last executing test programs: 9.410378804s ago: executing program 0 (id=967): socket$packet(0x11, 0x3, 0x300) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES16=r2], 0x21c}}, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x1}, 0x4) r5 = socket$netlink(0x10, 0x3, 0x10) sendmmsg(r5, &(0x7f0000004a40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="54453a0fd90759e5c3c6824a9dc175a43c64d7776051fcc4d81a09c9379149826da750bdf3963cb72a14d20da2e68d68d5946270b3bee0788c96fe628a2b580eb84154498fc1687c773c901a183ad7f3222b8604da18aa3dd5683b0983428f051f320e", 0x63}], 0x1}}, {{&(0x7f0000000280)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000640)="5e06460af38f", 0x6}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x3, 0x20000004) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000140)) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000240)={'macsec0\x00', 0x100}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'wlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) r10 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r10, 0x7a7, &(0x7f0000000080)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r10, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r10, 0x7ab, &(0x7f0000000040)={&(0x7f0000000bc0)={{@host, 0x3}, {@my=0x0, 0x4000}, 0x400, "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"}, 0x418}) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}, 0x1, 0x0, 0x0, 0x40}, 0x4000c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8971, &(0x7f0000000000)={'dummy0\x00', @multicast}) write$tun(r6, &(0x7f0000000140)=ANY=[], 0x36) 9.346878069s ago: executing program 0 (id=969): r0 = syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$printer(r0, &(0x7f00000003c0)={0x14, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000000)="93", 0xf5) 6.316498199s ago: executing program 0 (id=981): syz_usbip_server_init(0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000040900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000001850000000070001010000000000000000070000000900020073797a31000000000900010073797a3000000000240003801c0000800800034000000002100002800c00028008000180fffffffb04000080140000001000010000000000000000000084000a"], 0xe4}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000400)=[@text32={0x20, &(0x7f0000000080)="0f20c035000001000f22c0660f383deff3a766b80c008ee066b882000f08c40f788fa4ba00000f00d866ba200066b8340c66ef64360f78190f0119", 0x3b}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000"]) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0c200310"], 0xf) 6.316059786s ago: executing program 3 (id=983): r0 = syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$printer(r0, &(0x7f00000003c0)={0x14, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(0x3) syz_usb_connect$uac1(0x3, 0x99, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x87, 0x3, 0x1, 0x81, 0x40, 0x10, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x302, 0x2, 0x4, 0x9}, @extension_unit={0x8, 0x24, 0x8, 0x2, 0x8000, 0x1, '['}, @selector_unit={0x5, 0x24, 0x5, 0x1, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x82, 0x1, 0x8, 0x66, "c50788"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x2, 0xd, 0xcb, {0x7, 0x25, 0x1, 0x1, 0x7, 0x10d}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x5, 0x9, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x81, 0x5, 0x73, {0x7, 0x25, 0x1, 0x80, 0x5, 0x2}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0xf, 0x4, 0xc, 0x20, 0x45}, 0x46, &(0x7f0000000200)={0x5, 0xf, 0x46, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x41, 0xd1, 0x7f, 0xe, 0xf6}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "549f935f63adc4f4686ca491c71fe9be"}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x8, 0x4, 0xc2, 0xf, 0xe, [0x30, 0x0, 0xff3ff0, 0xff0000]}]}, 0xa, [{0x20, &(0x7f0000000280)=@string={0x20, 0x3, "2166aa610a9f32e2e4aef9ed071dc0cc1ec7083fbd7f020282304ce01cd3"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4}}, {0x21, &(0x7f0000000340)=@string={0x21, 0x3, "24d29f37a8095d5c23fb22e2e39f0471cbb53bb5099ae56aeef7cb728208cb"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x812}}, {0xf4, &(0x7f0000000400)=@string={0xf4, 0x3, "9d3fa8c69ef76297e85ba91d1b2f3caa490dd449971f8ac5e6f3a52835613fe42126c6a65cfe0a48fa733d14611c0b7bf8676e3193302ba7bc5c1346d569ce270fc3bdf82802b5f777036f33dcd17eb66eba02cb4d664ff4b70bc41e7b172ef41dcddac838ffb05c98183f89cb88b9d553143510ee72471dfd7eabef8b7bdcc4f72bfa0bbe20c36ac17f2fdcf2abb3e76f50208c24139bf4ac87f447e4ed13988cf878ebe2754e9397143a4f7d1fa9fa3c4a0132d6d54426b4a8a921e6b9edbea61ed12f3d890b29470c8f40230a0a747db87156000d9a3e4dd38600a91c53a9201f903f13e37373a282a5d2891321e8d85c"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x3401}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x41e}}]}) write$char_usb(r1, &(0x7f0000000000)="93", 0xf5) 5.658252744s ago: executing program 0 (id=991): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b50000000100fefffeefffff"], 0xc8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000080900010073797a300000000088000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d440012802c0001800a0001006c696d69740000001c0002800c00024000000000000010000c000140000000000000008b140001640a0001006c696d69740000000400028008000340000001"], 0xd0}, 0x1, 0x0, 0x0, 0x40003}, 0x20050800) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000580)={0x2, 0x8, 0x4}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x8021852, r2, 0x1000f0000) 5.603395098s ago: executing program 0 (id=992): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x101080, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_gettime(r1, &(0x7f0000000300)) r2 = socket$packet(0x11, 0x3, 0x300) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000002010400000000000000000a00000004"], 0x58}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r3, 0x29, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB="2b120409"], 0x98) iopl(0x3) process_mrelease(0xffffffffffffffff, 0x700000000000013) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x240, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x0, 0x40, [{{0x9, 0x4, 0x0, 0x62, 0x2, 0x3, 0x1, 0x2, 0x6, {0x9, 0x21, 0xfff5, 0x9, 0x1, {0x22, 0xae3}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x55, 0x4, 0x6}}}}}]}}]}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a030000000000000000000700000009f2000073797a30000000004c000000090a0104000000000000000000480591ba4650e2000000000900020073797a320000000009000100735bbd3000000000080005400000000d08000640ffffff00080003400000000f2c0000f9ed0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000140000001000010000000000000000000084000a"], 0xc0}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xdc, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2000}, @CTA_SYNPROXY={0x44, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x13}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9c}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xe68}, @CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x448b}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xf}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}]}, @CTA_PROTOINFO={0x40, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x3c, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x7, 0xa}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x7}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x9}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x3}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x4, 0x6}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x9}]}}]}, 0xdc}}, 0x880) sendmmsg$inet6(r3, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 3.21063604s ago: executing program 3 (id=1005): r0 = syz_open_procfs$userns(0x0, &(0x7f00000001c0)) open_by_handle_at(r0, 0x0, 0x400040) 3.197506944s ago: executing program 3 (id=1007): r0 = syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$printer(r0, &(0x7f00000003c0)={0x14, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000000)="93", 0xf5) 2.474508703s ago: executing program 0 (id=1013): r0 = syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$printer(r0, &(0x7f00000003c0)={0x14, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(0x3) syz_usb_connect$uac1(0x3, 0x99, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x87, 0x3, 0x1, 0x81, 0x40, 0x10, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x302, 0x2, 0x4, 0x9}, @extension_unit={0x8, 0x24, 0x8, 0x2, 0x8000, 0x1, '['}, @selector_unit={0x5, 0x24, 0x5, 0x1, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x82, 0x1, 0x8, 0x66, "c50788"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x2, 0xd, 0xcb, {0x7, 0x25, 0x1, 0x1, 0x7, 0x10d}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x5, 0x9, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x81, 0x5, 0x73, {0x7, 0x25, 0x1, 0x80, 0x5, 0x2}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0xf, 0x4, 0xc, 0x20, 0x45}, 0x46, &(0x7f0000000200)={0x5, 0xf, 0x46, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x41, 0xd1, 0x7f, 0xe, 0xf6}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "549f935f63adc4f4686ca491c71fe9be"}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x8, 0x4, 0xc2, 0xf, 0xe, [0x30, 0x0, 0xff3ff0, 0xff0000]}]}, 0xa, [{0x20, &(0x7f0000000280)=@string={0x20, 0x3, "2166aa610a9f32e2e4aef9ed071dc0cc1ec7083fbd7f020282304ce01cd3"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4}}, {0x21, &(0x7f0000000340)=@string={0x21, 0x3, "24d29f37a8095d5c23fb22e2e39f0471cbb53bb5099ae56aeef7cb728208cb"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x812}}, {0xf4, &(0x7f0000000400)=@string={0xf4, 0x3, "9d3fa8c69ef76297e85ba91d1b2f3caa490dd449971f8ac5e6f3a52835613fe42126c6a65cfe0a48fa733d14611c0b7bf8676e3193302ba7bc5c1346d569ce270fc3bdf82802b5f777036f33dcd17eb66eba02cb4d664ff4b70bc41e7b172ef41dcddac838ffb05c98183f89cb88b9d553143510ee72471dfd7eabef8b7bdcc4f72bfa0bbe20c36ac17f2fdcf2abb3e76f50208c24139bf4ac87f447e4ed13988cf878ebe2754e9397143a4f7d1fa9fa3c4a0132d6d54426b4a8a921e6b9edbea61ed12f3d890b29470c8f40230a0a747db87156000d9a3e4dd38600a91c53a9201f903f13e37373a282a5d2891321e8d85c"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x3401}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x41e}}]}) write$char_usb(r1, &(0x7f0000000000)="93", 0xf5) 1.822629237s ago: executing program 1 (id=1017): r0 = syz_open_procfs$userns(0x0, &(0x7f00000001c0)) open_by_handle_at(r0, 0x0, 0x400040) 1.808760869s ago: executing program 1 (id=1019): r0 = syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000e75fcc08c0070515c5b8010203010902340001000080000904ba00038e4e"], 0x0) syz_usb_control_io$printer(r0, &(0x7f00000003c0)={0x14, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000000)="93", 0xf5) 1.262504665s ago: executing program 1 (id=1024): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf251e00000030002f800c0002000200aaaaaaaaaaaa2000038008000100030000000b0005000e00000000000000050002000000000008000300", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x40800}, 0x4040044) 1.186649996s ago: executing program 1 (id=1025): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) r5 = dup(r3) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000000)={@val={0x0, 0x6005}, @void, @eth={@broadcast, @remote, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x26, 0x14, 0x68, 0x0, 0x9, 0x88, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x3, 0x0}}}}}}}, 0x2e) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x7f, 0x1fd, 0xfffffffe, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) close(0x4) 862.566248ms ago: executing program 2 (id=1027): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x6a) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)="7acab9944db85031168f4d4f081beeb956ef75ceaff016845d3053dc9a252c38f1048699c220896831b419024d5deb6ecabc88c5b9441299a6239bd6e353772c57688c963efb2d4e745bf33f1f723dc2ff697d5f569ffcfb846aa663b096e140b3686b880afb09645b12cb8cb272c37a29663d4f477d18b6f821ee9a4ae5ccfa9d2947", 0x83}, {&(0x7f0000000200)="72c1807bf3d8d909984e9a4f27515a7e3b6f9e4950227c0cf1c1f247279d7e47a6a51d53cdef6d3c6cddc4e670a2b1235843aa0f2459f4ea61e6f6dcd535", 0x3e}, {&(0x7f0000000a40)="269e7a0e1b98b782853fe69fb64d658d9c850b93a9a55da438e14b5823cbd49eab0058b7b46d8c2e200ffeace4ff033ff36aa0d5056378c7c64326e53c68303c12713c419e30bf84012ba5fc074bb63c305620f1ef371f57f62f25782fd40f558e135c108dc2c6ffc7f415df337fa1d55a4ffc68ec7eee72d9fd224762436b122838966608afdf361007ec2d655b444968a9eb4183359d1e9b5e92000c03ec57709801e49db9d7e1693c96813cfc4a527f5035d74090591d64bdcb2db59bf3167160f73cca6e40692cd8fc64ec94ec5addb331e90da9aa4366ed8db034e61eaa9c23a0f93ea10d5d7b7766cf3ca08bf99d78b1d1a2623faaf4d4d54494a1b6af8164572ba5173bf9ac5b68c79cd49f363597f3554191e7221bf55137594e4e41a4b8bc76912b0518ff6ee51b839a7bda7b0255144c1e5f", 0x137}, {&(0x7f0000000040)="1cfa596bf35ea4ec804fe60a98941d086a6ef7eb6b47713305084a2f85549b2969bb6e2be3890112f4", 0x29}, {&(0x7f0000000340)="4c631c16ea0012e49498d467cfabdd2e48be63e3437ae35b39fb124cbbe3a8bd779e46b2038a7b1dd682af498d14f13d479ab00d77bdb36d927d6305e1988318f2565b1c3e5cb38091b3582efe17c4803736b7af3ff8f51e970aac2f67f7e118bfdf4d7a710080a5e0f22aa66af29e71e4b8a80b4bbfe8dec496e0a3e57ea895c9b26752e16475c992448a3b4f3f2ab58fb10da496e5b0067cd547fcd14f2668c21283c1cbb413935613d9ccfb10a4d0881cc9b43e5b5f5fbde01573be51b4", 0xbf}, {&(0x7f0000000640)="0c8ce66b00b40a70d3cc5d1fb133", 0xe}, {&(0x7f0000000700)="325eb845023ef8cf1d5edfeed5ae1367d73921ae1fdea3b48037c39a51fe732e7b005bd7bfb311c77ffd838f58e40a36d552b5712c83128d3e615cea43b36307d3f3dfddc1871400816339bb20ffdc07168880acbc3fe46a34e6611801f5c749eb82e304e7ddb13f9d06247a0b5ad41de6bae0d3ee736a1176", 0x79}], 0x7, &(0x7f0000000f00)=ANY=[@ANYBLOB="110000000000000000000000010000000000000000000000c800000000000000000000000700000001891b8be0000002ac1414aae000000164010102ac1414aa64010102443c2a43ac1414bbfffffffbe000000100000007ffffffff00010000ac14141553a74b1affffffff00000007ffffffff00000005ac1e01010000007f442c5a81ac1414bbfffff000e00000010000000964010101000000020000000000000000ac14141e00000004441c0c33e0000002000000100000000000000004ac14141600000400010713a1ac1414bb000000007f000001ac141427000000001400000000000000000000000200000000040000000000001c"], 0x118}}, {{0x0, 0x0, &(0x7f0000000500)}}], 0x2, 0x2010) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) shutdown(r0, 0x1) 762.565481ms ago: executing program 2 (id=1028): r0 = syz_open_procfs$userns(0x0, &(0x7f00000001c0)) open_by_handle_at(r0, 0x0, 0x400040) 762.145472ms ago: executing program 2 (id=1029): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, 0x0, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x2, 0x0, &(0x7f0000000340)) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0xfffffffffffffff7) 650.208467ms ago: executing program 2 (id=1030): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(khazad)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000600)={0x4040100, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendto$inet6(r1, &(0x7f0000000240)="112efc61dfb89b67", 0x8, 0x8010, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r3, 0xffffffffffffffff, 0x1) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r3, 0x4004e502, &(0x7f0000000040)=0x46) 592.294811ms ago: executing program 2 (id=1031): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x20, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x7, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x4, 0x3}]}, 0x20}}, 0xc010) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz2\x00'}, &(0x7f00000000c0)=0x28) 517.236467ms ago: executing program 2 (id=1032): r0 = syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000e75fcc08c0070515c5b8010203010902340001000080000904ba00038e4e"], 0x0) syz_usb_control_io$printer(r0, &(0x7f00000003c0)={0x14, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000000)="93", 0xf5) 365.186274ms ago: executing program 1 (id=1033): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf251e00000030002f800c0002000200aaaaaaaaaaaa2000038008000100030000000b0005000e00000000000000050002000000000008000300", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x40800}, 0x4040044) 337.926295ms ago: executing program 1 (id=1034): syz_usbip_server_init(0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000040900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000001850000000070001010000000000000000070000000900020073797a31000000000900010073797a3000000000240003801c0000800800034000000002100002800c00028008000180fffffffb04000080140000001000010000000000000000000084000a"], 0xe4}}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000400)=[@text32={0x20, &(0x7f0000000080)="0f20c035000001000f22c0660f383deff3a766b80c008ee066b882000f08c40f788fa4ba00000f00d866ba200066b8340c66ef64360f78190f0119", 0x3b}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000"]) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0c200310"], 0xf) 105.757784ms ago: executing program 3 (id=1035): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000340)={0x1, 0x4, 0xf000, 0x2000, &(0x7f000060b000/0x2000)=nil, 0x8000, r1}) 33.899095ms ago: executing program 3 (id=1036): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x6a) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)="7acab9944db85031168f4d4f081beeb956ef75ceaff016845d3053dc9a252c38f1048699c220896831b419024d5deb6ecabc88c5b9441299a6239bd6e353772c57688c963efb2d4e745bf33f1f723dc2ff697d5f569ffcfb846aa663b096e140b3686b880afb09645b12cb8cb272c37a29663d4f477d18b6f821ee9a4ae5ccfa9d2947", 0x83}, {&(0x7f0000000200)="72c1807bf3d8d909984e9a4f27515a7e3b6f9e4950227c0cf1c1f247279d7e47a6a51d53cdef6d3c6cddc4e670a2b1235843aa0f2459f4ea61e6f6dcd535", 0x3e}, {&(0x7f0000000a40)="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", 0x138}, {&(0x7f0000000040)="1cfa596bf35ea4ec804fe60a98941d086a6ef7eb6b47713305084a2f85549b2969bb6e2be3890112f4", 0x29}, {&(0x7f0000000340)="4c631c16ea0012e49498d467cfabdd2e48be63e3437ae35b39fb124cbbe3a8bd779e46b2038a7b1dd682af498d14f13d479ab00d77bdb36d927d6305e1988318f2565b1c3e5cb38091b3582efe17c4803736b7af3ff8f51e970aac2f67f7e118bfdf4d7a710080a5e0f22aa66af29e71e4b8a80b4bbfe8dec496e0a3e57ea895c9b26752e16475c992448a3b4f3f2ab58fb10da496e5b0067cd547fcd14f2668c21283c1cbb413935613d9ccfb10a4d0881cc9b43e5b5f5fbde01573be51b4", 0xbf}, {&(0x7f0000000640)="0c8ce66b00b40a70d3cc5d1fb133", 0xe}, {&(0x7f0000000700)="325eb845023ef8cf1d5edfeed5ae1367d73921ae1fdea3b48037c39a51fe732e7b005bd7bfb311c77ffd838f58e40a36d552b5712c83128d3e615cea43b36307d3f3dfddc1871400816339bb20ffdc07168880acbc3fe46a34e6611801f5c749eb82e304e7ddb13f9d06247a0b5ad41de6bae0d3ee736a1176", 0x79}], 0x7, &(0x7f0000000f00)=ANY=[@ANYBLOB="110000000000000000000000010000000000000000000000c800000000000000000000000700000001891b8be0000002ac1414aae000000164010102ac1414aa64010102443c2a43ac1414bbfffffffbe000000100000007ffffffff00010000ac14141553a74b1affffffff00000007ffffffff00000005ac1e01010000007f442c5a81ac1414bbfffff000e00000010000000964010101000000020000000000000000ac14141e00000004441c0c33e0000002000000100000000000000004ac14141600000400010713a1ac1414bb000000007f000001ac141427000000001400000000000000000000000200000000040000000000001c"], 0x118}}, {{0x0, 0x0, &(0x7f0000000500)}}], 0x2, 0x2010) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) shutdown(r0, 0x1) 0s ago: executing program 3 (id=1037): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) unshare(0x2a020480) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x2, 0x9}}, 0x2e) r9 = openat$cgroup_pressure(r4, &(0x7f0000000540)='cpu.pressure\x00', 0x2, 0x0) read(r9, &(0x7f0000000040)=""/252, 0xfc) setns(r2, 0x8020080) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000640)=0x8a9, 0x4) kernel console output (not intermixed with test programs): 86 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 178.145059][ T24] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 178.162204][ T24] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 178.172367][ T5828] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 178.183028][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.191398][ T24] usb 4-1: Product: syz [ 178.196067][ T24] usb 4-1: Manufacturer: syz [ 178.200678][ T24] usb 4-1: SerialNumber: syz [ 178.214904][ T24] usb 4-1: config 0 descriptor?? [ 178.313381][ T5876] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 178.434167][ T24] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 178.473332][ T5876] usb 2-1: Using ep0 maxpacket: 8 [ 178.479939][ T5876] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 178.484022][ T5958] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 178.489487][ T5876] usb 2-1: config 0 has no interface number 0 [ 178.503027][ T5876] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 178.514543][ T5876] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 178.526852][ T5876] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 178.537956][ T5876] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 178.552728][ T5876] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 178.561936][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.570018][ T5876] usb 2-1: Product: 툤㞟ন屝ﬣ鿣焄뗋딻騉櫥狋ࢂ [ 178.577985][ T5876] usb 2-1: SerialNumber: ࠒ [ 178.584546][ T5876] usb 2-1: config 0 descriptor?? [ 178.639632][ T24] usb 4-1: USB disconnect, device number 44 [ 178.643704][ T5958] usb 1-1: Using ep0 maxpacket: 8 [ 178.654033][ T5958] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 178.664606][ T5958] usb 1-1: config 0 has no interface number 0 [ 178.670749][ T5958] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 178.681925][ T5958] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 178.694117][ T5958] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 178.705377][ T5958] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 178.722685][ T5958] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 178.732075][ T5958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.740245][ T5958] usb 1-1: Product: syz [ 178.744500][ T5958] usb 1-1: Manufacturer: syz [ 178.749196][ T5958] usb 1-1: SerialNumber: syz [ 178.756382][ T5958] usb 1-1: config 0 descriptor?? [ 178.797901][ T5876] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 178.815679][ T5876] usb 2-1: USB disconnect, device number 49 [ 178.968954][ T5958] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 179.180039][ T5958] usb 1-1: USB disconnect, device number 35 [ 179.205247][ T5828] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 179.252943][ T7791] kAFS: unparsable volume name [ 179.314862][ T7791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.697'. [ 179.407216][ T5828] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 179.421764][ T5828] stv0680 3-1:4.0: last error: 132, command = 0x14 [ 179.432728][ T5828] usb 3-1: USB disconnect, device number 42 [ 179.519000][ T7802] FAULT_INJECTION: forcing a failure. [ 179.519000][ T7802] name failslab, interval 1, probability 0, space 0, times 0 [ 179.532163][ T7802] CPU: 1 UID: 0 PID: 7802 Comm: syz.3.700 Not tainted syzkaller #0 PREEMPT(full) [ 179.532189][ T7802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 179.532201][ T7802] Call Trace: [ 179.532209][ T7802] [ 179.532218][ T7802] dump_stack_lvl+0x189/0x250 [ 179.532253][ T7802] ? __pfx____ratelimit+0x10/0x10 [ 179.532277][ T7802] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.532299][ T7802] ? __pfx__printk+0x10/0x10 [ 179.532323][ T7802] ? __pfx___might_resched+0x10/0x10 [ 179.532347][ T7802] should_fail_ex+0x414/0x560 [ 179.532377][ T7802] should_failslab+0xa8/0x100 [ 179.532404][ T7802] __kmalloc_noprof+0xdf/0x800 [ 179.532427][ T7802] ? nf_tables_newrule+0x150b/0x28a0 [ 179.532444][ T7802] ? nla_strcmp+0x106/0x140 [ 179.532467][ T7802] nf_tables_newrule+0x150b/0x28a0 [ 179.532501][ T7802] ? __pfx_nf_tables_newrule+0x10/0x10 [ 179.532522][ T7802] ? nfnl_pernet+0x23/0x240 [ 179.532551][ T7802] ? __nla_parse+0x40/0x60 [ 179.532573][ T7802] nfnetlink_rcv+0x11d9/0x2590 [ 179.532629][ T7802] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 179.532663][ T7802] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 179.532681][ T7802] ? ref_tracker_free+0x63a/0x7d0 [ 179.532699][ T7802] ? netlink_unicast+0x7fa/0x9e0 [ 179.532717][ T7802] ? netlink_sendmsg+0x805/0xb30 [ 179.532766][ T7802] ? __netlink_deliver_tap+0x866/0x8b0 [ 179.532789][ T7802] ? netlink_deliver_tap+0x2e/0x1b0 [ 179.532828][ T7802] netlink_unicast+0x82f/0x9e0 [ 179.532896][ T7802] ? __pfx_netlink_unicast+0x10/0x10 [ 179.532920][ T7802] ? netlink_sendmsg+0x642/0xb30 [ 179.532940][ T7802] ? skb_put+0x11b/0x210 [ 179.532966][ T7802] netlink_sendmsg+0x805/0xb30 [ 179.532998][ T7802] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.533024][ T7802] ? aa_sock_msg_perm+0xf1/0x1d0 [ 179.533048][ T7802] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 179.533072][ T7802] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.533095][ T7802] __sock_sendmsg+0x21c/0x270 [ 179.533118][ T7802] ____sys_sendmsg+0x505/0x830 [ 179.533147][ T7802] ? __pfx_____sys_sendmsg+0x10/0x10 [ 179.533184][ T7802] ? import_iovec+0x74/0xa0 [ 179.533206][ T7802] ___sys_sendmsg+0x21f/0x2a0 [ 179.533230][ T7802] ? __pfx____sys_sendmsg+0x10/0x10 [ 179.533291][ T7802] ? __fget_files+0x2a/0x420 [ 179.533310][ T7802] ? __fget_files+0x3a0/0x420 [ 179.533340][ T7802] __x64_sys_sendmsg+0x19b/0x260 [ 179.533367][ T7802] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 179.533401][ T7802] ? __pfx_ksys_write+0x10/0x10 [ 179.533423][ T7802] ? do_syscall_64+0xbe/0xfa0 [ 179.533450][ T7802] do_syscall_64+0xfa/0xfa0 [ 179.533474][ T7802] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.533491][ T7802] ? clear_bhb_loop+0x60/0xb0 [ 179.533514][ T7802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.533531][ T7802] RIP: 0033:0x7fdfe378f6c9 [ 179.533554][ T7802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.533569][ T7802] RSP: 002b:00007fdfe45f3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.533594][ T7802] RAX: ffffffffffffffda RBX: 00007fdfe39e5fa0 RCX: 00007fdfe378f6c9 [ 179.533608][ T7802] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 179.533620][ T7802] RBP: 00007fdfe45f3090 R08: 0000000000000000 R09: 0000000000000000 [ 179.533632][ T7802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.533644][ T7802] R13: 00007fdfe39e6038 R14: 00007fdfe39e5fa0 R15: 00007ffecb593b88 [ 179.533677][ T7802] [ 180.006351][ T7809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.017302][ T7809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.213386][ T5876] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 180.233383][ T5828] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 180.374933][ T5876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.386065][ T5876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.392584][ T5828] usb 1-1: config 0 has no interfaces? [ 180.398031][ T5876] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 180.405972][ T5828] usb 1-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 180.418659][ T5876] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 180.423864][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.433759][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.455158][ T5876] usb 4-1: config 0 descriptor?? [ 180.464093][ T5863] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 180.481846][ T5828] usb 1-1: config 0 descriptor?? [ 180.643668][ T5863] usb 3-1: Using ep0 maxpacket: 8 [ 180.650730][ T5863] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 180.659117][ T5863] usb 3-1: config 0 has no interface number 0 [ 180.665442][ T5863] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 180.677416][ T5863] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 180.689153][ T5863] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 180.700272][ T5863] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 180.714162][ T7806] netlink: 128 bytes leftover after parsing attributes in process `syz.0.702'. [ 180.714282][ T7809] netlink: 128 bytes leftover after parsing attributes in process `syz.0.702'. [ 180.725552][ T5863] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 180.741848][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.743302][ T43] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 180.751162][ T5863] usb 3-1: Product: syz [ 180.761849][ T5863] usb 3-1: Manufacturer: syz [ 180.766535][ T5863] usb 3-1: SerialNumber: syz [ 180.774520][ T5863] usb 3-1: config 0 descriptor?? [ 180.844077][ T7809] "syz.0.702" (7809) uses obsolete ecb(arc4) skcipher [ 180.871321][ T5876] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 180.881295][ T5876] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 180.889179][ T5876] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 180.899643][ T5876] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 180.906824][ T5828] usb 1-1: USB disconnect, device number 36 [ 180.907265][ T5876] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 180.920829][ T5876] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 180.928307][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 180.933463][ T5876] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 180.940889][ T5876] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 180.949463][ T5876] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 180.957237][ T5876] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 180.966482][ T43] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 180.975112][ T43] usb 2-1: config 0 has no interface number 0 [ 180.981246][ T43] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 180.995750][ T43] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 181.011626][ T43] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 181.023033][ T5876] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 181.034029][ T5863] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior1 [ 181.035795][ T43] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 181.096653][ T43] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 181.120848][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.143032][ T43] usb 2-1: Product: syz [ 181.147612][ T43] usb 2-1: Manufacturer: syz [ 181.158892][ T43] usb 2-1: SerialNumber: syz [ 181.166295][ T5876] usb 4-1: USB disconnect, device number 45 [ 181.197070][ T43] usb 2-1: config 0 descriptor?? [ 181.226030][ T5828] usb 3-1: USB disconnect, device number 43 [ 181.410387][ T43] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 181.479478][ T7823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.707'. [ 181.616190][ T43] usb 2-1: USB disconnect, device number 50 [ 181.616230][ C1] iowarrior 2-1:0.186: iowarrior_callback - usb_submit_urb failed with result -19 [ 181.636307][ T7828] FAULT_INJECTION: forcing a failure. [ 181.636307][ T7828] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.649921][ T7828] CPU: 0 UID: 0 PID: 7828 Comm: syz.0.709 Not tainted syzkaller #0 PREEMPT(full) [ 181.649945][ T7828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 181.649957][ T7828] Call Trace: [ 181.649965][ T7828] [ 181.649973][ T7828] dump_stack_lvl+0x189/0x250 [ 181.650000][ T7828] ? __pfx____ratelimit+0x10/0x10 [ 181.650023][ T7828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.650045][ T7828] ? __pfx__printk+0x10/0x10 [ 181.650066][ T7828] ? __might_fault+0xb0/0x130 [ 181.650099][ T7828] should_fail_ex+0x414/0x560 [ 181.650129][ T7828] _copy_from_iter+0x1de/0x1790 [ 181.650146][ T7828] ? __alloc_skb+0x142/0x2d0 [ 181.650170][ T7828] ? rcu_is_watching+0x15/0xb0 [ 181.650191][ T7828] ? trace_kmalloc+0x1f/0xd0 [ 181.650208][ T7828] ? __kmalloc_node_track_caller_noprof+0x590/0x810 [ 181.650237][ T7828] ? __pfx__copy_from_iter+0x10/0x10 [ 181.650255][ T7828] ? __build_skb_around+0x262/0x3f0 [ 181.650281][ T7828] ? skb_put+0x11b/0x210 [ 181.650299][ T7828] ? tipc_msg_build+0x8c6/0xcf0 [ 181.650327][ T7828] tipc_msg_build+0x72b/0xcf0 [ 181.650360][ T7828] ? __pfx_tipc_msg_build+0x10/0x10 [ 181.650388][ T7828] ? net_generic+0x1e/0x240 [ 181.650406][ T7828] ? net_generic+0x1e/0x240 [ 181.650428][ T7828] ? tipc_group_bc_cong+0x15f/0x210 [ 181.650457][ T7828] tipc_send_group_bcast+0x76c/0xa70 [ 181.650500][ T7828] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 181.650544][ T7828] ? __pfx_woken_wake_function+0x10/0x10 [ 181.650583][ T7828] __tipc_sendmsg+0x2d7/0x2960 [ 181.650617][ T7828] ? process_measurement+0x72d/0x1a40 [ 181.650649][ T7828] ? __pfx___tipc_sendmsg+0x10/0x10 [ 181.650675][ T7828] ? aa_label_sk_perm+0x4cc/0x630 [ 181.650705][ T7828] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 181.650752][ T7828] ? __lock_acquire+0xab9/0xd20 [ 181.650785][ T7828] ? __local_bh_enable_ip+0x12d/0x1c0 [ 181.650805][ T7828] ? lockdep_hardirqs_on+0x9c/0x150 [ 181.650830][ T7828] ? __local_bh_enable_ip+0x12d/0x1c0 [ 181.650849][ T7828] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 181.650878][ T7828] tipc_sendmsg+0x55/0x70 [ 181.650899][ T7828] ? __pfx_tipc_sendmsg+0x10/0x10 [ 181.650921][ T7828] __sock_sendmsg+0x21c/0x270 [ 181.650943][ T7828] ____sys_sendmsg+0x52d/0x830 [ 181.650972][ T7828] ? __pfx_____sys_sendmsg+0x10/0x10 [ 181.651004][ T7828] ? import_iovec+0x74/0xa0 [ 181.651028][ T7828] ___sys_sendmsg+0x21f/0x2a0 [ 181.651055][ T7828] ? __pfx____sys_sendmsg+0x10/0x10 [ 181.651116][ T7828] ? __fget_files+0x2a/0x420 [ 181.651136][ T7828] ? __fget_files+0x3a0/0x420 [ 181.651167][ T7828] __sys_sendmmsg+0x227/0x430 [ 181.651197][ T7828] ? __pfx___sys_sendmmsg+0x10/0x10 [ 181.651231][ T7828] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 181.651275][ T7828] ? ksys_write+0x22a/0x250 [ 181.651295][ T7828] ? __pfx_ksys_write+0x10/0x10 [ 181.651318][ T7828] __x64_sys_sendmmsg+0xa0/0xc0 [ 181.651344][ T7828] do_syscall_64+0xfa/0xfa0 [ 181.651369][ T7828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.651387][ T7828] ? clear_bhb_loop+0x60/0xb0 [ 181.651410][ T7828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.651428][ T7828] RIP: 0033:0x7f5bca78f6c9 [ 181.651444][ T7828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.651460][ T7828] RSP: 002b:00007f5bcb5db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 181.651479][ T7828] RAX: ffffffffffffffda RBX: 00007f5bca9e6090 RCX: 00007f5bca78f6c9 [ 181.651493][ T7828] RDX: 0400000000000181 RSI: 00002000000030c0 RDI: 0000000000000005 [ 181.651505][ T7828] RBP: 00007f5bcb5db090 R08: 0000000000000000 R09: 0000000000000000 [ 181.651517][ T7828] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.651529][ T7828] R13: 00007f5bca9e6128 R14: 00007f5bca9e6090 R15: 00007ffefc9596d8 [ 181.651568][ T7828] [ 182.081241][ T7830] FAULT_INJECTION: forcing a failure. [ 182.081241][ T7830] name failslab, interval 1, probability 0, space 0, times 0 [ 182.097536][ T7830] CPU: 1 UID: 0 PID: 7830 Comm: syz.3.710 Not tainted syzkaller #0 PREEMPT(full) [ 182.097562][ T7830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 182.097574][ T7830] Call Trace: [ 182.097581][ T7830] [ 182.097590][ T7830] dump_stack_lvl+0x189/0x250 [ 182.097615][ T7830] ? __pfx____ratelimit+0x10/0x10 [ 182.097638][ T7830] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.097658][ T7830] ? __pfx__printk+0x10/0x10 [ 182.097683][ T7830] ? __pfx___might_resched+0x10/0x10 [ 182.097700][ T7830] ? fs_reclaim_acquire+0x7d/0x100 [ 182.097727][ T7830] should_fail_ex+0x414/0x560 [ 182.097757][ T7830] should_failslab+0xa8/0x100 [ 182.097783][ T7830] __kmalloc_noprof+0xdf/0x800 [ 182.097804][ T7830] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 182.097822][ T7830] ? rcu_is_watching+0x15/0xb0 [ 182.097849][ T7830] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 182.097876][ T7830] genl_family_rcv_msg_doit+0xb8/0x300 [ 182.097902][ T7830] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 182.097930][ T7830] ? apparmor_capable+0x137/0x1b0 [ 182.097958][ T7830] ? bpf_lsm_capable+0x9/0x20 [ 182.097976][ T7830] ? security_capable+0x7e/0x2e0 [ 182.098002][ T7830] genl_rcv_msg+0x60e/0x790 [ 182.098028][ T7830] ? __pfx_genl_rcv_msg+0x10/0x10 [ 182.098044][ T7830] ? ref_tracker_free+0x63a/0x7d0 [ 182.098061][ T7830] ? __pfx_macsec_add_rxsa+0x10/0x10 [ 182.098086][ T7830] ? ____sys_sendmsg+0x505/0x830 [ 182.098107][ T7830] ? ___sys_sendmsg+0x21f/0x2a0 [ 182.098128][ T7830] ? __x64_sys_sendmsg+0x19b/0x260 [ 182.098147][ T7830] ? do_syscall_64+0xfa/0xfa0 [ 182.098167][ T7830] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.098195][ T7830] netlink_rcv_skb+0x208/0x470 [ 182.098214][ T7830] ? __lock_acquire+0xab9/0xd20 [ 182.098234][ T7830] ? __pfx_genl_rcv_msg+0x10/0x10 [ 182.098254][ T7830] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 182.098298][ T7830] ? down_read+0x1ad/0x2e0 [ 182.098327][ T7830] genl_rcv+0x28/0x40 [ 182.098343][ T7830] netlink_unicast+0x82f/0x9e0 [ 182.098374][ T7830] ? __pfx_netlink_unicast+0x10/0x10 [ 182.098397][ T7830] ? netlink_sendmsg+0x642/0xb30 [ 182.098417][ T7830] ? skb_put+0x11b/0x210 [ 182.098443][ T7830] netlink_sendmsg+0x805/0xb30 [ 182.098483][ T7830] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.098508][ T7830] ? aa_sock_msg_perm+0xf1/0x1d0 [ 182.098530][ T7830] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 182.098552][ T7830] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.098575][ T7830] __sock_sendmsg+0x21c/0x270 [ 182.098595][ T7830] ____sys_sendmsg+0x505/0x830 [ 182.098624][ T7830] ? __pfx_____sys_sendmsg+0x10/0x10 [ 182.098654][ T7830] ? import_iovec+0x74/0xa0 [ 182.098676][ T7830] ___sys_sendmsg+0x21f/0x2a0 [ 182.098701][ T7830] ? __pfx____sys_sendmsg+0x10/0x10 [ 182.098758][ T7830] ? __fget_files+0x2a/0x420 [ 182.098777][ T7830] ? __fget_files+0x3a0/0x420 [ 182.098822][ T7830] __x64_sys_sendmsg+0x19b/0x260 [ 182.098849][ T7830] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 182.098879][ T7830] ? __pfx_ksys_write+0x10/0x10 [ 182.098899][ T7830] ? do_syscall_64+0xbe/0xfa0 [ 182.098924][ T7830] do_syscall_64+0xfa/0xfa0 [ 182.098948][ T7830] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.098966][ T7830] ? clear_bhb_loop+0x60/0xb0 [ 182.098987][ T7830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.099001][ T7830] RIP: 0033:0x7fdfe378f6c9 [ 182.099017][ T7830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.099032][ T7830] RSP: 002b:00007fdfe45f3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.099052][ T7830] RAX: ffffffffffffffda RBX: 00007fdfe39e5fa0 RCX: 00007fdfe378f6c9 [ 182.099066][ T7830] RDX: 000000000000c010 RSI: 0000200000000040 RDI: 0000000000000003 [ 182.099078][ T7830] RBP: 00007fdfe45f3090 R08: 0000000000000000 R09: 0000000000000000 [ 182.099089][ T7830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.099100][ T7830] R13: 00007fdfe39e6038 R14: 00007fdfe39e5fa0 R15: 00007ffecb593b88 [ 182.099131][ T7830] [ 182.633340][ T5828] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 182.733376][ T43] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 182.783371][ T5828] usb 3-1: Using ep0 maxpacket: 8 [ 182.789763][ T5828] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 182.798035][ T5828] usb 3-1: config 0 has no interface number 0 [ 182.804233][ T5828] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 182.816799][ T5828] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 182.829315][ T5828] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 182.840429][ T5828] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 182.855910][ T5828] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 182.865304][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.873573][ T5828] usb 3-1: Product: syz [ 182.878198][ T5828] usb 3-1: Manufacturer: syz [ 182.882798][ T5828] usb 3-1: SerialNumber: syz [ 182.890293][ T5828] usb 3-1: config 0 descriptor?? [ 182.903383][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 182.910435][ T43] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 182.919154][ T795] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 182.926994][ T43] usb 2-1: config 0 has no interface number 0 [ 182.933304][ T43] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 182.944564][ T43] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 182.956805][ T43] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 182.968188][ T43] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 182.983852][ T43] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 182.993100][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.001321][ T43] usb 2-1: Product: 툤㞟ন屝ﬣ鿣焄뗋딻騉櫥狋ࢂ [ 183.009262][ T43] usb 2-1: SerialNumber: ࠒ [ 183.016379][ T43] usb 2-1: config 0 descriptor?? [ 183.104593][ T5828] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 183.109560][ T795] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 183.151008][ T795] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.169611][ T795] usb 1-1: config 0 descriptor?? [ 183.183161][ T795] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 183.229423][ T7847] FAULT_INJECTION: forcing a failure. [ 183.229423][ T7847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.236027][ T43] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior1 [ 183.242768][ T7847] CPU: 0 UID: 0 PID: 7847 Comm: syz.3.718 Not tainted syzkaller #0 PREEMPT(full) [ 183.242794][ T7847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 183.242806][ T7847] Call Trace: [ 183.242816][ T7847] [ 183.242825][ T7847] dump_stack_lvl+0x189/0x250 [ 183.242851][ T7847] ? __pfx____ratelimit+0x10/0x10 [ 183.242875][ T7847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.242897][ T7847] ? __pfx__printk+0x10/0x10 [ 183.242929][ T7847] should_fail_ex+0x414/0x560 [ 183.242961][ T7847] _copy_to_user+0x31/0xb0 [ 183.242984][ T7847] simple_read_from_buffer+0xe1/0x170 [ 183.243009][ T7847] proc_fail_nth_read+0x1b3/0x220 [ 183.243037][ T7847] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 183.243066][ T7847] ? rw_verify_area+0x2a6/0x4d0 [ 183.243090][ T7847] ? __lock_acquire+0xab9/0xd20 [ 183.243106][ T7847] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 183.243132][ T7847] vfs_read+0x200/0xa30 [ 183.243156][ T7847] ? fdget_pos+0x247/0x320 [ 183.243184][ T7847] ? __pfx___mutex_lock+0x10/0x10 [ 183.243209][ T7847] ? __pfx_vfs_read+0x10/0x10 [ 183.243235][ T7847] ? __fget_files+0x2a/0x420 [ 183.243259][ T7847] ? __fget_files+0x3a0/0x420 [ 183.243277][ T7847] ? __fget_files+0x2a/0x420 [ 183.243306][ T7847] ksys_read+0x145/0x250 [ 183.243331][ T7847] ? __pfx_ksys_read+0x10/0x10 [ 183.243352][ T7847] ? do_syscall_64+0xbe/0xfa0 [ 183.243379][ T7847] do_syscall_64+0xfa/0xfa0 [ 183.243413][ T7847] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.243431][ T7847] ? clear_bhb_loop+0x60/0xb0 [ 183.243452][ T7847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.243469][ T7847] RIP: 0033:0x7fdfe378e0dc [ 183.243486][ T7847] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 183.243502][ T7847] RSP: 002b:00007fdfe45f3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 183.243520][ T7847] RAX: ffffffffffffffda RBX: 00007fdfe39e5fa0 RCX: 00007fdfe378e0dc [ 183.243534][ T7847] RDX: 000000000000000f RSI: 00007fdfe45f30a0 RDI: 0000000000000003 [ 183.243545][ T7847] RBP: 00007fdfe45f3090 R08: 0000000000000000 R09: 0000000000000000 [ 183.243557][ T7847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.243568][ T7847] R13: 00007fdfe39e6038 R14: 00007fdfe39e5fa0 R15: 00007ffecb593b88 [ 183.243600][ T7847] [ 183.315679][ T5828] usb 3-1: USB disconnect, device number 44 [ 183.324475][ T43] usb 2-1: USB disconnect, device number 51 [ 183.618695][ T795] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 183.813316][ T5876] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 183.986690][ T5876] usb 4-1: Using ep0 maxpacket: 8 [ 183.995615][ T5876] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 184.024067][ T795] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 184.032027][ T5876] usb 4-1: config 0 has no interface number 0 [ 184.048651][ T5876] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 184.048682][ T5876] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 184.048709][ T5876] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 184.048734][ T5876] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 184.106775][ T5876] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 184.106806][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.106827][ T5876] usb 4-1: Product: syz [ 184.106842][ T5876] usb 4-1: Manufacturer: syz [ 184.166692][ T5876] usb 4-1: SerialNumber: syz [ 184.191189][ T5876] usb 4-1: config 0 descriptor?? [ 184.236490][ T7841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.254165][ T7841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.271990][ T7841] tmpfs: Unknown parameter '!' [ 184.298694][ T795] usb 1-1: USB disconnect, device number 37 [ 184.428579][ T5876] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 184.501559][ T7883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.730'. [ 184.640585][ C1] iowarrior 4-1:0.186: iowarrior_callback - usb_submit_urb failed with result -1 [ 184.650705][ T794] usb 4-1: USB disconnect, device number 46 [ 184.713424][ T795] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 184.837139][ T7887] delete_channel: no stack [ 184.841702][ T7887] delete_channel: no stack [ 184.853831][ T5876] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 184.874340][ T795] usb 3-1: Using ep0 maxpacket: 8 [ 184.881127][ T795] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 184.890796][ T795] usb 3-1: config 0 has no interface number 0 [ 184.897239][ T795] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 184.908848][ T795] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 184.921026][ T795] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 184.932531][ T795] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 184.950450][ T795] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 184.960146][ T795] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.968561][ T795] usb 3-1: Product: syz [ 184.972906][ T795] usb 3-1: Manufacturer: syz [ 184.977868][ T795] usb 3-1: SerialNumber: syz [ 184.996259][ T795] usb 3-1: config 0 descriptor?? [ 185.029596][ T7892] FAULT_INJECTION: forcing a failure. [ 185.029596][ T7892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.043077][ T7892] CPU: 0 UID: 0 PID: 7892 Comm: syz.0.733 Not tainted syzkaller #0 PREEMPT(full) [ 185.043102][ T7892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 185.043114][ T7892] Call Trace: [ 185.043122][ T7892] [ 185.043131][ T7892] dump_stack_lvl+0x189/0x250 [ 185.043156][ T7892] ? __pfx____ratelimit+0x10/0x10 [ 185.043180][ T7892] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.043201][ T7892] ? __pfx__printk+0x10/0x10 [ 185.043231][ T7892] should_fail_ex+0x414/0x560 [ 185.043260][ T7892] _copy_to_user+0x31/0xb0 [ 185.043282][ T7892] simple_read_from_buffer+0xe1/0x170 [ 185.043306][ T7892] proc_fail_nth_read+0x1b3/0x220 [ 185.043334][ T7892] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 185.043362][ T7892] ? rw_verify_area+0x2a6/0x4d0 [ 185.043386][ T7892] ? __lock_acquire+0xab9/0xd20 [ 185.043403][ T7892] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 185.043429][ T7892] vfs_read+0x200/0xa30 [ 185.043453][ T7892] ? fdget_pos+0x247/0x320 [ 185.043475][ T7892] ? __pfx___mutex_lock+0x10/0x10 [ 185.043500][ T7892] ? __pfx_vfs_read+0x10/0x10 [ 185.043526][ T7892] ? __fget_files+0x2a/0x420 [ 185.043539][ T5876] usb 2-1: Using ep0 maxpacket: 8 [ 185.043548][ T7892] ? __fget_files+0x3a0/0x420 [ 185.043567][ T7892] ? __fget_files+0x2a/0x420 [ 185.043590][ T7892] ksys_read+0x145/0x250 [ 185.043608][ T7892] ? __pfx_ksys_read+0x10/0x10 [ 185.043628][ T7892] ? do_syscall_64+0xbe/0xfa0 [ 185.043655][ T7892] do_syscall_64+0xfa/0xfa0 [ 185.043678][ T7892] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.043695][ T7892] ? clear_bhb_loop+0x60/0xb0 [ 185.043716][ T7892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.043734][ T7892] RIP: 0033:0x7f5bca78e0dc [ 185.043752][ T7892] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 185.043768][ T7892] RSP: 002b:00007f5bcb5fc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 185.043787][ T7892] RAX: ffffffffffffffda RBX: 00007f5bca9e5fa0 RCX: 00007f5bca78e0dc [ 185.043800][ T7892] RDX: 000000000000000f RSI: 00007f5bcb5fc0a0 RDI: 0000000000000003 [ 185.043811][ T7892] RBP: 00007f5bcb5fc090 R08: 0000000000000000 R09: 0000000000000000 [ 185.043823][ T7892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.043834][ T7892] R13: 00007f5bca9e6038 R14: 00007f5bca9e5fa0 R15: 00007ffefc9596d8 [ 185.043865][ T7892] [ 185.120955][ T7894] netlink: 'syz.0.734': attribute type 1 has an invalid length. [ 185.137532][ T5876] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 185.139422][ T7894] FAULT_INJECTION: forcing a failure. [ 185.139422][ T7894] name failslab, interval 1, probability 0, space 0, times 0 [ 185.144613][ T5876] usb 2-1: config 0 has no interface number 0 [ 185.150480][ T7894] CPU: 0 UID: 0 PID: 7894 Comm: syz.0.734 Not tainted syzkaller #0 PREEMPT(full) [ 185.150504][ T7894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 185.150515][ T7894] Call Trace: [ 185.150523][ T7894] [ 185.150530][ T7894] dump_stack_lvl+0x189/0x250 [ 185.150557][ T7894] ? __pfx____ratelimit+0x10/0x10 [ 185.150581][ T7894] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.150602][ T7894] ? __pfx__printk+0x10/0x10 [ 185.150620][ T7894] ? save_netdev_trace_buffer+0x4b5/0x5a0 [ 185.150642][ T7894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.150669][ T7894] should_fail_ex+0x414/0x560 [ 185.150699][ T7894] should_failslab+0xa8/0x100 [ 185.150725][ T7894] kmem_cache_alloc_noprof+0x88/0x700 [ 185.150748][ T7894] ? skb_clone+0x212/0x3a0 [ 185.150776][ T7894] skb_clone+0x212/0x3a0 [ 185.150802][ T7894] __netlink_deliver_tap+0x424/0x8b0 [ 185.150839][ T7894] ? netlink_deliver_tap+0x2e/0x1b0 [ 185.150863][ T7894] netlink_deliver_tap+0x19c/0x1b0 [ 185.150892][ T7894] netlink_sendskb+0x68/0x140 [ 185.150915][ T7894] netlink_unicast+0x397/0x9e0 [ 185.150933][ T7894] ? __asan_memcpy+0x40/0x70 [ 185.150962][ T7894] ? __pfx_netlink_unicast+0x10/0x10 [ 185.150992][ T7894] netlink_rcv_skb+0x28c/0x470 [ 185.151012][ T7894] ? __lock_acquire+0xab9/0xd20 [ 185.151031][ T7894] ? __pfx_genl_rcv_msg+0x10/0x10 [ 185.151051][ T7894] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 185.151092][ T7894] ? down_read+0x1ad/0x2e0 [ 185.151120][ T7894] genl_rcv+0x28/0x40 [ 185.151135][ T7894] netlink_unicast+0x82f/0x9e0 [ 185.151165][ T7894] ? __pfx_netlink_unicast+0x10/0x10 [ 185.151187][ T7894] ? netlink_sendmsg+0x642/0xb30 [ 185.151207][ T7894] ? skb_put+0x11b/0x210 [ 185.151232][ T7894] netlink_sendmsg+0x805/0xb30 [ 185.151265][ T7894] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.151292][ T7894] ? aa_sock_msg_perm+0xf1/0x1d0 [ 185.151314][ T7894] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 185.151337][ T7894] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.151360][ T7894] __sock_sendmsg+0x21c/0x270 [ 185.151382][ T7894] ____sys_sendmsg+0x505/0x830 [ 185.151411][ T7894] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.151444][ T7894] ? import_iovec+0x74/0xa0 [ 185.151469][ T7894] ___sys_sendmsg+0x21f/0x2a0 [ 185.151494][ T7894] ? __pfx____sys_sendmsg+0x10/0x10 [ 185.151554][ T7894] ? __fget_files+0x2a/0x420 [ 185.151573][ T7894] ? __fget_files+0x3a0/0x420 [ 185.151603][ T7894] __x64_sys_sendmsg+0x19b/0x260 [ 185.151629][ T7894] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 185.151662][ T7894] ? __pfx_ksys_write+0x10/0x10 [ 185.151683][ T7894] ? do_syscall_64+0xbe/0xfa0 [ 185.151709][ T7894] do_syscall_64+0xfa/0xfa0 [ 185.151733][ T7894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.151751][ T7894] ? clear_bhb_loop+0x60/0xb0 [ 185.151773][ T7894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.151789][ T7894] RIP: 0033:0x7f5bca78f6c9 [ 185.151806][ T7894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.151821][ T7894] RSP: 002b:00007f5bcb5fc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.151840][ T7894] RAX: ffffffffffffffda RBX: 00007f5bca9e5fa0 RCX: 00007f5bca78f6c9 [ 185.151854][ T7894] RDX: 000000000000c010 RSI: 0000200000000040 RDI: 0000000000000003 [ 185.151866][ T7894] RBP: 00007f5bcb5fc090 R08: 0000000000000000 R09: 0000000000000000 [ 185.151877][ T7894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.151894][ T7894] R13: 00007f5bca9e6038 R14: 00007f5bca9e5fa0 R15: 00007ffefc9596d8 [ 185.151926][ T7894] [ 185.493332][ T5828] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 185.502018][ T5876] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 185.639278][ T7906] Failed to get privilege flags for destination (handle=0x2:0x3) [ 185.645309][ T795] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 185.673977][ T5828] usb 1-1: Using ep0 maxpacket: 8 [ 185.694106][ T795] usb 3-1: USB disconnect, device number 45 [ 185.717021][ T5876] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 185.729765][ T5876] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 185.742947][ T5876] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 185.765195][ T5876] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 185.777404][ T5828] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 185.781235][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.787697][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.797868][ T5876] usb 2-1: Product: syz [ 185.807923][ T5876] usb 2-1: Manufacturer: syz [ 185.812653][ T5876] usb 2-1: SerialNumber: syz [ 185.816453][ T5828] usb 1-1: Product: syz [ 185.821515][ T5876] usb 2-1: config 0 descriptor?? [ 185.823422][ T5828] usb 1-1: Manufacturer: syz [ 185.832581][ T5828] usb 1-1: SerialNumber: syz [ 186.038938][ T5876] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 186.046302][ T7898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.061925][ T794] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 186.063044][ T7898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.077818][ T795] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 186.087579][ T7898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.099314][ T7898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.109079][ T7898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.118397][ T7898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.127587][ T7898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.136612][ T7898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.146152][ T7898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.155192][ T7898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.192314][ T5828] usblp 1-1:1.0: usblp1: USB Unidirectional printer dev 38 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 186.215591][ T5828] usb 1-1: USB disconnect, device number 38 [ 186.223323][ T794] usb 4-1: Using ep0 maxpacket: 8 [ 186.230250][ T794] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 186.243353][ T795] usb 3-1: Using ep0 maxpacket: 8 [ 186.245666][ T5828] usblp1: removed [ 186.254244][ T794] usb 4-1: config 179 has no interface number 0 [ 186.260642][ T794] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 186.268137][ T795] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 186.284653][ T795] usb 3-1: config 0 has no interface number 0 [ 186.286319][ T5863] usb 2-1: USB disconnect, device number 52 [ 186.297886][ T794] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 186.299054][ T795] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 186.309933][ T794] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 186.335599][ T795] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 186.349356][ T794] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 186.362992][ T794] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 186.384008][ T795] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 186.388162][ T794] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 186.405675][ T794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.422602][ T795] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 186.431143][ T7907] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 186.445273][ T795] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 186.455426][ T795] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.465806][ T795] usb 3-1: Product: 툤㞟ন屝ﬣ鿣焄뗋딻騉櫥狋ࢂ [ 186.474341][ T795] usb 3-1: SerialNumber: ࠒ [ 186.481332][ T7911] FAULT_INJECTION: forcing a failure. [ 186.481332][ T7911] name failslab, interval 1, probability 0, space 0, times 0 [ 186.495269][ T7911] CPU: 1 UID: 0 PID: 7911 Comm: syz.0.740 Not tainted syzkaller #0 PREEMPT(full) [ 186.495293][ T7911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 186.495304][ T7911] Call Trace: [ 186.495313][ T7911] [ 186.495321][ T7911] dump_stack_lvl+0x189/0x250 [ 186.495346][ T7911] ? __pfx____ratelimit+0x10/0x10 [ 186.495370][ T7911] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.495391][ T7911] ? __pfx__printk+0x10/0x10 [ 186.495417][ T7911] ? __pfx___might_resched+0x10/0x10 [ 186.495436][ T7911] ? fs_reclaim_acquire+0x7d/0x100 [ 186.495461][ T7911] should_fail_ex+0x414/0x560 [ 186.495490][ T7911] should_failslab+0xa8/0x100 [ 186.495517][ T7911] kmem_cache_alloc_node_noprof+0x8c/0x710 [ 186.495540][ T7911] ? __alloc_skb+0x112/0x2d0 [ 186.495560][ T7911] ? netlink_autobind+0xdb/0x300 [ 186.495587][ T7911] __alloc_skb+0x112/0x2d0 [ 186.495612][ T7911] netlink_sendmsg+0x5c6/0xb30 [ 186.495644][ T7911] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.495669][ T7911] ? __lock_acquire+0xab9/0xd20 [ 186.495685][ T7911] ? aa_sock_msg_perm+0xf1/0x1d0 [ 186.495708][ T7911] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 186.495730][ T7911] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.495755][ T7911] __sock_sendmsg+0x21c/0x270 [ 186.495776][ T7911] ____sys_sendmsg+0x505/0x830 [ 186.495806][ T7911] ? __pfx_____sys_sendmsg+0x10/0x10 [ 186.495838][ T7911] ? import_iovec+0x74/0xa0 [ 186.495862][ T7911] ___sys_sendmsg+0x21f/0x2a0 [ 186.495887][ T7911] ? __pfx____sys_sendmsg+0x10/0x10 [ 186.495946][ T7911] ? __fget_files+0x2a/0x420 [ 186.495965][ T7911] ? __fget_files+0x3a0/0x420 [ 186.495995][ T7911] __x64_sys_sendmsg+0x19b/0x260 [ 186.496028][ T7911] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 186.496060][ T7911] ? __pfx_ksys_write+0x10/0x10 [ 186.496080][ T7911] ? do_syscall_64+0xbe/0xfa0 [ 186.496104][ T7911] do_syscall_64+0xfa/0xfa0 [ 186.496127][ T7911] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.496145][ T7911] ? clear_bhb_loop+0x60/0xb0 [ 186.496167][ T7911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.496184][ T7911] RIP: 0033:0x7f5bca78f6c9 [ 186.496199][ T7911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.496215][ T7911] RSP: 002b:00007f5bcb5fc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.496234][ T7911] RAX: ffffffffffffffda RBX: 00007f5bca9e5fa0 RCX: 00007f5bca78f6c9 [ 186.496247][ T7911] RDX: 0000000000000800 RSI: 0000200000000940 RDI: 0000000000000005 [ 186.496259][ T7911] RBP: 00007f5bcb5fc090 R08: 0000000000000000 R09: 0000000000000000 [ 186.496271][ T7911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.496283][ T7911] R13: 00007f5bca9e6038 R14: 00007f5bca9e5fa0 R15: 00007ffefc9596d8 [ 186.496313][ T7911] [ 186.497347][ T795] usb 3-1: config 0 descriptor?? [ 186.733654][ T7907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.790916][ T7907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.941262][ T7916] kvm: kvm [7914]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x6 [ 186.963001][ T795] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 186.997308][ T795] usb 3-1: USB disconnect, device number 46 [ 187.056980][ T7534] usb 4-1: USB disconnect, device number 47 [ 187.057040][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 187.072121][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 187.294563][ T5863] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 187.459057][ T5863] usb 2-1: Using ep0 maxpacket: 8 [ 187.465921][ T5863] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 187.475698][ T5863] usb 2-1: config 0 has no interface number 0 [ 187.481833][ T5863] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 187.504247][ T5863] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 187.524211][ T5863] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 187.537211][ T5863] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 187.555639][ T5863] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 187.565191][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.573733][ T5863] usb 2-1: Product: syz [ 187.579344][ T5863] usb 2-1: Manufacturer: syz [ 187.584284][ T5863] usb 2-1: SerialNumber: syz [ 187.594194][ T5863] usb 2-1: config 0 descriptor?? [ 187.803303][ T5828] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 187.820103][ T5863] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 187.839767][ T5863] usb 2-1: USB disconnect, device number 53 [ 187.963324][ T5828] usb 3-1: Using ep0 maxpacket: 8 [ 187.970421][ T5828] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 187.978995][ T5828] usb 3-1: config 0 has no interface number 0 [ 187.985515][ T5828] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 187.996639][ T5828] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 188.008494][ T5828] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 188.020106][ T5828] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 188.035574][ T5828] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 188.044716][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.052710][ T5828] usb 3-1: Product: syz [ 188.057117][ T5828] usb 3-1: Manufacturer: syz [ 188.061734][ T5828] usb 3-1: SerialNumber: syz [ 188.068412][ T5828] usb 3-1: config 0 descriptor?? [ 188.279575][ T5828] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 188.386262][ T7941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.753'. [ 188.502138][ T7534] usb 3-1: USB disconnect, device number 47 [ 188.526366][ T7952] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 188.533016][ T7952] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 188.542415][ T7952] vhci_hcd vhci_hcd.0: Device attached [ 188.687300][ T5836] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 188.735802][ T7953] vhci_hcd: connection closed [ 188.737704][ T12] vhci_hcd vhci_hcd.3: stop threads [ 188.748876][ T12] vhci_hcd vhci_hcd.3: release socket [ 188.754586][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 188.793368][ T5876] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 188.801128][ T5876] usb 39-1: enqueue for inactive port 0 [ 188.873849][ T5876] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 188.893374][ T7534] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 188.903303][ T795] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 189.043287][ T7534] usb 1-1: Using ep0 maxpacket: 8 [ 189.050484][ T7534] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 189.060533][ T795] usb 2-1: Using ep0 maxpacket: 8 [ 189.069684][ T7534] usb 1-1: config 0 has no interface number 0 [ 189.078583][ T795] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 189.087091][ T7534] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 189.091216][ T7968] netlink: 12 bytes leftover after parsing attributes in process `syz.2.764'. [ 189.098922][ T795] usb 2-1: config 0 has no interface number 0 [ 189.114706][ T7534] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 189.126591][ T795] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 189.137707][ T7534] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 189.150195][ T795] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 189.162868][ T7534] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 189.176140][ T795] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 189.188649][ T795] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 189.204041][ T7534] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 189.213597][ T7534] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.221629][ T7534] usb 1-1: Product: syz [ 189.226145][ T7534] usb 1-1: Manufacturer: syz [ 189.230823][ T7534] usb 1-1: SerialNumber: syz [ 189.235610][ T795] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 189.246555][ T795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.255652][ T7534] usb 1-1: config 0 descriptor?? [ 189.263690][ T795] usb 2-1: Product: syz [ 189.267987][ T795] usb 2-1: Manufacturer: syz [ 189.272598][ T795] usb 2-1: SerialNumber: syz [ 189.283853][ T795] usb 2-1: config 0 descriptor?? [ 189.312564][ T7972] FAULT_INJECTION: forcing a failure. [ 189.312564][ T7972] name failslab, interval 1, probability 0, space 0, times 0 [ 189.327410][ T7972] CPU: 0 UID: 0 PID: 7972 Comm: syz.3.766 Not tainted syzkaller #0 PREEMPT(full) [ 189.327435][ T7972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 189.327447][ T7972] Call Trace: [ 189.327456][ T7972] [ 189.327464][ T7972] dump_stack_lvl+0x189/0x250 [ 189.327482][ T7972] ? __pfx____ratelimit+0x10/0x10 [ 189.327496][ T7972] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.327508][ T7972] ? __pfx__printk+0x10/0x10 [ 189.327525][ T7972] ? __pfx___might_resched+0x10/0x10 [ 189.327565][ T7972] should_fail_ex+0x414/0x560 [ 189.327593][ T7972] should_failslab+0xa8/0x100 [ 189.327618][ T7972] __kmalloc_noprof+0xdf/0x800 [ 189.327632][ T7972] ? nf_tables_newrule+0x150b/0x28a0 [ 189.327642][ T7972] ? nla_strcmp+0x106/0x140 [ 189.327654][ T7972] nf_tables_newrule+0x150b/0x28a0 [ 189.327674][ T7972] ? __pfx_nf_tables_newrule+0x10/0x10 [ 189.327693][ T7972] ? nfnl_pernet+0x23/0x240 [ 189.327724][ T7972] ? __nla_parse+0x40/0x60 [ 189.327747][ T7972] nfnetlink_rcv+0x11d9/0x2590 [ 189.327788][ T7972] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 189.327807][ T7972] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 189.327817][ T7972] ? ref_tracker_free+0x63a/0x7d0 [ 189.327837][ T7972] ? netlink_unicast+0x7fa/0x9e0 [ 189.327856][ T7972] ? netlink_sendmsg+0x805/0xb30 [ 189.327909][ T7972] ? __netlink_deliver_tap+0x866/0x8b0 [ 189.327927][ T7972] ? netlink_deliver_tap+0x2e/0x1b0 [ 189.327949][ T7972] netlink_unicast+0x82f/0x9e0 [ 189.327965][ T7972] ? __pfx_netlink_unicast+0x10/0x10 [ 189.327980][ T7972] ? netlink_sendmsg+0x642/0xb30 [ 189.328001][ T7972] ? skb_put+0x11b/0x210 [ 189.328027][ T7972] netlink_sendmsg+0x805/0xb30 [ 189.328060][ T7972] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.328079][ T7972] ? aa_sock_msg_perm+0xf1/0x1d0 [ 189.328092][ T7972] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 189.328105][ T7972] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.328119][ T7972] __sock_sendmsg+0x21c/0x270 [ 189.328138][ T7972] ____sys_sendmsg+0x505/0x830 [ 189.328168][ T7972] ? __pfx_____sys_sendmsg+0x10/0x10 [ 189.328202][ T7972] ? import_iovec+0x74/0xa0 [ 189.328222][ T7972] ___sys_sendmsg+0x21f/0x2a0 [ 189.328236][ T7972] ? __pfx____sys_sendmsg+0x10/0x10 [ 189.328269][ T7972] ? __fget_files+0x2a/0x420 [ 189.328287][ T7972] ? __fget_files+0x3a0/0x420 [ 189.328318][ T7972] __x64_sys_sendmsg+0x19b/0x260 [ 189.328354][ T7972] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 189.328377][ T7972] ? __pfx_ksys_write+0x10/0x10 [ 189.328389][ T7972] ? do_syscall_64+0xbe/0xfa0 [ 189.328405][ T7972] do_syscall_64+0xfa/0xfa0 [ 189.328419][ T7972] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.328437][ T7972] ? clear_bhb_loop+0x60/0xb0 [ 189.328460][ T7972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.328479][ T7972] RIP: 0033:0x7fdfe378f6c9 [ 189.328496][ T7972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.328512][ T7972] RSP: 002b:00007fdfe45f3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.328525][ T7972] RAX: ffffffffffffffda RBX: 00007fdfe39e5fa0 RCX: 00007fdfe378f6c9 [ 189.328533][ T7972] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 189.328539][ T7972] RBP: 00007fdfe45f3090 R08: 0000000000000000 R09: 0000000000000000 [ 189.328545][ T7972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.328551][ T7972] R13: 00007fdfe39e6038 R14: 00007fdfe39e5fa0 R15: 00007ffecb593b88 [ 189.328570][ T7972] [ 189.695282][ T7534] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 189.727726][ T795] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior1 [ 189.733365][ T5863] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 189.742545][ T7534] usb 1-1: USB disconnect, device number 39 [ 189.758013][ T7975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.767'. [ 189.780672][ T795] usb 2-1: USB disconnect, device number 54 [ 189.903786][ T5863] usb 3-1: Using ep0 maxpacket: 32 [ 189.910435][ T5863] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 189.919572][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.930561][ T5863] usb 3-1: config 0 descriptor?? [ 189.939097][ T5863] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 190.083307][ T7534] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 190.243323][ T7534] usb 1-1: Using ep0 maxpacket: 8 [ 190.251199][ T7534] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 190.259726][ T7534] usb 1-1: config 0 has no interface number 0 [ 190.266174][ T7534] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 190.277378][ T7534] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 190.289953][ T7534] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 190.301902][ T7534] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 190.322724][ T7534] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 190.332151][ T7534] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.340649][ T7534] usb 1-1: Product: 툤㞟ন屝ﬣ鿣焄뗋딻騉櫥狋ࢂ [ 190.349314][ T7534] usb 1-1: SerialNumber: ࠒ [ 190.360923][ T7534] usb 1-1: config 0 descriptor?? [ 190.437635][ T7987] fuse: Unknown parameter '' [ 190.552568][ T7970] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:0 [ 190.561788][ T795] usb 3-1: USB disconnect, device number 48 [ 190.592432][ T7534] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 190.609143][ T7534] usb 1-1: USB disconnect, device number 40 [ 190.773529][ T794] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 190.923420][ T794] usb 2-1: Using ep0 maxpacket: 8 [ 190.930061][ T794] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 190.938679][ T794] usb 2-1: config 0 has no interface number 0 [ 190.944859][ T794] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 190.956100][ T794] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 190.967873][ T794] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 190.979013][ T794] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 190.995772][ T794] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 191.005023][ T794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.013056][ T794] usb 2-1: Product: syz [ 191.017326][ T794] usb 2-1: Manufacturer: syz [ 191.021990][ T794] usb 2-1: SerialNumber: syz [ 191.030206][ T794] usb 2-1: config 0 descriptor?? [ 191.111345][ T7995] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 191.117924][ T7995] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 191.126300][ T7994] FAULT_INJECTION: forcing a failure. [ 191.126300][ T7994] name failslab, interval 1, probability 0, space 0, times 0 [ 191.142578][ T7995] vhci_hcd vhci_hcd.0: Device attached [ 191.152656][ T7994] CPU: 1 UID: 0 PID: 7994 Comm: syz.3.775 Not tainted syzkaller #0 PREEMPT(full) [ 191.152685][ T7994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 191.152698][ T7994] Call Trace: [ 191.152707][ T7994] [ 191.152715][ T7994] dump_stack_lvl+0x189/0x250 [ 191.152759][ T7994] ? __pfx____ratelimit+0x10/0x10 [ 191.152782][ T7994] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.152805][ T7994] ? __pfx__printk+0x10/0x10 [ 191.152833][ T7994] ? __pfx___might_resched+0x10/0x10 [ 191.152860][ T7994] should_fail_ex+0x414/0x560 [ 191.152890][ T7994] should_failslab+0xa8/0x100 [ 191.152918][ T7994] kmem_cache_alloc_node_noprof+0x8c/0x710 [ 191.152941][ T7994] ? __alloc_skb+0x112/0x2d0 [ 191.152968][ T7994] __alloc_skb+0x112/0x2d0 [ 191.152994][ T7994] netlink_ack+0x146/0xa50 [ 191.153015][ T7994] ? __pfx_genl_rcv_msg+0x10/0x10 [ 191.153031][ T7994] ? ref_tracker_free+0x63a/0x7d0 [ 191.153051][ T7994] ? ____sys_sendmsg+0x505/0x830 [ 191.153088][ T7994] ? ___sys_sendmsg+0x21f/0x2a0 [ 191.153109][ T7994] ? __x64_sys_sendmsg+0x19b/0x260 [ 191.153131][ T7994] ? do_syscall_64+0xfa/0xfa0 [ 191.153151][ T7994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.153182][ T7994] netlink_rcv_skb+0x28c/0x470 [ 191.153200][ T7994] ? __lock_acquire+0xab9/0xd20 [ 191.153218][ T7994] ? __pfx_genl_rcv_msg+0x10/0x10 [ 191.153236][ T7994] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 191.153273][ T7994] ? down_read+0x1ad/0x2e0 [ 191.153301][ T7994] genl_rcv+0x28/0x40 [ 191.153315][ T7994] netlink_unicast+0x82f/0x9e0 [ 191.153343][ T7994] ? __pfx_netlink_unicast+0x10/0x10 [ 191.153364][ T7994] ? netlink_sendmsg+0x642/0xb30 [ 191.153384][ T7994] ? skb_put+0x11b/0x210 [ 191.153415][ T7994] netlink_sendmsg+0x805/0xb30 [ 191.153447][ T7994] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.153473][ T7994] ? aa_sock_msg_perm+0xf1/0x1d0 [ 191.153497][ T7994] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 191.153520][ T7994] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.153544][ T7994] __sock_sendmsg+0x21c/0x270 [ 191.153565][ T7994] ____sys_sendmsg+0x505/0x830 [ 191.153596][ T7994] ? __pfx_____sys_sendmsg+0x10/0x10 [ 191.153629][ T7994] ? import_iovec+0x74/0xa0 [ 191.153655][ T7994] ___sys_sendmsg+0x21f/0x2a0 [ 191.153680][ T7994] ? __pfx____sys_sendmsg+0x10/0x10 [ 191.153738][ T7994] ? __fget_files+0x2a/0x420 [ 191.153758][ T7994] ? __fget_files+0x3a0/0x420 [ 191.153790][ T7994] __x64_sys_sendmsg+0x19b/0x260 [ 191.153816][ T7994] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 191.153847][ T7994] ? __pfx_ksys_write+0x10/0x10 [ 191.153869][ T7994] ? do_syscall_64+0xbe/0xfa0 [ 191.153893][ T7994] do_syscall_64+0xfa/0xfa0 [ 191.153916][ T7994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.153934][ T7994] ? clear_bhb_loop+0x60/0xb0 [ 191.153956][ T7994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.153973][ T7994] RIP: 0033:0x7fdfe378f6c9 [ 191.153991][ T7994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.154008][ T7994] RSP: 002b:00007fdfe45f3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.154028][ T7994] RAX: ffffffffffffffda RBX: 00007fdfe39e5fa0 RCX: 00007fdfe378f6c9 [ 191.154042][ T7994] RDX: 000000000000c010 RSI: 0000200000000040 RDI: 0000000000000003 [ 191.154054][ T7994] RBP: 00007fdfe45f3090 R08: 0000000000000000 R09: 0000000000000000 [ 191.154066][ T7994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.154077][ T7994] R13: 00007fdfe39e6038 R14: 00007fdfe39e5fa0 R15: 00007ffecb593b88 [ 191.154110][ T7994] [ 191.543402][ T794] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 191.673566][ T7534] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 191.685099][ T7996] vhci_hcd: connection reset by peer [ 191.690654][ T1153] vhci_hcd vhci_hcd.2: stop threads [ 191.696234][ T1153] vhci_hcd vhci_hcd.2: release socket [ 191.701756][ T1153] vhci_hcd vhci_hcd.2: disconnect device [ 191.752380][ T5863] usb 2-1: USB disconnect, device number 55 [ 191.793635][ T24] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 191.823436][ T794] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 191.953419][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 191.960355][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 191.971699][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 191.980825][ T794] usb 4-1: Using ep0 maxpacket: 8 [ 191.986475][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.994669][ T24] usb 1-1: Product: syz [ 191.999182][ T24] usb 1-1: Manufacturer: syz [ 191.999325][ T794] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 192.003947][ T24] usb 1-1: SerialNumber: syz [ 192.010063][ T24] usb 1-1: config 0 descriptor?? [ 192.022247][ T794] usb 4-1: config 0 has no interface number 0 [ 192.025356][ T24] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 192.028648][ T794] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 192.046299][ T794] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 192.058804][ T794] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 192.072061][ T794] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 192.087634][ T794] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 192.096768][ T794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.104892][ T794] usb 4-1: Product: syz [ 192.109074][ T794] usb 4-1: Manufacturer: syz [ 192.113792][ T794] usb 4-1: SerialNumber: syz [ 192.121006][ T794] usb 4-1: config 0 descriptor?? [ 192.287240][ T8006] FAULT_INJECTION: forcing a failure. [ 192.287240][ T8006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.300674][ T8006] CPU: 1 UID: 0 PID: 8006 Comm: syz.2.778 Not tainted syzkaller #0 PREEMPT(full) [ 192.300702][ T8006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 192.300714][ T8006] Call Trace: [ 192.300731][ T8006] [ 192.300739][ T8006] dump_stack_lvl+0x189/0x250 [ 192.300766][ T8006] ? __pfx____ratelimit+0x10/0x10 [ 192.300789][ T8006] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.300810][ T8006] ? __pfx__printk+0x10/0x10 [ 192.300833][ T8006] ? __might_fault+0xb0/0x130 [ 192.300866][ T8006] should_fail_ex+0x414/0x560 [ 192.300898][ T8006] _copy_from_iter+0x1de/0x1790 [ 192.300927][ T8006] ? rcu_is_watching+0x15/0xb0 [ 192.300968][ T8006] ? trace_kmalloc+0x1f/0xd0 [ 192.300987][ T8006] ? __kmalloc_node_track_caller_noprof+0x590/0x810 [ 192.301016][ T8006] ? __pfx__copy_from_iter+0x10/0x10 [ 192.301034][ T8006] ? __build_skb_around+0x262/0x3f0 [ 192.301060][ T8006] ? skb_put+0x11b/0x210 [ 192.301081][ T8006] ? tipc_msg_build+0x8c6/0xcf0 [ 192.301109][ T8006] tipc_msg_build+0x72b/0xcf0 [ 192.301143][ T8006] ? __pfx_tipc_msg_build+0x10/0x10 [ 192.301171][ T8006] ? net_generic+0x1e/0x240 [ 192.301189][ T8006] ? net_generic+0x1e/0x240 [ 192.301218][ T8006] ? tipc_group_bc_cong+0x15f/0x210 [ 192.301247][ T8006] tipc_send_group_bcast+0x76c/0xa70 [ 192.301289][ T8006] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 192.301331][ T8006] ? __pfx_woken_wake_function+0x10/0x10 [ 192.301372][ T8006] __tipc_sendmsg+0x2d7/0x2960 [ 192.301405][ T8006] ? process_measurement+0x72d/0x1a40 [ 192.301435][ T8006] ? __pfx___tipc_sendmsg+0x10/0x10 [ 192.301462][ T8006] ? aa_label_sk_perm+0x4cc/0x630 [ 192.301493][ T8006] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 192.301548][ T8006] ? __lock_acquire+0xab9/0xd20 [ 192.301580][ T8006] ? __local_bh_enable_ip+0x12d/0x1c0 [ 192.301601][ T8006] ? lockdep_hardirqs_on+0x9c/0x150 [ 192.301625][ T8006] ? __local_bh_enable_ip+0x12d/0x1c0 [ 192.301644][ T8006] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 192.301675][ T8006] tipc_sendmsg+0x55/0x70 [ 192.301696][ T8006] ? __pfx_tipc_sendmsg+0x10/0x10 [ 192.301718][ T8006] __sock_sendmsg+0x21c/0x270 [ 192.301741][ T8006] ____sys_sendmsg+0x52d/0x830 [ 192.301770][ T8006] ? __pfx_____sys_sendmsg+0x10/0x10 [ 192.301803][ T8006] ? import_iovec+0x74/0xa0 [ 192.301828][ T8006] ___sys_sendmsg+0x21f/0x2a0 [ 192.301854][ T8006] ? __pfx____sys_sendmsg+0x10/0x10 [ 192.301917][ T8006] ? __fget_files+0x2a/0x420 [ 192.301936][ T8006] ? __fget_files+0x3a0/0x420 [ 192.301966][ T8006] __sys_sendmmsg+0x227/0x430 [ 192.301997][ T8006] ? __pfx___sys_sendmmsg+0x10/0x10 [ 192.302031][ T8006] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 192.302075][ T8006] ? ksys_write+0x22a/0x250 [ 192.302096][ T8006] ? __pfx_ksys_write+0x10/0x10 [ 192.302119][ T8006] __x64_sys_sendmmsg+0xa0/0xc0 [ 192.302146][ T8006] do_syscall_64+0xfa/0xfa0 [ 192.302171][ T8006] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.302190][ T8006] ? clear_bhb_loop+0x60/0xb0 [ 192.302218][ T8006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.302236][ T8006] RIP: 0033:0x7f7af5b8f6c9 [ 192.302254][ T8006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.302269][ T8006] RSP: 002b:00007f7af6983038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 192.302291][ T8006] RAX: ffffffffffffffda RBX: 00007f7af5de6090 RCX: 00007f7af5b8f6c9 [ 192.302305][ T8006] RDX: 0400000000000181 RSI: 00002000000030c0 RDI: 0000000000000005 [ 192.302318][ T8006] RBP: 00007f7af6983090 R08: 0000000000000000 R09: 0000000000000000 [ 192.302331][ T8006] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.302343][ T8006] R13: 00007f7af5de6128 R14: 00007f7af5de6090 R15: 00007fff9e1b88f8 [ 192.302377][ T8006] [ 192.682211][ T794] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 192.705389][ T794] usb 4-1: USB disconnect, device number 48 [ 193.194117][ T43] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 193.284547][ T24] gspca_zc3xx: reg_w_i err -71 [ 193.335733][ T8017] autofs4:pid:8017:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.3), cmd(0xc0189377) [ 193.348925][ T8017] autofs4:pid:8017:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189377) [ 193.363275][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 193.369951][ T43] usb 2-1: config 2 has an invalid interface number: 1 but max is 0 [ 193.378159][ T43] usb 2-1: config 2 has no interface number 0 [ 193.384423][ T43] usb 2-1: config 2 interface 1 has no altsetting 0 [ 193.393109][ T43] usb 2-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=47.78 [ 193.402309][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.410455][ T43] usb 2-1: Product: syz [ 193.414743][ T43] usb 2-1: Manufacturer: syz [ 193.419343][ T43] usb 2-1: SerialNumber: syz [ 193.493338][ T5863] usb 4-1: new low-speed USB device number 49 using dummy_hcd [ 193.623332][ T5863] usb 4-1: device descriptor read/64, error -71 [ 193.646415][ T43] snd-usb-audio 2-1:2.1: probe with driver snd-usb-audio failed with error -22 [ 193.657076][ T43] snd-usb-us122l 2-1:2.1: usb_set_interface error [ 193.664202][ T43] snd-usb-us122l 2-1:2.1: probe with driver snd-usb-us122l failed with error -22 [ 193.676945][ T43] usb 2-1: USB disconnect, device number 56 [ 193.699269][ T6713] udevd[6713]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 193.863333][ T5863] usb 4-1: new low-speed USB device number 50 using dummy_hcd [ 193.883338][ T24] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 193.889787][ T24] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 193.901558][ T24] usb 1-1: USB disconnect, device number 41 [ 193.994326][ T5863] usb 4-1: device descriptor read/64, error -71 [ 194.106373][ T5863] usb usb4-port1: attempt power cycle [ 194.331663][ T8033] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 194.338193][ T8033] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 194.346161][ T8033] vhci_hcd vhci_hcd.0: Device attached [ 194.353650][ T794] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 194.393308][ T24] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 194.428303][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.435736][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.452084][ T5145] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 194.459281][ T5863] usb 4-1: new low-speed USB device number 51 using dummy_hcd [ 194.485541][ T5863] usb 4-1: device descriptor read/8, error -71 [ 194.503659][ T794] usb 3-1: Using ep0 maxpacket: 32 [ 194.510791][ T794] usb 3-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 194.520027][ T794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.530249][ T794] usb 3-1: config 0 descriptor?? [ 194.538547][ T8034] vhci_hcd: connection closed [ 194.539246][ T1153] vhci_hcd vhci_hcd.1: stop threads [ 194.549381][ T1153] vhci_hcd vhci_hcd.1: release socket [ 194.549955][ T794] usb 3-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 194.556399][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 194.565372][ T1153] vhci_hcd vhci_hcd.1: disconnect device [ 194.572307][ T24] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 194.574528][ T794] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 194.592137][ T794] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 194.599197][ T794] usb 3-1: media controller created [ 194.604891][ T24] usb 1-1: config 0 has no interface number 0 [ 194.611015][ T24] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 194.617517][ T794] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 194.622579][ T795] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 194.644649][ T24] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 194.648133][ T794] usb 3-1: selecting invalid altsetting 1 [ 194.662140][ T795] usb 35-1: enqueue for inactive port 0 [ 194.663684][ T794] set interface failed [ 194.668185][ T794] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 194.668410][ T24] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 194.674212][ T794] error writing reg: 0xff, val: 0x00 [ 194.679390][ T24] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 194.713002][ T24] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 194.722825][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.731221][ T24] usb 1-1: Product: syz [ 194.731931][ T794] dvb_usb_mxl111sf 3-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 194.735818][ T24] usb 1-1: Manufacturer: syz [ 194.745927][ T5863] usb 4-1: new low-speed USB device number 52 using dummy_hcd [ 194.750589][ T795] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 194.771324][ T24] usb 1-1: SerialNumber: syz [ 194.782707][ T24] usb 1-1: config 0 descriptor?? [ 194.794046][ T5863] usb 4-1: device descriptor read/8, error -71 [ 194.802402][ T794] usb 3-1: USB disconnect, device number 49 [ 194.904656][ T5863] usb usb4-port1: unable to enumerate USB device [ 195.004240][ T24] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 195.023109][ T24] usb 1-1: USB disconnect, device number 42 [ 195.154865][ T794] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 195.313317][ T794] usb 3-1: Using ep0 maxpacket: 8 [ 195.320085][ T794] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 195.328391][ T794] usb 3-1: config 0 has no interface number 0 [ 195.334624][ T794] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 195.343374][ T24] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 195.345762][ T794] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 195.365183][ T794] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 195.376304][ T794] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 195.391409][ T794] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 195.400528][ T794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.408585][ T794] usb 3-1: Product: syz [ 195.412730][ T794] usb 3-1: Manufacturer: syz [ 195.417392][ T794] usb 3-1: SerialNumber: syz [ 195.424468][ T794] usb 3-1: config 0 descriptor?? [ 195.503270][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 195.509970][ T24] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 195.518272][ T24] usb 1-1: config 0 has no interface number 0 [ 195.524779][ T24] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 195.536744][ T24] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 195.548472][ T24] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 195.559797][ T24] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 195.576505][ T24] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 195.585676][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.593712][ T24] usb 1-1: Product: 툤㞟ন屝ﬣ鿣焄뗋딻騉櫥狋ࢂ [ 195.601535][ T24] usb 1-1: SerialNumber: ࠒ [ 195.608660][ T24] usb 1-1: config 0 descriptor?? [ 195.638298][ T794] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 195.833329][ T24] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior1 [ 195.853864][ T24] usb 1-1: USB disconnect, device number 43 [ 195.859565][ T10] usb 3-1: USB disconnect, device number 50 [ 196.323370][ T794] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 196.364872][ T8063] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 196.371397][ T8063] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 196.381599][ T8063] vhci_hcd vhci_hcd.0: Device attached [ 196.451344][ T5145] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 196.474332][ T794] usb 2-1: Using ep0 maxpacket: 8 [ 196.483318][ T5145] Bluetooth: hci0: command 0x080f tx timeout [ 196.495220][ T794] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.518463][ T794] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.529847][ T794] usb 2-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 196.539815][ T794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.554293][ T794] usb 2-1: config 0 descriptor?? [ 196.566748][ T8064] vhci_hcd: connection closed [ 196.567576][ T12] vhci_hcd vhci_hcd.0: stop threads [ 196.578862][ T12] vhci_hcd vhci_hcd.0: release socket [ 196.585099][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 196.623328][ T24] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 196.630853][ T24] usb 33-1: enqueue for inactive port 0 [ 196.653593][ T10] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 196.703423][ T24] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 196.793381][ T7534] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 196.805349][ T10] usb 4-1: config 0 has an invalid interface number: 175 but max is 0 [ 196.814384][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.824579][ T10] usb 4-1: config 0 has no interface number 0 [ 196.830714][ T10] usb 4-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 196.842423][ T10] usb 4-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 196.853670][ T10] usb 4-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 196.863675][ T10] usb 4-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 196.879766][ T10] usb 4-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 196.889478][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.897613][ T10] usb 4-1: Product: syz [ 196.901807][ T10] usb 4-1: Manufacturer: syz [ 196.906667][ T10] usb 4-1: SerialNumber: syz [ 196.914496][ T10] usb 4-1: config 0 descriptor?? [ 196.922167][ T10] symbolserial 4-1:0.175: symbol converter detected [ 196.932872][ T10] usb 4-1: symbol converter now attached to ttyUSB0 [ 196.973361][ T794] hid_parser_main: 28 callbacks suppressed [ 196.973383][ T794] cherry 0003:046A:0027.0009: unknown main item tag 0x2 [ 196.986875][ T794] cherry 0003:046A:0027.0009: unknown main item tag 0x0 [ 196.996266][ T794] cherry 0003:046A:0027.0009: unknown main item tag 0x0 [ 197.003299][ T794] cherry 0003:046A:0027.0009: unknown main item tag 0x0 [ 197.010394][ T794] cherry 0003:046A:0027.0009: unknown main item tag 0x0 [ 197.017728][ T794] cherry 0003:046A:0027.0009: unknown main item tag 0x0 [ 197.024831][ T794] cherry 0003:046A:0027.0009: unknown main item tag 0x0 [ 197.031794][ T794] cherry 0003:046A:0027.0009: unknown main item tag 0x0 [ 197.038968][ T794] cherry 0003:046A:0027.0009: unknown main item tag 0x0 [ 197.046262][ T794] cherry 0003:046A:0027.0009: unknown main item tag 0x0 [ 197.056450][ T794] cherry 0003:046A:0027.0009: hidraw0: USB HID v0.00 Device [HID 046a:0027] on usb-dummy_hcd.1-1/input0 [ 197.157702][ T8061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.797'. [ 197.172570][ T8075] netlink: 'syz.2.802': attribute type 1 has an invalid length. [ 197.190128][ T8075] FAULT_INJECTION: forcing a failure. [ 197.190128][ T8075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.212214][ T8059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.232727][ T8075] CPU: 0 UID: 0 PID: 8075 Comm: syz.2.802 Not tainted syzkaller #0 PREEMPT(full) [ 197.232753][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 197.232765][ T8075] Call Trace: [ 197.232773][ T8075] [ 197.232782][ T8075] dump_stack_lvl+0x189/0x250 [ 197.232809][ T8075] ? __pfx____ratelimit+0x10/0x10 [ 197.232832][ T8075] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.232854][ T8075] ? __pfx__printk+0x10/0x10 [ 197.232888][ T8075] should_fail_ex+0x414/0x560 [ 197.232918][ T8075] _copy_to_user+0x31/0xb0 [ 197.232942][ T8075] simple_read_from_buffer+0xe1/0x170 [ 197.232967][ T8075] proc_fail_nth_read+0x1b3/0x220 [ 197.232996][ T8075] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 197.233025][ T8075] ? rw_verify_area+0x2a6/0x4d0 [ 197.233049][ T8075] ? __lock_acquire+0xab9/0xd20 [ 197.233066][ T8075] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 197.233092][ T8075] vfs_read+0x200/0xa30 [ 197.233117][ T8075] ? fdget_pos+0x247/0x320 [ 197.233141][ T8075] ? __pfx___mutex_lock+0x10/0x10 [ 197.233166][ T8075] ? __pfx_vfs_read+0x10/0x10 [ 197.233194][ T8075] ? __fget_files+0x2a/0x420 [ 197.233216][ T8075] ? __fget_files+0x3a0/0x420 [ 197.233233][ T8075] ? __fget_files+0x2a/0x420 [ 197.233261][ T8075] ksys_read+0x145/0x250 [ 197.233281][ T8075] ? __pfx_ksys_read+0x10/0x10 [ 197.233302][ T8075] ? do_syscall_64+0xbe/0xfa0 [ 197.233329][ T8075] do_syscall_64+0xfa/0xfa0 [ 197.233352][ T8075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.233370][ T8075] ? clear_bhb_loop+0x60/0xb0 [ 197.233391][ T8075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.233408][ T8075] RIP: 0033:0x7f7af5b8e0dc [ 197.233425][ T8075] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 197.233441][ T8075] RSP: 002b:00007f7af69a4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 197.233461][ T8075] RAX: ffffffffffffffda RBX: 00007f7af5de5fa0 RCX: 00007f7af5b8e0dc [ 197.233475][ T8075] RDX: 000000000000000f RSI: 00007f7af69a40a0 RDI: 0000000000000004 [ 197.233487][ T8075] RBP: 00007f7af69a4090 R08: 0000000000000000 R09: 0000000000000000 [ 197.233499][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 197.233511][ T8075] R13: 00007f7af5de6038 R14: 00007f7af5de5fa0 R15: 00007fff9e1b88f8 [ 197.233543][ T8075] [ 197.242558][ T8059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.556063][ T794] usb 4-1: USB disconnect, device number 53 [ 197.578976][ T5825] block nbd1: Receive control failed (result -32) [ 197.593784][ T794] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 197.628447][ T794] symbolserial 4-1:0.175: device disconnected [ 197.688591][ T5863] usb 2-1: USB disconnect, device number 57 [ 197.853347][ T24] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 197.913330][ T10] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 198.004669][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.015157][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 198.026961][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 198.036506][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.044633][ T24] usb 3-1: Product: 툤㞟ন屝ﬣ鿣焄뗋딻騉櫥狋ࢂ [ 198.052442][ T24] usb 3-1: SerialNumber: ࠒ [ 198.063357][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 198.070212][ T10] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 198.083321][ T10] usb 1-1: config 0 has no interface number 0 [ 198.089570][ T10] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 198.101392][ T10] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 198.114130][ T10] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 198.127210][ T10] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 198.144893][ T10] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 198.154198][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.162243][ T10] usb 1-1: Product: syz [ 198.169535][ T10] usb 1-1: Manufacturer: syz [ 198.174435][ T10] usb 1-1: SerialNumber: syz [ 198.182192][ T10] usb 1-1: config 0 descriptor?? [ 198.272090][ T24] usb 3-1: 0:2 : does not exist [ 198.295039][ T24] usb 3-1: USB disconnect, device number 51 [ 198.365389][ T8097] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 198.372124][ T8097] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 198.383080][ T8097] vhci_hcd vhci_hcd.0: Device attached [ 198.417381][ T10] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 198.436887][ T10] usb 1-1: USB disconnect, device number 44 [ 198.515578][ T8098] vhci_hcd: connection closed [ 198.515829][ T1153] vhci_hcd vhci_hcd.1: stop threads [ 198.526030][ T1153] vhci_hcd vhci_hcd.1: release socket [ 198.531712][ T1153] vhci_hcd vhci_hcd.1: disconnect device [ 198.564350][ T795] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 198.912644][ T8109] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 199.073300][ T24] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 199.234262][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 199.241294][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.252442][ T24] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 199.262480][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.273596][ T24] usb 3-1: config 0 descriptor?? [ 199.510916][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 199.533481][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 199.546810][ T24] usb 3-1: USB disconnect, device number 52 [ 199.903359][ T10] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 199.953362][ T5958] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 199.963303][ T24] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 200.033415][ T10] usb 2-1: device descriptor read/64, error -71 [ 200.074653][ T8144] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 200.081277][ T8144] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 200.089319][ T8144] vhci_hcd vhci_hcd.0: Device attached [ 200.105919][ T5958] usb 1-1: Using ep0 maxpacket: 8 [ 200.117734][ T5958] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 200.126652][ T5958] usb 1-1: config 0 has no interface number 0 [ 200.132755][ T5958] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 200.146507][ T5958] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 200.147278][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.158565][ T5958] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 200.173848][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 200.191846][ T5958] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 200.197177][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 200.215150][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.224340][ T24] usb 3-1: Product: 툤㞟ন屝ﬣ鿣焄뗋딻騉櫥狋ࢂ [ 200.226522][ T5958] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 200.232505][ T24] usb 3-1: SerialNumber: ࠒ [ 200.241779][ T5958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.255128][ T5958] usb 1-1: Product: syz [ 200.263361][ T5958] usb 1-1: Manufacturer: syz [ 200.269096][ T5958] usb 1-1: SerialNumber: syz [ 200.285002][ T10] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 200.293924][ T5958] usb 1-1: config 0 descriptor?? [ 200.346971][ T8145] vhci_hcd: connection closed [ 200.347137][ T981] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 200.347624][ T60] vhci_hcd vhci_hcd.3: stop threads [ 200.364721][ T60] vhci_hcd vhci_hcd.3: release socket [ 200.370662][ T60] vhci_hcd vhci_hcd.3: disconnect device [ 200.433448][ T10] usb 2-1: device descriptor read/64, error -71 [ 200.497391][ T24] usb 3-1: 0:2 : does not exist [ 200.513276][ T5958] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 200.529012][ T24] usb 3-1: USB disconnect, device number 53 [ 200.539694][ T5958] usb 1-1: USB disconnect, device number 45 [ 200.547194][ T10] usb usb2-port1: attempt power cycle [ 200.560265][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 200.893318][ T10] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 200.914081][ T10] usb 2-1: device descriptor read/8, error -71 [ 201.075879][ T8161] FAULT_INJECTION: forcing a failure. [ 201.075879][ T8161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.089933][ T8161] CPU: 1 UID: 0 PID: 8161 Comm: syz.0.835 Not tainted syzkaller #0 PREEMPT(full) [ 201.089958][ T8161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 201.089969][ T8161] Call Trace: [ 201.089978][ T8161] [ 201.089987][ T8161] dump_stack_lvl+0x189/0x250 [ 201.090014][ T8161] ? __pfx____ratelimit+0x10/0x10 [ 201.090037][ T8161] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.090059][ T8161] ? __pfx__printk+0x10/0x10 [ 201.090093][ T8161] should_fail_ex+0x414/0x560 [ 201.090124][ T8161] _copy_to_user+0x31/0xb0 [ 201.090155][ T8161] simple_read_from_buffer+0xe1/0x170 [ 201.090180][ T8161] proc_fail_nth_read+0x1b3/0x220 [ 201.090209][ T8161] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 201.090238][ T8161] ? rw_verify_area+0x2a6/0x4d0 [ 201.090262][ T8161] ? __lock_acquire+0xab9/0xd20 [ 201.090279][ T8161] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 201.090306][ T8161] vfs_read+0x200/0xa30 [ 201.090330][ T8161] ? fdget_pos+0x247/0x320 [ 201.090354][ T8161] ? __pfx___mutex_lock+0x10/0x10 [ 201.090379][ T8161] ? __pfx_vfs_read+0x10/0x10 [ 201.090405][ T8161] ? __fget_files+0x2a/0x420 [ 201.090429][ T8161] ? __fget_files+0x3a0/0x420 [ 201.090448][ T8161] ? __fget_files+0x2a/0x420 [ 201.090477][ T8161] ksys_read+0x145/0x250 [ 201.090497][ T8161] ? __pfx_ksys_read+0x10/0x10 [ 201.090518][ T8161] ? do_syscall_64+0xbe/0xfa0 [ 201.090545][ T8161] do_syscall_64+0xfa/0xfa0 [ 201.090569][ T8161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.090588][ T8161] ? clear_bhb_loop+0x60/0xb0 [ 201.090610][ T8161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.090628][ T8161] RIP: 0033:0x7f5bca78e0dc [ 201.090646][ T8161] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 201.090661][ T8161] RSP: 002b:00007f5bcb5fc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 201.090681][ T8161] RAX: ffffffffffffffda RBX: 00007f5bca9e5fa0 RCX: 00007f5bca78e0dc [ 201.090695][ T8161] RDX: 000000000000000f RSI: 00007f5bcb5fc0a0 RDI: 0000000000000004 [ 201.090707][ T8161] RBP: 00007f5bcb5fc090 R08: 0000000000000000 R09: 0000000000000000 [ 201.090720][ T8161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 201.090731][ T8161] R13: 00007f5bca9e6038 R14: 00007f5bca9e5fa0 R15: 00007ffefc9596d8 [ 201.090764][ T8161] [ 201.153395][ T10] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 201.354963][ T10] usb 2-1: device descriptor read/8, error -71 [ 201.393289][ T5958] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 201.465809][ T10] usb usb2-port1: unable to enumerate USB device [ 201.543386][ T5958] usb 3-1: Using ep0 maxpacket: 16 [ 201.557221][ T5958] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.568172][ T5958] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 201.568188][ T8168] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 201.581491][ T5958] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 201.583634][ T8168] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 201.589419][ T8168] vhci_hcd vhci_hcd.0: Device attached [ 201.597422][ T5958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.614327][ T8172] batadv_slave_1: entered promiscuous mode [ 201.614436][ T5958] usb 3-1: Product: syz [ 201.624824][ T5958] usb 3-1: Manufacturer: syz [ 201.629471][ T5958] usb 3-1: SerialNumber: syz [ 201.768975][ T8169] vhci_hcd: connection reset by peer [ 201.774737][ T36] vhci_hcd vhci_hcd.3: stop threads [ 201.780023][ T36] vhci_hcd vhci_hcd.3: release socket [ 201.785937][ T36] vhci_hcd vhci_hcd.3: disconnect device [ 201.814285][ T8170] batadv_slave_1: left promiscuous mode [ 201.851465][ T5958] usb 3-1: 0:2 : does not exist [ 201.869808][ T5958] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 201.893831][ T5958] usb 3-1: USB disconnect, device number 54 [ 202.298416][ T8182] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 202.543344][ T5958] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 202.643710][ T794] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 202.696001][ T5958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.707349][ T5958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.721565][ T5958] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 202.731377][ T5958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.744329][ T5958] usb 4-1: config 0 descriptor?? [ 202.794893][ T794] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.805884][ T794] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 202.816690][ T794] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 202.826081][ T794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.834503][ T794] usb 3-1: Product: 툤㞟ন屝ﬣ鿣焄뗋딻騉櫥狋ࢂ [ 202.842547][ T794] usb 3-1: SerialNumber: ࠒ [ 203.003339][ T24] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 203.059843][ T794] usb 3-1: 0:2 : does not exist [ 203.073670][ T794] usb 3-1: USB disconnect, device number 55 [ 203.083943][ T10] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 203.154540][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 203.161641][ T24] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 203.170218][ T5958] logitech 0003:046D:C29C.000A: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.3-1/input0 [ 203.170623][ T24] usb 1-1: config 0 has no interface number 0 [ 203.189958][ T24] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 203.203814][ T24] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 203.216754][ T24] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 203.228041][ T24] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 203.243932][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 203.251427][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 203.260237][ T24] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 203.260265][ T10] usb 2-1: config 0 has no interface number 0 [ 203.280318][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.283548][ T10] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 203.290254][ T24] usb 1-1: Product: syz [ 203.301968][ T24] usb 1-1: Manufacturer: syz [ 203.310665][ T24] usb 1-1: SerialNumber: syz [ 203.311951][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.319702][ T24] usb 1-1: config 0 descriptor?? [ 203.330500][ T10] usb 2-1: Product: syz [ 203.335006][ T10] usb 2-1: Manufacturer: syz [ 203.339972][ T10] usb 2-1: SerialNumber: syz [ 203.347697][ T10] usb 2-1: config 0 descriptor?? [ 203.357320][ T10] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 203.368646][ T10] usb 2-1: selecting invalid altsetting 1 [ 203.374509][ T10] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 203.384204][ T10] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 203.394985][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 203.403383][ T10] usb 2-1: media controller created [ 203.420150][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 203.541012][ T24] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 203.562108][ T24] usb 1-1: USB disconnect, device number 46 [ 203.574141][ T5958] logitech 0003:046D:C29C.000A: no inputs found [ 203.596408][ T8186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.612387][ T5958] usb 4-1: USB disconnect, device number 54 [ 203.620042][ T8186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.156279][ T8198] netlink: 'syz.0.848': attribute type 5 has an invalid length. [ 204.247545][ T8202] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 204.254118][ T8202] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 204.261993][ T8202] vhci_hcd vhci_hcd.0: Device attached [ 204.346742][ T5825] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 204.430892][ T8203] vhci_hcd: connection closed [ 204.431758][ T36] vhci_hcd vhci_hcd.0: stop threads [ 204.452150][ T36] vhci_hcd vhci_hcd.0: release socket [ 204.462503][ T36] vhci_hcd vhci_hcd.0: disconnect device [ 204.504198][ T5863] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 204.511925][ T5863] usb 33-1: enqueue for inactive port 0 [ 204.603407][ T5863] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 204.854787][ T8214] syzkaller1: entered promiscuous mode [ 204.863410][ T8214] syzkaller1: entered allmulticast mode [ 205.244063][ T8227] netlink: 'syz.3.858': attribute type 5 has an invalid length. [ 205.429145][ T8235] netlink: 188 bytes leftover after parsing attributes in process `syz.2.862'. [ 205.441533][ T981] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 205.451804][ T10] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 205.503426][ T794] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 205.540660][ T10] usb 2-1: USB disconnect, device number 62 [ 205.577211][ T8239] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 205.583749][ T8239] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 205.591689][ T8239] vhci_hcd vhci_hcd.0: Device attached [ 205.633369][ T5863] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 205.641538][ T794] usb 1-1: device descriptor read/64, error -71 [ 205.675410][ T8240] vhci_hcd: connection closed [ 205.675622][ T50] vhci_hcd vhci_hcd.2: stop threads [ 205.685788][ T50] vhci_hcd vhci_hcd.2: release socket [ 205.691355][ T50] vhci_hcd vhci_hcd.2: disconnect device [ 205.793297][ T5863] usb 4-1: Using ep0 maxpacket: 8 [ 205.800408][ T5863] usb 4-1: unable to get BOS descriptor or descriptor too short [ 205.808344][ T5863] usb 4-1: too many configurations: 248, using maximum allowed: 8 [ 205.817833][ T5863] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 205.826250][ T5863] usb 4-1: can't read configurations, error -61 [ 205.883339][ T794] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 205.953322][ T5863] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 206.013299][ T794] usb 1-1: device descriptor read/64, error -71 [ 206.103338][ T5863] usb 4-1: Using ep0 maxpacket: 8 [ 206.110884][ T5863] usb 4-1: unable to get BOS descriptor or descriptor too short [ 206.118709][ T5863] usb 4-1: too many configurations: 248, using maximum allowed: 8 [ 206.127036][ T794] usb usb1-port1: attempt power cycle [ 206.133981][ T5863] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 206.141694][ T5863] usb 4-1: can't read configurations, error -61 [ 206.149447][ T5863] usb usb4-port1: attempt power cycle [ 206.244407][ T8249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.255824][ T8249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.406981][ T8259] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.872'. [ 206.426679][ T8259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.872'. [ 206.474154][ T794] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 206.493322][ T5863] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 206.514657][ T5863] usb 4-1: Using ep0 maxpacket: 8 [ 206.521079][ T794] usb 1-1: device descriptor read/8, error -71 [ 206.530069][ T5863] usb 4-1: unable to get BOS descriptor or descriptor too short [ 206.540215][ T5863] usb 4-1: too many configurations: 248, using maximum allowed: 8 [ 206.553150][ T5863] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 206.561109][ T5863] usb 4-1: can't read configurations, error -61 [ 206.693373][ T5863] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 206.713809][ T5863] usb 4-1: Using ep0 maxpacket: 8 [ 206.720914][ T5863] usb 4-1: unable to get BOS descriptor or descriptor too short [ 206.728708][ T5863] usb 4-1: too many configurations: 248, using maximum allowed: 8 [ 206.738264][ T5863] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 206.745995][ T5863] usb 4-1: can't read configurations, error -61 [ 206.754085][ T5863] usb usb4-port1: unable to enumerate USB device [ 206.763506][ T794] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 206.783810][ T794] usb 1-1: device descriptor read/8, error -71 [ 206.893533][ T794] usb usb1-port1: unable to enumerate USB device [ 207.035760][ T8271] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 207.042296][ T8271] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 207.050099][ T8271] vhci_hcd vhci_hcd.0: Device attached [ 207.141169][ T8272] vhci_hcd: connection closed [ 207.141793][ T50] vhci_hcd vhci_hcd.2: stop threads [ 207.152652][ T50] vhci_hcd vhci_hcd.2: release socket [ 207.158962][ T50] vhci_hcd vhci_hcd.2: disconnect device [ 207.223410][ T794] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 207.674622][ T8281] netlink: 'syz.2.880': attribute type 5 has an invalid length. [ 207.781014][ T8283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.881'. [ 208.597041][ T30] audit: type=1326 audit(2000000111.260:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8286 comm="syz.1.883" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff62bb8f6c9 code=0x0 [ 208.703325][ T794] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 208.718493][ T8306] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 208.725029][ T8306] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 208.732982][ T8306] vhci_hcd vhci_hcd.0: Device attached [ 208.793411][ T5825] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 208.833321][ T794] usb 1-1: device descriptor read/64, error -71 [ 208.857709][ T8307] vhci_hcd: connection closed [ 208.858015][ T50] vhci_hcd vhci_hcd.3: stop threads [ 208.868480][ T50] vhci_hcd vhci_hcd.3: release socket [ 208.874420][ T50] vhci_hcd vhci_hcd.3: disconnect device [ 208.923536][ T24] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 209.073395][ T794] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 209.203658][ T794] usb 1-1: device descriptor read/64, error -71 [ 209.233623][ T981] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 209.313800][ T794] usb usb1-port1: attempt power cycle [ 209.373379][ T981] usb 3-1: device descriptor read/64, error -71 [ 209.493103][ T8322] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 209.613473][ T981] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 209.653475][ T794] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 209.666705][ T8330] netlink: 'syz.3.897': attribute type 25 has an invalid length. [ 209.673929][ T794] usb 1-1: device descriptor read/8, error -71 [ 209.674825][ T8330] netlink: 'syz.3.897': attribute type 7 has an invalid length. [ 209.753354][ T981] usb 3-1: device descriptor read/64, error -71 [ 209.875074][ T981] usb usb3-port1: attempt power cycle [ 209.913301][ T794] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 209.933943][ T794] usb 1-1: device descriptor read/8, error -71 [ 210.043580][ T794] usb usb1-port1: unable to enumerate USB device [ 210.223416][ T981] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 210.243701][ T981] usb 3-1: device descriptor read/8, error -71 [ 210.493410][ T981] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 210.514026][ T981] usb 3-1: device descriptor read/8, error -71 [ 210.633644][ T981] usb usb3-port1: unable to enumerate USB device [ 210.764437][ T794] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 210.917490][ T5825] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 210.926565][ T794] usb 4-1: Using ep0 maxpacket: 32 [ 210.932894][ T794] usb 4-1: config 76 has an invalid descriptor of length 0, skipping remainder of the config [ 210.946200][ T794] usb 4-1: New USB device found, idVendor=069a, idProduct=0001, bcdDevice=51.c5 [ 210.955335][ T794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.963468][ T794] usb 4-1: Product: syz [ 210.967626][ T794] usb 4-1: Manufacturer: syz [ 210.972197][ T794] usb 4-1: SerialNumber: syz [ 210.982810][ T794] pwc: Askey VC010 type 1 USB webcam detected. [ 211.185216][ T794] pwc: send_video_command error -71 [ 211.190659][ T794] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 211.198350][ T794] Philips webcam 4-1:76.0: probe with driver Philips webcam failed with error -71 [ 211.209983][ T794] usb 4-1: USB disconnect, device number 59 [ 211.575872][ T8355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.909'. [ 211.587871][ T8355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.909'. [ 211.843354][ T24] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 211.995565][ T24] usb 1-1: config 0 has an invalid interface number: 11 but max is 0 [ 212.013320][ T24] usb 1-1: config 0 has no interface number 0 [ 212.019494][ T24] usb 1-1: config 0 interface 11 altsetting 253 bulk endpoint 0x7 has invalid maxpacket 1024 [ 212.043405][ T24] usb 1-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 212.055412][ T24] usb 1-1: config 0 interface 11 has no altsetting 0 [ 212.062147][ T24] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 212.075779][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.096365][ T24] usb 1-1: config 0 descriptor?? [ 212.115083][ T24] keyspan 1-1:0.11: Keyspan 2 port adapter converter detected [ 212.128628][ T24] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 81 [ 212.141243][ T24] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 82 [ 212.149498][ T24] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 1 [ 212.157503][ T24] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 2 [ 212.170173][ T24] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 85 [ 212.183056][ T8363] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 212.189618][ T8363] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 212.197439][ T24] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 5 [ 212.207504][ T8363] vhci_hcd vhci_hcd.0: Device attached [ 212.209367][ T24] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 212.235173][ T24] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 83 [ 212.243024][ T24] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 84 [ 212.285479][ T24] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 3 [ 212.293703][ T24] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 4 [ 212.301587][ T24] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 86 [ 212.314984][ T8365] vhci_hcd: connection closed [ 212.315346][ T13] vhci_hcd vhci_hcd.2: stop threads [ 212.328372][ T13] vhci_hcd vhci_hcd.2: release socket [ 212.331471][ T24] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 6 [ 212.344822][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 212.352958][ T24] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 212.371539][ T794] usb 1-1: USB disconnect, device number 55 [ 212.384374][ T5828] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 212.399545][ T794] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 212.416597][ T794] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 212.431504][ T794] keyspan 1-1:0.11: device disconnected [ 212.563317][ T5863] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 212.693272][ T5863] usb 4-1: device descriptor read/64, error -71 [ 212.773368][ T794] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 212.927285][ T794] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 212.936791][ T5863] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 212.944575][ T794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.952581][ T794] usb 1-1: Product: syz [ 212.957966][ T794] usb 1-1: Manufacturer: syz [ 212.962568][ T794] usb 1-1: SerialNumber: syz [ 213.103345][ T5863] usb 4-1: device descriptor read/64, error -71 [ 213.109830][ T10] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 213.223772][ T5863] usb usb4-port1: attempt power cycle [ 213.283516][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 213.290904][ T10] usb 3-1: config 0 has an invalid descriptor of length 167, skipping remainder of the config [ 213.301495][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 213.311348][ T10] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 213.320471][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.333779][ T10] usb 3-1: config 0 descriptor?? [ 213.372958][ T794] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 213.385548][ T794] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 213.573400][ T5863] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 213.593960][ T5863] usb 4-1: device descriptor read/8, error -71 [ 213.843743][ T5863] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 213.865230][ T5863] usb 4-1: device descriptor read/8, error -71 [ 213.973669][ T5863] usb usb4-port1: unable to enumerate USB device [ 214.616839][ T5863] usb 3-1: USB disconnect, device number 60 [ 214.741488][ T5825] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 215.067615][ T794] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000040. ret = -EPROTO [ 215.080467][ T794] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 215.093255][ T794] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 215.106337][ T794] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 215.117469][ T794] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 215.128101][ T794] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 215.144672][ T794] usb 1-1: USB disconnect, device number 56 [ 215.447924][ T8411] netlink: 'syz.3.931': attribute type 21 has an invalid length. [ 215.455979][ T8411] netlink: 132 bytes leftover after parsing attributes in process `syz.3.931'. [ 215.562993][ T8422] netlink: 'syz.3.935': attribute type 5 has an invalid length. [ 215.583566][ T24] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 215.639145][ T8426] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 215.645737][ T8426] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 215.653811][ T8426] vhci_hcd vhci_hcd.0: Device attached [ 215.672452][ T5825] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 215.734006][ T24] usb 3-1: device descriptor read/64, error -71 [ 215.740761][ T8427] vhci_hcd: connection closed [ 215.740945][ T50] vhci_hcd vhci_hcd.3: stop threads [ 215.751025][ T50] vhci_hcd vhci_hcd.3: release socket [ 215.756538][ T50] vhci_hcd vhci_hcd.3: disconnect device [ 215.873378][ T794] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 215.974075][ T24] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 216.013409][ T794] usb 1-1: device descriptor read/64, error -71 [ 216.103370][ T24] usb 3-1: device descriptor read/64, error -71 [ 216.213572][ T24] usb usb3-port1: attempt power cycle [ 216.254025][ T794] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 216.307347][ T8437] netlink: 'syz.3.941': attribute type 8 has an invalid length. [ 216.383304][ T794] usb 1-1: device descriptor read/64, error -71 [ 216.495931][ T794] usb usb1-port1: attempt power cycle [ 216.566360][ T24] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 216.613867][ T24] usb 3-1: device descriptor read/8, error -71 [ 216.718693][ T8459] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 216.725268][ T8459] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 216.736832][ T8459] vhci_hcd vhci_hcd.0: Device attached [ 216.757249][ T5825] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 216.825677][ T5825] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 216.834320][ T794] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 216.844059][ T8460] vhci_hcd: connection closed [ 216.846502][ T50] vhci_hcd vhci_hcd.3: stop threads [ 216.857043][ T50] vhci_hcd vhci_hcd.3: release socket [ 216.858277][ T794] usb 1-1: device descriptor read/8, error -71 [ 216.862559][ T50] vhci_hcd vhci_hcd.3: disconnect device [ 216.874934][ T24] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 216.893957][ T24] usb 3-1: device descriptor read/8, error -71 [ 216.913353][ T5828] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 217.003564][ T24] usb usb3-port1: unable to enumerate USB device [ 217.103500][ T794] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 217.124163][ T794] usb 1-1: device descriptor read/8, error -71 [ 217.234364][ T794] usb usb1-port1: unable to enumerate USB device [ 217.367864][ T8468] Invalid ELF header magic: != ELF [ 217.673330][ T24] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 217.803311][ T24] usb 4-1: device descriptor read/64, error -71 [ 218.043349][ T24] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 218.173331][ T24] usb 4-1: device descriptor read/64, error -71 [ 218.293658][ T24] usb usb4-port1: attempt power cycle [ 218.384429][ T8489] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 218.390989][ T8489] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 218.400175][ T8489] vhci_hcd vhci_hcd.0: Device attached [ 218.452667][ T5825] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 218.496411][ T8490] vhci_hcd: connection closed [ 218.498086][ T12] vhci_hcd vhci_hcd.2: stop threads [ 218.508111][ T12] vhci_hcd vhci_hcd.2: release socket [ 218.513743][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 218.653273][ T24] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 218.673999][ T24] usb 4-1: device descriptor read/8, error -71 [ 218.902713][ T8506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.967'. [ 218.913314][ T24] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 218.934519][ T24] usb 4-1: device descriptor read/8, error -71 [ 219.044744][ T24] usb usb4-port1: unable to enumerate USB device [ 219.193665][ T794] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 219.323401][ T794] usb 1-1: device descriptor read/64, error -71 [ 219.373298][ T5828] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 219.523337][ T5828] usb 3-1: Using ep0 maxpacket: 16 [ 219.530177][ T5828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.541248][ T5828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.551062][ T5828] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 219.560261][ T5828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.568385][ T794] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 219.578983][ T5828] usb 3-1: config 0 descriptor?? [ 219.713335][ T794] usb 1-1: device descriptor read/64, error -71 [ 219.833604][ T794] usb usb1-port1: attempt power cycle [ 220.193341][ T794] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 220.223914][ T794] usb 1-1: device descriptor read/8, error -71 [ 220.473788][ T794] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 220.506570][ T794] usb 1-1: device descriptor read/8, error -71 [ 220.633793][ T794] usb usb1-port1: unable to enumerate USB device [ 220.700223][ T5825] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 222.026504][ T8542] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 222.033151][ T8542] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 222.041010][ T8542] vhci_hcd vhci_hcd.0: Device attached [ 222.066797][ T5825] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 222.113875][ T8543] vhci_hcd: connection closed [ 222.114049][ T13] vhci_hcd vhci_hcd.0: stop threads [ 222.124241][ T13] vhci_hcd vhci_hcd.0: release socket [ 222.130097][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 222.197642][ T5828] usbhid 3-1:0.0: can't add hid device: -71 [ 222.203950][ T5828] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 222.217079][ T5828] usb 3-1: USB disconnect, device number 65 [ 222.256274][ T10] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 222.294779][ T8546] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 222.393337][ T10] usb 4-1: device descriptor read/64, error -71 [ 222.554527][ T5825] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 222.633411][ T10] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 222.713659][ T24] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 222.763414][ T10] usb 4-1: device descriptor read/64, error -71 [ 222.843311][ T24] usb 3-1: device descriptor read/64, error -71 [ 222.874525][ T10] usb usb4-port1: attempt power cycle [ 223.083266][ T24] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 223.214986][ T10] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 223.225356][ T24] usb 3-1: device descriptor read/64, error -71 [ 223.234554][ T10] usb 4-1: device descriptor read/8, error -71 [ 223.333623][ T24] usb usb3-port1: attempt power cycle [ 223.473333][ T10] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 223.493854][ T10] usb 4-1: device descriptor read/8, error -71 [ 223.604432][ T10] usb usb4-port1: unable to enumerate USB device [ 223.683421][ T24] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 223.713757][ T24] usb 3-1: device descriptor read/8, error -71 [ 223.830793][ T5825] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 223.953318][ T24] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 223.973964][ T24] usb 3-1: device descriptor read/8, error -71 [ 224.083715][ T24] usb usb3-port1: unable to enumerate USB device [ 224.463534][ T5825] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 224.803372][ T8563] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 224.813315][ T5825] Bluetooth: hci0: command 0x080f tx timeout [ 224.819532][ T8563] Bluetooth: hci0: Opcode 0x0406 failed: -110 [ 225.697267][ T8563] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 225.703562][ T8563] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 225.712762][ T8563] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 225.718927][ T8563] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 225.786772][ T5825] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 225.973569][ T10] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 226.033288][ T5863] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 226.103426][ T10] usb 4-1: device descriptor read/64, error -71 [ 226.173317][ T5863] usb 1-1: device descriptor read/64, error -71 [ 226.324627][ T8610] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 226.343310][ T10] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 226.413332][ T5863] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 226.483277][ T10] usb 4-1: device descriptor read/64, error -71 [ 226.563555][ T5863] usb 1-1: device descriptor read/64, error -71 [ 226.593710][ T10] usb usb4-port1: attempt power cycle [ 226.673728][ T5863] usb usb1-port1: attempt power cycle [ 226.695656][ T8633] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 226.702215][ T8633] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 226.710253][ T8633] vhci_hcd vhci_hcd.0: Device attached [ 226.775672][ T8634] vhci_hcd: connection closed [ 226.775986][ T1153] vhci_hcd vhci_hcd.2: stop threads [ 226.786321][ T1153] vhci_hcd vhci_hcd.2: release socket [ 226.791855][ T1153] vhci_hcd vhci_hcd.2: disconnect device [ 226.883286][ T5825] Bluetooth: hci0: command 0x080f tx timeout [ 226.933401][ T10] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 226.954141][ T10] usb 4-1: device descriptor read/8, error -71 [ 227.013296][ T5863] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 227.034006][ T5863] usb 1-1: device descriptor read/8, error -71 [ 227.203406][ T10] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 227.224005][ T10] usb 4-1: device descriptor read/8, error -71 [ 227.273330][ T5863] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 227.297123][ T5863] usb 1-1: device descriptor read/8, error -71 [ 227.343526][ T10] usb usb4-port1: unable to enumerate USB device [ 227.349310][ T8644] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1026'. [ 227.428084][ T5863] usb usb1-port1: unable to enumerate USB device [ 227.764025][ T5825] Bluetooth: hci3: command 0x0406 tx timeout [ 227.970312][ T5825] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 227.983405][ T5863] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 228.134369][ T5863] usb 3-1: Using ep0 maxpacket: 8 [ 228.141363][ T5863] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 228.150095][ T5863] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.160810][ T5863] usb 3-1: config 0 has no interface number 0 [ 228.167887][ T5863] usb 3-1: config 0 interface 186 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 228.193842][ T5863] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 228.202984][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.211096][ T5863] usb 3-1: Product: syz [ 228.215405][ T5863] usb 3-1: Manufacturer: syz [ 228.220017][ T5863] usb 3-1: SerialNumber: syz [ 228.229794][ T5863] usb 3-1: config 0 descriptor?? [ 228.238253][ T5863] iowarrior 3-1:0.186: no interrupt-in endpoint found [ 228.327988][ T8669] ------------[ cut here ]------------ [ 228.333714][ T8669] WARNING: ./include/linux/ns_common.h:255 at put_pid_ns+0x113/0x150, CPU#0: syz.3.1037/8669 [ 228.344745][ T8669] Modules linked in: [ 228.348661][ T8669] CPU: 0 UID: 0 PID: 8669 Comm: syz.3.1037 Not tainted syzkaller #0 PREEMPT(full) [ 228.358019][ T8669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 228.368130][ T8669] RIP: 0010:put_pid_ns+0x113/0x150 [ 228.373326][ T8669] Code: ab cc ff bf 01 00 00 00 89 ee e8 58 b9 03 00 85 ed 7e 1c e8 0f b5 03 00 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 fe b4 03 00 90 <0f> 0b 90 eb 95 e8 f3 b4 03 00 4c 89 f7 be 03 00 00 00 5b 41 5e 41 [ 228.393188][ T8669] RSP: 0018:ffffc9000b3bfa68 EFLAGS: 00010293 [ 228.399287][ T8669] RAX: ffffffff81be1b32 RBX: ffff88805ae21830 RCX: ffff88802e2a1e80 [ 228.407495][ T8669] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 228.415606][ T8669] RBP: 00000000ffffffff R08: ffff88805ae2199b R09: 1ffff1100b5c4333 [ 228.423643][ T8669] R10: dffffc0000000000 R11: ffffed100b5c4334 R12: dffffc0000000000 [ 228.431912][ T8669] R13: 0000000000000000 R14: ffff88805ae21998 R15: dffffc0000000000 [ 228.440142][ T8669] FS: 0000000000000000(0000) GS:ffff888125a79000(0000) knlGS:0000000000000000 [ 228.449258][ T8669] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 228.455884][ T8669] CR2: 000000110c32ae18 CR3: 000000006ac38000 CR4: 00000000003526f0 [ 228.463937][ T8669] Call Trace: [ 228.467242][ T8669] [ 228.470168][ T8669] free_nsproxy+0x13a/0x560 [ 228.474739][ T8669] do_exit+0x6b8/0x2300 [ 228.478908][ T8669] ? do_raw_spin_lock+0x121/0x290 [ 228.484011][ T8669] ? __pfx_do_exit+0x10/0x10 [ 228.488612][ T8669] ? futex_private_hash_put+0x4b/0x280 [ 228.494156][ T8669] do_group_exit+0x21c/0x2d0 [ 228.498791][ T8669] ? lockdep_hardirqs_on+0x9c/0x150 [ 228.504048][ T8669] get_signal+0x1285/0x1340 [ 228.508579][ T8669] arch_do_signal_or_restart+0x9a/0x7a0 [ 228.514223][ T8669] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 228.520496][ T8669] ? exit_to_user_mode_loop+0x55/0x4f0 [ 228.526119][ T8669] exit_to_user_mode_loop+0x87/0x4f0 [ 228.531776][ T8669] ? rcu_is_watching+0x15/0xb0 [ 228.536722][ T8669] do_syscall_64+0x2e9/0xfa0 [ 228.541337][ T8669] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.547493][ T8669] ? clear_bhb_loop+0x60/0xb0 [ 228.552194][ T8669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.558446][ T8669] RIP: 0033:0x7fdfe378f6c9 [ 228.562900][ T8669] Code: Unable to access opcode bytes at 0x7fdfe378f69f. [ 228.570057][ T8669] RSP: 002b:00007fdfe45f30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 228.578554][ T8669] RAX: fffffffffffffe00 RBX: 00007fdfe39e5fa8 RCX: 00007fdfe378f6c9 [ 228.586637][ T8669] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdfe39e5fa8 [ 228.594667][ T8669] RBP: 00007fdfe39e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 228.602665][ T8669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.610723][ T8669] R13: 00007fdfe39e6038 R14: 00007ffecb593aa0 R15: 00007ffecb593b88 [ 228.618749][ T8669] [ 228.621764][ T8669] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 228.629056][ T8669] CPU: 0 UID: 0 PID: 8669 Comm: syz.3.1037 Not tainted syzkaller #0 PREEMPT(full) [ 228.638341][ T8669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 228.648394][ T8669] Call Trace: [ 228.651681][ T8669] [ 228.654866][ T8669] dump_stack_lvl+0x99/0x250 [ 228.659454][ T8669] ? __asan_memcpy+0x40/0x70 [ 228.664138][ T8669] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.669352][ T8669] ? __pfx__printk+0x10/0x10 [ 228.673951][ T8669] vpanic+0x237/0x6d0 [ 228.677930][ T8669] ? __pfx_vpanic+0x10/0x10 [ 228.682421][ T8669] ? is_bpf_text_address+0x292/0x2b0 [ 228.687701][ T8669] ? is_bpf_text_address+0x26/0x2b0 [ 228.692908][ T8669] panic+0xb9/0xc0 [ 228.696621][ T8669] ? __pfx_panic+0x10/0x10 [ 228.701036][ T8669] __warn+0x334/0x4c0 [ 228.705008][ T8669] ? put_pid_ns+0x113/0x150 [ 228.709608][ T8669] ? put_pid_ns+0x113/0x150 [ 228.714117][ T8669] report_bug+0x2be/0x4f0 [ 228.718445][ T8669] ? put_pid_ns+0x113/0x150 [ 228.722942][ T8669] ? put_pid_ns+0x113/0x150 [ 228.727437][ T8669] ? put_pid_ns+0x115/0x150 [ 228.731937][ T8669] handle_bug+0x84/0x160 [ 228.736167][ T8669] exc_invalid_op+0x1a/0x50 [ 228.740659][ T8669] asm_exc_invalid_op+0x1a/0x20 [ 228.745498][ T8669] RIP: 0010:put_pid_ns+0x113/0x150 [ 228.750602][ T8669] Code: ab cc ff bf 01 00 00 00 89 ee e8 58 b9 03 00 85 ed 7e 1c e8 0f b5 03 00 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 fe b4 03 00 90 <0f> 0b 90 eb 95 e8 f3 b4 03 00 4c 89 f7 be 03 00 00 00 5b 41 5e 41 [ 228.770200][ T8669] RSP: 0018:ffffc9000b3bfa68 EFLAGS: 00010293 [ 228.776263][ T8669] RAX: ffffffff81be1b32 RBX: ffff88805ae21830 RCX: ffff88802e2a1e80 [ 228.784223][ T8669] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 228.792185][ T8669] RBP: 00000000ffffffff R08: ffff88805ae2199b R09: 1ffff1100b5c4333 [ 228.800151][ T8669] R10: dffffc0000000000 R11: ffffed100b5c4334 R12: dffffc0000000000 [ 228.808115][ T8669] R13: 0000000000000000 R14: ffff88805ae21998 R15: dffffc0000000000 [ 228.816083][ T8669] ? put_pid_ns+0x112/0x150 [ 228.820588][ T8669] ? put_pid_ns+0x112/0x150 [ 228.825081][ T8669] free_nsproxy+0x13a/0x560 [ 228.829577][ T8669] do_exit+0x6b8/0x2300 [ 228.833736][ T8669] ? do_raw_spin_lock+0x121/0x290 [ 228.838756][ T8669] ? __pfx_do_exit+0x10/0x10 [ 228.843342][ T8669] ? futex_private_hash_put+0x4b/0x280 [ 228.848812][ T8669] do_group_exit+0x21c/0x2d0 [ 228.853396][ T8669] ? lockdep_hardirqs_on+0x9c/0x150 [ 228.858593][ T8669] get_signal+0x1285/0x1340 [ 228.863102][ T8669] arch_do_signal_or_restart+0x9a/0x7a0 [ 228.868648][ T8669] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 228.874806][ T8669] ? exit_to_user_mode_loop+0x55/0x4f0 [ 228.880262][ T8669] exit_to_user_mode_loop+0x87/0x4f0 [ 228.885566][ T8669] ? rcu_is_watching+0x15/0xb0 [ 228.890445][ T8669] do_syscall_64+0x2e9/0xfa0 [ 228.895033][ T8669] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.901094][ T8669] ? clear_bhb_loop+0x60/0xb0 [ 228.905770][ T8669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.911677][ T8669] RIP: 0033:0x7fdfe378f6c9 [ 228.916096][ T8669] Code: Unable to access opcode bytes at 0x7fdfe378f69f. [ 228.923107][ T8669] RSP: 002b:00007fdfe45f30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 228.931519][ T8669] RAX: fffffffffffffe00 RBX: 00007fdfe39e5fa8 RCX: 00007fdfe378f6c9 [ 228.939486][ T8669] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdfe39e5fa8 [ 228.947452][ T8669] RBP: 00007fdfe39e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 228.955415][ T8669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.964948][ T8669] R13: 00007fdfe39e6038 R14: 00007ffecb593aa0 R15: 00007ffecb593b88 [ 228.972936][ T8669] [ 228.976216][ T8669] Kernel Offset: disabled [ 228.980533][ T8669] Rebooting in 86400 seconds..