56] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1230.948247][ T43] usb 2-1: USB disconnect, device number 41 [ 1230.965973][T20230] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 1230.992766][T20717] fido_id[20717]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1231.085357][ T56] usb 4-1: USB disconnect, device number 40 [ 1231.172652][ T56] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1231.207895][ T56] cyberjack 4-1:8.137: device disconnected [ 1231.364584][T20230] usb 5-1: USB disconnect, device number 20 [ 1231.589944][T20724] bond0: entered promiscuous mode [ 1231.595991][T20724] bond_slave_0: entered promiscuous mode [ 1231.603474][T20724] bond_slave_1: entered promiscuous mode [ 1231.641059][T20724] team0: entered promiscuous mode [ 1231.646134][T20724] team_slave_0: entered promiscuous mode [ 1231.653329][T20724] team_slave_1: entered promiscuous mode [ 1231.662824][T20724] batadv_slave_0: entered promiscuous mode [ 1231.674104][T20725] lo: Caught tx_queue_len zero misconfig [ 1231.687628][T20724] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1231.710781][ T5978] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1231.886096][ T5978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1231.898690][ T5978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1231.915575][ T5978] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1231.933864][ T5978] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1231.943138][ T5978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.954784][ T5978] usb 2-1: config 0 descriptor?? [ 1231.981843][T20730] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1232.491978][ T5978] plantronics 0003:047F:FFFF.0049: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1232.586285][ T6004] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1232.750803][ T6004] usb 3-1: Using ep0 maxpacket: 32 [ 1232.766359][ T6004] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1232.784663][ T6004] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1232.874752][ T6004] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1232.910081][ T6004] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.175837][ T6004] usb 3-1: config 0 descriptor?? [ 1233.645442][T20735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1233.658522][T20735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1233.712421][ C1] plantronics 0003:047F:FFFF.0049: usb_submit_urb(ctrl) failed: -1 [ 1233.723882][ T5943] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 1233.776327][ T6004] usbhid 3-1:0.0: can't add hid device: -71 [ 1233.807256][ T6004] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1233.851040][ T5978] usb 2-1: reset high-speed USB device number 42 using dummy_hcd [ 1233.887990][ T6004] usb 3-1: USB disconnect, device number 5 [ 1233.905376][ T5943] usb 4-1: config 0 has an invalid interface number: 234 but max is 0 [ 1233.914303][ T5943] usb 4-1: config 0 has no interface number 0 [ 1233.924468][ T5943] usb 4-1: config 0 interface 234 has no altsetting 0 [ 1233.947351][ T5943] usb 4-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=b0.31 [ 1233.973529][ T5943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.002252][ T5978] usb 2-1: device descriptor read/64, error -32 [ 1234.008798][ T5943] usb 4-1: Product: syz [ 1234.013227][ T24] rc_core: IR keymap rc-imon-rsc not found [ 1234.026614][ T24] Registered IR keymap rc-empty [ 1234.034083][ T5943] usb 4-1: Manufacturer: syz [ 1234.047081][ T5943] usb 4-1: SerialNumber: syz [ 1234.052105][ T24] rc rc0: iMON Station as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1234.158489][ T24] input: iMON Station as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input89 [ 1234.181285][ T5943] usb 4-1: config 0 descriptor?? [ 1234.188206][T20763] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1234.229524][ T24] usb 1-1: USB disconnect, device number 57 [ 1234.951589][ T5978] usb 2-1: reset high-speed USB device number 42 using dummy_hcd [ 1235.034936][T20750] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1235.091944][ T5978] usb 2-1: device descriptor read/64, error -32 [ 1235.148083][ T5943] pegasus 4-1:0.234: probe with driver pegasus failed with error -71 [ 1235.192231][ T5943] usb 4-1: USB disconnect, device number 41 [ 1235.370720][ T5978] usb 2-1: reset high-speed USB device number 42 using dummy_hcd [ 1235.401192][ T5978] usb 2-1: device descriptor read/8, error -32 [ 1235.470715][ T6004] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 1235.610688][ T56] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1235.622594][ T6004] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1235.632819][ T6004] usb 3-1: config 0 has no interfaces? [ 1235.638493][ T6004] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1235.647700][ T6004] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.663012][ T6004] usb 3-1: config 0 descriptor?? [ 1235.758010][T20777] bond0: Device is already in use. [ 1235.764744][ T56] usb 5-1: Using ep0 maxpacket: 8 [ 1235.797570][ T56] usb 5-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 1235.819876][ T56] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1235.839724][ T56] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1235.867763][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.892583][ T5978] usb 2-1: reset high-speed USB device number 42 using dummy_hcd [ 1235.898800][T20770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1235.917366][T20770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1235.925906][ T5978] usb 2-1: device reset changed ep0 maxpacket size! [ 1235.937347][ T43] usb 2-1: USB disconnect, device number 42 [ 1236.035200][T20230] usb 3-1: USB disconnect, device number 6 [ 1236.370704][ T43] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1236.520702][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 1236.642513][ T6004] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1236.694161][ T43] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1236.703480][ T43] usb 2-1: config 8 has an invalid interface number: 137 but max is 0 [ 1236.711941][ T43] usb 2-1: config 8 has no interface number 0 [ 1236.756329][ T43] usb 2-1: config 8 interface 137 altsetting 5 bulk endpoint 0xF has invalid maxpacket 84 [ 1236.875836][ T6004] usb 4-1: config 6 has an invalid interface number: 108 but max is 0 [ 1236.896816][ T6004] usb 4-1: config 6 has no interface number 0 [ 1237.077279][ T43] usb 2-1: config 8 interface 137 has no altsetting 0 [ 1237.090259][ T43] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=e5.0d [ 1237.100546][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.111731][ T43] usb 2-1: Product: syz [ 1237.119555][ T6004] usb 4-1: config 6 interface 108 has no altsetting 0 [ 1237.121865][ T43] usb 2-1: Manufacturer: syz [ 1237.158500][ T43] usb 2-1: SerialNumber: syz [ 1237.398628][T20775] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1237.661307][ T6004] usb 4-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=d2.1d [ 1237.718321][T20775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1237.738232][T20775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1237.764624][ T43] cyberjack 2-1:8.137: Reiner SCT Cyberjack USB card reader converter detected [ 1237.781609][ T43] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 1237.814333][ T6004] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.817738][ T43] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1237.848789][ T6004] usb 4-1: Product: syz [ 1237.867928][ T6004] usb 4-1: Manufacturer: syz [ 1237.880044][ T6004] usb 4-1: SerialNumber: syz [ 1237.998138][ T43] usb 2-1: USB disconnect, device number 43 [ 1238.094879][ T43] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1238.124853][ T43] cyberjack 2-1:8.137: device disconnected [ 1238.217285][T20805] FAULT_INJECTION: forcing a failure. [ 1238.217285][T20805] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1238.259221][T20805] CPU: 1 UID: 0 PID: 20805 Comm: syz.2.3681 Not tainted syzkaller #0 PREEMPT(full) [ 1238.259247][T20805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1238.259259][T20805] Call Trace: [ 1238.259266][T20805] [ 1238.259275][T20805] dump_stack_lvl+0x189/0x250 [ 1238.259303][T20805] ? __pfx____ratelimit+0x10/0x10 [ 1238.259321][T20805] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1238.259343][T20805] ? __pfx__printk+0x10/0x10 [ 1238.259359][T20805] ? __might_fault+0xb0/0x130 [ 1238.259393][T20805] should_fail_ex+0x414/0x560 [ 1238.259421][T20805] _copy_to_iter+0x589/0x1790 [ 1238.259455][T20805] ? __pfx__copy_to_iter+0x10/0x10 [ 1238.259471][T20805] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 1238.259500][T20805] ? __skb_try_recv_datagram+0x3d5/0x4d0 [ 1238.259529][T20805] __skb_datagram_iter+0xf8/0x990 [ 1238.259552][T20805] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1238.259584][T20805] skb_copy_datagram_iter+0xc5/0x230 [ 1238.259608][T20805] netlink_recvmsg+0x2ab/0xa30 [ 1238.259635][T20805] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1238.259658][T20805] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1238.259680][T20805] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1238.259697][T20805] ? security_socket_recvmsg+0x7e/0x2e0 [ 1238.259714][T20805] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1238.259732][T20805] sock_recvmsg+0x229/0x270 [ 1238.259759][T20805] ____sys_recvmsg+0x1c9/0x460 [ 1238.259789][T20805] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1238.259830][T20805] ? import_iovec+0x74/0xa0 [ 1238.259849][T20805] ___sys_recvmsg+0x1b5/0x510 [ 1238.259873][T20805] ? __pfx____sys_recvmsg+0x10/0x10 [ 1238.259917][T20805] ? __fget_files+0x3a0/0x420 [ 1238.259950][T20805] do_recvmmsg+0x307/0x770 [ 1238.259980][T20805] ? __pfx_do_recvmmsg+0x10/0x10 [ 1238.260015][T20805] ? _copy_from_user+0x94/0xb0 [ 1238.260049][T20805] __x64_sys_recvmmsg+0x1af/0x240 [ 1238.260073][T20805] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1238.260091][T20805] ? rcu_is_watching+0x15/0xb0 [ 1238.260114][T20805] ? do_syscall_64+0xbe/0x3b0 [ 1238.260136][T20805] do_syscall_64+0xfa/0x3b0 [ 1238.260152][T20805] ? lockdep_hardirqs_on+0x9c/0x150 [ 1238.260168][T20805] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1238.260185][T20805] ? clear_bhb_loop+0x60/0xb0 [ 1238.260205][T20805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1238.260222][T20805] RIP: 0033:0x7f0bced8eec9 [ 1238.260238][T20805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1238.260254][T20805] RSP: 002b:00007f0bcfb7a038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1238.260272][T20805] RAX: ffffffffffffffda RBX: 00007f0bcefe5fa0 RCX: 00007f0bced8eec9 [ 1238.260285][T20805] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 1238.260297][T20805] RBP: 00007f0bcfb7a090 R08: 0000200000003700 R09: 0000000000000000 [ 1238.260309][T20805] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 1238.260320][T20805] R13: 00007f0bcefe6038 R14: 00007f0bcefe5fa0 R15: 00007f0bcf10fa28 [ 1238.260347][T20805] [ 1238.260740][T20230] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1238.686183][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1238.686200][ T30] audit: type=1326 audit(1759306396.676:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20806 comm="syz.1.3682" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf8198eec9 code=0x0 [ 1238.755574][T20809] __nla_validate_parse: 67 callbacks suppressed [ 1238.755591][T20809] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3683'. [ 1238.774617][T20809] openvswitch: netlink: Flow actions attr not present in new flow. [ 1238.877905][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.885888][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.141070][T20230] usb 1-1: Using ep0 maxpacket: 32 [ 1239.153440][T20230] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1239.207234][T20230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.216307][T20230] usb 1-1: Product: syz [ 1239.223219][T20230] usb 1-1: Manufacturer: syz [ 1239.224707][T20814] sctp: [Deprecated]: syz.2.3684 (pid 20814) Use of int in max_burst socket option deprecated. [ 1239.224707][T20814] Use struct sctp_assoc_value instead [ 1239.231244][T20230] usb 1-1: SerialNumber: syz [ 1239.252500][T20230] usb 1-1: config 0 descriptor?? [ 1239.576290][ T6004] mos7840 4-1:6.108: missing endpoints [ 1239.637009][ T6004] usb 4-1: USB disconnect, device number 42 [ 1239.702615][T20230] airspy 1-1:0.0: Board ID: 00 [ 1239.709174][T20820] openvswitch: netlink: Flow actions attr not present in new flow. [ 1239.719722][T20230] airspy 1-1:0.0: Firmware version: [ 1240.009868][T20824] ipvlan2: entered promiscuous mode [ 1240.036136][T20824] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1240.155600][ T56] usb 5-1: string descriptor 0 read error: -71 [ 1240.176339][ T56] hub 5-1:32.0: bad descriptor, ignoring hub [ 1240.196067][ T56] hub 5-1:32.0: probe with driver hub failed with error -5 [ 1240.335649][T20230] airspy 1-1:0.0: usb_control_msg() failed -71 request 12 [ 1240.348166][T20230] airspy 1-1:0.0: Registered as swradio24 [ 1240.375004][T20230] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1240.404841][T20833] ipvlan2: entered promiscuous mode [ 1240.431683][T20230] usb 1-1: USB disconnect, device number 58 [ 1240.436126][T20833] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1240.555784][ T56] usb 5-1: reset high-speed USB device number 21 using dummy_hcd [ 1240.747747][ T56] usb 5-1: device descriptor read/64, error -71 [ 1241.090860][ T56] usb 5-1: reset high-speed USB device number 21 using dummy_hcd [ 1241.120732][ T5943] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1241.170831][ T43] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1241.231269][ T56] usb 5-1: device descriptor read/64, error -71 [ 1241.271857][ T5943] usb 2-1: Using ep0 maxpacket: 8 [ 1241.283205][ T5943] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1241.298047][ T5943] usb 2-1: config 8 has an invalid interface number: 137 but max is 0 [ 1241.310317][ T5943] usb 2-1: config 8 has no interface number 0 [ 1241.322700][ T5943] usb 2-1: config 8 interface 137 altsetting 5 bulk endpoint 0xF has invalid maxpacket 84 [ 1241.335789][ T5943] usb 2-1: config 8 interface 137 has no altsetting 0 [ 1241.347173][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1241.362828][ T43] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1241.373216][ T5943] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=e5.0d [ 1241.388366][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.396712][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.414313][ T5943] usb 2-1: Product: syz [ 1241.423672][ T5943] usb 2-1: Manufacturer: syz [ 1241.424416][ T43] usb 3-1: config 0 descriptor?? [ 1241.441595][ T5943] usb 2-1: SerialNumber: syz [ 1241.454541][T20843] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1241.468130][ T43] pwc: Askey VC010 type 2 USB webcam detected. [ 1241.504469][ T56] usb 5-1: reset high-speed USB device number 21 using dummy_hcd [ 1241.552010][ T56] usb 5-1: device descriptor read/8, error -71 [ 1241.686874][ T43] pwc: recv_control_msg error -71 req 02 val 2b00 [ 1241.695085][ T43] pwc: recv_control_msg error -71 req 02 val 2700 [ 1241.756066][T20843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1241.777493][T20843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1241.794591][ T5943] cyberjack 2-1:8.137: Reiner SCT Cyberjack USB card reader converter detected [ 1241.810717][ T56] usb 5-1: reset high-speed USB device number 21 using dummy_hcd [ 1241.824193][ T5943] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 1241.835811][ T43] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1241.864121][ T5943] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1241.881322][ T56] usb 5-1: device descriptor read/8, error -71 [ 1241.891435][ T43] pwc: recv_control_msg error -71 req 04 val 1000 [ 1241.907901][ T43] pwc: recv_control_msg error -71 req 04 val 1300 [ 1241.928296][ T5943] usb 2-1: USB disconnect, device number 44 [ 1241.934809][ T43] pwc: recv_control_msg error -71 req 04 val 1400 [ 1241.954931][ T43] pwc: recv_control_msg error -71 req 02 val 2000 [ 1241.964081][ T5943] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1241.977221][ T43] pwc: recv_control_msg error -71 req 02 val 2100 [ 1241.987294][ T43] pwc: recv_control_msg error -71 req 04 val 1500 [ 1241.995768][ T5943] cyberjack 2-1:8.137: device disconnected [ 1242.012605][ T43] pwc: recv_control_msg error -71 req 02 val 2500 [ 1242.021446][ T43] pwc: recv_control_msg error -71 req 02 val 2400 [ 1242.025220][ T56] usb 5-1: USB disconnect, device number 21 [ 1242.034253][ T43] pwc: recv_control_msg error -71 req 02 val 2600 [ 1242.052137][ T43] pwc: recv_control_msg error -71 req 02 val 2900 [ 1242.066972][ T43] pwc: recv_control_msg error -71 req 02 val 2800 [ 1242.088321][ T43] pwc: recv_control_msg error -71 req 04 val 1100 [ 1242.097941][ T43] pwc: recv_control_msg error -71 req 04 val 1200 [ 1242.113585][ T43] pwc: Registered as video103. [ 1242.133415][ T43] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input90 [ 1242.175007][ T43] usb 3-1: USB disconnect, device number 8 [ 1242.411263][ T56] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1242.575253][ T56] usb 5-1: device descriptor read/64, error -71 [ 1242.640739][ T6006] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 1242.820725][ T56] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1242.842705][ T6006] usb 4-1: config 0 has an invalid interface number: 234 but max is 0 [ 1242.851262][ T6006] usb 4-1: config 0 has no interface number 0 [ 1242.857379][ T6006] usb 4-1: config 0 interface 234 has no altsetting 0 [ 1242.868747][ T6006] usb 4-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=b0.31 [ 1242.883545][ T6006] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.896390][ T6006] usb 4-1: Product: syz [ 1242.903913][ T6006] usb 4-1: Manufacturer: syz [ 1242.914530][ T6006] usb 4-1: SerialNumber: syz [ 1242.939053][ T6006] usb 4-1: config 0 descriptor?? [ 1242.952976][ T56] usb 5-1: device descriptor read/64, error -71 [ 1243.061525][ T56] usb usb5-port1: attempt power cycle [ 1243.496352][T20865] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1243.531199][ T56] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1243.661876][ T56] usb 5-1: device descriptor read/8, error -71 [ 1243.691854][ T6006] pegasus 4-1:0.234: probe with driver pegasus failed with error -71 [ 1243.729625][T20880] netlink: 'syz.1.3701': attribute type 10 has an invalid length. [ 1243.752466][ T6006] usb 4-1: USB disconnect, device number 43 [ 1243.857268][T20880] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1243.888475][T20880] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1244.421438][T20890] netlink: 'syz.3.3707': attribute type 9 has an invalid length. [ 1244.456695][T20890] netlink: 212260 bytes leftover after parsing attributes in process `syz.3.3707'. [ 1244.616026][ T6006] usb 1-1: new low-speed USB device number 59 using dummy_hcd [ 1244.639527][T20900] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3706'. [ 1244.864063][ T6006] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1245.002490][ T6006] usb 1-1: config 7 has an invalid interface number: 67 but max is 0 [ 1245.013639][ T6006] usb 1-1: config 7 has no interface number 0 [ 1245.574356][ T6006] usb 1-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 1245.585992][ T6006] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.678237][ T6006] usb 1-1: Product: 㯑 [ 1245.936075][T20888] openvswitch: netlink: Flow actions attr not present in new flow. [ 1246.099403][ T6006] usb 1-1: USB disconnect, device number 59 [ 1247.200839][ T6006] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1247.454061][ T6006] usb 5-1: Using ep0 maxpacket: 32 [ 1247.649492][ T6006] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1247.677862][ T6006] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.707770][ T6006] usb 5-1: Product: syz [ 1248.050423][ T6006] usb 5-1: Manufacturer: syz [ 1248.070767][T20230] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 1248.078779][ T6006] usb 5-1: SerialNumber: syz [ 1248.090149][ T6006] usb 5-1: config 0 descriptor?? [ 1248.245380][T20230] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1248.265658][T20230] usb 2-1: config 0 has no interfaces? [ 1248.271651][T20230] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1248.329317][T20230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.344678][T20230] usb 2-1: config 0 descriptor?? [ 1248.605653][ T6006] airspy 5-1:0.0: Board ID: 00 [ 1248.618760][T20929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1248.631122][ T6006] airspy 5-1:0.0: Firmware version: [ 1248.644692][T20929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1249.008787][ T43] usb 2-1: USB disconnect, device number 45 [ 1249.114539][ T6006] airspy 5-1:0.0: usb_control_msg() failed -32 request 11 [ 1249.197089][ T6006] airspy 5-1:0.0: Registered as swradio24 [ 1249.224907][ T6006] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1250.406823][ T43] usb 5-1: USB disconnect, device number 26 [ 1250.499134][T20952] openvswitch: netlink: Flow actions attr not present in new flow. [ 1250.880688][ T56] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1251.106028][ T56] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1251.474413][ T56] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1251.495079][T20965] openvswitch: netlink: Flow actions attr not present in new flow. [ 1251.508869][ T56] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.539961][ T56] usb 1-1: config 0 descriptor?? [ 1251.765880][ T56] usbhid 1-1:0.0: can't add hid device: -71 [ 1251.787206][ T56] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1251.991196][ T56] usb 1-1: USB disconnect, device number 60 [ 1252.006360][T20974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1252.021091][ T6006] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 1252.040358][T20974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1252.224778][ T6006] usb 3-1: config 0 has an invalid interface number: 234 but max is 0 [ 1252.231097][ T43] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1252.236542][ T6006] usb 3-1: config 0 has no interface number 0 [ 1252.252588][ T6006] usb 3-1: config 0 interface 234 has no altsetting 0 [ 1252.272623][ T6006] usb 3-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=b0.31 [ 1252.281939][ T6006] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.290023][ T6006] usb 3-1: Product: syz [ 1252.300607][ T6006] usb 3-1: Manufacturer: syz [ 1252.309850][ T6006] usb 3-1: SerialNumber: syz [ 1252.314745][ T56] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1252.337253][ T6006] usb 3-1: config 0 descriptor?? [ 1252.475294][ T56] usb 1-1: Using ep0 maxpacket: 32 [ 1252.493367][ T56] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1252.512118][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 1252.538752][ T43] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1252.548012][ T56] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1252.557736][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.592628][ T43] usb 2-1: Product: syz [ 1252.599864][ T43] usb 2-1: Manufacturer: syz [ 1252.610040][ T43] usb 2-1: SerialNumber: syz [ 1252.620329][T20967] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1252.649723][ T56] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.681611][ T6006] pegasus 3-1:0.234: probe with driver pegasus failed with error -71 [ 1252.694135][ T56] usb 1-1: config 0 descriptor?? [ 1252.708514][ T6006] usb 3-1: USB disconnect, device number 9 [ 1252.727652][ T56] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1252.778438][ T56] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1252.850161][ T43] usblp 2-1:1.0: usblp1: USB Unidirectional printer dev 46 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1252.919273][ T43] usb 2-1: USB disconnect, device number 46 [ 1252.963457][ T43] usblp1: removed [ 1253.470878][ T6006] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1253.620866][ T6006] usb 3-1: Using ep0 maxpacket: 32 [ 1253.635265][ T6006] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1253.645426][ T6006] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.655988][ T6006] usb 3-1: Product: syz [ 1253.660283][ T6006] usb 3-1: Manufacturer: syz [ 1253.666338][ T6006] usb 3-1: SerialNumber: syz [ 1253.679930][ T6006] usb 3-1: config 0 descriptor?? [ 1254.092270][ T6006] airspy 3-1:0.0: Board ID: 00 [ 1254.097224][ T6006] airspy 3-1:0.0: Firmware version: [ 1254.190640][ T56] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1254.345895][ T56] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1254.369917][ T56] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1254.391264][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1254.411053][ T43] usb 1-1: USB disconnect, device number 61 [ 1254.419373][ T56] usb 5-1: config 0 descriptor?? [ 1254.421685][ T43] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 1254.469610][ T56] pwc: Askey VC010 type 2 USB webcam detected. [ 1254.495218][ T6006] airspy 3-1:0.0: usb_control_msg() failed -32 request 0e [ 1254.523119][ T6006] airspy 3-1:0.0: Registered as swradio24 [ 1254.529149][ T6006] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1254.543640][ T6006] usb 3-1: USB disconnect, device number 10 [ 1254.890760][ T56] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1254.902441][ T56] pwc: recv_control_msg error -32 req 02 val 2700 [ 1254.910277][ T56] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1254.921890][ T56] pwc: recv_control_msg error -32 req 04 val 1000 [ 1254.947345][ T56] pwc: recv_control_msg error -32 req 04 val 1300 [ 1254.962303][ T56] pwc: recv_control_msg error -32 req 04 val 1400 [ 1255.005038][ T56] pwc: recv_control_msg error -32 req 02 val 2000 [ 1255.025647][ T56] pwc: recv_control_msg error -32 req 02 val 2100 [ 1255.049404][ T56] pwc: recv_control_msg error -32 req 04 val 1500 [ 1255.093189][ T56] pwc: recv_control_msg error -32 req 02 val 2500 [ 1255.105618][ T56] pwc: recv_control_msg error -32 req 02 val 2400 [ 1255.129635][ T56] pwc: recv_control_msg error -32 req 02 val 2600 [ 1255.180698][ T56] pwc: recv_control_msg error -71 req 02 val 2900 [ 1255.197606][ T56] pwc: recv_control_msg error -71 req 02 val 2800 [ 1255.350374][ T56] pwc: recv_control_msg error -71 req 04 val 1100 [ 1255.359348][ T56] pwc: recv_control_msg error -71 req 04 val 1200 [ 1255.397193][ T56] pwc: Registered as video103. [ 1255.516249][ T56] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input91 [ 1255.553728][ T56] usb 5-1: USB disconnect, device number 27 [ 1256.190789][ T56] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 1256.370795][ T5950] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1256.420491][ T56] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1256.520819][ T56] usb 5-1: not running at top speed; connect to a high speed hub [ 1256.576712][ T56] usb 5-1: config 2 has an invalid interface number: 212 but max is 0 [ 1256.591654][ T56] usb 5-1: config 2 has no interface number 0 [ 1256.604250][ T56] usb 5-1: config 2 interface 212 has no altsetting 0 [ 1256.618893][ T56] usb 5-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 1256.669677][ T5950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1256.683211][ T56] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.717165][ T5950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1256.748941][ T56] usb 5-1: Product: 뾧욭㦙⪙㜰卬瞊텥褄ꦹ㋌煿捜焝ⶲ훠辆䮔횏⇰▹寃넙ꫴⶒ톒蓌騽뿀䂸ﮒ猛題fﶫൾ꜕湮洢鴫쀱[ࢧ掉繢據傐䘲䌱摿斻䅝卝绎玮囥闞腎쎠箷㭜燏膢摈ꬎ轕䍻띡㹜烹즊溔ៈ䊿孓鑥ᑕ줾䯯炤륷篩ᐙ覟䬣虜佦ñ，騛뗆毧㟇㻡扷㣻ꢹॐ茉唗❅笧꺩ᲁ䡟蟂檁⩕Ử [ 1256.866746][ T5950] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1256.887126][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1256.929866][ T5950] usb 4-1: config 0 descriptor?? [ 1256.951048][ T56] usb 5-1: Manufacturer: 㛖♝峡葖ᕣ⠜囶ⴳ侶잲᭮됱黳喰宿閿Ნ샤艁씐鲡㠷 [ 1256.951142][ T5943] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1256.965336][ T56] usb 5-1: SerialNumber: Д [ 1257.172442][ T5943] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1257.187947][ T5943] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1257.211477][ T5943] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1257.222379][ T5943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.243550][ T5943] usb 2-1: config 0 descriptor?? [ 1257.282408][ T56] usb 5-1: USB disconnect, device number 28 [ 1257.370077][ T5950] cp2112 0003:10C4:EA90.004A: unknown main item tag 0x0 [ 1257.384312][ T5950] cp2112 0003:10C4:EA90.004A: unknown main item tag 0x0 [ 1257.394796][ T5950] cp2112 0003:10C4:EA90.004A: unknown main item tag 0x0 [ 1257.405303][ T5950] cp2112 0003:10C4:EA90.004A: unknown main item tag 0x0 [ 1257.420979][ T5950] cp2112 0003:10C4:EA90.004A: unknown main item tag 0x0 [ 1257.434172][ T5950] cp2112 0003:10C4:EA90.004A: unknown main item tag 0x0 [ 1257.444898][ T5950] cp2112 0003:10C4:EA90.004A: unknown main item tag 0x0 [ 1257.459885][ T5950] cp2112 0003:10C4:EA90.004A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 1257.567249][ T5950] cp2112 0003:10C4:EA90.004A: error requesting version [ 1257.582129][ T5950] cp2112 0003:10C4:EA90.004A: probe with driver cp2112 failed with error -71 [ 1257.622291][ T5950] usb 4-1: USB disconnect, device number 44 [ 1257.674843][ T5943] cp2112 0003:10C4:EA90.004B: unknown main item tag 0x0 [ 1257.756740][ T5943] cp2112 0003:10C4:EA90.004B: unknown main item tag 0x0 [ 1257.777876][T21036] fido_id[21036]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1257.792321][ T5943] cp2112 0003:10C4:EA90.004B: unknown main item tag 0x0 [ 1257.807135][ T5943] cp2112 0003:10C4:EA90.004B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 1257.914145][ T5943] cp2112 0003:10C4:EA90.004B: Part Number: 0x00 Device Version: 0x00 [ 1258.120995][ T5943] cp2112 0003:10C4:EA90.004B: error requesting SMBus config [ 1258.142592][ T5943] cp2112 0003:10C4:EA90.004B: probe with driver cp2112 failed with error -32 [ 1258.175857][ T5943] usb 2-1: USB disconnect, device number 47 [ 1258.211203][ T43] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1258.373700][T21046] netlink: 'syz.2.3747': attribute type 10 has an invalid length. [ 1258.407610][T21046] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1258.433104][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1258.445193][ T43] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1258.458617][ T43] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1258.468030][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.478522][ T43] usb 5-1: config 0 descriptor?? [ 1259.190339][ T43] kovaplus 0003:1E7D:2D50.004C: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0 [ 1259.957876][T21041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1259.966830][T21041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1260.188176][ T43] kovaplus 0003:1E7D:2D50.004C: couldn't init struct kovaplus_device [ 1260.205900][ T43] kovaplus 0003:1E7D:2D50.004C: couldn't install mouse [ 1260.293244][ T43] kovaplus 0003:1E7D:2D50.004C: probe with driver kovaplus failed with error -71 [ 1260.341099][ T43] usb 5-1: USB disconnect, device number 29 [ 1260.481060][ T5950] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1260.752975][ T5950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1260.778579][ T5950] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1260.820391][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1260.855499][ T5950] usb 4-1: config 0 descriptor?? [ 1261.160137][ T5950] usbhid 4-1:0.0: can't add hid device: -71 [ 1261.218806][ T5950] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1261.317951][ T5950] usb 4-1: USB disconnect, device number 45 [ 1261.730705][ T5950] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1261.950731][ T5950] usb 4-1: Using ep0 maxpacket: 32 [ 1262.010821][ T5950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1262.055583][ T5950] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1262.179570][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.285001][ T5950] usb 4-1: config 0 descriptor?? [ 1262.380691][ T24] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1262.423761][ T5950] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1262.443809][ T5950] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1263.190706][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 1263.501052][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1263.523958][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1263.681867][ T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1263.693103][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.701545][ T24] usb 1-1: Product: syz [ 1263.705723][ T24] usb 1-1: Manufacturer: syz [ 1263.710294][ T24] usb 1-1: SerialNumber: syz [ 1264.012043][ T5950] usb 4-1: USB disconnect, device number 46 [ 1264.064538][ T24] usb 1-1: 0:2 : does not exist [ 1264.103751][T21114] @: renamed from vlan0 (while UP) [ 1264.124153][ T5950] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1264.200935][ T24] usb 1-1: USB disconnect, device number 62 [ 1264.209762][ T30] audit: type=1326 audit(1759306422.196:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21113 comm="syz.1.3767" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf8198eec9 code=0x0 [ 1264.418103][T21123] FAULT_INJECTION: forcing a failure. [ 1264.418103][T21123] name failslab, interval 1, probability 0, space 0, times 0 [ 1264.430971][T21123] CPU: 1 UID: 0 PID: 21123 Comm: syz.2.3771 Not tainted syzkaller #0 PREEMPT(full) [ 1264.430985][T21123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1264.430992][T21123] Call Trace: [ 1264.430996][T21123] [ 1264.431001][T21123] dump_stack_lvl+0x189/0x250 [ 1264.431019][T21123] ? __pfx____ratelimit+0x10/0x10 [ 1264.431030][T21123] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1264.431042][T21123] ? __pfx__printk+0x10/0x10 [ 1264.431054][T21123] ? __pfx___might_resched+0x10/0x10 [ 1264.431068][T21123] should_fail_ex+0x414/0x560 [ 1264.431085][T21123] should_failslab+0xa8/0x100 [ 1264.431100][T21123] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1264.431113][T21123] ? __alloc_skb+0x112/0x2d0 [ 1264.431122][T21123] ? __pfx__copy_from_iter+0x10/0x10 [ 1264.431134][T21123] __alloc_skb+0x112/0x2d0 [ 1264.431146][T21123] tcp_stream_alloc_skb+0x3d/0x340 [ 1264.431162][T21123] tcp_sendmsg_locked+0xf38/0x5620 [ 1264.431204][T21123] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 1264.431216][T21123] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1264.431230][T21123] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1264.431247][T21123] tcp_sendmsg+0x2f/0x50 [ 1264.431260][T21123] __sock_sendmsg+0x19c/0x270 [ 1264.431276][T21123] __sys_sendto+0x3bd/0x520 [ 1264.431288][T21123] ? __pfx___sys_sendto+0x10/0x10 [ 1264.431297][T21123] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1264.431314][T21123] ? __fget_files+0x3a0/0x420 [ 1264.431333][T21123] ? ksys_write+0x22a/0x250 [ 1264.431346][T21123] ? __pfx_ksys_write+0x10/0x10 [ 1264.431360][T21123] __x64_sys_sendto+0xde/0x100 [ 1264.431372][T21123] do_syscall_64+0xfa/0x3b0 [ 1264.431382][T21123] ? lockdep_hardirqs_on+0x9c/0x150 [ 1264.431391][T21123] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1264.431401][T21123] ? clear_bhb_loop+0x60/0xb0 [ 1264.431412][T21123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1264.431422][T21123] RIP: 0033:0x7f0bced8eec9 [ 1264.431431][T21123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1264.431441][T21123] RSP: 002b:00007f0bcfb7a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1264.431453][T21123] RAX: ffffffffffffffda RBX: 00007f0bcefe5fa0 RCX: 00007f0bced8eec9 [ 1264.431460][T21123] RDX: 0000000000000381 RSI: 00002000000004c0 RDI: 0000000000000004 [ 1264.431466][T21123] RBP: 00007f0bcfb7a090 R08: 0000000000000000 R09: 0000000000000000 [ 1264.431472][T21123] R10: 0000000000000805 R11: 0000000000000246 R12: 0000000000000001 [ 1264.431478][T21123] R13: 00007f0bcefe6038 R14: 00007f0bcefe5fa0 R15: 00007f0bcf10fa28 [ 1264.431494][T21123] [ 1264.780887][ T5950] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 1264.953636][ T5950] usb 4-1: config 2 has an invalid interface number: 174 but max is 0 [ 1264.966480][ T5950] usb 4-1: config 2 has no interface number 0 [ 1264.971750][ T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1264.978286][ T5950] usb 4-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 1264.997300][ T5950] usb 4-1: config 2 interface 174 altsetting 0 endpoint 0x8E has invalid maxpacket 1023, setting to 64 [ 1265.008765][ T5950] usb 4-1: config 2 interface 174 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1265.024787][ T5950] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 1265.037081][T21136] openvswitch: netlink: Flow actions attr not present in new flow. [ 1265.047409][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.080848][ T5950] usb 4-1: Product: syz [ 1265.085074][ T5950] usb 4-1: Manufacturer: syz [ 1265.089686][ T5950] usb 4-1: SerialNumber: syz [ 1265.102996][T21118] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1265.128141][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1265.141357][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1265.154386][ T24] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1265.164512][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.184615][ T24] usb 3-1: config 0 descriptor?? [ 1265.331086][ T5950] usb 4-1: probing VID:PID(0424:012C) [ 1265.338926][ T5950] usb 4-1: vub300 testing BULK IN EndPoint(0) 8E [ 1265.345662][ T5950] usb 4-1: vub300 testing BULK IN EndPoint(1) 82 [ 1265.352269][ T56] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1265.359982][ T5950] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs [ 1265.368214][ T5950] vub300 4-1:2.174: probe with driver vub300 failed with error -22 [ 1265.382090][ T5950] usb 4-1: USB disconnect, device number 47 [ 1265.515748][ T56] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1265.527150][ T56] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1265.537330][ T56] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1265.546866][ T56] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.563500][ T56] usb 2-1: config 0 descriptor?? [ 1265.612903][ T24] hid_parser_main: 4 callbacks suppressed [ 1265.612924][ T24] cp2112 0003:10C4:EA90.004D: unknown main item tag 0x0 [ 1265.639146][ T24] cp2112 0003:10C4:EA90.004D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 1265.799692][ T24] cp2112 0003:10C4:EA90.004D: error requesting version [ 1265.817656][ T24] cp2112 0003:10C4:EA90.004D: probe with driver cp2112 failed with error -32 [ 1266.092356][ T56] cp2112 0003:10C4:EA90.004E: unknown main item tag 0x0 [ 1266.099373][ T56] cp2112 0003:10C4:EA90.004E: unknown main item tag 0x0 [ 1266.114070][ T56] cp2112 0003:10C4:EA90.004E: unknown main item tag 0x0 [ 1266.122608][ T56] cp2112 0003:10C4:EA90.004E: unknown main item tag 0x0 [ 1266.249671][ T56] cp2112 0003:10C4:EA90.004E: unknown main item tag 0x0 [ 1266.297154][ T56] cp2112 0003:10C4:EA90.004E: unknown main item tag 0x0 [ 1266.319515][ T56] cp2112 0003:10C4:EA90.004E: unknown main item tag 0x0 [ 1266.357179][ T56] cp2112 0003:10C4:EA90.004E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 1266.442642][ T56] cp2112 0003:10C4:EA90.004E: Part Number: 0x00 Device Version: 0x00 [ 1266.550834][ T24] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1266.640491][ T56] cp2112 0003:10C4:EA90.004E: error requesting SMBus config [ 1266.661839][ T56] cp2112 0003:10C4:EA90.004E: probe with driver cp2112 failed with error -32 [ 1266.688858][ T56] usb 2-1: USB disconnect, device number 48 [ 1266.780674][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 1266.814540][ T24] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1266.825637][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.854405][ T24] usb 5-1: Product: syz [ 1266.880865][ T24] usb 5-1: Manufacturer: syz [ 1266.885506][ T24] usb 5-1: SerialNumber: syz [ 1266.917979][ T24] usb 5-1: config 0 descriptor?? [ 1267.127957][T20230] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1267.300656][T20230] usb 1-1: Using ep0 maxpacket: 8 [ 1267.307890][T20230] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1267.316862][T20230] usb 1-1: config 8 has an invalid interface number: 137 but max is 0 [ 1267.325101][T20230] usb 1-1: config 8 has no interface number 0 [ 1267.331532][T20230] usb 1-1: config 8 interface 137 altsetting 5 bulk endpoint 0xF has invalid maxpacket 84 [ 1267.333093][ T24] airspy 5-1:0.0: Board ID: 00 [ 1267.341749][T20230] usb 1-1: config 8 interface 137 has no altsetting 0 [ 1267.352811][ T24] airspy 5-1:0.0: Firmware version: [ 1267.358068][T20230] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=e5.0d [ 1267.360994][ T43] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1267.373372][T20230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.383334][T20230] usb 1-1: Product: syz [ 1267.387496][T20230] usb 1-1: Manufacturer: syz [ 1267.392453][T20230] usb 1-1: SerialNumber: syz [ 1267.400868][T21166] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1267.493902][ T56] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1267.520705][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 1267.527573][ T43] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1267.538926][ T43] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1267.550136][ T43] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1267.560973][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.569001][ T43] usb 4-1: Product: syz [ 1267.573211][ T43] usb 4-1: Manufacturer: syz [ 1267.577826][ T43] usb 4-1: SerialNumber: syz [ 1267.663328][ T56] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1267.677199][ T56] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1267.687380][ T56] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.691470][T21166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1267.723434][ T56] usb 2-1: config 0 descriptor?? [ 1267.738064][T21166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1267.743521][ T56] pwc: Askey VC010 type 2 USB webcam detected. [ 1267.752325][ T24] airspy 5-1:0.0: usb_control_msg() failed -71 request 0e [ 1267.761880][ T24] airspy 5-1:0.0: Registered as swradio24 [ 1267.773312][ T5943] usb 3-1: USB disconnect, device number 11 [ 1267.790523][T20230] cyberjack 1-1:8.137: Reiner SCT Cyberjack USB card reader converter detected [ 1267.806858][T20230] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 1267.808314][ T24] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1267.845168][ T43] usb 4-1: cannot find UAC_HEADER [ 1267.896814][T20230] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1267.904472][ T24] usb 5-1: USB disconnect, device number 30 [ 1267.914184][T20230] usb 1-1: USB disconnect, device number 63 [ 1267.935437][ T43] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1267.993277][ T43] usb 4-1: USB disconnect, device number 48 [ 1268.004972][T20230] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1268.058081][ T5935] udevd[5935]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1268.088573][T20230] cyberjack 1-1:8.137: device disconnected [ 1268.161170][ T56] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1268.173688][ T56] pwc: recv_control_msg error -32 req 02 val 2700 [ 1268.182161][ T56] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1268.272855][ T56] pwc: recv_control_msg error -32 req 04 val 1000 [ 1268.280819][ T56] pwc: recv_control_msg error -32 req 04 val 1300 [ 1268.302910][ T56] pwc: recv_control_msg error -32 req 04 val 1400 [ 1268.310110][ T56] pwc: recv_control_msg error -32 req 02 val 2000 [ 1268.533369][ T56] pwc: recv_control_msg error -71 req 04 val 1500 [ 1268.574572][ T56] pwc: recv_control_msg error -71 req 02 val 2500 [ 1268.618149][ T56] pwc: recv_control_msg error -71 req 02 val 2400 [ 1268.715482][ T56] pwc: recv_control_msg error -71 req 02 val 2600 [ 1268.723576][ T56] pwc: recv_control_msg error -71 req 02 val 2900 [ 1268.734160][ T56] pwc: recv_control_msg error -71 req 02 val 2800 [ 1268.743228][ T56] pwc: recv_control_msg error -71 req 04 val 1100 [ 1268.754877][ T56] pwc: recv_control_msg error -71 req 04 val 1200 [ 1268.779473][ T56] pwc: Registered as video103. [ 1268.796043][ T5943] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1268.807518][ T56] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input92 [ 1268.895578][ T56] usb 2-1: USB disconnect, device number 49 [ 1268.951911][ T5943] usb 4-1: device descriptor read/64, error -71 [ 1269.246431][ T5943] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1269.409220][T21203] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1269.433394][ T5943] usb 4-1: device descriptor read/64, error -71 [ 1269.543589][ T5943] usb usb4-port1: attempt power cycle [ 1269.900731][ T5943] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1269.953250][ T5943] usb 4-1: device descriptor read/8, error -71 [ 1270.210898][ T5943] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1270.242192][ T5943] usb 4-1: device descriptor read/8, error -71 [ 1270.533951][T21215] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1270.660851][ T5943] usb usb4-port1: unable to enumerate USB device [ 1271.081086][ T5943] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 1271.342583][ T5943] usb 2-1: config 0 has an invalid interface number: 234 but max is 0 [ 1271.465549][ T5943] usb 2-1: config 0 has no interface number 0 [ 1271.534366][ T5943] usb 2-1: config 0 interface 234 has no altsetting 0 [ 1271.576360][ T5943] usb 2-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=b0.31 [ 1271.586697][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.595028][ T5943] usb 2-1: Product: syz [ 1271.602829][ T5943] usb 2-1: Manufacturer: syz [ 1271.620770][ T5943] usb 2-1: SerialNumber: syz [ 1271.803181][ T5943] usb 2-1: config 0 descriptor?? [ 1271.850206][T21229] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3803'. [ 1272.093551][T21234] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3804'. [ 1272.303992][T21236] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1272.874972][ T5943] pegasus 2-1:0.234: probe with driver pegasus failed with error -32 [ 1272.946542][ T5943] usb 2-1: USB disconnect, device number 50 [ 1273.860884][ T56] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1273.920751][T20230] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1274.020631][ T56] usb 4-1: Using ep0 maxpacket: 32 [ 1274.027537][ T56] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 76, changing to 10 [ 1274.038895][ T56] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 25020, setting to 1024 [ 1274.052740][ T56] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1274.062047][ T56] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.070111][ T56] usb 4-1: Product: syz [ 1274.074649][T20230] usb 1-1: Using ep0 maxpacket: 8 [ 1274.082887][ T56] usb 4-1: Manufacturer: syz [ 1274.090292][ T56] usb 4-1: SerialNumber: syz [ 1274.096659][T20230] usb 1-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 1274.114122][ T56] usb 4-1: config 0 descriptor?? [ 1274.119534][T20230] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1274.129891][T20230] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1274.141414][T20230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.175063][ T56] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1274.389949][T21277] netlink: 1884 bytes leftover after parsing attributes in process `syz.1.3816'. [ 1274.564561][T21281] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1274.734860][T21283] FAULT_INJECTION: forcing a failure. [ 1274.734860][T21283] name failslab, interval 1, probability 0, space 0, times 0 [ 1274.753825][T21283] CPU: 0 UID: 0 PID: 21283 Comm: syz.4.3818 Not tainted syzkaller #0 PREEMPT(full) [ 1274.753849][T21283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1274.753860][T21283] Call Trace: [ 1274.753869][T21283] [ 1274.753877][T21283] dump_stack_lvl+0x189/0x250 [ 1274.753907][T21283] ? __pfx____ratelimit+0x10/0x10 [ 1274.753933][T21283] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1274.753957][T21283] ? __pfx__printk+0x10/0x10 [ 1274.753979][T21283] ? __pfx___might_resched+0x10/0x10 [ 1274.753997][T21283] ? fs_reclaim_acquire+0x7d/0x100 [ 1274.754025][T21283] should_fail_ex+0x414/0x560 [ 1274.754054][T21283] should_failslab+0xa8/0x100 [ 1274.754078][T21283] __kmalloc_noprof+0xcb/0x4f0 [ 1274.754097][T21283] ? kernfs_fop_write_iter+0x158/0x540 [ 1274.754129][T21283] kernfs_fop_write_iter+0x158/0x540 [ 1274.754159][T21283] vfs_write+0x5c9/0xb30 [ 1274.754184][T21283] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1274.754208][T21283] ? __pfx_vfs_write+0x10/0x10 [ 1274.754239][T21283] ? __fget_files+0x2a/0x420 [ 1274.754270][T21283] ksys_write+0x145/0x250 [ 1274.754299][T21283] ? __pfx_ksys_write+0x10/0x10 [ 1274.754316][T21283] ? rcu_is_watching+0x15/0xb0 [ 1274.754341][T21283] ? do_syscall_64+0xbe/0x3b0 [ 1274.754363][T21283] do_syscall_64+0xfa/0x3b0 [ 1274.754379][T21283] ? lockdep_hardirqs_on+0x9c/0x150 [ 1274.754396][T21283] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1274.754412][T21283] ? clear_bhb_loop+0x60/0xb0 [ 1274.754432][T21283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1274.754448][T21283] RIP: 0033:0x7f8c11f8eec9 [ 1274.754463][T21283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1274.754478][T21283] RSP: 002b:00007f8c12ee1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1274.754496][T21283] RAX: ffffffffffffffda RBX: 00007f8c121e5fa0 RCX: 00007f8c11f8eec9 [ 1274.754509][T21283] RDX: 0000000000000012 RSI: 0000200000000180 RDI: 0000000000000003 [ 1274.754520][T21283] RBP: 00007f8c12ee1090 R08: 0000000000000000 R09: 0000000000000000 [ 1274.754531][T21283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1274.754541][T21283] R13: 00007f8c121e6038 R14: 00007f8c121e5fa0 R15: 00007f8c1230fa28 [ 1274.754570][T21283] [ 1275.700896][ T80] usb 4-1: Failed to submit usb control message: -110 [ 1275.708509][ T80] usb 4-1: unable to send the bmi data to the device: -110 [ 1275.747460][ T80] usb 4-1: unable to get target info from device [ 1275.772821][ T80] usb 4-1: could not get target info (-110) [ 1275.789028][ T80] usb 4-1: could not probe fw (-110) [ 1276.120683][ T56] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 1276.123044][ T5978] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1276.180707][ T5943] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1276.283354][ T5978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1276.294432][ T5978] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1276.303672][ T56] usb 2-1: config 0 has an invalid interface number: 234 but max is 0 [ 1276.303840][ T5978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.316600][ T56] usb 2-1: config 0 has no interface number 0 [ 1276.326466][ T56] usb 2-1: config 0 interface 234 has no altsetting 0 [ 1276.331726][ T5978] usb 3-1: config 0 descriptor?? [ 1276.339792][ T56] usb 2-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=b0.31 [ 1276.351047][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1276.363542][ T56] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.374713][ T56] usb 2-1: Product: syz [ 1276.375651][ T5943] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1276.379118][ T56] usb 2-1: Manufacturer: syz [ 1276.398833][ T56] usb 2-1: SerialNumber: syz [ 1276.400062][ T5943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.419220][ T56] usb 2-1: config 0 descriptor?? [ 1276.421596][ T5943] usb 5-1: config 0 descriptor?? [ 1276.580021][ T43] usb 4-1: USB disconnect, device number 53 [ 1276.731766][T21297] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1276.758100][ T5978] keytouch 0003:0926:3333.004F: fixing up Keytouch IEC report descriptor [ 1277.250924][ T5943] keytouch 0003:0926:3333.0050: fixing up Keytouch IEC report descriptor [ 1277.358881][ T5943] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0050/input/input93 [ 1277.527380][ T5978] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.004F/input/input94 [ 1277.533119][ T56] pegasus 2-1:0.234: probe with driver pegasus failed with error -32 [ 1277.712684][ T5943] keytouch 0003:0926:3333.0050: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1277.805481][ T43] usb 2-1: USB disconnect, device number 51 [ 1277.938027][T20230] usb 1-1: string descriptor 0 read error: -71 [ 1277.976678][ T5943] usb 5-1: USB disconnect, device number 31 [ 1278.113502][T20230] hub 1-1:32.0: bad descriptor, ignoring hub [ 1278.122193][T21302] fido_id[21302]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1278.168878][T20230] hub 1-1:32.0: probe with driver hub failed with error -5 [ 1278.195959][ T5978] keytouch 0003:0926:3333.004F: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 1278.364615][T20230] usb 1-1: USB disconnect, device number 64 [ 1278.433009][ T5978] usb 3-1: USB disconnect, device number 12 [ 1278.443495][ T5936] udevd[5936]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1278.628585][T21308] fido_id[21308]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1278.849340][T21314] vivid-007: disconnect [ 1278.856202][T21314] vivid-007: reconnect [ 1279.191411][T21323] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3830'. [ 1279.371635][T21323] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3830'. [ 1279.387929][T21323] fuse: Unknown parameter '' [ 1279.852093][T21344] bond0: (slave dummy0): Releasing backup interface [ 1279.932412][T21344] dummy0: left promiscuous mode [ 1279.960792][T20230] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 1280.239681][T21344] bridge_slave_0: left allmulticast mode [ 1280.260734][T21344] bridge_slave_0: left promiscuous mode [ 1280.267475][T21344] bridge0: port 1(bridge_slave_0) entered disabled state [ 1280.289467][T20230] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1280.310994][T20230] usb 3-1: not running at top speed; connect to a high speed hub [ 1280.322207][T20230] usb 3-1: config 2 has an invalid interface number: 212 but max is 0 [ 1280.330862][T20230] usb 3-1: config 2 has no interface number 0 [ 1280.528005][T20230] usb 3-1: config 2 interface 212 has no altsetting 0 [ 1280.719606][T21344] bridge_slave_1: left allmulticast mode [ 1280.787066][T20230] usb 3-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 1280.797067][T21344] bridge_slave_1: left promiscuous mode [ 1280.797114][T20230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.815276][T20230] usb 3-1: Product: syz [ 1280.819470][T20230] usb 3-1: Manufacturer: 㛖♝峡葖ᕣ⠜囶ⴳ侶잲᭮됱黳喰宿閿Ნ샤艁씐鲡㠷 [ 1280.838781][T20230] usb 3-1: SerialNumber: syz [ 1280.869238][T21344] bridge0: port 2(bridge_slave_1) entered disabled state [ 1280.964106][T21344] bond0: (slave bond_slave_0): Releasing backup interface [ 1281.089679][T20230] usb 3-1: USB disconnect, device number 13 [ 1281.342246][T21344] bond_slave_0: left promiscuous mode [ 1281.406885][T21344] bond0: (slave bond_slave_1): Releasing backup interface [ 1281.432249][T21344] bond_slave_1: left promiscuous mode [ 1281.471604][T21344] team0: Port device team_slave_0 removed [ 1281.493903][T21344] team0: Port device team_slave_1 removed [ 1281.501302][ T5950] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1281.514389][T21344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1281.523541][T21344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1281.535511][T21344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1281.544603][T21344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1281.565220][T21344] bond0: (slave netdevsim0): Releasing backup interface [ 1281.604336][T21344] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1281.670830][ T5950] usb 1-1: Using ep0 maxpacket: 16 [ 1281.679959][ T5950] usb 1-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1281.711216][ T5950] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1281.728330][ T5950] usb 1-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.00 [ 1281.756945][ T5950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.792961][ T5950] usb 1-1: config 0 descriptor?? [ 1282.013324][ T5950] usb 1-1: string descriptor 0 read error: -71 [ 1282.040098][ T5950] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input95 [ 1282.061040][T21364] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3843'. [ 1282.087687][ T5197] bcm5974 1-1:0.0: could not read from device [ 1282.119052][ T5950] usb 1-1: USB disconnect, device number 65 [ 1282.694048][ T6006] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1282.970668][ T6006] usb 5-1: Using ep0 maxpacket: 8 [ 1283.031128][ T6006] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1283.039547][ T6006] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1283.087612][ T6006] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1283.102675][ T6006] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1283.159209][ T6006] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1283.173153][ T6006] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1283.186398][ T6006] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1283.431464][ T6006] usb 5-1: usb_control_msg returned -32 [ 1283.437311][ T6006] usbtmc 5-1:16.0: can't read capabilities [ 1283.846092][T21393] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 1284.373870][T20230] usb 5-1: USB disconnect, device number 32 [ 1285.060684][ T6006] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1285.603126][ T6006] usb 4-1: Using ep0 maxpacket: 32 [ 1285.628185][ T6006] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 76, changing to 10 [ 1285.642639][ T6006] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 25020, setting to 1024 [ 1285.681847][ T6006] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1285.693292][ T6006] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.719766][ T6006] usb 4-1: Product: syz [ 1285.729397][ T6006] usb 4-1: Manufacturer: syz [ 1285.773772][ T5950] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1285.790406][ T6006] usb 4-1: SerialNumber: syz [ 1285.815401][ T6006] usb 4-1: config 0 descriptor?? [ 1285.865510][ T6006] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1285.930610][ T5950] usb 5-1: Using ep0 maxpacket: 8 [ 1285.937548][ T5950] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1285.946161][ T5950] usb 5-1: config 0 has no interface number 0 [ 1285.950762][ T43] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1286.010637][ T5950] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1286.050921][ T5950] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1286.074727][ T5950] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1286.128644][ T5950] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1286.148292][ T5950] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1286.158120][ T5950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.197769][ T5950] usb 5-1: config 0 descriptor?? [ 1286.205646][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1286.225605][ T43] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1286.243842][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.247015][ T5950] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1286.255703][ T43] usb 2-1: config 0 descriptor?? [ 1286.507522][ T5950] usb 5-1: USB disconnect, device number 33 [ 1286.521450][ T5950] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1286.684986][ T43] keytouch 0003:0926:3333.0051: fixing up Keytouch IEC report descriptor [ 1286.697998][ T43] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0051/input/input96 [ 1286.844659][ T43] keytouch 0003:0926:3333.0051: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1286.873339][ T5970] usb 4-1: Failed to submit usb control message: -110 [ 1286.903190][ T5970] usb 4-1: unable to send the bmi data to the device: -110 [ 1286.955756][ T5970] usb 4-1: unable to get target info from device [ 1286.955798][ T5970] usb 4-1: could not get target info (-110) [ 1286.955825][ T5970] usb 4-1: could not probe fw (-110) [ 1287.285829][ T5943] usb 2-1: USB disconnect, device number 52 [ 1287.440833][ T5950] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1287.510779][ T5978] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1287.594965][ T5950] usb 3-1: Using ep0 maxpacket: 32 [ 1287.604045][ T5950] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1287.614607][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.624560][ T5950] usb 3-1: Product: syz [ 1287.628905][ T5950] usb 3-1: Manufacturer: syz [ 1287.635166][ T5950] usb 3-1: SerialNumber: syz [ 1287.644008][ T5950] usb 3-1: config 0 descriptor?? [ 1287.877765][ T5978] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1287.888285][ T5978] usb 5-1: config 0 has no interfaces? [ 1288.009176][ T43] usb 4-1: USB disconnect, device number 54 [ 1288.043380][ T5978] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1288.077721][ T5978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.078286][ T5950] airspy 3-1:0.0: Board ID: 00 [ 1288.115917][ T5950] airspy 3-1:0.0: Firmware version: [ 1288.119690][ T5978] usb 5-1: Product: syz [ 1288.142826][ T5978] usb 5-1: Manufacturer: syz [ 1288.147717][ T5978] usb 5-1: SerialNumber: syz [ 1288.165965][ T5978] usb 5-1: config 0 descriptor?? [ 1288.351722][T21453] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1288.368320][T21457] ------------[ cut here ]------------ [ 1288.373932][T21457] WARNING: CPU: 0 PID: 21457 at fs/nsfs.c:493 nsfs_fh_to_dentry+0xc56/0xd50 [ 1288.382884][T21457] Modules linked in: [ 1288.387263][T21457] CPU: 0 UID: 0 PID: 21457 Comm: syz.1.3869 Not tainted syzkaller #0 PREEMPT(full) [ 1288.396663][T21457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1288.407007][T21457] RIP: 0010:nsfs_fh_to_dentry+0xc56/0xd50 [ 1288.412869][T21457] Code: 64 24 40 e9 41 f8 ff ff e8 e7 04 7a ff 90 0f 0b 90 e9 64 f6 ff ff e8 d9 04 7a ff 90 0f 0b 90 e9 ab f6 ff ff e8 cb 04 7a ff 90 <0f> 0b 90 e9 f3 f6 ff ff e8 bd 04 7a ff 45 31 e4 4c 8b 7c 24 08 e9 [ 1288.432587][T21457] RSP: 0018:ffffc9000be0fa40 EFLAGS: 00010283 [ 1288.438681][T21457] RAX: ffffffff82447115 RBX: 00000000effffff9 RCX: 0000000000080000 [ 1288.447026][T21457] RDX: ffffc9002291f000 RSI: 0000000000000060 RDI: 0000000000000061 [ 1288.455394][T21457] RBP: ffffc9000be0fb10 R08: ffffffff8f5cd537 R09: 1ffffffff1eb9aa6 [ 1288.463445][T21457] R10: dffffc0000000000 R11: fffffbfff1eb9aa7 R12: ffffffff824465fc [ 1288.471556][T21457] R13: dffffc0000000000 R14: ffff8880789ad914 R15: 0000000000000000 [ 1288.479616][T21457] FS: 00007fdf7fbf66c0(0000) GS:ffff888126373000(0000) knlGS:0000000000000000 [ 1288.488612][T21457] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1288.495230][T21457] CR2: 0000200000f54000 CR3: 000000005f7a8000 CR4: 00000000003526f0 [ 1288.503243][T21457] Call Trace: [ 1288.506538][T21457] [ 1288.509473][T21457] ? __pfx_nsfs_fh_to_dentry+0x10/0x10 [ 1288.515006][T21457] exportfs_decode_fh_raw+0x175/0x6e0 [ 1288.520406][T21457] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 1288.526372][T21457] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 1288.532451][T21457] do_handle_to_path+0xa4/0x1a0 [ 1288.537352][T21457] do_handle_open+0x6b4/0x8f0 [ 1288.542148][T21457] ? __pfx_do_handle_open+0x10/0x10 [ 1288.547920][T21457] ? rcu_is_watching+0x15/0xb0 [ 1288.553233][T21457] ? do_syscall_64+0xbe/0x3b0 [ 1288.557948][T21457] do_syscall_64+0xfa/0x3b0 [ 1288.562570][T21457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1288.568682][T21457] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1288.574900][T21457] ? clear_bhb_loop+0x60/0xb0 [ 1288.579588][T21457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1288.585535][T21457] RIP: 0033:0x7fdf8198eec9 [ 1288.589964][T21457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1288.609652][T21457] RSP: 002b:00007fdf7fbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 1288.618107][T21457] RAX: ffffffffffffffda RBX: 00007fdf81be5fa0 RCX: 00007fdf8198eec9 [ 1288.626257][T21457] RDX: 0000000000670e41 RSI: 0000200000000000 RDI: 0000000000000003 [ 1288.634281][T21457] RBP: 00007fdf81a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1288.642380][T21457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1288.650841][T21457] R13: 00007fdf81be6038 R14: 00007fdf81be5fa0 R15: 00007fdf81d0fa28 [ 1288.658904][T21457] [ 1288.662369][T21457] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1288.669648][T21457] CPU: 0 UID: 0 PID: 21457 Comm: syz.1.3869 Not tainted syzkaller #0 PREEMPT(full) [ 1288.679020][T21457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1288.689100][T21457] Call Trace: [ 1288.692386][T21457] [ 1288.695336][T21457] dump_stack_lvl+0x99/0x250 [ 1288.699914][T21457] ? __asan_memcpy+0x40/0x70 [ 1288.704491][T21457] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1288.709713][T21457] ? __pfx__printk+0x10/0x10 [ 1288.714475][T21457] vpanic+0x281/0x750 [ 1288.718445][T21457] ? __pfx__printk+0x10/0x10 [ 1288.723026][T21457] ? __pfx_vpanic+0x10/0x10 [ 1288.727545][T21457] ? is_bpf_text_address+0x26/0x2b0 [ 1288.732739][T21457] panic+0xb9/0xc0 [ 1288.736450][T21457] ? __pfx_panic+0x10/0x10 [ 1288.740859][T21457] __warn+0x31b/0x4b0 [ 1288.744844][T21457] ? nsfs_fh_to_dentry+0xc56/0xd50 [ 1288.749969][T21457] ? nsfs_fh_to_dentry+0xc56/0xd50 [ 1288.755076][T21457] report_bug+0x2be/0x4f0 [ 1288.759387][T21457] ? nsfs_fh_to_dentry+0xc56/0xd50 [ 1288.765025][T21457] ? nsfs_fh_to_dentry+0xc56/0xd50 [ 1288.770125][T21457] ? nsfs_fh_to_dentry+0xc58/0xd50 [ 1288.775239][T21457] handle_bug+0x84/0x160 [ 1288.779469][T21457] exc_invalid_op+0x1a/0x50 [ 1288.783956][T21457] asm_exc_invalid_op+0x1a/0x20 [ 1288.788791][T21457] RIP: 0010:nsfs_fh_to_dentry+0xc56/0xd50 [ 1288.794499][T21457] Code: 64 24 40 e9 41 f8 ff ff e8 e7 04 7a ff 90 0f 0b 90 e9 64 f6 ff ff e8 d9 04 7a ff 90 0f 0b 90 e9 ab f6 ff ff e8 cb 04 7a ff 90 <0f> 0b 90 e9 f3 f6 ff ff e8 bd 04 7a ff 45 31 e4 4c 8b 7c 24 08 e9 [ 1288.814194][T21457] RSP: 0018:ffffc9000be0fa40 EFLAGS: 00010283 [ 1288.820297][T21457] RAX: ffffffff82447115 RBX: 00000000effffff9 RCX: 0000000000080000 [ 1288.828251][T21457] RDX: ffffc9002291f000 RSI: 0000000000000060 RDI: 0000000000000061 [ 1288.836241][T21457] RBP: ffffc9000be0fb10 R08: ffffffff8f5cd537 R09: 1ffffffff1eb9aa6 [ 1288.844195][T21457] R10: dffffc0000000000 R11: fffffbfff1eb9aa7 R12: ffffffff824465fc [ 1288.852148][T21457] R13: dffffc0000000000 R14: ffff8880789ad914 R15: 0000000000000000 [ 1288.860117][T21457] ? nsfs_fh_to_dentry+0x13c/0xd50 [ 1288.865222][T21457] ? nsfs_fh_to_dentry+0xc55/0xd50 [ 1288.870414][T21457] ? __pfx_nsfs_fh_to_dentry+0x10/0x10 [ 1288.875866][T21457] exportfs_decode_fh_raw+0x175/0x6e0 [ 1288.881338][T21457] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 1288.887133][T21457] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 1288.893041][T21457] do_handle_to_path+0xa4/0x1a0 [ 1288.897962][T21457] do_handle_open+0x6b4/0x8f0 [ 1288.902731][T21457] ? __pfx_do_handle_open+0x10/0x10 [ 1288.907928][T21457] ? rcu_is_watching+0x15/0xb0 [ 1288.912680][T21457] ? do_syscall_64+0xbe/0x3b0 [ 1288.917341][T21457] do_syscall_64+0xfa/0x3b0 [ 1288.921913][T21457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1288.927959][T21457] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1288.934090][T21457] ? clear_bhb_loop+0x60/0xb0 [ 1288.938834][T21457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1288.944704][T21457] RIP: 0033:0x7fdf8198eec9 [ 1288.949115][T21457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1288.968705][T21457] RSP: 002b:00007fdf7fbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 1288.977215][T21457] RAX: ffffffffffffffda RBX: 00007fdf81be5fa0 RCX: 00007fdf8198eec9 [ 1288.985171][T21457] RDX: 0000000000670e41 RSI: 0000200000000000 RDI: 0000000000000003 [ 1288.993122][T21457] RBP: 00007fdf81a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1289.001074][T21457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1289.009021][T21457] R13: 00007fdf81be6038 R14: 00007fdf81be5fa0 R15: 00007fdf81d0fa28 [ 1289.016977][T21457] [ 1289.020260][T21457] Kernel Offset: disabled [ 1289.024571][T21457] Rebooting in 86400 seconds..