last executing test programs: 1m57.891602968s ago: executing program 0 (id=15): socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) (rerun: 32) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 32) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1e512d0000000000010902240001000000000904000001030002000921000000012205000905810300"], 0x0) (rerun: 32) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xa, "dd494410"}]}}, 0x0}, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) (async) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_FLAGS={0x8}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) (async, rerun: 64) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x11) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats}) (async, rerun: 64) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (rerun: 64) getsockopt(r5, 0x6, 0x10, 0x0, &(0x7f0000000a80)) r6 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r6, 0x891c, 0x0) ftruncate(r2, 0x7aeb800) (async) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) 1m56.956075377s ago: executing program 0 (id=17): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x33) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r2, 0x0, 0x4) readv(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) (async) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f0000000140)="96", 0x1, 0x20000000, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x14}, 0x4}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000180)=0x2, 0x4) (async) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) preadv(r1, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x6, 0x0) 1m56.86188064s ago: executing program 0 (id=19): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$packet(0x11, 0x2, 0x300) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x701, 0xf7, 0x48, 0xbe, 0x8, 0x15f4, 0x15, 0x6f2b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x2, 0x20, 0xb, [{{0x9, 0x4, 0xc6, 0xa9, 0x0, 0x9b, 0x7d, 0xd1, 0x3}}]}}]}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) (fail_nth: 5) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4) 1m55.36594303s ago: executing program 0 (id=33): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 1m55.32974408s ago: executing program 0 (id=34): r0 = socket$kcm(0x10, 0x2, 0x0) (async) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2b20dd9dc19d7fac80841b6234ead9f6aea35be46a876c1dff0f0000000000007524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000000) 1m55.228370854s ago: executing program 0 (id=35): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a70000000060a0b0400000000000000000200000244000480400001800b00010074617267657400003000028014000300e1a0b063bae294fe8f45a9b02fdf068408000240000000010d000100434f4e4e4d41524b000000000900010073797a30000000000900020073797a32"], 0xac}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r2, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x201}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/188, 0xbc}, {&(0x7f0000000840)=""/245, 0xf5}, {&(0x7f0000000280)=""/47, 0x2f}, {&(0x7f00000004c0)=""/65, 0x41}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/21, 0x15}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x7}, 0x80000000}], 0x4, 0x20, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010010905"], 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, 0x0, 0x5c) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x29, 0xb3, 0x8, 0x3, 0x49, @empty, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x80, 0x40, 0x0, 0x5}}) r7 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r8, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x4, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0xb0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x4e20, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "31150048d5e06bdc339f0b82e56e05e9a3f461bd8f05c60ff304e7fee8a3221b", "b54970b8807c69e8aba2815e90ed451c3c1a9dff75f0f264e44cbb999c8f292e5aa143fd63ea1886e0cd425df0d8e5e7", "2bed86cd87cd326b66a3ca343e29e347dc61214ad793ad9f48b4d287", {"b1f582be999a4405000000000000009a", "5cd7bcd4dc8e1acb0a78f4793cfd119c"}}}}}, 0xbe) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000240)={@private2, r6}, 0x14) r10 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@directio}], [], 0x6b}}) 1m39.487020638s ago: executing program 32 (id=35): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a70000000060a0b0400000000000000000200000244000480400001800b00010074617267657400003000028014000300e1a0b063bae294fe8f45a9b02fdf068408000240000000010d000100434f4e4e4d41524b000000000900010073797a30000000000900020073797a32"], 0xac}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r2, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x201}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/188, 0xbc}, {&(0x7f0000000840)=""/245, 0xf5}, {&(0x7f0000000280)=""/47, 0x2f}, {&(0x7f00000004c0)=""/65, 0x41}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/21, 0x15}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x7}, 0x80000000}], 0x4, 0x20, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010010905"], 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, 0x0, 0x5c) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x29, 0xb3, 0x8, 0x3, 0x49, @empty, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x80, 0x40, 0x0, 0x5}}) r7 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r8, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x4, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0xb0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x4e20, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "31150048d5e06bdc339f0b82e56e05e9a3f461bd8f05c60ff304e7fee8a3221b", "b54970b8807c69e8aba2815e90ed451c3c1a9dff75f0f264e44cbb999c8f292e5aa143fd63ea1886e0cd425df0d8e5e7", "2bed86cd87cd326b66a3ca343e29e347dc61214ad793ad9f48b4d287", {"b1f582be999a4405000000000000009a", "5cd7bcd4dc8e1acb0a78f4793cfd119c"}}}}}, 0xbe) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000240)={@private2, r6}, 0x14) r10 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@directio}], [], 0x6b}}) 7.827616927s ago: executing program 1 (id=488): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000300), 0x2) r1 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = socket$netlink(0x10, 0x3, 0xc) connect$unix(r2, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e22}, 0x6e) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xfc, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) r8 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x8000000000000000) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x145f, 0x212, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x7f7}}}}}]}}]}}, 0x0) ioctl$FS_IOC_GETVERSION(r9, 0xc0105b08, &(0x7f0000000040)) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0xc4) r10 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000100)={r1, 0x0, 0x4000, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r10, 0x40086200, &(0x7f00000003c0)=0x4) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x800, 0x0, 0xffffffffffffffff}) accept$nfc_llcp(r11, 0x0, &(0x7f00000002c0)) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0) mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) 5.260298603s ago: executing program 2 (id=502): syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140), 0x3, 0x800) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf25031100800c0002"], 0x114}], 0x1}, 0x40014) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r0, 0xc1004111, &(0x7f00000004c0)={0x2, [0x0, 0x5, 0x10], [{0x2, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x40, 0x100, 0x0, 0x1}, {0x5, 0x80000001, 0x0, 0x0, 0x0, 0x1}, {0x4, 0x80000000, 0x1, 0x0, 0x1, 0x1}, {0x8006, 0x10000, 0x1, 0x1, 0x0, 0x1}, {0x2, 0x5, 0x1, 0x0, 0x1}, {0x6, 0xc, 0x1, 0x0, 0x1}, {0x7ff, 0x62, 0x0, 0x0, 0x1, 0x1}, {0x100007, 0x1000, 0x0, 0x0, 0x0, 0x1}, {0x7, 0x3, 0x0, 0x1, 0x1, 0x1}, {0x3, 0x9, 0x1, 0x0, 0x1}, {0x6, 0x7, 0x1, 0x1, 0x1}], 0x4}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101101, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x60440, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x207) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c00020100010009040000f7010d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d000009040112"], 0x0) 4.703257469s ago: executing program 1 (id=506): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='c 1:23'], 0xa) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000640)=0x6d93, 0x4) sendmsg$sock(r2, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e23, 0x41d, @remote, 0x6}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0x1}}], 0x18}, 0x2004c0c1) sendmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="a4f3fec2cc6a825cc3fc77b4e56b3aba2635e95608241a4b87d22eda097c0f2204de2b1c9f67cd3943cda430c6d7d18a56a64cc8f2cc5f3f7a48c0543f3c353da6446227c0bfc5c4ff4c5010ea47c750417ce8ff0aa11a010fa0bcf0cbcc610f52ca0d2ada2426f596b93b187aafa2bcd7bda01b7b1dfdc0accc6594ca2cd1da8a8446f4ee36ae38f4410bb59bad621fd2471096ce985bc0f09a47707b4140cb9fa71250708cf02f8c34d0cc9a5b9c575f4bf39fd26a33d97118a3d98df811545818f859524cbed4f183955cc9f15396a6f5717cbf7cab6bdb4db9f38cc5108d9be90833a47b03372b257fa60191", 0xee}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x7fff, &(0x7f0000000240)="12d6cacc400cb28384641a92606ff1d67f7718dadaa571f32ee2eb179974146cb14384e0e9a430de36da9cfa0941cbdb45400dbbf771a9f0d840b73de0cb08d1d3be1afc468f2a26a39cdfba80aa009e0b6b4bab31776e6f4b3cbe471b323c3e805335edbad98b115636442e777dce7bc27e899b8bc13ebd3a9b22f3813b493bcddc5ecc46eada68531a") r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ptrace$getenv(0x4201, r3, 0x0, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000002c00)={0x0, 0x0, 0x0, 0x0}) 4.591135344s ago: executing program 1 (id=508): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000004, 0x20010, r0, 0x61663000) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x200) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r2, 0x3ba0, &(0x7f0000000380)={0x48, 0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000040)={0x3, 0xb, 0x5, {0x7, 0x4}, 0xfe4, 0x3}) 4.371273585s ago: executing program 4 (id=510): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) r1 = syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000100), &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000240)=@v3={0x3000000, [{0xb104, 0x5}, {0x0, 0x7}], r2}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e733d66642c556664b3d0cc01777c5621ddd0d90c94fd6e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) 4.308905276s ago: executing program 4 (id=511): r0 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r0, &(0x7f0000000180)) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fbdbdf251400f2e544690300", @ANYRES32=r5, @ANYBLOB="050029000a000000"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8040) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000006100), &(0x7f0000006140)=0x8) syz_usb_control_io(r1, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00.'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x3c, r7, 0x1, 0x0, 0x2000, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) 3.898944853s ago: executing program 2 (id=514): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB="a0000000210001000000000000000000e000000100000000000000000000008eaac60b000000000200000000000000014e210000d52963dcf07357b9dab5d8433d000000000a000000ff0000005d194e24c5c947ad1375a9befc402acb9b2a502664c725814502aff4f2c5163ccac02d2bf58712", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000005000110000000000000000000000ffff7f000001fc02000000000000000000000000000064010102000000000000000000000000fc0200000000000000000000000000203c0000000000000008"], 0xa0}}, 0x44) r0 = memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002180), 0xffffffffffffffff) (rerun: 64) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="64010000", @ANYRES16=r2, @ANYBLOB="010027bd7000fcdbdf25170000001c00068015000300ddab7a6be74e9a479a0df763692750c8190000002400068008000600080000000400050004000500080001004c140000080006"], 0x164}, 0x1, 0x0, 0x0, 0x4005}, 0x12) 3.768377137s ago: executing program 2 (id=515): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x850}, 0x0) 2.532280796s ago: executing program 3 (id=518): r0 = socket(0x11, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x10, [0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2]}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000000000000c501"]) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r5) sendmsg$NFC_CMD_SE_IO(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, r6, 0x105, 0x70bd2e, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x200010d4}, 0x4000000) 2.474577334s ago: executing program 3 (id=519): ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000100), &(0x7f0000000080)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="b6", 0x1, 0x20048004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18119, @rand_addr, 0x983a}, 0x1c) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)) splice(r0, 0x0, r2, 0x0, 0x406f413, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) epoll_pwait(r2, &(0x7f0000000480)=[{}, {}], 0x2, 0xfffffffb, &(0x7f00000004c0)={[0xfffffffffffff800]}, 0x8) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000240)=@v3={0x3000000, [{0xb104, 0x5}, {0x0, 0x7}], r3}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) 2.212134763s ago: executing program 3 (id=520): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000000080012400000ffff16000300686173683a6e6574"], 0x64}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16=r0, @ANYRES16=r0, @ANYBLOB="03052bbd7000f3dbdf25050000001c000180170001006574683a1cb7ad0e958a95565584626174616476"], 0x30}}, 0x9880) 2.128282672s ago: executing program 3 (id=521): r0 = syz_open_dev$rtc(&(0x7f0000000140), 0xfffffffffffffffe, 0x759640) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x6c, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@typed={0x8, 0x121, 0x0, 0x0, @uid}, @generic="428184a477201ac90f24d8c531680464a01e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f269ce3068ee8401e0199c9cf16ed3db"]}, @nested={0x8, 0x5, 0x0, 0x1, [@generic="0bad07e0"]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x804) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x19, r3) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x18, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0xfffffffc, 0xb00, 0x0, 0x18, 0x0, 0x8000, 0xfffffffe}}) close_range(r0, r0, 0x0) 2.089728271s ago: executing program 3 (id=522): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000ffdbdf25210000000800e200", @ANYRESOCT=r2, @ANYBLOB="38002d800a00000001010101010100000a00000002020202020200000a00000001010101010100000a000000010101010101000004000000"], 0x54}, 0x1, 0x0, 0x0, 0x46b2d3ba8e12a610}, 0x4000) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000ffdbdf25210000000800e200", @ANYRESOCT=r2, @ANYBLOB="38002d800a00000001010101010100000a00000002020202020200000a00000001010101010100000a000000010101010101000004000000"], 0x54}, 0x1, 0x0, 0x0, 0x46b2d3ba8e12a610}, 0x4000) socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000006c0)={0x2, 0x0, @local}, 0x10) (async) bind$inet(r3, &(0x7f00000006c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) (async) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x4, 'wlc\x00', 0x1, 0x88, 0x31}, 0x2c) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) write$cgroup_int(r4, &(0x7f00000022c0)=0x3, 0x12) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r6 = gettid() r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001200), 0xa0000) read(r7, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000080)={0x335, @tick=0xfffffff7, 0x0, {}, 0x20}) (async) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000080)={0x335, @tick=0xfffffff7, 0x0, {}, 0x20}) tkill(r6, 0x7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r8, &(0x7f0000000080)={0x1, 0x10, 0x3, {0x0}}, 0x18) recvmmsg(r5, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/98, 0x62}, {&(0x7f00000004c0)=""/115, 0x73}, {&(0x7f0000001d00)=""/4104, 0x1008}, {&(0x7f0000000080)=""/110, 0x6e}], 0x4}, 0xc}], 0x1, 0x40000020, 0x0) (async) recvmmsg(r5, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/98, 0x62}, {&(0x7f00000004c0)=""/115, 0x73}, {&(0x7f0000001d00)=""/4104, 0x1008}, {&(0x7f0000000080)=""/110, 0x6e}], 0x4}, 0xc}], 0x1, 0x40000020, 0x0) 1.739776624s ago: executing program 3 (id=523): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8}, 0x10) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700", 0x12) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10) sendmsg$NFT_BATCH(r1, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000000c0)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="2014120000001b19fabda560da0781c2106a5bd2cb999f14"], 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r3) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r4, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/98, 0x62}, {&(0x7f00000004c0)=""/115, 0x73}, {&(0x7f0000001d00)=""/4104, 0x1008}, {&(0x7f0000000080)=""/110, 0x6e}], 0x4}, 0xc}], 0x1, 0x40000020, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x35}, 0x4000800) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 1.492297566s ago: executing program 1 (id=524): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@local}, {@local, 0x6}, 0x400, "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"}, 0x418, 0x7fffffff}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f00000000c0)={&(0x7f0000000780)={{@hyper, 0x3}, {@host, 0x1ff}, 0x400, "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"}, 0x418, 0x3}) r1 = accept4$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000006c0)=0x10, 0x80000) getsockopt$llc_int(r1, 0x10c, 0x1, &(0x7f0000000700), &(0x7f0000000740)=0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x1}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0xffff, 0x4, 0x4, 0x9, 0x40}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0485661, &(0x7f00000001c0)={0x0, 0x1, @start={0x10001, 0x1}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x40046207, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1.373073982s ago: executing program 2 (id=525): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000000c0)={0x2, [0x1, 0x3]}, 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000140)={0x2, [0x0, 0x0]}, &(0x7f0000000180)=0x8) r1 = syz_io_uring_setup(0x4b2c, &(0x7f0000001480)={0x0, 0x37f, 0x400, 0x3, 0xba}, &(0x7f0000001500), &(0x7f0000001540)) syz_io_uring_setup(0x6f06, &(0x7f0000006d40)={0x0, 0x6b8, 0x20, 0x3, 0x1f5, 0x0, r1}, &(0x7f0000006dc0), &(0x7f0000006e00)) 1.334111908s ago: executing program 2 (id=526): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x8c}}, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="2e0000003e0005", 0x7}], 0x1, 0x0, 0x0, 0x39c}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000069"], 0xfe33) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xd) open_by_handle_at(r0, &(0x7f0000000040)=@fuse={0xc, 0x81, {0x4, 0x7, 0x3}}, 0x44400) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x84000, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e24, 0xf, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0xee00}}, './bus\x00'}) ioctl$PPPIOCUNBRIDGECHAN(r3, 0x7434) r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r4, 0x0) fallocate(r4, 0x0, 0x0, 0x1000f4) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa07, &(0x7f0000000200)={{&(0x7f000023c000/0x4000)=nil, 0x4000}}) 1.212342238s ago: executing program 4 (id=527): syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x80400) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 1.104152698s ago: executing program 4 (id=528): syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x1418, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1000000}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @null}, [@null, @remote, @null, @netrom, @null, @netrom, @rose, @rose]}, &(0x7f00000000c0)=0x48, 0x800) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100280000000000000004000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, 0x0, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r7, 0x917, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r9}]}, 0x3c}, 0x1, 0x620b}, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r3, 0x8004f50e, 0x0) r10 = syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x80080) ioctl$RTC_RD_TIME(r10, 0x80247009, &(0x7f00000000c0)) bind$netrom(r2, &(0x7f0000000140)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x7}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) 1.042433847s ago: executing program 2 (id=529): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000fa461ad7e48489bffa560200130011186809fc071200000f0000ff3f21000000170a001700e0da8979d2fc6ca9e48270faf047105bc79e0b9971bcbedac0eead49dbecf96eebb1fd", 0x4b}], 0x1) syz_usb_connect(0x0, 0x596, &(0x7f0000000280)={{0x12, 0x1, 0x201, 0xe0, 0x35, 0xd3, 0x20, 0x424, 0xcf30, 0xd8fe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x584, 0x1, 0x9, 0x4, 0x0, 0x5, [{{0x9, 0x4, 0xd4, 0x1, 0xc, 0xc9, 0xf, 0x9d, 0x8, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "74fd41"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x8001, 0xfff, 0x1}, {0x6, 0x24, 0x1a, 0xb, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x3c}, @country_functional={0xc, 0x24, 0x7, 0x81, 0x6, [0x8000, 0xfff, 0x5]}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x0, 0x7f, 0x8}, @obex={0x5, 0x24, 0x15, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0xdd63, 0x6, 0x4}]}, @cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, '-'}, {0x5, 0x24, 0x0, 0xa}, {0xd, 0x24, 0xf, 0x1, 0x6, 0xd, 0x101, 0xdd}, [@mdlm_detail={0xb7, 0x24, 0x13, 0x1, "24a373aaed6d993a4e42b33c830bc76daa7d0782e80f365e1573c960d5d5ac890d07a63e7d0fc4b3620fdb6ced5b1405ca69ee345a72633def777a84368477a704a51c35f5795bc6e1ec9710726762450a995aa8c80c78f944ffce0d68491553e191ef1762ba08a12cc670a1deebfc6922ee8f127b6dca93cb0f12738048fe74dc5254a4f3d7370b1bb2347611b5b042e5fdb3184bbf88ae2b98c91a111cbab3ef7c9c849377c1f9c38a24972b10d085a997bf"}, @ncm={0x6, 0x24, 0x1a, 0x5, 0x8}]}], [{{0x9, 0x5, 0x2, 0x10, 0x10, 0x80, 0xb, 0x5, [@generic={0x4a, 0xa, "90905cae8b75fe997890322c13f0fb071a5d37cd4ebb36daa20ba03366f1b76548a9be57c62c8867a20576e26e0f2cd6c1353ef46ef037a0960daa7d4bde2e0ff71fdcba4b34619e"}, @generic={0x6a, 0x8, "d3941f689c404a8fb5b0d03a59b1f9b3f044f26c7bc1a742715f1c2562d3004f7afc3bb2430e55e8d137e63206fed4f2d42ae43dd43029c10e8066371d7be444602257a4697b43a8861f117b1bd8fc777ea1bb858e324bf77f3f8d809b45d98bc96db2c3968204c2"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x9, 0x4, 0xbb, [@generic={0x1e, 0x2d, "32283d6feedf42f181c064a8966e467512f7f1d1f987a0459d438bbe"}, @generic={0xc4, 0x4, "71bf4721525586abd92174a84cc449de128b7e73062f89adcc0b2db34bbd23b3cab28aa33c1f4ad852ad7176904b654c306cdb1ed2279f9d1966177d6a667015b389eaa6965dee25ef4d227b6cf9163f1eb7ab84332895a6be36ddc9dbebbbf656c2c41f913ed57cf15307e7e12dab95038fcf4f419a89c83eeeefc7191d557bb4edb5ee0d0a51e99ead9daa05d54b1c870d759b8ba9f7c232331156d658ad5189ffb0764b5fb56d193609c4b7c39f84e5a9b691bf3552aa5949d409ea67070b1f66"}]}}, {{0x9, 0x5, 0x80, 0xd, 0x3ff, 0xbd, 0x2, 0x3}}, {{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x8, 0x9, 0xfc, [@generic={0xfc, 0x4, "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"}, @generic={0x5a, 0x23, "e9f8afe5f8fc9d9356ec1e553a3eb3f3d27e965f4b02f4ba7123e00ff6df5673b1aa6a39023eb8039d96b2159ddebedff135838c9f780a3548e7cd5d48855712b1d62dbf6c9bc741b4abfff5a0f27e8d97f05551d128d1c7"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x3ff, 0x2d, 0x5, 0x12, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xfc, 0x6}]}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x3, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x5d}, @generic={0x54, 0xd, "4b657147463753dbf314729936cb859816f5a5ab0b80cf26c7def1f12d64799d4c662d6522a6fcd174badd2cdcf2ddd94722545742d456d551ef4793143c80c718fa3850213668ada3eabda2ff37140203ea"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0x9, 0xd, 0x9a, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4}, @generic={0x2d, 0x24, "1e545888051498796d9cdbcbee65207206c525e7dc2c2f51386db699f7a783dc657cba14618bc2da255319"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0xd, 0x3, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x8}]}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0xb, 0x9, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xf, 0x5299}]}}, {{0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0xfa, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x7}, @generic={0x40, 0x11, "9f8aeaaf5fa2d9aad86505aa1c447da67accc8d3abed486403d588edc2be4f83f6208c34e40a79e6d4b76692deaad22ede6cea3e574f17582369c8451e6f"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x3, 0xa, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x200}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0xc0}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0xff, 0x8, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0xfff}]}}]}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x9, 0x7a, 0x2, 0x8, 0x9}, 0x3b, &(0x7f0000000840)={0x5, 0xf, 0x3b, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "918b322b42eb67a385cb046a0f83c555"}, @generic={0x10, 0x10, 0xa, "366ed3de45651f111aad86a9d2"}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x6, 0x3, 0x8}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x10, 0xd, 0x0, 0x5}]}, 0x1, [{0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x436}}]}) r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) setreuid(0x0, 0xee00) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000100)) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) 228.287305ms ago: executing program 4 (id=530): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) fchdir(r1) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000500)=""/45, 0x2d) (async) getdents64(r2, 0x0, 0x18) (async) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x421}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0xe) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 172.335562ms ago: executing program 4 (id=531): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000dc0)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd84b93208c7b1a625b3ea990092389b19dab4f61e30ee60a4d7e51ffc9a5accbe20844356dd0ce192542d5e58d80657b3b5f", 0x63}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001a80)="d61f2c7a6ddbff16a09972b62284a63c170b9a6ec5cd29dfa047b76a9a0eeb4055c9dd2244e47c59e557c459c397cd02eb261fc7d521b1f2e95c3ce17726db0d3236a6d3b52d3f066554d84292329c8a6f034ff8d85d61dcf7ae508c5925903fb1feb7d07fe481313ad476131c", 0x6d}], 0x1}}], 0x2, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x73, 0x86, 0x40, 0x20, 0xc72, 0x14, 0x39ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0xa, [{{0x9, 0x4, 0x1d, 0xf3, 0x0, 0x71, 0x6c, 0x75}}]}}]}}, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 91.896045ms ago: executing program 1 (id=532): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003a80)=ANY=[@ANYBLOB="883800003f000701feffffff02000000017c00000400f6000c0001800600060080350000643802"], 0x3888}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fddbdf25160a001a0008021100000100"/38], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x48810) 0s ago: executing program 1 (id=533): syz_usb_disconnect(0xffffffffffffffff) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x2c, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_usb_connect$cdc_ncm(0x6a04d53d7ea1c6f1, 0x160, &(0x7f0000000280)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14e, 0x2, 0x1, 0xc, 0x10, 0x35, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, ':G2'}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x919, 0x3, 0x30d, 0x6a}, {0x6, 0x24, 0x1a, 0x1, 0xc}, [@mbim_extended={0x8, 0x24, 0x1c, 0x4671, 0x8, 0x5}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x55}, @mdlm_detail={0xd9, 0x24, 0x13, 0x6, "c78d23e4165c485e9d00c7de41e65286e65296193a7174b1abf5fc5bcb38cb331c825ccfac0dfa8c6da3d804bdee94b1e165d36d84ba57a61ea91d0fdd5b78298607096151bf62ea5254e9536c64f26c3e803d92ede44ef838f982d9512945a71ac34b18ed9663b1614218638e3bbc13dc9e9d1d0ef18bf9e80c870fdc17789b8402017484de2efedc66a3d628ea1fd79771865b3819adce81e9fc41e3b60ae8038c0624cc21ce30df0edc8e0aaabc24550e68407c2d889b388b09cee5aee4679485917c15e7486e07f87c921735084f3ae2d048bd"}, @obex={0x5, 0x24, 0x15, 0x2}, @acm={0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0xfa, 0xf3, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0xe6, 0x80, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x8, 0x13, 0x40}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x7, 0xfd, 0x8, 0x10, 0xb}, 0x4d, &(0x7f0000000080)={0x5, 0xf, 0x4d, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0xfa, 0x7f, 0x7}, @wireless={0xb, 0x10, 0x1, 0x8, 0xc8, 0x5, 0xb4, 0x4, 0xf9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x3, 0x7, 0x6}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0xfb, 0x4, 0x8, 0xf00f, 0x81, [0x0, 0xf, 0x3f00, 0x3f00]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x9, 0xb, 0x101}]}, 0x4, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x418}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xfcff}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x43e}}, {0xb6, &(0x7f0000000440)=@string={0xb6, 0x3, "2b0c67e283274946e21d9e779a39f61abb2a7284a2e1f0f7cdd8bdfd57bee0604ee9444c3150691b0c20f420d3054d11a0d036c9973d2cc920a476a1032614c366752971796e950d7dda760df04c811b7e0d39be329dbf72299b447a0465ed32d008a327a4f91080e84e0a79c675eea860eb4002989ecba06767329ae8fb1d1a899f7bdb7f5a12b3f5e1a5e95e706aa3a82a43b40ac749a565f4abbf80a39c2e8204bede90ae6d08905c4e5c99c066926b8b0978"}}]}) syz_usb_control_io(r4, &(0x7f0000000900)={0x2c, &(0x7f0000000680)={0x0, 0x22, 0x48, {0x48, 0x7, "80dd9dfc77cd0bbde8c2529b57685df239c485e464cd6e483a30d813a2877cf38c2b2c303c1fa740a16ff39896ee6e3326f8ebe90cb9e39549e8d53e1bd30951a595a472e7fa"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x405}}, &(0x7f0000000700)={0x0, 0xf, 0x167, {0x5, 0xf, 0x167, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x8, 0x81, 0x9}, @generic={0x9c, 0x10, 0x3, "ac9064977648dc8b172a9b7a9129527ac0685d91fb0e6f30613ec1daccc5aac14ed3a1f7685270a383911aa00345b1b12b2ba5b67681c923cf3f4f638fca191f3a2d362527fa35a6c55ba2cc8cc74b37fb9c7be9a9ae9706d77cea9ed460b40768b5b1eb782224ac1eacdc8f50e3c797d71d3c14150cdace7e58425e78d49b977bc805fe26a327901b04158d6878e386993aa39e584978fd8f"}, @generic={0xb9, 0x10, 0xa, "0e6d242f2906032a9d4a441e84dda88a05420fdc21f6adbd76ee5de81c9e3bed72c327ebc0eac219a325b55eef5ae252064ba3b010c5b8ee9ae7335be702fa6982e44bd054b33c99244ec5ca47805eb3f63282a447590fb6bc4678236d5062264b8de4c7b9025e3050a639d1cf7d6fe51191bdc17ad5196ac26fa12308537d86274be0b94454524effb65b13c2df66ebc05743d8594a3d7c408e725ee4a5ff9b7078d607df9cd644c4602369dcdcb9ef71f6ce6254c4"}, @ptm_cap={0x3}]}}, &(0x7f0000000880)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0xafc128b8b6d07a4, 0x1, 0x91, "567c3314", "8838944d"}}, &(0x7f00000008c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x0, 0x3, 0x1, 0x2, 0x401, 0x1}}}, &(0x7f0000000dc0)={0x84, &(0x7f0000000940)={0x20, 0x14, 0x9e, "fd6ede34037ad966c02059fbc378eb78cf6cf8d65ccae7bab260ac48e4d2be492986090bd3871d4fae0ac6f6ead6c570217d76b2f7e561046ea359eb35359330ed62b56668f3f043aa5596c1ea413e09193821fef2bd0d05775972567eae7631728640f3dceeb9c4dc44fbbc3afc17edb1ed473c0a8acf1bb752ae00e49a0f6710798c52bcf0899cc93b86c9bb1cf2c78493355897f1d07fa27efc89b501"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000a80)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000ac0)={0x20, 0x0, 0x4, {0x10, 0x20}}, &(0x7f0000000b00)={0x40, 0x7, 0x2, 0xe8}, &(0x7f0000000b40)={0x40, 0x9, 0x1, 0xd}, &(0x7f0000000b80)={0x40, 0xb, 0x2, "c246"}, &(0x7f0000000bc0)={0x40, 0xf, 0x2, 0x8000}, &(0x7f0000000c00)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000c40)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000c80)={0x40, 0x19, 0x2, "f398"}, &(0x7f0000000cc0)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000d00)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000d40)={0x40, 0x1e, 0x1, 0xc}, &(0x7f0000000d80)={0x40, 0x21, 0x1, 0x4}}) r5 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000e80)={{&(0x7f00004b7000/0x3000)=nil, 0x3000}, 0x2}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100002aafee08f00a51678b75000001010902240001000000000904000002ffffff000905ef"], 0x0) kernel console output (not intermixed with test programs): disconnect, device number 42 [ 171.632834][ T6884] ======================================================= [ 171.632834][ T6884] WARNING: The mand mount option has been deprecated and [ 171.632834][ T6884] and is ignored by this kernel. Remove the mand [ 171.632834][ T6884] option from the mount to silence this warning. [ 171.632834][ T6884] ======================================================= [ 171.667833][ C1] vkms_vblank_simulate: vblank timer overrun [ 171.676350][ T6884] proc: Unknown parameter 'Cgid' [ 172.061744][ T6891] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 172.244266][ T5930] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 172.397663][ T5930] usb 4-1: Using ep0 maxpacket: 8 [ 172.408625][ T5930] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 172.424273][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.435166][ T5930] usb 4-1: Product: syz [ 172.439423][ T5930] usb 4-1: Manufacturer: syz [ 172.445546][ T5930] usb 4-1: SerialNumber: syz [ 172.458055][ T5930] usb 4-1: config 0 descriptor?? [ 172.472618][ T5930] gspca_main: se401-2.14.0 probing 047d:5003 [ 172.634347][ T5844] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 172.784241][ T5844] usb 3-1: Using ep0 maxpacket: 32 [ 172.792167][ T5844] usb 3-1: unable to get BOS descriptor or descriptor too short [ 172.844645][ T5844] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.856039][ T5844] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 172.869400][ T6913] ALSA: mixer_oss: invalid OSS volume '^' [ 172.878158][ T5844] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 172.895857][ T6913] can0: slcan on ttyS3. [ 172.911042][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.911381][ T5930] gspca_se401: Bayer format not supported! [ 172.928267][ T5844] usb 3-1: Product: syz [ 172.937790][ T5844] usb 3-1: Manufacturer: syz [ 172.946445][ T5844] usb 3-1: SerialNumber: syz [ 173.008151][ T6917] netlink: 'syz.1.258': attribute type 10 has an invalid length. [ 173.022514][ T6917] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.024911][ T6913] can0 (unregistered): slcan off ttyS3. [ 173.035645][ T6917] bridge_slave_1: left allmulticast mode [ 173.041415][ T6917] bridge_slave_1: left promiscuous mode [ 173.050157][ T6917] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.065191][ T6917] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 173.122471][ T5931] usb 4-1: USB disconnect, device number 51 [ 173.191180][ T6904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.203078][ T6904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.344276][ T6011] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 173.384221][ T5930] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 173.494285][ T6011] usb 5-1: Using ep0 maxpacket: 32 [ 173.502010][ T6011] usb 5-1: config 0 has an invalid interface number: 6 but max is 0 [ 173.510613][ T6011] usb 5-1: config 0 has no interface number 0 [ 173.519047][ T6011] usb 5-1: config 0 interface 6 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 173.533900][ T6011] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 173.543059][ T6011] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.553608][ T5930] usb 2-1: not running at top speed; connect to a high speed hub [ 173.563756][ T5930] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.574608][ T5930] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 173.584803][ T6011] usb 5-1: config 0 descriptor?? [ 173.597770][ T5930] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 173.607101][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.615171][ T5930] usb 2-1: Product: С [ 173.619365][ T5930] usb 2-1: Manufacturer: 洨월₷圧䱖ﳖ观엜 [ 173.627393][ T5930] usb 2-1: SerialNumber: 뜎䞛୳৑èšá°«î‡€à­ î²¾æ¼·ã½„Ｂ蒒蒙谨ä¢í™²ç‰©æ‘´à®©ì늴痉ê¯ï«€è‰ºæ§§ï¹å…†é©¡æ±ªã˜½ê›¥ê•ˆä¡€â£¿ï¡ë¬žà¥†ë«’í©æž£åŽ¢è²¤ï¹‘ꕩ瀻ݛ䂦驼꿘并é¶ê¯§â€ŠìŸ¸ë½å½™ï¨Žèª“⌯㼞摂▗㮹겂䥸霩쓿î™ïµ¬ì™©æ±Šâ¦ªê¸‚膜㖺䧑誳ä–瀈ⷭ/Ä©ç©çšè [ 173.799376][ T6011] usb 5-1: string descriptor 0 read error: -71 [ 173.808505][ T6011] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 173.815371][ T6011] gspca_nw80x: reg_w err -71 [ 173.820090][ T6011] nw80x 5-1:0.6: probe with driver nw80x failed with error -71 [ 173.832065][ T6011] usb 5-1: USB disconnect, device number 31 [ 174.634185][ T43] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 174.794283][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 174.801310][ T43] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 174.809599][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.819793][ T43] usb 5-1: config 0 has no interface number 0 [ 174.829947][ T43] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 174.839164][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.848158][ T43] usb 5-1: Product: syz [ 174.852345][ T43] usb 5-1: Manufacturer: syz [ 174.858096][ T43] usb 5-1: SerialNumber: syz [ 174.864825][ T9] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 174.865556][ T43] usb 5-1: config 0 descriptor?? [ 175.015921][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.027045][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.036941][ T9] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 175.046345][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.060199][ T9] usb 4-1: config 0 descriptor?? [ 175.085085][ T6931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.094857][ T6931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.105537][ T43] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 175.113059][ T43] uvcvideo 5-1:0.105: No valid video chain found. [ 175.304414][ T5844] usb 3-1: unknown interface protocol 0x80, assuming v1 [ 175.330523][ T5844] usb 3-1: 0:2 : does not exist [ 175.359704][ T5930] usb 2-1: 0:2 : does not exist [ 175.364231][ T5844] usb 3-1: USB disconnect, device number 47 [ 175.388589][ T5930] usb 2-1: USB disconnect, device number 43 [ 175.485008][ T9] petalynx 0003:18B1:0037.0003: hidraw0: USB HID v0.00 Device [HID 18b1:0037] on usb-dummy_hcd.3-1/input0 [ 175.676567][ T9] usb 4-1: USB disconnect, device number 52 [ 175.744224][ T5844] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 175.764254][ T5930] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 175.895414][ T5844] usb 3-1: too many configurations: 98, using maximum allowed: 8 [ 175.904988][ T5844] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 175.912613][ T5844] usb 3-1: can't read configurations, error -61 [ 175.925939][ T5930] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 175.934863][ T5930] usb 2-1: config 0 has no interface number 0 [ 175.943071][ T5930] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 175.953602][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.961658][ T5930] usb 2-1: Product: syz [ 175.965889][ T5930] usb 2-1: Manufacturer: syz [ 175.970486][ T5930] usb 2-1: SerialNumber: syz [ 175.977301][ T5930] usb 2-1: config 0 descriptor?? [ 176.044224][ T5844] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 176.193762][ T5930] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 176.202251][ T5844] usb 3-1: too many configurations: 98, using maximum allowed: 8 [ 176.204786][ T5930] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 176.224768][ T5844] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 176.234290][ T5930] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 176.237993][ T5844] usb 3-1: can't read configurations, error -61 [ 176.249072][ T5930] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 176.260085][ T5844] usb usb3-port1: attempt power cycle [ 176.262917][ T5930] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 176.614227][ T5844] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 176.614301][ T24] usb 2-1: USB disconnect, device number 44 [ 176.632116][ T24] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 176.642814][ T24] keyspan 2-1:0.133: device disconnected [ 176.648050][ T5844] usb 3-1: too many configurations: 98, using maximum allowed: 8 [ 176.659128][ T5844] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 176.668479][ T5844] usb 3-1: can't read configurations, error -61 [ 176.704267][ T5930] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 176.814222][ T5844] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 176.834454][ T5930] usb 4-1: device descriptor read/64, error -71 [ 176.835628][ T5844] usb 3-1: too many configurations: 98, using maximum allowed: 8 [ 176.850734][ T5844] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 176.858388][ T5844] usb 3-1: can't read configurations, error -61 [ 176.865011][ T5844] usb usb3-port1: unable to enumerate USB device [ 177.074250][ T5930] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 177.204206][ T5930] usb 4-1: device descriptor read/64, error -71 [ 177.315557][ T5930] usb usb4-port1: attempt power cycle [ 177.403975][ T9] usb 5-1: USB disconnect, device number 32 [ 177.544298][ T24] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 177.664549][ T5930] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 177.684935][ T5930] usb 4-1: device descriptor read/8, error -71 [ 177.695991][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 177.705785][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 177.718276][ T24] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 177.728223][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.736327][ T24] usb 2-1: Product: syz [ 177.740491][ T24] usb 2-1: Manufacturer: syz [ 177.745184][ T24] usb 2-1: SerialNumber: syz [ 177.751594][ T24] usb 2-1: config 0 descriptor?? [ 177.764219][ T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 177.915117][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 177.922630][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 56320, setting to 64 [ 177.937229][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 177.944294][ T5930] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 177.946473][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.962001][ T9] usb 5-1: Product: syz [ 177.966278][ T9] usb 5-1: Manufacturer: syz [ 177.970924][ T9] usb 5-1: SerialNumber: syz [ 177.974983][ T5930] usb 4-1: device descriptor read/8, error -71 [ 177.978873][ T9] usb 5-1: config 0 descriptor?? [ 177.990396][ T9] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 178.000237][ T9] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 178.085160][ T5930] usb usb4-port1: unable to enumerate USB device [ 178.466164][ T9] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 178.541559][ T9] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 178.550049][ T9] em28xx 5-1:0.0: board has no eeprom [ 178.614164][ T9] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 178.622075][ T9] em28xx 5-1:0.0: dvb set to bulk mode. [ 178.629088][ T5844] em28xx 5-1:0.0: Binding DVB extension [ 178.644791][ T9] usb 5-1: USB disconnect, device number 33 [ 178.659565][ T9] em28xx 5-1:0.0: Disconnecting em28xx [ 178.698868][ T5844] em28xx 5-1:0.0: Registering input extension [ 178.708043][ T9] em28xx 5-1:0.0: Closing input extension [ 178.729460][ T9] em28xx 5-1:0.0: Freeing device [ 178.736660][ T43] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 178.885723][ T43] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 178.894042][ T43] usb 3-1: config 0 has no interface number 0 [ 178.902484][ T43] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 178.911679][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.919807][ T43] usb 3-1: Product: syz [ 178.924017][ T43] usb 3-1: Manufacturer: syz [ 178.928755][ T43] usb 3-1: SerialNumber: syz [ 178.935647][ T43] usb 3-1: config 0 descriptor?? [ 179.055248][ T9] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 179.152685][ T43] usb 3-1: Firmware version (0.0) predates our first public release. [ 179.166705][ T43] usb 3-1: Please update to version 0.2 or newer [ 179.210852][ T43] usb 3-1: USB disconnect, device number 52 [ 179.216804][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 179.221671][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 179.232827][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.241220][ T9] usb 5-1: Product: syz [ 179.246825][ T9] usb 5-1: Manufacturer: syz [ 179.251541][ T9] usb 5-1: SerialNumber: syz [ 179.262715][ T9] usb 5-1: config 0 descriptor?? [ 179.523686][ T9] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 179.933506][ T6968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.942762][ T6968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.024370][ T5844] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 180.032085][ T5956] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 180.184221][ T5844] usb 4-1: Using ep0 maxpacket: 16 [ 180.192080][ T5844] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 180.204201][ T5844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 180.216583][ T5956] usb 3-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 180.226007][ T5956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.235685][ T5956] usb 3-1: Product: syz [ 180.239888][ T5956] usb 3-1: Manufacturer: syz [ 180.245002][ T5956] usb 3-1: SerialNumber: syz [ 180.249791][ T5844] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 180.262203][ T5956] usb 3-1: config 0 descriptor?? [ 180.274186][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.284795][ T5844] usb 4-1: Product: syz [ 180.289052][ T5844] usb 4-1: Manufacturer: syz [ 180.296681][ T5956] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 180.316238][ T5844] usb 4-1: SerialNumber: syz [ 180.351807][ T5844] usb 4-1: config 0 descriptor?? [ 180.372261][ T24] usb 2-1: USB disconnect, device number 45 [ 180.377349][ T5844] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 180.396041][ T5844] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 180.438522][ T6142] udevd[6142]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 180.559362][ T6968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.568265][ T6968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.705218][ T5956] input: sonixb as /devices/platform/dummy_hcd.2/usb3/3-1/input/input22 [ 180.909276][ T24] usb 3-1: USB disconnect, device number 53 [ 180.979612][ T5844] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 180.987268][ T5844] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 181.104042][ T9] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 181.120913][ T9] usb 5-1: USB disconnect, device number 34 [ 181.171389][ T7002] fuse: Unknown parameter ' ' [ 181.506361][ T6011] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 181.603107][ T5844] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 181.684184][ T6011] usb 2-1: Using ep0 maxpacket: 32 [ 181.690881][ T6011] usb 2-1: config 0 has an invalid interface number: 79 but max is 0 [ 181.699222][ T6011] usb 2-1: config 0 has no interface number 0 [ 181.707619][ T6011] usb 2-1: New USB device found, idVendor=1b3d, idProduct=0148, bcdDevice=b4.a1 [ 181.717677][ T6011] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.726275][ T6011] usb 2-1: Product: syz [ 181.730536][ T6011] usb 2-1: Manufacturer: syz [ 181.735211][ T6011] usb 2-1: SerialNumber: syz [ 181.742065][ T6011] usb 2-1: config 0 descriptor?? [ 181.753573][ T6011] ftdi_sio 2-1:0.79: FTDI USB Serial Device converter detected [ 181.762867][ T6011] ftdi_sio ttyUSB0: unknown device type: 0xb4a1 [ 181.804384][ T24] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 181.814640][ T5951] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 181.830543][ T30] audit: type=1326 audit(1758574451.817:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6984 comm="syz.3.282" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f27d738eec9 code=0x0 [ 181.886461][ T5844] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 181.895461][ T5844] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 181.902577][ T5844] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 181.909435][ T5844] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 181.916715][ T5844] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 181.931328][ T5844] usb 4-1: USB disconnect, device number 57 [ 181.951915][ T6011] usb 2-1: USB disconnect, device number 46 [ 181.960586][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 181.966945][ T6011] ftdi_sio 2-1:0.79: device disconnected [ 181.974425][ T24] usb 3-1: config 0 has an invalid interface number: 210 but max is 0 [ 181.976839][ T5951] usb 5-1: Using ep0 maxpacket: 8 [ 181.982612][ T24] usb 3-1: config 0 has no interface number 0 [ 181.992453][ T5951] usb 5-1: config 127 has an invalid interface number: 171 but max is 1 [ 182.002230][ T24] usb 3-1: config 0 interface 210 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 182.014956][ T24] usb 3-1: config 0 interface 210 altsetting 2 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 182.015250][ T5951] usb 5-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 182.028670][ T24] usb 3-1: config 0 interface 210 altsetting 2 has a duplicate endpoint with address 0x8A, skipping [ 182.038693][ T5951] usb 5-1: config 127 has 1 interface, different from the descriptor's value: 2 [ 182.050918][ T24] usb 3-1: config 0 interface 210 altsetting 2 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 182.059432][ T5951] usb 5-1: config 127 has no interface number 0 [ 182.070836][ T24] usb 3-1: config 0 interface 210 altsetting 2 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 182.078577][ T5951] usb 5-1: config 127 interface 171 has no altsetting 0 [ 182.086951][ T24] usb 3-1: config 0 interface 210 altsetting 2 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 182.096029][ T5951] usb 5-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 182.106929][ T24] usb 3-1: config 0 interface 210 has no altsetting 0 [ 182.117839][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.132549][ T5951] usb 5-1: Product: syz [ 182.133497][ T24] usb 3-1: New USB device found, idVendor=12d1, idProduct=2b49, bcdDevice=4c.f5 [ 182.136784][ T5951] usb 5-1: Manufacturer: syz [ 182.146448][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.150426][ T5951] usb 5-1: SerialNumber: syz [ 182.159108][ T24] usb 3-1: Product: syz [ 182.168316][ T24] usb 3-1: Manufacturer: syz [ 182.173176][ T24] usb 3-1: SerialNumber: syz [ 182.183909][ T24] usb 3-1: config 0 descriptor?? [ 182.395638][ T24] option 3-1:0.210: GSM modem (1-port) converter detected [ 182.429294][ T24] usb 3-1: USB disconnect, device number 54 [ 182.435484][ T5951] usb 5-1: USB disconnect, device number 35 [ 182.468179][ T24] option 3-1:0.210: device disconnected [ 182.602564][ T7030] tmpfs: Bad value for 'mpol' [ 183.034351][ T24] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 183.247604][ T7062] netlink: 'syz.4.305': attribute type 21 has an invalid length. [ 183.622428][ T7076] netlink: zone id is out of range [ 183.628869][ T7076] netlink: zone id is out of range [ 183.754253][ T43] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 183.809967][ T7086] trusted_key: syz.2.311 sent an empty control message without MSG_MORE. [ 183.884271][ T24] usb 5-1: device descriptor read/64, error -71 [ 183.914688][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 183.927795][ T43] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 183.938700][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.949764][ T43] usb 4-1: Product: syz [ 183.957470][ T43] usb 4-1: Manufacturer: syz [ 183.962249][ T43] usb 4-1: SerialNumber: syz [ 183.972005][ T43] r8152-cfgselector 4-1: Unknown version 0x0000 [ 183.978523][ T43] r8152-cfgselector 4-1: config 0 descriptor?? [ 184.124747][ T24] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 184.194245][ T6011] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 184.254185][ T24] usb 5-1: device descriptor read/64, error -71 [ 184.344188][ T6011] usb 3-1: Using ep0 maxpacket: 32 [ 184.351306][ T6011] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 184.360666][ T6011] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.370118][ T24] usb usb5-port1: attempt power cycle [ 184.377641][ T6011] usb 3-1: config 0 descriptor?? [ 184.586855][ T6011] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 184.595931][ T6011] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 184.607517][ T6011] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 184.615436][ T6011] usb 3-1: media controller created [ 184.633039][ T6011] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 184.666785][ T9] r8152-cfgselector 4-1: USB disconnect, device number 58 [ 184.699134][ T6011] DVB: Unable to find symbol dib7000p_attach() [ 184.708056][ T6011] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 184.718381][ T24] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 184.767799][ T24] usb 5-1: device descriptor read/8, error -71 [ 184.784488][ T6011] rc_core: IR keymap rc-dib0700-rc5 not found [ 184.796135][ T6011] Registered IR keymap rc-empty [ 184.797559][ T7092] dib0700: tx buffer length is larger than 4. Not supported. [ 184.810268][ T6011] dvb-usb: could not initialize remote control. [ 184.821391][ T6011] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 184.834972][ T6011] usb 3-1: USB disconnect, device number 55 [ 184.870548][ T6011] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 185.024245][ T24] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 185.045035][ T24] usb 5-1: device descriptor read/8, error -71 [ 185.155334][ T24] usb usb5-port1: unable to enumerate USB device [ 185.213700][ T7102] overlayfs: missing 'lowerdir' [ 185.454483][ T24] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 185.584252][ T5930] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 185.607849][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 185.616100][ T24] usb 4-1: not running at top speed; connect to a high speed hub [ 185.625668][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 242, setting to 64 [ 185.636612][ T24] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 185.649761][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 185.659344][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.667428][ T24] usb 4-1: Product: syz [ 185.671624][ T24] usb 4-1: Manufacturer: syz [ 185.678254][ T24] usb 4-1: SerialNumber: syz [ 185.692297][ T7102] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 185.724228][ T5930] usb 3-1: device descriptor read/64, error -71 [ 185.903697][ T7102] block nbd3: Attempted send on invalid socket [ 185.911057][ T7102] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 185.922457][ T7102] hpfs: hpfs_map_sector(): read error [ 185.936224][ T24] cdc_ncm 4-1:1.0: bind() failure [ 185.944904][ T24] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 185.951737][ T24] cdc_ncm 4-1:1.1: bind() failure [ 185.963709][ T24] usb 4-1: USB disconnect, device number 59 [ 185.974940][ T5930] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 185.975116][ T9] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 186.104293][ T5930] usb 3-1: device descriptor read/64, error -71 [ 186.145993][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.156479][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 186.165593][ T9] usb 2-1: config 1 has no interface number 0 [ 186.171720][ T9] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.182697][ T9] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 186.191825][ T9] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 186.207379][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 186.214810][ T5930] usb usb3-port1: attempt power cycle [ 186.216500][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.231169][ T9] usb 2-1: Product: syz [ 186.236160][ T9] usb 2-1: Manufacturer: syz [ 186.240782][ T9] usb 2-1: SerialNumber: syz [ 186.564873][ T5930] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 186.584877][ T5930] usb 3-1: device descriptor read/8, error -71 [ 186.754257][ T6011] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 186.814277][ T5951] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 186.825352][ T5930] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 186.844652][ T5930] usb 3-1: device descriptor read/8, error -71 [ 186.905951][ T6011] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 186.914229][ T6011] usb 4-1: config 0 has no interface number 0 [ 186.920334][ T6011] usb 4-1: config 0 interface 29 has no altsetting 0 [ 186.929742][ T6011] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 186.939940][ T6011] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.948148][ T6011] usb 4-1: Product: syz [ 186.952413][ T6011] usb 4-1: Manufacturer: syz [ 186.954285][ T5951] usb 5-1: device descriptor read/64, error -71 [ 186.957962][ T6011] usb 4-1: SerialNumber: syz [ 186.968095][ T5930] usb usb3-port1: unable to enumerate USB device [ 186.977195][ T6011] usb 4-1: config 0 descriptor?? [ 187.070505][ T9] cdc_ncm 2-1:1.1: bind() failure [ 187.187788][ T6011] peak_usb 4-1:0.29 can0: unable to request usb[type=0 value=1] err=-71 [ 187.194861][ T5951] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 187.198588][ T6011] peak_usb 4-1:0.29: unable to read PCAN-USB X6 firmware info (err -71) [ 187.266030][ T6011] peak_usb 4-1:0.29: probe with driver peak_usb failed with error -71 [ 187.280470][ T6011] usb 4-1: USB disconnect, device number 60 [ 187.297717][ T9] usb 2-1: USB disconnect, device number 47 [ 187.347325][ T5951] usb 5-1: device descriptor read/64, error -71 [ 187.454672][ T5951] usb usb5-port1: attempt power cycle [ 187.742835][ T7114] netlink: 16 bytes leftover after parsing attributes in process `syz.3.321'. [ 187.793991][ T7118] ªªªªªª: renamed from wg2 (while UP) [ 187.805284][ T5951] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 187.847885][ T5951] usb 5-1: device descriptor read/8, error -71 [ 188.124285][ T5951] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 188.134355][ T5844] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 188.144819][ T5951] usb 5-1: device descriptor read/8, error -71 [ 188.204213][ T9] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 188.254430][ T5951] usb usb5-port1: unable to enumerate USB device [ 188.284284][ T5844] usb 2-1: Using ep0 maxpacket: 8 [ 188.290948][ T5844] usb 2-1: config 6 has an invalid interface number: 2 but max is 0 [ 188.299046][ T5844] usb 2-1: config 6 has no interface number 0 [ 188.305818][ T5844] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 188.315595][ T5844] usb 2-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xDD, changing to 0x8D [ 188.327259][ T5844] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 188.339615][ T5844] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 188.349312][ T5844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.357666][ T5844] usb 2-1: Product: syz [ 188.361931][ T5844] usb 2-1: Manufacturer: syz [ 188.366873][ T5844] usb 2-1: SerialNumber: syz [ 188.376757][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.390285][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.391891][ T5844] hso 2-1:6.2: Failed to find INT IN ep [ 188.407501][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 188.417628][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.444998][ T9] usb 4-1: config 0 descriptor?? [ 188.617843][ T6011] usb 2-1: USB disconnect, device number 48 [ 188.834211][ T5844] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 188.858786][ T7127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.867735][ T7127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.878966][ T9] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0 [ 188.888277][ T9] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0 [ 188.895765][ T9] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0 [ 188.902594][ T9] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0 [ 188.909760][ T9] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0 [ 188.917024][ T9] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0 [ 188.923820][ T9] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0 [ 188.932721][ T9] arvo 0003:1E7D:30D4.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 188.994221][ T5844] usb 3-1: Using ep0 maxpacket: 16 [ 189.002264][ T5844] usb 3-1: config 1 interface 0 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 64 [ 189.013534][ T5844] usb 3-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 189.026927][ T5844] usb 3-1: config 1 interface 0 has no altsetting 0 [ 189.036732][ T5844] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 189.045892][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.053892][ T5844] usb 3-1: Product: syz [ 189.058193][ T5844] usb 3-1: Manufacturer: †[ 189.062819][ T5844] usb 3-1: SerialNumber: syz [ 189.071203][ T7133] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 189.078762][ T9] arvo 0003:1E7D:30D4.0004: couldn't init struct arvo_device [ 189.080908][ T7133] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 189.092395][ T9] arvo 0003:1E7D:30D4.0004: couldn't install keyboard [ 189.103739][ T9] arvo 0003:1E7D:30D4.0004: probe with driver arvo failed with error -71 [ 189.118986][ T9] usb 4-1: USB disconnect, device number 61 [ 189.404380][ T6011] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 189.508396][ T7133] netlink: 68 bytes leftover after parsing attributes in process `syz.2.328'. [ 189.554164][ T6011] usb 2-1: Using ep0 maxpacket: 8 [ 189.561598][ T6011] usb 2-1: unable to get BOS descriptor or descriptor too short [ 189.570733][ T6011] usb 2-1: config 6 has an invalid interface number: 194 but max is 0 [ 189.579364][ T6011] usb 2-1: config 6 has no interface number 0 [ 189.592590][ T6011] usb 2-1: config 6 interface 194 has no altsetting 0 [ 189.616490][ T6011] usb 2-1: New USB device found, idVendor=0403, idProduct=d578, bcdDevice=32.00 [ 189.631141][ T6011] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.639330][ T6011] usb 2-1: Product: syz [ 189.643503][ T6011] usb 2-1: Manufacturer: syz [ 189.655041][ T6011] usb 2-1: SerialNumber: syz [ 189.706381][ T5844] usb 3-1: USB disconnect, device number 60 [ 189.877737][ T7136] Dead loop on virtual device ip6_vti0, fix it urgently! [ 189.892859][ T6011] ftdi_sio 2-1:6.194: FTDI USB Serial Device converter detected [ 189.901550][ T6011] usb 2-1: Detected FT233HP [ 189.907559][ T6011] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 189.915117][ T6011] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 189.923207][ T6011] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 189.936763][ T6011] usb 2-1: USB disconnect, device number 49 [ 189.944241][ T24] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 189.957030][ T6011] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 189.967283][ T6011] ftdi_sio 2-1:6.194: device disconnected [ 190.115748][ T24] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 190.124043][ T24] usb 4-1: config 0 has no interface number 0 [ 190.130478][ T24] usb 4-1: config 0 interface 29 has no altsetting 0 [ 190.139803][ T24] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 190.149314][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.157499][ T24] usb 4-1: Product: syz [ 190.161677][ T24] usb 4-1: Manufacturer: syz [ 190.166372][ T24] usb 4-1: SerialNumber: syz [ 190.172878][ T24] usb 4-1: config 0 descriptor?? [ 190.384250][ T24] peak_usb 4-1:0.29 can0: unable to request usb[type=0 value=1] err=-71 [ 190.392926][ T24] peak_usb 4-1:0.29: unable to read PCAN-USB X6 firmware info (err -71) [ 190.446060][ T24] peak_usb 4-1:0.29: probe with driver peak_usb failed with error -71 [ 190.463662][ T24] usb 4-1: USB disconnect, device number 62 [ 190.514230][ T6011] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 190.665944][ T6011] usb 3-1: config 0 has an invalid interface number: 49 but max is 0 [ 190.674340][ T6011] usb 3-1: config 0 has no interface number 0 [ 190.680434][ T6011] usb 3-1: config 0 interface 49 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 190.693685][ T6011] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 190.694229][ T5844] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 190.703406][ T6011] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.718975][ T6011] usb 3-1: Product: syz [ 190.723162][ T6011] usb 3-1: Manufacturer: syz [ 190.728829][ T6011] usb 3-1: SerialNumber: syz [ 190.735332][ T6011] usb 3-1: config 0 descriptor?? [ 190.854243][ T43] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 190.854342][ T5844] usb 2-1: Using ep0 maxpacket: 32 [ 190.868871][ T5844] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 190.879308][ T5844] usb 2-1: config 0 has no interface number 0 [ 190.885631][ T5844] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 190.895816][ T5844] usb 2-1: config 0 interface 196 has no altsetting 0 [ 190.915572][ T5844] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 190.924726][ T5844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.935522][ T5844] usb 2-1: Product: syz [ 190.939731][ T5844] usb 2-1: Manufacturer: syz [ 190.954347][ T6011] qmi_wwan 3-1:0.49: probe with driver qmi_wwan failed with error -22 [ 190.972847][ T5844] usb 2-1: SerialNumber: syz [ 190.986363][ T5844] usb 2-1: config 0 descriptor?? [ 190.986581][ T6011] usb 3-1: USB disconnect, device number 61 [ 190.994919][ T7148] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 191.034183][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 191.041087][ T43] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 191.051005][ T43] usb 5-1: config 0 has no interface number 0 [ 191.058279][ T43] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 191.068798][ T43] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 191.082709][ T43] usb 5-1: config 0 interface 126 has no altsetting 0 [ 191.092590][ T43] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 191.102668][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.111172][ T43] usb 5-1: Product: syz [ 191.116010][ T43] usb 5-1: Manufacturer: syz [ 191.120721][ T43] usb 5-1: SerialNumber: syz [ 191.127911][ T43] usb 5-1: config 0 descriptor?? [ 191.133726][ T7150] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 191.142324][ T7150] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 191.254241][ T9] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 191.351504][ T7150] usb usb8: usbfs: process 7150 (syz.4.335) did not claim interface 32 before use [ 191.364754][ T7150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.373875][ T7150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.396636][ T43] ir_usb 5-1:0.126: IR Dongle converter detected [ 191.403817][ T43] usb 5-1: IRDA class descriptor not found, device not bound [ 191.415804][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 191.420862][ T43] usb 5-1: USB disconnect, device number 44 [ 191.423724][ T9] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 191.428164][ T7148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.452687][ T9] usb 4-1: config 0 has no interface number 0 [ 191.455248][ T7148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.473425][ T9] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 191.475018][ T7148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.487402][ T9] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 191.507013][ T9] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 191.518408][ T9] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 191.521490][ T7148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.534492][ T9] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 191.570734][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.581851][ T9] usb 4-1: config 0 descriptor?? [ 191.596832][ T9] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 191.626909][ T7154] comedi comedi3: 8255: I/O port conflict (0x10003,4) [ 191.633900][ T7154] comedi comedi3: 8255: I/O port conflict (0x10000,4) [ 191.640910][ T7154] comedi comedi3: 8255: I/O port conflict (0x7f,4) [ 191.648685][ T7154] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 191.655502][ T7154] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 191.662020][ T7154] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 191.771767][ T5844] ipheth 2-1:0.196: ipheth_enable_ncm: usb_control_msg: -71 [ 191.793317][ T5844] ipheth 2-1:0.196: Apple iPhone USB Ethernet device attached [ 191.802991][ T43] usb 4-1: USB disconnect, device number 63 [ 191.806458][ T5844] usb 2-1: USB disconnect, device number 50 [ 191.809073][ C1] ldusb 4-1:0.55: usb_submit_urb failed (-19) [ 191.837928][ T43] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 191.875098][ T5844] ipheth 2-1:0.196: Apple iPhone USB Ethernet now disconnected [ 192.004713][ T5930] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 192.018834][ T7152] ldusb: No device or device unplugged -19 [ 192.202939][ T5930] usb 3-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 192.213774][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.223998][ T5930] usb 3-1: Product: syz [ 192.228491][ T5930] usb 3-1: Manufacturer: syz [ 192.233097][ T5930] usb 3-1: SerialNumber: syz [ 192.240746][ T5930] usb 3-1: config 0 descriptor?? [ 192.245434][ T9] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 192.249222][ T5930] go7007 3-1:0.0: probe with driver go7007 failed with error -12 [ 192.418125][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 192.427264][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.437997][ T9] usb 5-1: Product: syz [ 192.442259][ T9] usb 5-1: Manufacturer: syz [ 192.447157][ T9] usb 5-1: SerialNumber: syz [ 192.466423][ T7158] netlink: 40 bytes leftover after parsing attributes in process `syz.2.339'. [ 192.477533][ T5930] usb 3-1: USB disconnect, device number 62 [ 192.804176][ T5948] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 192.954420][ T5948] usb 4-1: Using ep0 maxpacket: 8 [ 192.961262][ T5948] usb 4-1: config 0 has an invalid interface number: 247 but max is 0 [ 192.969797][ T5948] usb 4-1: config 0 has no interface number 0 [ 192.976173][ T5948] usb 4-1: config 0 interface 247 has no altsetting 0 [ 192.985785][ T5948] usb 4-1: New USB device found, idVendor=0bb4, idProduct=0a02, bcdDevice=fc.52 [ 192.994996][ T5948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.003028][ T5948] usb 4-1: Product: syz [ 193.007710][ T5948] usb 4-1: Manufacturer: syz [ 193.012325][ T5948] usb 4-1: SerialNumber: syz [ 193.020834][ T5948] usb 4-1: config 0 descriptor?? [ 193.061802][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 193.104364][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 193.126222][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 193.149181][ T9] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 193.161712][ T7176] netlink: 104 bytes leftover after parsing attributes in process `syz.1.345'. [ 193.186222][ T9] usb 5-1: USB disconnect, device number 45 [ 193.289016][ T7181] PKCS7: Unknown OID: [4] 0.0 [ 193.295056][ T7181] PKCS7: Only support pkcs7_signedData type [ 193.375314][ T5948] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 193.536228][ T5948] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 193.544886][ T5948] usb 3-1: config 0 has no interface number 0 [ 193.551026][ T5948] usb 3-1: config 0 interface 29 has no altsetting 0 [ 193.554369][ T9] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 193.561880][ T5948] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 193.574674][ T5948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.582683][ T5948] usb 3-1: Product: syz [ 193.586961][ T5948] usb 3-1: Manufacturer: syz [ 193.591558][ T5948] usb 3-1: SerialNumber: syz [ 193.599487][ T5948] usb 3-1: config 0 descriptor?? [ 193.664276][ T5930] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 193.714197][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 193.723319][ T9] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 193.732471][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.740515][ T9] usb 5-1: Product: syz [ 193.744785][ T9] usb 5-1: Manufacturer: syz [ 193.749483][ T9] usb 5-1: SerialNumber: syz [ 193.759012][ T9] usb 5-1: config 0 descriptor?? [ 193.811938][ T5948] peak_usb 3-1:0.29 can0: unable to request usb[type=0 value=1] err=-71 [ 193.822255][ T5948] peak_usb 3-1:0.29: unable to read PCAN-USB X6 firmware info (err -71) [ 193.856300][ T5930] usb 2-1: config 0 has an invalid interface number: 170 but max is 0 [ 193.864902][ T5930] usb 2-1: config 0 has no interface number 0 [ 193.871024][ T5930] usb 2-1: config 0 interface 170 has no altsetting 0 [ 193.879483][ T5948] peak_usb 3-1:0.29: probe with driver peak_usb failed with error -71 [ 193.887783][ T5930] usb 2-1: New USB device found, idVendor=c383, idProduct=abd3, bcdDevice=60.bf [ 193.899213][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.909082][ T5948] usb 3-1: USB disconnect, device number 63 [ 193.924270][ T5930] usb 2-1: config 0 descriptor?? [ 193.936553][ T5930] usb 2-1: bad CDC descriptors [ 193.967068][ T9] airspy 5-1:0.0: usb_control_msg() failed -71 request 09 [ 193.978313][ T9] airspy 5-1:0.0: Could not detect board [ 193.985419][ T9] airspy 5-1:0.0: probe with driver airspy failed with error -71 [ 194.000411][ T9] usb 5-1: USB disconnect, device number 46 [ 194.137887][ T5844] usb 2-1: USB disconnect, device number 51 [ 194.318739][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.326762][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.884272][ T5948] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 194.974201][ T5930] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 195.044443][ T5948] usb 5-1: Using ep0 maxpacket: 32 [ 195.052275][ T5948] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 195.060651][ T5948] usb 5-1: config 0 has no interface number 0 [ 195.068784][ T5948] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 195.078375][ T43] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 195.086065][ T5948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.094360][ T5948] usb 5-1: Product: syz [ 195.098611][ T5948] usb 5-1: Manufacturer: syz [ 195.103652][ T5948] usb 5-1: SerialNumber: syz [ 195.110725][ T5948] usb 5-1: config 0 descriptor?? [ 195.118010][ T5948] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 195.130146][ T5930] usb 2-1: unable to get BOS descriptor or descriptor too short [ 195.140132][ T5930] usb 2-1: config 7 has an invalid interface number: 73 but max is 0 [ 195.148301][ T5930] usb 2-1: config 7 has no interface number 0 [ 195.154478][ T5930] usb 2-1: config 7 interface 73 has no altsetting 0 [ 195.163440][ T5930] usb 2-1: New USB device found, idVendor=3980, idProduct=0003, bcdDevice=46.7e [ 195.173112][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.181569][ T5930] usb 2-1: Product: syz [ 195.185838][ T5930] usb 2-1: Manufacturer: syz [ 195.190491][ T5930] usb 2-1: SerialNumber: syz [ 195.246364][ T43] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 195.254887][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.265947][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.276911][ T43] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 195.286587][ T43] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 195.294891][ T43] usb 3-1: Manufacturer: syz [ 195.301660][ T43] usb 3-1: config 0 descriptor?? [ 195.309554][ T43] igorplugusb 3-1:0.0: endpoint incorrect [ 195.334718][ T5948] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 195.348394][ T5948] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 195.400362][ T7200] netlink: 'syz.1.354': attribute type 10 has an invalid length. [ 195.408792][ T7203] netlink: 'syz.1.354': attribute type 10 has an invalid length. [ 195.419589][ T7200] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.429353][ T7200] bond0: (slave team0): Enslaving as an active interface with an up link [ 195.451046][ T5930] rtl8150 2-1:7.73: couldn't find required endpoints [ 195.458470][ T5930] rtl8150 2-1:7.73: probe with driver rtl8150 failed with error -5 [ 195.471514][ T5930] usb 2-1: USB disconnect, device number 52 [ 195.510656][ T5948] usb 3-1: USB disconnect, device number 64 [ 195.586796][ T5844] usb 4-1: USB disconnect, device number 64 [ 195.636174][ T30] audit: type=1326 audit(2000000012.640:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7204 comm="syz.3.356" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f27d738eec9 code=0x0 [ 195.885993][ T7206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.895106][ T7206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.993494][ T7208] program syz.1.357 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 196.007288][ T7208] capability: warning: `syz.1.357' uses 32-bit capabilities (legacy support in use) [ 196.114957][ T7211] netlink: 12 bytes leftover after parsing attributes in process `syz.2.358'. [ 196.346130][ T9] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 196.506533][ T9] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 196.518700][ T9] usb 2-1: config 0 has no interface number 0 [ 196.530425][ T9] usb 2-1: config 0 interface 29 has no altsetting 0 [ 196.540104][ T9] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 196.549625][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.558796][ T9] usb 2-1: Product: syz [ 196.565800][ T9] usb 2-1: Manufacturer: syz [ 196.566473][ T5930] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 196.570508][ T9] usb 2-1: SerialNumber: syz [ 196.590132][ T9] usb 2-1: config 0 descriptor?? [ 196.725888][ T5930] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 196.734246][ T5930] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.745075][ T5930] usb 3-1: config 0 has no interface number 0 [ 196.751244][ T5930] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 196.761236][ T5930] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 196.777526][ T5930] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 196.786808][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.795776][ T5930] usb 3-1: Product: syz [ 196.799988][ T5930] usb 3-1: Manufacturer: syz [ 196.804733][ T5930] usb 3-1: SerialNumber: syz [ 196.815342][ T5930] usb 3-1: config 0 descriptor?? [ 196.818265][ T9] peak_usb 2-1:0.29 can0: unable to request usb[type=0 value=1] err=-71 [ 196.829462][ T9] peak_usb 2-1:0.29: unable to read PCAN-USB X6 firmware info (err -71) [ 196.874216][ T5956] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 196.885704][ T9] peak_usb 2-1:0.29: probe with driver peak_usb failed with error -71 [ 196.902098][ T9] usb 2-1: USB disconnect, device number 53 [ 197.024297][ T5956] usb 4-1: Using ep0 maxpacket: 8 [ 197.034452][ T5956] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.051608][ T5956] usb 4-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=46.08 [ 197.060921][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.069224][ T5956] usb 4-1: Product: syz [ 197.073511][ T5956] usb 4-1: Manufacturer: syz [ 197.079615][ T5956] usb 4-1: SerialNumber: syz [ 197.097408][ T5956] usb 4-1: config 0 descriptor?? [ 197.112111][ T5956] comedi comedi5: Wrong number of endpoints [ 197.118494][ T5956] dt9812 4-1:0.0: driver 'dt9812' failed to auto-configure device. [ 197.308254][ T7224] netlink: 4092 bytes leftover after parsing attributes in process `syz.3.362'. [ 197.319168][ T5956] usb 4-1: USB disconnect, device number 65 [ 197.369847][ T5930] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 197.397796][ T7226] netlink: 'syz.1.363': attribute type 17 has an invalid length. [ 197.409440][ T5930] usb 3-1: USB disconnect, device number 65 [ 197.473056][ T7228] input: syz1 as /devices/virtual/input/input26 [ 197.671965][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 197.672458][ T5956] usb 5-1: USB disconnect, device number 47 [ 197.707036][ T5956] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 197.732448][ T5956] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 197.751808][ T5956] quatech2 5-1:0.51: device disconnected [ 197.936727][ T7241] IPv6: NLM_F_CREATE should be specified when creating new route [ 198.017335][ T5930] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 198.074522][ T5956] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 198.104273][ T9] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 198.174238][ T5930] usb 2-1: Using ep0 maxpacket: 8 [ 198.181159][ T5930] usb 2-1: unable to get BOS descriptor or descriptor too short [ 198.190017][ T5930] usb 2-1: config 1 interface 0 has no altsetting 0 [ 198.198633][ T5930] usb 2-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 198.208168][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.216248][ T5930] usb 2-1: Product: syz [ 198.220412][ T5930] usb 2-1: Manufacturer: syz [ 198.225081][ T5930] usb 2-1: SerialNumber: syz [ 198.226628][ T5956] usb 5-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 198.240196][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.253708][ T5956] usb 5-1: config 0 descriptor?? [ 198.259213][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 198.271417][ T9] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 198.280134][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 198.290437][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 198.300385][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 198.311594][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 198.325085][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 198.334277][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.452576][ T7231] /dev/nullb0: Can't open blockdev [ 198.488968][ T5956] aquacomputer_d5next 0003:0C70:F011.0005: hidraw0: USB HID v0.09 Device [HID 0c70:f011] on usb-dummy_hcd.4-1/input0 [ 198.549075][ T9] usb 4-1: usb_control_msg returned -32 [ 198.566605][ T7250] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 198.585780][ T9] usbtmc 4-1:16.0: can't read capabilities [ 198.685113][ T5956] usb 5-1: USB disconnect, device number 48 [ 198.914171][ T9] usb 4-1: USB disconnect, device number 66 [ 198.987558][ T5930] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input27 [ 198.999793][ T5217] bcm5974 2-1:1.0: could not read from device [ 199.015844][ T5217] bcm5974 2-1:1.0: could not read from device [ 199.030386][ T5930] usb 2-1: USB disconnect, device number 54 [ 199.038948][ T5217] bcm5974 2-1:1.0: could not read from device [ 199.047938][ T5217] bcm5974 2-1:1.0: could not read from device [ 199.084201][ T5956] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 199.252946][ T7267] x_tables: ip_tables: TPROXY.0 target: invalid size 16 (kernel) != (user) 24 [ 199.265033][ T5956] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 199.273433][ T5956] usb 5-1: config 0 has no interface number 0 [ 199.295208][ T5956] usb 5-1: config 0 interface 29 has no altsetting 0 [ 199.307967][ T5956] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 199.316599][ T7270] netlink: 'syz.3.374': attribute type 1 has an invalid length. [ 199.324969][ T5956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.324993][ T5956] usb 5-1: Product: syz [ 199.325006][ T5956] usb 5-1: Manufacturer: syz [ 199.325019][ T5956] usb 5-1: SerialNumber: syz [ 199.330599][ T5956] usb 5-1: config 0 descriptor?? [ 199.344231][ T7270] netlink: 'syz.3.374': attribute type 2 has an invalid length. [ 199.359911][ T7270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.374'. [ 199.457590][ T7273] program syz.2.376 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 199.560883][ T5956] peak_usb 5-1:0.29 can0: unable to request usb[type=0 value=1] err=-71 [ 199.579876][ T5956] peak_usb 5-1:0.29: unable to read PCAN-USB X6 firmware info (err -71) [ 199.606534][ T7277] Bluetooth: MGMT ver 1.23 [ 199.665743][ T5956] peak_usb 5-1:0.29: probe with driver peak_usb failed with error -71 [ 199.701110][ T5956] usb 5-1: USB disconnect, device number 49 [ 199.870987][ T30] audit: type=1326 audit(2000000016.870:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7291 comm="syz.2.381" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f317ab8eec9 code=0x0 [ 200.044627][ T5930] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 200.145011][ T5948] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 200.174202][ T5930] usb 4-1: device descriptor read/64, error -71 [ 200.306173][ T5948] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.316538][ T5948] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 200.326519][ T5948] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 200.335958][ T5948] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 200.343938][ T5948] usb 2-1: SerialNumber: syz [ 200.364233][ T6011] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 200.414340][ T5930] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 200.515629][ T6011] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.526672][ T6011] usb 5-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 200.535816][ T6011] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.546467][ T6011] usb 5-1: config 0 descriptor?? [ 200.554315][ T5930] usb 4-1: device descriptor read/64, error -71 [ 200.568324][ T5948] usb 2-1: 0:2 : does not exist [ 200.583380][ T5948] usb 2-1: USB disconnect, device number 55 [ 200.609389][ T6992] udevd[6992]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 200.674486][ T5930] usb usb4-port1: attempt power cycle [ 200.753961][ T7304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.383'. [ 200.792289][ T6011] hid_mf 0003:0079:1846.0006: unknown main item tag 0x4 [ 200.797573][ T7306] overlayfs: missing 'lowerdir' [ 200.802232][ T6011] hid_mf 0003:0079:1846.0006: item fetching failed at offset 6/7 [ 200.813632][ T6011] hid_mf 0003:0079:1846.0006: HID parse failed. [ 200.818651][ T7306] overlay: ./file0 is not a directory [ 200.822936][ T6011] hid_mf 0003:0079:1846.0006: probe with driver hid_mf failed with error -22 [ 200.981186][ T6011] usb 5-1: USB disconnect, device number 50 [ 201.038208][ T5930] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 201.064735][ T5930] usb 4-1: device descriptor read/8, error -71 [ 201.084248][ T5956] usb 3-1: new low-speed USB device number 66 using dummy_hcd [ 201.110105][ T7308] netlink: 'syz.1.386': attribute type 1 has an invalid length. [ 201.118379][ T7308] netlink: 224 bytes leftover after parsing attributes in process `syz.1.386'. [ 201.256248][ T5956] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 201.264677][ T5956] usb 3-1: config 0 has no interface number 0 [ 201.270880][ T5956] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 201.283378][ T5956] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 201.292945][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.304660][ T5956] usb 3-1: config 0 descriptor?? [ 201.311059][ T7306] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 201.323895][ T5956] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 201.325380][ T5930] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 201.396257][ T5930] usb 4-1: device descriptor read/8, error -71 [ 201.506550][ T5930] usb usb4-port1: unable to enumerate USB device [ 202.034269][ T5956] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 202.054207][ T5948] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 202.184361][ T5956] usb 2-1: Using ep0 maxpacket: 32 [ 202.191339][ T5956] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.203121][ T5956] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 202.214803][ T5956] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 202.219578][ T5948] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 202.223985][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.232896][ T5948] usb 5-1: config 0 has no interface number 0 [ 202.240884][ T5956] usb 2-1: Product: syz [ 202.250905][ T5956] usb 2-1: Manufacturer: syz [ 202.255763][ T5956] usb 2-1: SerialNumber: syz [ 202.256411][ T5948] usb 5-1: config 0 interface 29 has no altsetting 0 [ 202.265239][ T5956] usb 2-1: config 0 descriptor?? [ 202.270713][ T5948] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 202.281675][ T5948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.292113][ T5948] usb 5-1: Product: syz [ 202.297807][ T5948] usb 5-1: Manufacturer: syz [ 202.302654][ T5948] usb 5-1: SerialNumber: syz [ 202.311023][ T5948] usb 5-1: config 0 descriptor?? [ 202.476387][ T7326] FAULT_INJECTION: forcing a failure. [ 202.476387][ T7326] name failslab, interval 1, probability 0, space 0, times 0 [ 202.489322][ T7326] CPU: 0 UID: 0 PID: 7326 Comm: syz.1.390 Not tainted syzkaller #0 PREEMPT(full) [ 202.489343][ T7326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 202.489352][ T7326] Call Trace: [ 202.489358][ T7326] [ 202.489362][ T7326] dump_stack_lvl+0x189/0x250 [ 202.489377][ T7326] ? __pfx____ratelimit+0x10/0x10 [ 202.489391][ T7326] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.489404][ T7326] ? __pfx__printk+0x10/0x10 [ 202.489434][ T7326] ? __pfx___might_resched+0x10/0x10 [ 202.489461][ T7326] should_fail_ex+0x414/0x560 [ 202.489488][ T7326] should_failslab+0xa8/0x100 [ 202.489506][ T7326] __kmalloc_noprof+0xcb/0x7f0 [ 202.489517][ T7326] ? kfree+0x4d/0x6d0 [ 202.489525][ T7326] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 202.489542][ T7326] tomoyo_realpath_from_path+0xe3/0x5d0 [ 202.489559][ T7326] ? tomoyo_domain+0xd9/0x130 [ 202.489584][ T7326] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 202.489603][ T7326] tomoyo_path_number_perm+0x1e8/0x5a0 [ 202.489623][ T7326] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 202.489680][ T7326] ? __fget_files+0x2a/0x420 [ 202.489698][ T7326] ? __fget_files+0x3a0/0x420 [ 202.489706][ T7326] ? __fget_files+0x2a/0x420 [ 202.489722][ T7326] security_file_ioctl+0xcb/0x2d0 [ 202.489740][ T7326] __se_sys_ioctl+0x47/0x170 [ 202.489764][ T7326] do_syscall_64+0xfa/0xfa0 [ 202.489778][ T7326] ? lockdep_hardirqs_on+0x9c/0x150 [ 202.489800][ T7326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.489811][ T7326] ? clear_bhb_loop+0x60/0xb0 [ 202.489823][ T7326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.489831][ T7326] RIP: 0033:0x7fafd5f8eec9 [ 202.489842][ T7326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.489850][ T7326] RSP: 002b:00007fafd6e6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 202.489863][ T7326] RAX: ffffffffffffffda RBX: 00007fafd61e5fa0 RCX: 00007fafd5f8eec9 [ 202.489874][ T7326] RDX: 0000000000000000 RSI: 00000000400448c9 RDI: 0000000000000004 [ 202.489885][ T7326] RBP: 00007fafd6e6e090 R08: 0000000000000000 R09: 0000000000000000 [ 202.489895][ T7326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.489905][ T7326] R13: 00007fafd61e6038 R14: 00007fafd61e5fa0 R15: 00007ffc64aa93f8 [ 202.489936][ T7326] [ 202.489989][ T7326] ERROR: Out of memory at tomoyo_realpath_from_path. [ 202.530655][ T5948] peak_usb 5-1:0.29 can0: unable to request usb[type=0 value=1] err=-71 [ 202.539264][ T5951] usb 2-1: USB disconnect, device number 56 [ 202.548756][ T5948] peak_usb 5-1:0.29: unable to read PCAN-USB X6 firmware info (err -71) [ 202.807852][ T5948] peak_usb 5-1:0.29: probe with driver peak_usb failed with error -71 [ 202.834545][ T5948] usb 5-1: USB disconnect, device number 51 [ 203.194267][ T43] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 203.364198][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 203.371423][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.382445][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.392370][ T43] usb 4-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 203.401586][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.409897][ T6011] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 203.420227][ T43] usb 4-1: config 0 descriptor?? [ 203.454425][ T5951] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 203.584194][ T6011] usb 2-1: Using ep0 maxpacket: 32 [ 203.591348][ T6011] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 203.599889][ T6011] usb 2-1: config 0 has no interface number 0 [ 203.608389][ T6011] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 203.614237][ T5951] usb 5-1: Using ep0 maxpacket: 8 [ 203.617599][ T6011] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.631581][ T6011] usb 2-1: Product: syz [ 203.636479][ T6011] usb 2-1: Manufacturer: syz [ 203.641311][ T6011] usb 2-1: SerialNumber: syz [ 203.646763][ T5951] usb 5-1: unable to get BOS descriptor or descriptor too short [ 203.657612][ T6011] usb 2-1: config 0 descriptor?? [ 203.666961][ T5951] usb 5-1: config 8 has an invalid interface number: 255 but max is 0 [ 203.676614][ T6011] smsc95xx v2.0.0 [ 203.678333][ T5951] usb 5-1: config 8 has no interface number 0 [ 203.686887][ T5951] usb 5-1: config 8 interface 255 has no altsetting 0 [ 203.697830][ T5951] usb 5-1: string descriptor 0 read error: -22 [ 203.704846][ T5951] usb 5-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 203.714022][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.795873][ T5948] usb 3-1: USB disconnect, device number 66 [ 203.939692][ T7338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.959917][ T7338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.083460][ T6011] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 204.095060][ T6011] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 204.116736][ T43] usbhid 4-1:0.0: can't add hid device: -71 [ 204.122803][ T43] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 204.131419][ T6011] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 204.145710][ T43] usb 4-1: USB disconnect, device number 71 [ 204.159814][ T5951] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.4-1, 00:00:00:00:00:00. [ 204.163376][ T6011] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 204.223941][ T5951] usb 5-1: USB disconnect, device number 52 [ 204.244523][ T5948] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 204.401668][ T5948] usb 3-1: config 4 has an invalid interface number: 231 but max is 0 [ 204.415540][ T5948] usb 3-1: config 4 has no interface number 0 [ 204.426883][ T5948] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 204.436512][ T5948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.445025][ T5948] usb 3-1: Product: syz [ 204.449797][ T5948] usb 3-1: Manufacturer: syz [ 204.454806][ T5948] usb 3-1: SerialNumber: syz [ 204.472016][ T5948] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 204.485281][ T7336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.497455][ T7336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.676595][ T5948] vp7045: USB control message 'out' went wrong. [ 204.695067][ T5948] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 204.716456][ T5948] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 204.759972][ T5948] usb 3-1: USB disconnect, device number 67 [ 205.134193][ T5951] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 205.294241][ T5951] usb 4-1: Using ep0 maxpacket: 32 [ 205.301319][ T5951] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.312366][ T5951] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 205.325512][ T5951] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 205.334985][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.343047][ T5951] usb 4-1: Product: syz [ 205.347921][ T5951] usb 4-1: Manufacturer: syz [ 205.352676][ T5951] usb 4-1: SerialNumber: syz [ 205.369750][ T5951] usb 4-1: config 0 descriptor?? [ 205.504282][ T5844] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 205.511955][ T9] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 205.583228][ T5951] usb 4-1: USB disconnect, device number 72 [ 205.674401][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 205.680529][ T5844] usb 3-1: Using ep0 maxpacket: 32 [ 205.687881][ T9] usb 5-1: config 3 has an invalid interface number: 45 but max is 0 [ 205.696621][ T9] usb 5-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 205.705634][ T5844] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.715769][ T9] usb 5-1: config 3 has no interface number 0 [ 205.721886][ T9] usb 5-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 205.734829][ T5844] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 205.744241][ T9] usb 5-1: config 3 interface 45 has no altsetting 0 [ 205.753108][ T5844] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 205.762544][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.770832][ T5844] usb 3-1: Product: syz [ 205.775222][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 205.785673][ T5844] usb 3-1: Manufacturer: syz [ 205.790280][ T5844] usb 3-1: SerialNumber: syz [ 205.794948][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.802945][ T9] usb 5-1: Product: syz [ 205.808368][ T9] usb 5-1: Manufacturer: syz [ 205.813877][ T5844] usb 3-1: config 0 descriptor?? [ 205.819216][ T9] usb 5-1: SerialNumber: syz [ 206.025665][ T7386] FAULT_INJECTION: forcing a failure. [ 206.025665][ T7386] name failslab, interval 1, probability 0, space 0, times 0 [ 206.038837][ T7386] CPU: 0 UID: 0 PID: 7386 Comm: syz.2.401 Not tainted syzkaller #0 PREEMPT(full) [ 206.038860][ T7386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 206.038870][ T7386] Call Trace: [ 206.038877][ T7386] [ 206.038884][ T7386] dump_stack_lvl+0x189/0x250 [ 206.038906][ T7386] ? __pfx____ratelimit+0x10/0x10 [ 206.038928][ T7386] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.038943][ T7386] ? __pfx__printk+0x10/0x10 [ 206.038974][ T7386] ? __pfx___might_resched+0x10/0x10 [ 206.038992][ T7386] ? fs_reclaim_acquire+0x7d/0x100 [ 206.039025][ T7386] should_fail_ex+0x414/0x560 [ 206.039051][ T7386] should_failslab+0xa8/0x100 [ 206.039074][ T7386] __kmalloc_noprof+0xcb/0x7f0 [ 206.039089][ T7386] ? tomoyo_encode+0x28b/0x550 [ 206.039110][ T7386] tomoyo_encode+0x28b/0x550 [ 206.039132][ T7386] tomoyo_realpath_from_path+0x58d/0x5d0 [ 206.039152][ T7386] ? tomoyo_domain+0xd9/0x130 [ 206.039175][ T7386] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 206.039193][ T7386] tomoyo_path_number_perm+0x1e8/0x5a0 [ 206.039214][ T7386] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 206.039268][ T7386] ? __fget_files+0x2a/0x420 [ 206.039289][ T7386] ? __fget_files+0x3a0/0x420 [ 206.039304][ T7386] ? __fget_files+0x2a/0x420 [ 206.039324][ T7386] security_file_ioctl+0xcb/0x2d0 [ 206.039343][ T7386] __se_sys_ioctl+0x47/0x170 [ 206.039367][ T7386] do_syscall_64+0xfa/0xfa0 [ 206.039384][ T7386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.039399][ T7386] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 206.039414][ T7386] ? clear_bhb_loop+0x60/0xb0 [ 206.039433][ T7386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.039449][ T7386] RIP: 0033:0x7f317ab8eec9 [ 206.039465][ T7386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.039480][ T7386] RSP: 002b:00007f317b98c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 206.039498][ T7386] RAX: ffffffffffffffda RBX: 00007f317ade5fa0 RCX: 00007f317ab8eec9 [ 206.039510][ T7386] RDX: 0000000000000000 RSI: 00000000400448c9 RDI: 0000000000000004 [ 206.039521][ T7386] RBP: 00007f317b98c090 R08: 0000000000000000 R09: 0000000000000000 [ 206.039532][ T7386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.039542][ T7386] R13: 00007f317ade6038 R14: 00007f317ade5fa0 R15: 00007ffcf4b0e508 [ 206.039573][ T7386] [ 206.039674][ T7386] ERROR: Out of memory at tomoyo_realpath_from_path. [ 206.203125][ T43] usb 2-1: USB disconnect, device number 57 [ 206.288975][ T9] usb 5-1: USB disconnect, device number 53 [ 206.334681][ T5951] usb 3-1: USB disconnect, device number 68 [ 206.359605][ T6992] udevd[6992]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 206.524239][ T5844] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 206.675909][ T5844] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 206.696332][ T5844] usb 4-1: config 0 has no interface number 0 [ 206.704333][ T5844] usb 4-1: config 0 interface 29 has no altsetting 0 [ 206.713295][ T5844] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 206.724830][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.732865][ T5844] usb 4-1: Product: syz [ 206.737251][ T5844] usb 4-1: Manufacturer: syz [ 206.741855][ T5844] usb 4-1: SerialNumber: syz [ 206.754836][ T5844] usb 4-1: config 0 descriptor?? [ 206.872084][ T7401] netlink: 4216 bytes leftover after parsing attributes in process `syz.2.407'. [ 206.876420][ T43] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 206.994073][ T7404] cgroup2: Unknown parameter 'dont_measure' [ 207.013557][ T5844] peak_usb 4-1:0.29 can0: unable to request usb[type=0 value=1] err=-71 [ 207.022019][ T5844] peak_usb 4-1:0.29: unable to read PCAN-USB X6 firmware info (err -71) [ 207.082031][ T43] usb 2-1: config 5 has an invalid interface number: 146 but max is 0 [ 207.100360][ T43] usb 2-1: config 5 has no interface number 0 [ 207.107379][ T43] usb 2-1: config 5 interface 146 has no altsetting 0 [ 207.114851][ T5844] peak_usb 4-1:0.29: probe with driver peak_usb failed with error -71 [ 207.118751][ T43] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=f1.f2 [ 207.132517][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.135606][ T5844] usb 4-1: USB disconnect, device number 73 [ 207.141318][ T43] usb 2-1: Product: syz [ 207.151651][ T43] usb 2-1: Manufacturer: syz [ 207.161690][ T43] usb 2-1: SerialNumber: syz [ 207.410422][ T43] usb 2-1: USB disconnect, device number 58 [ 207.514734][ T24] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 207.557602][ T7426] lo speed is unknown, defaulting to 1000 [ 207.572735][ T7426] lo speed is unknown, defaulting to 1000 [ 207.581400][ T7426] lo speed is unknown, defaulting to 1000 [ 207.600237][ T7426] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 207.629739][ T7426] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 207.684640][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 207.708329][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.727003][ T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 207.739660][ T7426] lo speed is unknown, defaulting to 1000 [ 207.751003][ T24] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 207.762747][ T7426] lo speed is unknown, defaulting to 1000 [ 207.769725][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.779149][ T24] usb 5-1: Product: syz [ 207.783351][ T24] usb 5-1: Manufacturer: syz [ 207.789261][ T24] usb 5-1: SerialNumber: syz [ 207.796098][ T7426] lo speed is unknown, defaulting to 1000 [ 207.806045][ T24] usb 5-1: config 0 descriptor?? [ 207.817897][ T7426] lo speed is unknown, defaulting to 1000 [ 207.840419][ T7426] lo speed is unknown, defaulting to 1000 [ 207.984665][ T5951] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 208.029393][ T43] usb 5-1: USB disconnect, device number 54 [ 208.154219][ T5951] usb 3-1: Using ep0 maxpacket: 32 [ 208.161992][ T5951] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.172743][ T5951] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 208.187889][ T5951] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 208.204224][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.212292][ T5951] usb 3-1: Product: syz [ 208.227623][ T5951] usb 3-1: Manufacturer: syz [ 208.232328][ T5951] usb 3-1: SerialNumber: syz [ 208.244232][ T5948] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 208.245206][ T5951] usb 3-1: config 0 descriptor?? [ 208.351829][ T7440] lo speed is unknown, defaulting to 1000 [ 208.424186][ T5948] usb 4-1: Using ep0 maxpacket: 16 [ 208.433873][ T5948] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 208.449940][ T5948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.469493][ T7432] FAULT_INJECTION: forcing a failure. [ 208.469493][ T7432] name failslab, interval 1, probability 0, space 0, times 0 [ 208.482442][ T5948] usb 4-1: Product: syz [ 208.482464][ T5948] usb 4-1: Manufacturer: syz [ 208.482478][ T5948] usb 4-1: SerialNumber: syz [ 208.503361][ T5948] r8152-cfgselector 4-1: Unknown version 0x0000 [ 208.515576][ T5948] r8152-cfgselector 4-1: config 0 descriptor?? [ 208.520855][ T7432] CPU: 0 UID: 0 PID: 7432 Comm: syz.2.415 Not tainted syzkaller #0 PREEMPT(full) [ 208.520888][ T7432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 208.520899][ T7432] Call Trace: [ 208.520906][ T7432] [ 208.520914][ T7432] dump_stack_lvl+0x189/0x250 [ 208.520936][ T7432] ? __pfx____ratelimit+0x10/0x10 [ 208.520959][ T7432] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.520975][ T7432] ? __pfx__printk+0x10/0x10 [ 208.521003][ T7432] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 208.521025][ T7432] ? lockdep_hardirqs_on+0x9c/0x150 [ 208.521050][ T7432] should_fail_ex+0x414/0x560 [ 208.521077][ T7432] should_failslab+0xa8/0x100 [ 208.521101][ T7432] kmem_cache_alloc_node_noprof+0x77/0x710 [ 208.521121][ T7432] ? __alloc_skb+0x112/0x2d0 [ 208.521141][ T7432] ? __lock_acquire+0xab9/0xd20 [ 208.521163][ T7432] __alloc_skb+0x112/0x2d0 [ 208.521188][ T7432] create_monitor_ctrl_open+0x156/0x880 [ 208.521213][ T7432] ? __pfx_create_monitor_ctrl_open+0x10/0x10 [ 208.521232][ T7432] ? bpf_lsm_capable+0x9/0x20 [ 208.521258][ T7432] hci_sock_ioctl+0x2f2/0x910 [ 208.521281][ T7432] sock_do_ioctl+0xdc/0x300 [ 208.521301][ T7432] ? __pfx_sock_do_ioctl+0x10/0x10 [ 208.521335][ T7432] sock_ioctl+0x576/0x790 [ 208.521355][ T7432] ? __pfx_sock_ioctl+0x10/0x10 [ 208.521380][ T7432] ? __fget_files+0x3a0/0x420 [ 208.521395][ T7432] ? __fget_files+0x2a/0x420 [ 208.521413][ T7432] ? bpf_lsm_file_ioctl+0x9/0x20 [ 208.521428][ T7432] ? __pfx_sock_ioctl+0x10/0x10 [ 208.521449][ T7432] __se_sys_ioctl+0xfc/0x170 [ 208.521471][ T7432] do_syscall_64+0xfa/0xfa0 [ 208.521485][ T7432] ? lockdep_hardirqs_on+0x9c/0x150 [ 208.521506][ T7432] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.521521][ T7432] ? clear_bhb_loop+0x60/0xb0 [ 208.521540][ T7432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.521555][ T7432] RIP: 0033:0x7f317ab8eec9 [ 208.521571][ T7432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.521585][ T7432] RSP: 002b:00007f317b98c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 208.521602][ T7432] RAX: ffffffffffffffda RBX: 00007f317ade5fa0 RCX: 00007f317ab8eec9 [ 208.521614][ T7432] RDX: 0000000000000000 RSI: 00000000400448c9 RDI: 0000000000000004 [ 208.521624][ T7432] RBP: 00007f317b98c090 R08: 0000000000000000 R09: 0000000000000000 [ 208.521633][ T7432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.521643][ T7432] R13: 00007f317ade6038 R14: 00007f317ade5fa0 R15: 00007ffcf4b0e508 [ 208.521671][ T7432] [ 208.533464][ T5951] usb 3-1: USB disconnect, device number 69 [ 208.730091][ C0] vkms_vblank_simulate: vblank timer overrun [ 208.904256][ T24] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 208.924271][ T5844] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 209.054217][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 209.061352][ T24] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 209.069928][ T24] usb 5-1: config 0 has no interface number 0 [ 209.076107][ T24] usb 5-1: config 0 interface 184 has no altsetting 0 [ 209.086090][ T24] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 209.087819][ T5844] usb 2-1: config 0 has an invalid interface number: 107 but max is 0 [ 209.095232][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.095257][ T24] usb 5-1: Product: syz [ 209.117372][ T24] usb 5-1: Manufacturer: syz [ 209.120561][ T5844] usb 2-1: config 0 has no interface number 0 [ 209.122400][ T24] usb 5-1: SerialNumber: syz [ 209.136671][ T5844] usb 2-1: config 0 interface 107 altsetting 140 bulk endpoint 0x4 has invalid maxpacket 64 [ 209.144918][ T24] usb 5-1: config 0 descriptor?? [ 209.152267][ T5844] usb 2-1: config 0 interface 107 has no altsetting 0 [ 209.166710][ T24] smsc75xx v1.0.0 [ 209.173936][ T5844] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice=a5.5f [ 209.184509][ T5844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.192571][ T5844] usb 2-1: Product: syz [ 209.197038][ T5844] usb 2-1: Manufacturer: syz [ 209.201803][ T5844] usb 2-1: SerialNumber: syz [ 209.209115][ T5844] usb 2-1: config 0 descriptor?? [ 209.214947][ T7445] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 209.414216][ T5951] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 209.429559][ T5844] ti_usb_3410_5052 2-1:0.107: TI USB 5052 2 port adapter converter detected [ 209.438661][ T5844] ti_usb_3410_5052 2-1:0.107: missing endpoints [ 209.450581][ T5844] usb 2-1: USB disconnect, device number 59 [ 209.574172][ T5951] usb 3-1: Using ep0 maxpacket: 16 [ 209.581643][ T5951] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 209.590261][ T5951] usb 3-1: config 0 has no interface number 0 [ 209.596513][ T5951] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 209.606554][ T5951] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 209.619225][ T5951] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 209.629010][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.637113][ T5951] usb 3-1: Product: syz [ 209.641291][ T5951] usb 3-1: Manufacturer: syz [ 209.646019][ T5951] usb 3-1: SerialNumber: syz [ 209.653080][ T5951] usb 3-1: config 0 descriptor?? [ 209.658901][ T7449] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 209.666450][ T7449] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 209.793008][ T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 209.804207][ T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 209.880425][ T7449] Bluetooth: MGMT ver 1.23 [ 209.886887][ T7449] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 209.894524][ T7449] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 210.214213][ T9] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 210.220106][ T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 210.233282][ T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 210.243063][ T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 210.253649][ T24] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 210.266974][ T24] usb 5-1: USB disconnect, device number 55 [ 210.354315][ T9] usb 2-1: device descriptor read/64, error -71 [ 210.505990][ T5951] asix 3-1:0.251 (unnamed net_device) (uninitialized): Invalid PHY address 0xc3 [ 210.594217][ T9] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 210.708428][ T5844] usb 3-1: USB disconnect, device number 70 [ 210.724945][ T9] usb 2-1: device descriptor read/64, error -71 [ 210.834977][ T9] usb usb2-port1: attempt power cycle [ 210.964491][ T5844] r8152-cfgselector 4-1: USB disconnect, device number 74 [ 211.002540][ T7455] netlink: 'syz.3.424': attribute type 12 has an invalid length. [ 211.012069][ T7455] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.424'. [ 211.016784][ T5951] usb 5-1: new low-speed USB device number 56 using dummy_hcd [ 211.174376][ T9] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 211.186290][ T5951] usb 5-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 211.197208][ T5951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.207438][ T9] usb 2-1: device descriptor read/8, error -71 [ 211.224777][ T5951] usb 5-1: config 0 descriptor?? [ 211.231816][ T7463] ksmbd: Unknown IPC event: 3, ignore. [ 211.246398][ T5951] pwc: Logitech QuickCam Notebook Pro USB webcam detected. [ 211.288526][ T7466] netlink: 679 bytes leftover after parsing attributes in process `syz.2.428'. [ 211.362106][ T7474] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 211.454220][ T9] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 211.474837][ T9] usb 2-1: device descriptor read/8, error -71 [ 211.554221][ T5948] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 211.584834][ T9] usb usb2-port1: unable to enumerate USB device [ 211.724654][ T5948] usb 4-1: Using ep0 maxpacket: 32 [ 211.735642][ T5948] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.745847][ T5948] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 211.764597][ T5948] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 211.774041][ T5948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.784919][ T5948] usb 4-1: Product: syz [ 211.789130][ T5948] usb 4-1: Manufacturer: syz [ 211.793735][ T5948] usb 4-1: SerialNumber: syz [ 211.804840][ T5948] usb 4-1: config 0 descriptor?? [ 211.845842][ T5951] pwc: recv_control_msg error -71 req 02 val 2b00 [ 211.855953][ T5951] pwc: recv_control_msg error -71 req 02 val 2700 [ 211.863141][ T5951] pwc: recv_control_msg error -71 req 04 val 1600 [ 211.871983][ T5951] pwc: recv_control_msg error -71 req 02 val 2c00 [ 211.879790][ T5951] pwc: recv_control_msg error -71 req 04 val 1000 [ 211.887601][ T5951] pwc: recv_control_msg error -71 req 04 val 1300 [ 211.896041][ T5951] pwc: recv_control_msg error -71 req 04 val 1400 [ 211.904513][ T5951] pwc: recv_control_msg error -71 req 02 val 2000 [ 211.911459][ T5951] pwc: recv_control_msg error -71 req 02 val 2100 [ 211.918871][ T5951] pwc: recv_control_msg error -71 req 06 val 0600 [ 211.928883][ T5951] pwc: recv_control_msg error -71 req 04 val 1500 [ 211.935941][ T5951] pwc: recv_control_msg error -71 req 02 val 2500 [ 211.943184][ T5951] pwc: recv_control_msg error -71 req 02 val 2400 [ 211.951571][ T5951] pwc: recv_control_msg error -71 req 02 val 2600 [ 211.959070][ T5951] pwc: recv_control_msg error -71 req 02 val 2900 [ 211.966371][ T5951] pwc: recv_control_msg error -71 req 02 val 2800 [ 211.973901][ T5951] pwc: recv_control_msg error -71 req 04 val 1100 [ 211.982049][ T5951] pwc: recv_control_msg error -71 req 04 val 1200 [ 211.992101][ T5951] pwc: Registered as video103. [ 212.002153][ T5951] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input28 [ 212.014047][ T5948] usb 4-1: USB disconnect, device number 75 [ 212.023731][ T5951] usb 5-1: USB disconnect, device number 56 [ 212.704238][ T5948] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 212.854273][ T24] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 212.863662][ T5948] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.874970][ T5948] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.885770][ T5948] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 212.895248][ T5948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.905532][ T5948] usb 5-1: config 0 descriptor?? [ 213.013936][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.043932][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.055712][ T24] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 213.065916][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.077287][ T24] usb 4-1: config 0 descriptor?? [ 213.117635][ T5948] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 213.125103][ T5948] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 213.132386][ T5948] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 213.139969][ T5948] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 213.148562][ T5948] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 213.187914][ T5948] cm6533_jd 0003:0D8C:0022.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 213.239483][ T5948] usb 5-1: USB disconnect, device number 57 [ 213.306517][ T7508] fido_id[7508]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 213.506465][ T24] steelseries 0003:1038:12B6.0008: unknown main item tag 0x0 [ 213.513949][ T24] steelseries 0003:1038:12B6.0008: unknown main item tag 0x0 [ 213.521564][ T24] steelseries 0003:1038:12B6.0008: unknown main item tag 0x0 [ 213.529314][ T24] steelseries 0003:1038:12B6.0008: unknown main item tag 0x0 [ 213.537075][ T24] steelseries 0003:1038:12B6.0008: unknown main item tag 0x0 [ 213.546664][ T24] steelseries 0003:1038:12B6.0008: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.3-1/input0 [ 213.636049][ T7515] netlink: 24 bytes leftover after parsing attributes in process `syz.1.444'. [ 213.864794][ T43] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 213.906174][ T5951] usb 4-1: USB disconnect, device number 76 [ 213.994338][ T5930] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 214.004459][ T43] usb 5-1: device descriptor read/64, error -71 [ 214.134308][ T5844] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 214.144364][ T5930] usb 2-1: Using ep0 maxpacket: 32 [ 214.150975][ T5930] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.161580][ T5930] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 214.173156][ T5930] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 214.182766][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.191200][ T5930] usb 2-1: Product: syz [ 214.195822][ T5930] usb 2-1: Manufacturer: syz [ 214.200422][ T5930] usb 2-1: SerialNumber: syz [ 214.206832][ T5930] usb 2-1: config 0 descriptor?? [ 214.254350][ T43] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 214.304201][ T5844] usb 3-1: Using ep0 maxpacket: 32 [ 214.310832][ T5844] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 214.323582][ T5844] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 214.332823][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 214.341052][ T5844] usb 3-1: Product: syz [ 214.345410][ T5844] usb 3-1: Manufacturer: syz [ 214.350028][ T5844] usb 3-1: SerialNumber: syz [ 214.357462][ T5844] usb 3-1: config 0 descriptor?? [ 214.363194][ T7524] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 214.371507][ T5844] hub 3-1:0.0: bad descriptor, ignoring hub [ 214.377520][ T5844] hub 3-1:0.0: probe with driver hub failed with error -5 [ 214.384401][ T43] usb 5-1: device descriptor read/64, error -71 [ 214.413497][ T7522] FAULT_INJECTION: forcing a failure. [ 214.413497][ T7522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.426836][ T7522] CPU: 1 UID: 0 PID: 7522 Comm: syz.1.446 Not tainted syzkaller #0 PREEMPT(full) [ 214.426852][ T7522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 214.426858][ T7522] Call Trace: [ 214.426863][ T7522] [ 214.426867][ T7522] dump_stack_lvl+0x189/0x250 [ 214.426881][ T7522] ? __pfx____ratelimit+0x10/0x10 [ 214.426896][ T7522] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.426905][ T7522] ? __pfx__printk+0x10/0x10 [ 214.426925][ T7522] should_fail_ex+0x414/0x560 [ 214.426941][ T7522] _copy_to_user+0x31/0xb0 [ 214.426954][ T7522] simple_read_from_buffer+0xe1/0x170 [ 214.426972][ T7522] proc_fail_nth_read+0x1b3/0x220 [ 214.426986][ T7522] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 214.426999][ T7522] ? rw_verify_area+0x2a6/0x4d0 [ 214.427012][ T7522] ? __lock_acquire+0xab9/0xd20 [ 214.427021][ T7522] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 214.427034][ T7522] vfs_read+0x200/0xa30 [ 214.427046][ T7522] ? fdget_pos+0x247/0x320 [ 214.427058][ T7522] ? __pfx___mutex_lock+0x10/0x10 [ 214.427081][ T7522] ? __pfx_vfs_read+0x10/0x10 [ 214.427095][ T7522] ? __fget_files+0x2a/0x420 [ 214.427106][ T7522] ? __fget_files+0x3a0/0x420 [ 214.427114][ T7522] ? __fget_files+0x2a/0x420 [ 214.427128][ T7522] ksys_read+0x145/0x250 [ 214.427140][ T7522] ? __fget_files+0x2a/0x420 [ 214.427149][ T7522] ? __pfx_ksys_read+0x10/0x10 [ 214.427164][ T7522] ? do_syscall_64+0xbe/0xfa0 [ 214.427174][ T7522] do_syscall_64+0xfa/0xfa0 [ 214.427182][ T7522] ? lockdep_hardirqs_on+0x9c/0x150 [ 214.427196][ T7522] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.427205][ T7522] ? clear_bhb_loop+0x60/0xb0 [ 214.427216][ T7522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.427225][ T7522] RIP: 0033:0x7fafd5f8d8dc [ 214.427234][ T7522] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 214.427242][ T7522] RSP: 002b:00007fafd6e6e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 214.427253][ T7522] RAX: ffffffffffffffda RBX: 00007fafd61e5fa0 RCX: 00007fafd5f8d8dc [ 214.427260][ T7522] RDX: 000000000000000f RSI: 00007fafd6e6e0a0 RDI: 0000000000000005 [ 214.427266][ T7522] RBP: 00007fafd6e6e090 R08: 0000000000000000 R09: 0000000000000000 [ 214.427272][ T7522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.427277][ T7522] R13: 00007fafd61e6038 R14: 00007fafd61e5fa0 R15: 00007ffc64aa93f8 [ 214.427293][ T7522] [ 214.679867][ T9] usb 2-1: USB disconnect, device number 64 [ 214.681119][ T43] usb usb5-port1: attempt power cycle [ 214.739492][ T7526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.448'. [ 214.763262][ T7526] netlink: 33 bytes leftover after parsing attributes in process `syz.1.448'. [ 214.798503][ T7526] netlink: 33 bytes leftover after parsing attributes in process `syz.1.448'. [ 214.844729][ T5930] usb 3-1: USB disconnect, device number 71 [ 214.845170][ T7531] /dev/nullb0: Can't open blockdev [ 215.044682][ T43] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 215.064844][ T43] usb 5-1: device descriptor read/8, error -71 [ 215.184303][ T9] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 215.264216][ T5930] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 215.304217][ T43] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 215.314716][ T9] usb 3-1: device descriptor read/64, error -71 [ 215.324648][ T43] usb 5-1: device descriptor read/8, error -71 [ 215.415768][ T5930] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 215.424315][ T5930] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.436155][ T43] usb usb5-port1: unable to enumerate USB device [ 215.443622][ T5930] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 215.453730][ T5930] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 215.462707][ T5930] usb 2-1: Manufacturer: syz [ 215.469276][ T5930] usb 2-1: config 0 descriptor?? [ 215.476945][ T5930] igorplugusb 2-1:0.0: incorrect number of endpoints [ 215.564503][ T9] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 215.680652][ T5930] usb 2-1: USB disconnect, device number 65 [ 215.694382][ T9] usb 3-1: device descriptor read/64, error -71 [ 215.804564][ T9] usb usb3-port1: attempt power cycle [ 215.818361][ T7544] pty pty27: ldisc open failed (-12), clearing slot 27 [ 216.094227][ T5930] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 216.164204][ T9] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 216.184731][ T9] usb 3-1: device descriptor read/8, error -71 [ 216.254192][ T5930] usb 4-1: Using ep0 maxpacket: 16 [ 216.263307][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.275346][ T5930] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 216.286780][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.297431][ T5930] usb 4-1: config 0 descriptor?? [ 216.424200][ T9] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 216.476398][ T9] usb 3-1: device descriptor read/8, error -71 [ 216.584474][ T9] usb usb3-port1: unable to enumerate USB device [ 216.601498][ T30] audit: type=1326 audit(2000000033.600:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7554 comm="syz.1.458" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fafd5f8eec9 code=0x0 [ 216.722487][ T5930] mcp2221 0003:04D8:00DD.0009: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 217.121119][ T24] usb 4-1: USB disconnect, device number 77 [ 217.354378][ T5930] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 217.434213][ T5844] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 217.514241][ T5930] usb 5-1: Using ep0 maxpacket: 32 [ 217.521035][ T5930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.532285][ T5930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.542608][ T5930] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 217.552047][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.565135][ T5930] usb 5-1: config 0 descriptor?? [ 217.589964][ T5844] usb 3-1: Using ep0 maxpacket: 8 [ 217.611383][ T5844] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 217.620789][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.629069][ T5844] usb 3-1: Product: syz [ 217.633252][ T5844] usb 3-1: Manufacturer: syz [ 217.638620][ T5844] usb 3-1: SerialNumber: syz [ 217.658945][ T5844] usb 3-1: config 0 descriptor?? [ 217.682012][ T5844] radio-usb-si4713 3-1:0.0: Si4713 development board discovered: (10C4:8244) [ 217.798241][ T7594] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 217.819929][ T7596] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 217.891508][ T7598] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.471'. [ 217.894446][ T24] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 218.004059][ T5930] savu 0003:1E7D:2D5A.000A: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 218.057946][ T24] usb 2-1: config index 0 descriptor too short (expected 539, got 27) [ 218.074616][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 65535, setting to 64 [ 218.100181][ T24] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 218.115923][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.124878][ T24] usb 2-1: Product: syz [ 218.129146][ T24] usb 2-1: Manufacturer: syz [ 218.133746][ T24] usb 2-1: SerialNumber: syz [ 218.143724][ T24] usb 2-1: config 0 descriptor?? [ 218.150395][ T7588] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 218.174386][ T24] hub 2-1:0.0: bad descriptor, ignoring hub [ 218.182815][ T24] hub 2-1:0.0: probe with driver hub failed with error -5 [ 218.202363][ T24] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input29 [ 218.208097][ T7584] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.467'. [ 218.234785][ T7605] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 218.246707][ T7605] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 218.256842][ T7574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.275706][ T7574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.284493][ T7605] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 218.297507][ T7605] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 218.302942][ T24] usb 5-1: USB disconnect, device number 62 [ 218.336695][ T7605] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 218.343694][ T7605] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 218.351697][ T7605] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 218.395914][ T7605] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 218.403244][ T7605] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 218.432620][ T7605] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 218.444704][ T7605] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 218.451214][ T7605] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 218.459129][ T7605] comedi comedi3: 8255: I/O port conflict (0x10,4) [ 218.466777][ T7605] comedi comedi3: 8255: I/O port conflict (0xffffffff8000008b,4) [ 218.476767][ T7605] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 218.480020][ T43] usb 2-1: USB disconnect, device number 66 [ 218.484755][ C1] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 218.484769][ T7605] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 218.513911][ T7605] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 218.526412][ T7605] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 218.534466][ T7605] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 218.639004][ T7610] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.849209][ T7613] netlink: 'syz.3.476': attribute type 10 has an invalid length. [ 218.927294][ T7613] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 219.149878][ T7618] tipc: New replicast peer: 255.255.255.255 [ 219.165324][ T7618] tipc: Enabled bearer , priority 10 [ 219.224792][ T5951] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 219.404374][ T7621] netlink: 24 bytes leftover after parsing attributes in process `syz.3.479'. [ 219.420261][ T5930] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 219.435975][ T5951] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 219.452772][ T5951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.484896][ T5951] usb 5-1: config 0 descriptor?? [ 219.684531][ T5844] radio-usb-si4713 3-1:0.0: probe with driver radio-usb-si4713 failed with error -32 [ 219.717194][ T5951] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 219.735238][ T5844] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 219.753039][ T5951] [drm:udl_init] *ERROR* Selecting channel failed [ 219.784169][ T5930] usb 2-1: Using ep0 maxpacket: 16 [ 219.814504][ T5930] usb 2-1: config 4 has an invalid interface number: 9 but max is 0 [ 219.819463][ T5951] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 219.822552][ T5930] usb 2-1: config 4 has no interface number 0 [ 219.822604][ T5930] usb 2-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 219.858913][ T5951] [drm] Initialized udl on minor 2 [ 219.874383][ T5930] usb 2-1: config 4 interface 9 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 167 [ 219.884009][ T5951] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 219.913968][ T5930] usb 2-1: config 4 interface 9 has no altsetting 0 [ 219.918193][ T5951] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 219.947772][ T5930] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 219.954014][ T5844] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 219.957741][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.973360][ T5930] usb 2-1: Product: syz [ 219.978107][ T5951] usb 5-1: USB disconnect, device number 63 [ 219.985126][ T5930] usb 2-1: Manufacturer: syz [ 219.989759][ T5930] usb 2-1: SerialNumber: syz [ 220.008119][ T7618] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 220.023201][ T5844] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 220.034335][ T7618] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 220.072527][ T5930] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 220.094978][ T7628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.105284][ T7628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.398282][ T30] audit: type=1326 audit(2000000037.380:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7617 comm="syz.1.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafd5f8eec9 code=0x7fc00000 [ 220.420495][ T7635] 9pnet_fd: Insufficient options for proto=fd [ 220.440089][ T43] usb 2-1: USB disconnect, device number 67 [ 220.452154][ T13] usb 2-1: Failed to submit usb control message: -71 [ 220.471512][ T13] usb 2-1: unable to send the bmi data to the device: -71 [ 220.509199][ T13] usb 2-1: unable to get target info from device [ 220.526618][ T13] usb 2-1: could not get target info (-71) [ 220.539418][ T13] usb 2-1: could not probe fw (-71) [ 220.570754][ T7637] batadv_slave_1: entered promiscuous mode [ 220.587954][ T7637] batadv_slave_1: left promiscuous mode [ 220.692902][ T5951] usb 3-1: USB disconnect, device number 76 [ 220.743950][ T7620] syz.3.479 (7620): drop_caches: 2 [ 220.964687][ T5930] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 221.125966][ T5930] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.144362][ T5930] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 221.162629][ T5930] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 221.172087][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.183701][ T5930] usb 5-1: config 0 descriptor?? [ 221.192853][ T5930] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 221.204273][ T5844] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 221.377216][ T5844] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 221.387033][ T5844] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 221.396495][ T7639] netlink: 5820 bytes leftover after parsing attributes in process `syz.4.484'. [ 221.398009][ T5844] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 221.419238][ T5844] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 221.448476][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.456991][ T9] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 221.480605][ T5844] usbtmc 2-1:16.0: probe with driver usbtmc failed with error -22 [ 221.508479][ T7639] netdevsim netdevsim4: Direct firmware load for ..€ failed with error -2 [ 221.520530][ T7639] netdevsim netdevsim4: Falling back to sysfs fallback for: ..€ [ 221.551389][ T7658] netlink: 'syz.4.484': attribute type 2 has an invalid length. [ 221.559649][ T7658] netlink: 'syz.4.484': attribute type 1 has an invalid length. [ 221.626248][ T9] usb 3-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 221.636755][ T9] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 221.647984][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 221.658227][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.666367][ T9] usb 3-1: Product: syz [ 221.670534][ T9] usb 3-1: Manufacturer: syz [ 221.675579][ T9] usb 3-1: SerialNumber: syz [ 221.754216][ T43] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 221.884415][ T43] usb 4-1: device descriptor read/64, error -71 [ 221.886149][ T7654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.900374][ T7654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.910857][ T7654] netlink: 64 bytes leftover after parsing attributes in process `syz.2.490'. [ 221.923127][ T9] usb 3-1: 0:2 : does not exist [ 221.932369][ T9] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 221.948229][ T9] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 221.960750][ T9] usb 3-1: USB disconnect, device number 77 [ 221.984481][ T6992] udevd[6992]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 222.048194][ T7659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.057843][ T7659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.144270][ T43] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 222.274210][ T43] usb 4-1: device descriptor read/64, error -71 [ 222.385216][ T43] usb usb4-port1: attempt power cycle [ 222.457937][ T7661] 9pnet_fd: Insufficient options for proto=fd [ 222.495524][ T7663] CIFS: VFS: Malformed UNC in devname [ 222.532861][ T7666] vxcan1: tx address claim with dlc 0 [ 222.724340][ T43] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 222.744871][ T43] usb 4-1: device descriptor read/8, error -71 [ 222.994349][ T43] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 223.014629][ T43] usb 4-1: device descriptor read/8, error -71 [ 223.124758][ T43] usb usb4-port1: unable to enumerate USB device [ 223.257064][ T7681] netlink: 20 bytes leftover after parsing attributes in process `syz.2.499'. [ 223.388975][ T7691] 9pnet_fd: Insufficient options for proto=fd [ 223.664229][ T43] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 223.790337][ T9] usb 5-1: USB disconnect, device number 64 [ 223.828513][ T43] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 223.842090][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 223.853514][ T43] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 223.863056][ T43] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 223.871593][ T43] usb 3-1: Product: syz [ 223.876273][ T43] usb 3-1: Manufacturer: syz [ 223.880979][ T43] usb 3-1: SerialNumber: syz [ 223.903125][ T43] usb 3-1: config 0 descriptor?? [ 223.930062][ T43] usb 3-1: selecting invalid altsetting 0 [ 223.959215][ T5930] usb 2-1: USB disconnect, device number 68 [ 224.130462][ T7693] netlink: 'syz.2.502': attribute type 2 has an invalid length. [ 224.149707][ T7693] netlink: 244 bytes leftover after parsing attributes in process `syz.2.502'. [ 224.178029][ T7707] random: crng reseeded on system resumption [ 224.227866][ T7711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.247044][ T7711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.298414][ T5948] usb 3-1: USB disconnect, device number 78 [ 224.389494][ T7716] 9pnet_fd: Insufficient options for proto=fd [ 224.494480][ T5930] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 224.634313][ T5930] usb 2-1: device descriptor read/64, error -71 [ 224.674245][ T6011] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 224.804278][ T6011] usb 5-1: device descriptor read/64, error -71 [ 224.854218][ T24] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 224.875128][ T5930] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 224.886719][ T7726] netlink: 272 bytes leftover after parsing attributes in process `syz.2.514'. [ 225.004378][ T5930] usb 2-1: device descriptor read/64, error -71 [ 225.012476][ T24] usb 4-1: config 127 has no interfaces? [ 225.020748][ T24] usb 4-1: New USB device found, idVendor=2cb7, idProduct=0001, bcdDevice=c5.d0 [ 225.030334][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.042600][ T24] usb 4-1: Product: syz [ 225.047161][ T6011] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 225.056104][ T24] usb 4-1: Manufacturer: syz [ 225.060767][ T24] usb 4-1: SerialNumber: syz [ 225.118161][ T5930] usb usb2-port1: attempt power cycle [ 225.164245][ T5948] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 225.194733][ T6011] usb 5-1: device descriptor read/64, error -71 [ 225.304958][ T6011] usb usb5-port1: attempt power cycle [ 225.314575][ T5948] usb 3-1: Using ep0 maxpacket: 32 [ 225.321734][ T5948] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 225.331101][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.342271][ T5948] usb 3-1: config 0 descriptor?? [ 225.474209][ T5930] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 225.476211][ T5844] usb 4-1: USB disconnect, device number 82 [ 225.494887][ T5930] usb 2-1: device descriptor read/8, error -71 [ 225.551530][ T5948] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 225.560406][ T5948] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 225.570994][ T5948] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 225.578219][ T5948] usb 3-1: media controller created [ 225.596751][ T5948] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 225.644246][ T6011] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 225.665109][ T6011] usb 5-1: device descriptor read/8, error -71 [ 225.744227][ T5930] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 225.764774][ T5930] usb 2-1: device descriptor read/8, error -71 [ 225.874483][ T5930] usb usb2-port1: unable to enumerate USB device [ 225.904294][ T6011] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 225.924946][ T6011] usb 5-1: device descriptor read/8, error -71 [ 226.035283][ T6011] usb usb5-port1: unable to enumerate USB device [ 226.113847][ T30] audit: type=1326 audit(2000000043.110:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7734 comm="syz.3.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27d738eec9 code=0x7fc00000 [ 226.584278][ T5948] stb0899_attach: Driver disabled by Kconfig [ 226.590575][ T5948] az6027: no front-end attached [ 226.590575][ T5948] [ 226.599725][ T5948] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 226.611586][ T5948] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input30 [ 226.650286][ T5948] dvb-usb: schedule remote query interval to 400 msecs. [ 226.665061][ T5948] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 226.822758][ T5948] usb 3-1: USB disconnect, device number 79 [ 226.919185][ T5948] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 227.115245][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 227.117254][ T5876] Bluetooth: hci3: command 0x0406 tx timeout [ 227.122701][ T5878] Bluetooth: hci2: command 0x0406 tx timeout [ 227.130851][ T5876] Bluetooth: hci0: command 0x0406 tx timeout [ 227.285332][ T6011] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 227.434190][ T6011] usb 4-1: Using ep0 maxpacket: 16 [ 227.446961][ T6011] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.474264][ T6011] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 227.492723][ T6011] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 227.507589][ T6011] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 227.526107][ T7765] rose4: entered promiscuous mode [ 227.531315][ T7765] rose4: entered allmulticast mode [ 227.537154][ T6011] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 227.555553][ T6011] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 227.574195][ T6011] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 227.582310][ T5948] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 227.590656][ T6011] usb 4-1: Manufacturer: syz [ 227.598450][ T6011] usb 4-1: config 0 descriptor?? [ 227.671564][ T7768] random: crng reseeded on system resumption [ 227.690150][ T7768] netlink: 12 bytes leftover after parsing attributes in process `syz.4.528'. [ 227.754739][ T5948] usb 2-1: Using ep0 maxpacket: 32 [ 227.763360][ T5948] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 227.772754][ T5948] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.783383][ T5948] usb 2-1: config 0 descriptor?? [ 227.801031][ T5948] as10x_usb: device has been detected [ 227.807534][ T5948] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 227.838664][ T5948] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 227.873308][ T5948] as10x_usb: error during firmware upload part1 [ 227.880298][ T5948] Registered device nBox DVB-T Dongle [ 227.894263][ T6011] rc_core: IR keymap rc-hauppauge not found [ 227.906585][ T6011] Registered IR keymap rc-empty [ 227.911541][ T6011] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 227.934271][ T6011] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 227.944555][ T43] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 227.954925][ T6011] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 227.969409][ T6011] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input31 [ 227.983930][ T6011] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 227.996309][ T24] usb 2-1: USB disconnect, device number 73 [ 228.005328][ T6011] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 228.023693][ C1] mceusb 4-1:0.0: long-range (0x1) receiver active [ 228.035625][ T6011] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 228.059549][ T24] Unregistered device nBox DVB-T Dongle [ 228.061555][ T24] as10x_usb: device has been disconnected [ 228.074393][ T6011] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 228.094275][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 228.099612][ T6011] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 228.110268][ T43] usb 3-1: config 9 has an invalid interface number: 212 but max is 0 [ 228.119513][ T43] usb 3-1: config 9 has an invalid interface number: 113 but max is 0 [ 228.127885][ T6011] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 228.135348][ T43] usb 3-1: config 9 has an invalid interface number: 248 but max is 0 [ 228.143577][ T43] usb 3-1: config 9 has 3 interfaces, different from the descriptor's value: 1 [ 228.153316][ T43] usb 3-1: config 9 has no interface number 0 [ 228.159567][ T43] usb 3-1: config 9 has no interface number 1 [ 228.165824][ T6011] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 228.173083][ T43] usb 3-1: config 9 has no interface number 2 [ 228.179479][ T43] usb 3-1: config 9 interface 212 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 228.190519][ T6011] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 228.197709][ T43] usb 3-1: config 9 interface 212 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 228.211506][ T43] usb 3-1: too many endpoints for config 9 interface 113 altsetting 191: 71, using maximum allowed: 30 [ 228.223554][ T43] usb 3-1: config 9 interface 113 altsetting 191 has an invalid descriptor for endpoint zero, skipping [ 228.238607][ T6011] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 228.245829][ T43] usb 3-1: config 9 interface 113 altsetting 191 bulk endpoint 0x1 has invalid maxpacket 1023 [ 228.257373][ T43] usb 3-1: config 9 interface 113 altsetting 191 has 2 endpoint descriptors, different from the interface descriptor's value: 71 [ 228.270799][ T43] usb 3-1: too many endpoints for config 9 interface 248 altsetting 135: 239, using maximum allowed: 30 [ 228.282087][ T6011] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 228.289326][ T43] usb 3-1: config 9 interface 248 altsetting 135 endpoint 0x5 has an invalid bInterval 45, changing to 9 [ 228.300721][ T43] usb 3-1: config 9 interface 248 altsetting 135 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 228.312305][ T43] usb 3-1: config 9 interface 248 altsetting 135 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 228.323856][ T6011] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 228.331534][ T43] usb 3-1: config 9 interface 248 altsetting 135 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 228.342842][ T43] usb 3-1: config 9 interface 248 altsetting 135 has a duplicate endpoint with address 0x2, skipping [ 228.355672][ T6011] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 228.364924][ T43] usb 3-1: config 9 interface 248 altsetting 135 has a duplicate endpoint with address 0x4, skipping [ 228.375857][ T6011] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x1 active) [ 228.384255][ T43] usb 3-1: config 9 interface 248 altsetting 135 has a duplicate endpoint with address 0x2, skipping [ 228.399054][ T6011] usb 4-1: USB disconnect, device number 83 [ 228.408974][ T43] usb 3-1: config 9 interface 248 altsetting 135 has 8 endpoint descriptors, different from the interface descriptor's value: 239 [ 228.425837][ T43] usb 3-1: config 9 interface 212 has no altsetting 0 [ 228.432844][ T43] usb 3-1: config 9 interface 113 has no altsetting 0 [ 228.439848][ T43] usb 3-1: config 9 interface 248 has no altsetting 0 [ 228.458103][ T43] usb 3-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=d8.fe [ 228.475437][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.483586][ T43] usb 3-1: Product: syz [ 228.497430][ T43] usb 3-1: Manufacturer: syz [ 228.502076][ T43] usb 3-1: SerialNumber: syz [ 228.651940][ T7781] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 228.731429][ T7770] program syz.2.529 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 228.771492][ T43] usb 3-1: USB disconnect, device number 80 [ 228.790763][ T43] ================================================================== [ 228.798875][ T43] BUG: KASAN: slab-use-after-free in hdm_disconnect+0x10d/0x1c0 [ 228.806529][ T43] Read of size 8 at addr ffff88805ad3d8a0 by task kworker/1:1/43 [ 228.814253][ T43] [ 228.816601][ T43] CPU: 1 UID: 0 PID: 43 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 228.816616][ T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 228.816625][ T43] Workqueue: usb_hub_wq hub_event [ 228.816643][ T43] Call Trace: [ 228.816649][ T43] [ 228.816654][ T43] dump_stack_lvl+0x189/0x250 [ 228.816665][ T43] ? __kasan_check_byte+0x12/0x40 [ 228.816680][ T43] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.816689][ T43] ? lock_release+0x4b/0x3e0 [ 228.816702][ T43] ? __virt_addr_valid+0x4a5/0x5c0 [ 228.816726][ T43] print_report+0xca/0x240 [ 228.816737][ T43] ? hdm_disconnect+0x10d/0x1c0 [ 228.816746][ T43] kasan_report+0x118/0x150 [ 228.816759][ T43] ? hdm_disconnect+0x10d/0x1c0 [ 228.816768][ T43] hdm_disconnect+0x10d/0x1c0 [ 228.816777][ T43] usb_unbind_interface+0x26e/0x910 [ 228.816799][ T43] ? __pfx_usb_unbind_interface+0x10/0x10 [ 228.816813][ T43] device_release_driver_internal+0x4d9/0x800 [ 228.816824][ T43] bus_remove_device+0x34d/0x410 [ 228.816837][ T43] device_del+0x511/0x8e0 [ 228.816851][ T43] ? __pfx_device_del+0x10/0x10 [ 228.816863][ T43] ? kobject_put+0x446/0x480 [ 228.816875][ T43] usb_disable_device+0x3e9/0x8a0 [ 228.816889][ T43] usb_disconnect+0x330/0x950 [ 228.816901][ T43] hub_event+0x1cf5/0x4a20 [ 228.816917][ T43] ? do_raw_spin_lock+0x121/0x290 [ 228.816932][ T43] ? register_lock_class+0x51/0x320 [ 228.816945][ T43] ? __pfx_hub_event+0x10/0x10 [ 228.816957][ T43] ? process_scheduled_works+0x9ef/0x17b0 [ 228.816970][ T43] ? _raw_spin_unlock_irq+0x23/0x50 [ 228.816982][ T43] ? process_scheduled_works+0x9ef/0x17b0 [ 228.816993][ T43] ? process_scheduled_works+0x9ef/0x17b0 [ 228.817003][ T43] process_scheduled_works+0xae1/0x17b0 [ 228.817020][ T43] ? __pfx_process_scheduled_works+0x10/0x10 [ 228.817034][ T43] worker_thread+0x8a0/0xda0 [ 228.817050][ T43] kthread+0x711/0x8a0 [ 228.817063][ T43] ? __pfx_worker_thread+0x10/0x10 [ 228.817074][ T43] ? __pfx_kthread+0x10/0x10 [ 228.817086][ T43] ? _raw_spin_unlock_irq+0x23/0x50 [ 228.817098][ T43] ? lockdep_hardirqs_on+0x9c/0x150 [ 228.817111][ T43] ? __pfx_kthread+0x10/0x10 [ 228.817123][ T43] ret_from_fork+0x4bc/0x870 [ 228.817135][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 228.817146][ T43] ? __switch_to_asm+0x39/0x70 [ 228.817155][ T43] ? __switch_to_asm+0x33/0x70 [ 228.817169][ T43] ? __pfx_kthread+0x10/0x10 [ 228.817182][ T43] ret_from_fork_asm+0x1a/0x30 [ 228.817195][ T43] [ 228.817199][ T43] [ 229.061302][ T43] Allocated by task 43: [ 229.065447][ T43] kasan_save_track+0x3e/0x80 [ 229.070168][ T43] __kasan_kmalloc+0x93/0xb0 [ 229.074838][ T43] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 229.080200][ T43] hdm_probe+0x96/0x1400 [ 229.084442][ T43] usb_probe_interface+0x668/0xc30 [ 229.089830][ T43] really_probe+0x26d/0x9e0 [ 229.094322][ T43] __driver_probe_device+0x18c/0x2f0 [ 229.099697][ T43] driver_probe_device+0x4f/0x430 [ 229.104725][ T43] __device_attach_driver+0x2ce/0x530 [ 229.110086][ T43] bus_for_each_drv+0x251/0x2e0 [ 229.114928][ T43] __device_attach+0x2b8/0x400 [ 229.119685][ T43] bus_probe_device+0x185/0x260 [ 229.124532][ T43] device_add+0x7b6/0xb50 [ 229.128853][ T43] usb_set_configuration+0x1a87/0x20e0 [ 229.134308][ T43] usb_generic_driver_probe+0x8d/0x150 [ 229.139852][ T43] usb_probe_device+0x1c4/0x390 [ 229.144700][ T43] really_probe+0x26d/0x9e0 [ 229.149189][ T43] __driver_probe_device+0x18c/0x2f0 [ 229.154463][ T43] driver_probe_device+0x4f/0x430 [ 229.159471][ T43] __device_attach_driver+0x2ce/0x530 [ 229.164828][ T43] bus_for_each_drv+0x251/0x2e0 [ 229.169759][ T43] __device_attach+0x2b8/0x400 [ 229.174513][ T43] bus_probe_device+0x185/0x260 [ 229.179463][ T43] device_add+0x7b6/0xb50 [ 229.183785][ T43] usb_new_device+0xa39/0x16f0 [ 229.188550][ T43] hub_event+0x2958/0x4a20 [ 229.192967][ T43] process_scheduled_works+0xae1/0x17b0 [ 229.198507][ T43] worker_thread+0x8a0/0xda0 [ 229.203089][ T43] kthread+0x711/0x8a0 [ 229.207200][ T43] ret_from_fork+0x4bc/0x870 [ 229.211779][ T43] ret_from_fork_asm+0x1a/0x30 [ 229.216544][ T43] [ 229.218853][ T43] Freed by task 43: [ 229.222641][ T43] kasan_save_track+0x3e/0x80 [ 229.227321][ T43] __kasan_save_free_info+0x46/0x50 [ 229.232517][ T43] __kasan_slab_free+0x5c/0x80 [ 229.237289][ T43] kfree+0x19a/0x6d0 [ 229.241193][ T43] device_release+0x9c/0x1c0 [ 229.245780][ T43] kobject_put+0x22b/0x480 [ 229.250219][ T43] hdm_disconnect+0xf3/0x1c0 [ 229.254839][ T43] usb_unbind_interface+0x26e/0x910 [ 229.260054][ T43] device_release_driver_internal+0x4d9/0x800 [ 229.266127][ T43] bus_remove_device+0x34d/0x410 [ 229.271416][ T43] device_del+0x511/0x8e0 [ 229.275734][ T43] usb_disable_device+0x3e9/0x8a0 [ 229.280751][ T43] usb_disconnect+0x330/0x950 [ 229.285426][ T43] hub_event+0x1cf5/0x4a20 [ 229.290034][ T43] process_scheduled_works+0xae1/0x17b0 [ 229.295658][ T43] worker_thread+0x8a0/0xda0 [ 229.300243][ T43] kthread+0x711/0x8a0 [ 229.304304][ T43] ret_from_fork+0x4bc/0x870 [ 229.308884][ T43] ret_from_fork_asm+0x1a/0x30 [ 229.313637][ T43] [ 229.315982][ T43] The buggy address belongs to the object at ffff88805ad3c000 [ 229.315982][ T43] which belongs to the cache kmalloc-8k of size 8192 [ 229.330031][ T43] The buggy address is located 6304 bytes inside of [ 229.330031][ T43] freed 8192-byte region [ffff88805ad3c000, ffff88805ad3e000) [ 229.344008][ T43] [ 229.346411][ T43] The buggy address belongs to the physical page: [ 229.352907][ T43] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5ad38 [ 229.361838][ T43] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 229.370405][ T43] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 229.378333][ T43] page_type: f5(slab) [ 229.382320][ T43] raw: 00fff00000000040 ffff88801b042280 ffffea0001ef6600 dead000000000003 [ 229.391094][ T43] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 229.399680][ T43] head: 00fff00000000040 ffff88801b042280 ffffea0001ef6600 dead000000000003 [ 229.408358][ T43] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 229.417127][ T43] head: 00fff00000000003 ffffea00016b4e01 00000000ffffffff 00000000ffffffff [ 229.425809][ T43] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 229.434465][ T43] page dumped because: kasan: bad access detected [ 229.440886][ T43] page_owner tracks the page as allocated [ 229.446685][ T43] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 6311, tgid 6310 (syz.1.94), ts 134188962421, free_ts 134170872738 [ 229.466296][ T43] post_alloc_hook+0x240/0x2a0 [ 229.471058][ T43] get_page_from_freelist+0x21e4/0x22c0 [ 229.476599][ T43] __alloc_frozen_pages_noprof+0x181/0x370 [ 229.482394][ T43] alloc_pages_mpol+0x232/0x4a0 [ 229.487253][ T43] allocate_slab+0x96/0x3a0 [ 229.491758][ T43] ___slab_alloc+0xe94/0x1920 [ 229.496424][ T43] __slab_alloc+0x65/0x100 [ 229.500828][ T43] __kvmalloc_node_noprof+0x6ba/0x910 [ 229.506187][ T43] pfifo_fast_init+0x372/0x6c0 [ 229.510944][ T43] qdisc_create_dflt+0x13b/0x4e0 [ 229.515878][ T43] mq_init+0x2dc/0x660 [ 229.520029][ T43] qdisc_create_dflt+0x13b/0x4e0 [ 229.525038][ T43] dev_activate+0x1ce/0x1150 [ 229.529615][ T43] __dev_open+0x69c/0x880 [ 229.533933][ T43] __dev_change_flags+0x1ea/0x6d0 [ 229.538947][ T43] netif_change_flags+0x88/0x1a0 [ 229.543907][ T43] page last free pid 6313 tgid 6312 stack trace: [ 229.550258][ T43] __free_frozen_pages+0xbc4/0xd30 [ 229.555371][ T43] __put_partials+0x146/0x170 [ 229.560061][ T43] put_cpu_partial+0x1f2/0x2e0 [ 229.564825][ T43] __slab_free+0x2b9/0x390 [ 229.569246][ T43] qlist_free_all+0x97/0x140 [ 229.573827][ T43] kasan_quarantine_reduce+0x148/0x160 [ 229.579274][ T43] __kasan_slab_alloc+0x22/0x80 [ 229.584114][ T43] __kmalloc_cache_noprof+0x36f/0x6f0 [ 229.589478][ T43] init_srcu_struct_fields+0x7f/0xa20 [ 229.594837][ T43] kvm_dev_ioctl+0x538/0x1570 [ 229.599498][ T43] __se_sys_ioctl+0xfc/0x170 [ 229.604081][ T43] do_syscall_64+0xfa/0xfa0 [ 229.608661][ T43] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.614629][ T43] [ 229.616938][ T43] Memory state around the buggy address: [ 229.622569][ T43] ffff88805ad3d780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 229.630615][ T43] ffff88805ad3d800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 229.638667][ T43] >ffff88805ad3d880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 229.646711][ T43] ^ [ 229.651807][ T43] ffff88805ad3d900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 229.659863][ T43] ffff88805ad3d980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 229.667924][ T43] ================================================================== [ 229.677378][ T5930] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 229.694190][ T43] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 229.701429][ T43] CPU: 1 UID: 0 PID: 43 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 229.710642][ T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 229.720797][ T43] Workqueue: usb_hub_wq hub_event [ 229.725852][ T43] Call Trace: [ 229.729143][ T43] [ 229.732430][ T43] dump_stack_lvl+0x99/0x250 [ 229.737209][ T43] ? __asan_memcpy+0x40/0x70 [ 229.741818][ T43] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.747129][ T43] ? __pfx__printk+0x10/0x10 [ 229.751774][ T43] vpanic+0x237/0x6d0 [ 229.755774][ T43] ? __pfx_vpanic+0x10/0x10 [ 229.760300][ T43] ? preempt_schedule+0xae/0xc0 [ 229.765277][ T43] ? __pfx_preempt_schedule+0x10/0x10 [ 229.770760][ T43] panic+0xb9/0xc0 [ 229.774499][ T43] ? __pfx_panic+0x10/0x10 [ 229.778924][ T43] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 229.784837][ T43] ? hdm_disconnect+0x10d/0x1c0 [ 229.789724][ T43] check_panic_on_warn+0x89/0xb0 [ 229.794901][ T43] ? hdm_disconnect+0x10d/0x1c0 [ 229.799772][ T43] end_report+0x78/0x160 [ 229.804040][ T43] kasan_report+0x129/0x150 [ 229.808573][ T43] ? hdm_disconnect+0x10d/0x1c0 [ 229.813428][ T43] hdm_disconnect+0x10d/0x1c0 [ 229.818094][ T43] usb_unbind_interface+0x26e/0x910 [ 229.823339][ T43] ? __pfx_usb_unbind_interface+0x10/0x10 [ 229.829103][ T43] device_release_driver_internal+0x4d9/0x800 [ 229.835179][ T43] bus_remove_device+0x34d/0x410 [ 229.840117][ T43] device_del+0x511/0x8e0 [ 229.844447][ T43] ? __pfx_device_del+0x10/0x10 [ 229.849320][ T43] ? kobject_put+0x446/0x480 [ 229.853918][ T43] usb_disable_device+0x3e9/0x8a0 [ 229.859026][ T43] usb_disconnect+0x330/0x950 [ 229.863696][ T43] hub_event+0x1cf5/0x4a20 [ 229.868119][ T43] ? do_raw_spin_lock+0x121/0x290 [ 229.873222][ T43] ? register_lock_class+0x51/0x320 [ 229.878411][ T43] ? __pfx_hub_event+0x10/0x10 [ 229.883165][ T43] ? process_scheduled_works+0x9ef/0x17b0 [ 229.888921][ T43] ? _raw_spin_unlock_irq+0x23/0x50 [ 229.894157][ T43] ? process_scheduled_works+0x9ef/0x17b0 [ 229.899878][ T43] ? process_scheduled_works+0x9ef/0x17b0 [ 229.905701][ T43] process_scheduled_works+0xae1/0x17b0 [ 229.911534][ T43] ? __pfx_process_scheduled_works+0x10/0x10 [ 229.917627][ T43] worker_thread+0x8a0/0xda0 [ 229.922224][ T43] kthread+0x711/0x8a0 [ 229.926372][ T43] ? __pfx_worker_thread+0x10/0x10 [ 229.931647][ T43] ? __pfx_kthread+0x10/0x10 [ 229.936260][ T43] ? _raw_spin_unlock_irq+0x23/0x50 [ 229.941450][ T43] ? lockdep_hardirqs_on+0x9c/0x150 [ 229.946729][ T43] ? __pfx_kthread+0x10/0x10 [ 229.951334][ T43] ret_from_fork+0x4bc/0x870 [ 229.955921][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 229.961049][ T43] ? __switch_to_asm+0x39/0x70 [ 229.965813][ T43] ? __switch_to_asm+0x33/0x70 [ 229.970577][ T43] ? __pfx_kthread+0x10/0x10 [ 229.975175][ T43] ret_from_fork_asm+0x1a/0x30 [ 229.980050][ T43] [ 229.983445][ T43] Kernel Offset: disabled [ 229.987843][ T43] Rebooting in 86400 seconds..